last executing test programs: 2.84899234s ago: executing program 2 (id=298): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 2.766703204s ago: executing program 2 (id=299): syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/139, 0x8b}], 0x1) 1.947966054s ago: executing program 0 (id=307): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, 0x0, 0xfffffffffffffe0f, 0x800, &(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000005}, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80) 1.739404364s ago: executing program 1 (id=309): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1], &(0x7f0000001680), 0x0) 1.738613014s ago: executing program 0 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.505874176s ago: executing program 0 (id=310): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x8c5d47e95537ac9b) 1.420792871s ago: executing program 1 (id=312): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xa225}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@deltaction={0x44, 0x31, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) 1.41004234s ago: executing program 0 (id=313): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11042dbd7000ffdbdf250500001108000100da"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.278372617s ago: executing program 3 (id=314): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800182, &(0x7f0000000680)=ANY=[], 0x1, 0x191, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) 1.278024007s ago: executing program 1 (id=315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) 1.21448158s ago: executing program 0 (id=316): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000006740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x1800, 0xfffffff7, 0x0) 1.144575994s ago: executing program 1 (id=318): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) 1.01236801s ago: executing program 3 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {}]}) 946.415213ms ago: executing program 1 (id=320): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) 946.239353ms ago: executing program 2 (id=321): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000ac0)={[{@force}, {@type={'type', 0x3d, "72ac7e8a"}}, {}, {@part={'part', 0x3d, 0x5}}, {@type={'type', 0x3d, "43935aa7"}}, {@creator={'creator', 0x3d, "0244ed5c"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-4'}}]}, 0x42, 0x70b, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) 790.809541ms ago: executing program 3 (id=322): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f00000000c0)={0x34, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}]}, 0x34}}, 0x4000) 666.755087ms ago: executing program 1 (id=323): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$DVB_DVR_DMX_QBUF(r0, 0x40305829, 0x0) 582.331431ms ago: executing program 3 (id=324): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480), r1, r0}}, 0x18) 572.093952ms ago: executing program 2 (id=325): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x109042, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000001c0), 0x1, &(0x7f00000000c0)={[], [], 0x5c}) 463.920347ms ago: executing program 3 (id=326): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000000)) 226.303009ms ago: executing program 2 (id=327): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @multicast1, @empty}, 0xc) 226.106109ms ago: executing program 3 (id=328): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 23.249949ms ago: executing program 0 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd27, 0x25dfdbf9, {0x2, 0x20, 0x20, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_UID={0x8}, @RTA_MARK={0x8, 0x10, 0x3}]}, 0x2c}}, 0x48010) 0s ago: executing program 2 (id=330): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) bind(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 44.527224][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.551596][ T5433] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. syzkaller login: [ 64.523519][ T5755] cgroup: Unknown subsys name 'net' [ 64.659045][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.108205][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.554435][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.563656][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.564361][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.573202][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.586563][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.592088][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.594697][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.602243][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.615817][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.616855][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.631840][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.632741][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.648225][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.656256][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.656636][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.671078][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.678349][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.678549][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.685711][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.694172][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.708302][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.728277][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.739107][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.751302][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.143334][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 68.203448][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 68.285349][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 68.358301][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 68.370956][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.378658][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.386586][ T5768] bridge_slave_0: entered allmulticast mode [ 68.393659][ T5768] bridge_slave_0: entered promiscuous mode [ 68.420072][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.427573][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.434932][ T5766] bridge_slave_0: entered allmulticast mode [ 68.442884][ T5766] bridge_slave_0: entered promiscuous mode [ 68.455640][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.464294][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.472301][ T5766] bridge_slave_1: entered allmulticast mode [ 68.479366][ T5766] bridge_slave_1: entered promiscuous mode [ 68.487545][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.497197][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.504720][ T5768] bridge_slave_1: entered allmulticast mode [ 68.512433][ T5768] bridge_slave_1: entered promiscuous mode [ 68.599906][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.611887][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.623726][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.635079][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.657663][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.665073][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.672766][ T5767] bridge_slave_0: entered allmulticast mode [ 68.679902][ T5767] bridge_slave_0: entered promiscuous mode [ 68.729056][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.739147][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.746621][ T5767] bridge_slave_1: entered allmulticast mode [ 68.755250][ T5767] bridge_slave_1: entered promiscuous mode [ 68.774793][ T5766] team0: Port device team_slave_0 added [ 68.784974][ T5768] team0: Port device team_slave_0 added [ 68.809761][ T5766] team0: Port device team_slave_1 added [ 68.817475][ T5768] team0: Port device team_slave_1 added [ 68.845331][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.853013][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.860220][ T5765] bridge_slave_0: entered allmulticast mode [ 68.867198][ T5765] bridge_slave_0: entered promiscuous mode [ 68.896295][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.906624][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.916534][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.924873][ T5765] bridge_slave_1: entered allmulticast mode [ 68.932375][ T5765] bridge_slave_1: entered promiscuous mode [ 68.946834][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.953975][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.980719][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.995310][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.002429][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.028820][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.042673][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.060082][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.067200][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.093523][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.106901][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.113951][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.140804][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.211733][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.224836][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.237219][ T5767] team0: Port device team_slave_0 added [ 69.278188][ T5767] team0: Port device team_slave_1 added [ 69.301914][ T5766] hsr_slave_0: entered promiscuous mode [ 69.308312][ T5766] hsr_slave_1: entered promiscuous mode [ 69.343667][ T5768] hsr_slave_0: entered promiscuous mode [ 69.352601][ T5768] hsr_slave_1: entered promiscuous mode [ 69.359030][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.367041][ T5768] Cannot create hsr debugfs directory [ 69.386076][ T5765] team0: Port device team_slave_0 added [ 69.394982][ T5765] team0: Port device team_slave_1 added [ 69.420197][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.427621][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.454290][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.497512][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.504700][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.531042][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.573313][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.580433][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.606752][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.652775][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.659967][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.686301][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.739428][ T5767] hsr_slave_0: entered promiscuous mode [ 69.746504][ T5767] hsr_slave_1: entered promiscuous mode [ 69.753117][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.761850][ T5767] Cannot create hsr debugfs directory [ 69.791746][ T5084] Bluetooth: hci3: command tx timeout [ 69.791756][ T5778] Bluetooth: hci0: command tx timeout [ 69.792035][ T5778] Bluetooth: hci1: command tx timeout [ 69.797581][ T5084] Bluetooth: hci2: command tx timeout [ 69.883892][ T5765] hsr_slave_0: entered promiscuous mode [ 69.890425][ T5765] hsr_slave_1: entered promiscuous mode [ 69.896825][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.904535][ T5765] Cannot create hsr debugfs directory [ 70.112694][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.133249][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.171238][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.184173][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.262977][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.272883][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.314909][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.327666][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.369206][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.380035][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.394820][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.404773][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.529762][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.555003][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.576622][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.586726][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.632176][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.698794][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.739193][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.746668][ T4189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.780035][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.787238][ T4189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.804190][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.814848][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.855406][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.877016][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.895785][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.903070][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.927558][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.934724][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.962413][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.969733][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.983368][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.990712][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.047460][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.151414][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.184987][ T218] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.192210][ T218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.247877][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.255301][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.465076][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.639963][ T5766] veth0_vlan: entered promiscuous mode [ 71.678688][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.722212][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.736316][ T5766] veth1_vlan: entered promiscuous mode [ 71.813797][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.851237][ T5766] veth0_macvtap: entered promiscuous mode [ 71.867651][ T5766] veth1_macvtap: entered promiscuous mode [ 71.870970][ T5084] Bluetooth: hci2: command tx timeout [ 71.874009][ T5778] Bluetooth: hci1: command tx timeout [ 71.878882][ T5084] Bluetooth: hci3: command tx timeout [ 71.884857][ T5778] Bluetooth: hci0: command tx timeout [ 71.899841][ T5768] veth0_vlan: entered promiscuous mode [ 71.929130][ T5767] veth0_vlan: entered promiscuous mode [ 71.942642][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.962284][ T5767] veth1_vlan: entered promiscuous mode [ 71.969740][ T5768] veth1_vlan: entered promiscuous mode [ 71.986035][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.028785][ T5766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.041625][ T5766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.049059][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.050452][ T5766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.065960][ T5766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.068713][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.119262][ T5768] veth0_macvtap: entered promiscuous mode [ 72.129330][ T5765] veth0_vlan: entered promiscuous mode [ 72.166709][ T5768] veth1_macvtap: entered promiscuous mode [ 72.207549][ T5765] veth1_vlan: entered promiscuous mode [ 72.227559][ T5767] veth0_macvtap: entered promiscuous mode [ 72.247890][ T5767] veth1_macvtap: entered promiscuous mode [ 72.259300][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.279205][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.291524][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.337980][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.349018][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.366845][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.383914][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.391163][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.393499][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.407705][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.418427][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427492][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474421][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.486415][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.497572][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.508112][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.520236][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.539906][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.552510][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.564930][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.575561][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.589957][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.625170][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.634986][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.644685][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.654204][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683353][ T5765] veth0_macvtap: entered promiscuous mode [ 72.700005][ T1862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.717561][ T1862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.741240][ T5765] veth1_macvtap: entered promiscuous mode [ 72.772087][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.779955][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.842219][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.854285][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.865323][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.876069][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.886276][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.896950][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.909247][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.928716][ T1862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.930157][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.951449][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.955619][ T1862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.961753][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.980692][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.991564][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.002073][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.013409][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.025847][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.034843][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.044019][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.054311][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.178389][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.207921][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.354446][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.365791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.413562][ T218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.437172][ T218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.531831][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555245][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.857384][ T5842] ======================================================= [ 73.857384][ T5842] WARNING: The mand mount option has been deprecated and [ 73.857384][ T5842] and is ignored by this kernel. Remove the mand [ 73.857384][ T5842] option from the mount to silence this warning. [ 73.857384][ T5842] ======================================================= [ 73.950988][ T51] Bluetooth: hci3: command tx timeout [ 73.951012][ T5084] Bluetooth: hci1: command tx timeout [ 73.956654][ T51] Bluetooth: hci2: command tx timeout [ 73.967518][ T5778] Bluetooth: hci0: command tx timeout [ 74.396948][ T5853] syz.1.11[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.074072][ T5853] loop1: detected capacity change from 0 to 32768 [ 75.089116][ T5853] XFS: noikeep mount option is deprecated. [ 75.104202][ T5853] XFS: attr2 mount option is deprecated. [ 75.145370][ T5853] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 75.251182][ T5853] XFS (loop1): Ending clean mount [ 75.285954][ T5853] XFS (loop1): Quotacheck needed: Please wait. [ 75.395421][ T5888] loop2: detected capacity change from 0 to 8192 [ 75.414345][ T5853] XFS (loop1): Quotacheck: Done. [ 75.505189][ T5888] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 75.581269][ T5888] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 75.625996][ T5888] REISERFS (device loop2): using ordered data mode [ 75.671750][ T5888] reiserfs: using flush barriers [ 75.686741][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 75.737821][ T5888] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.797252][ T5888] REISERFS (device loop2): checking transaction log (loop2) [ 75.825442][ T5888] REISERFS (device loop2): Using r5 hash to sort names [ 75.844586][ T5888] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 75.891268][ T5888] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 76.036818][ T51] Bluetooth: hci1: command tx timeout [ 76.043824][ T5778] Bluetooth: hci3: command tx timeout [ 76.043854][ T5776] Bluetooth: hci0: command tx timeout [ 76.056411][ T5084] Bluetooth: hci2: command tx timeout [ 76.103885][ T5888] REISERFS error (device loop2): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 76.171564][ T5888] REISERFS (device loop2): Remounting filesystem read-only [ 76.385570][ T5890] loop3: detected capacity change from 0 to 40427 [ 76.430899][ T5890] F2FS-fs (loop3): invalid crc value [ 76.468430][ T5890] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.610808][ T5890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.629891][ T5910] loop2: detected capacity change from 0 to 764 [ 76.703379][ T5758] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.789420][ T5765] syz-executor: attempt to access beyond end of device [ 76.789420][ T5765] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.789940][ T5765] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 77.037519][ T5916] loop1: detected capacity change from 0 to 65 [ 77.049270][ T5916] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 77.275956][ T5918] loop0: detected capacity change from 0 to 64 [ 77.651959][ T5757] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.846583][ T5930] loop2: detected capacity change from 0 to 256 [ 77.855094][ T5757] usb 2-1: Using ep0 maxpacket: 32 [ 77.863367][ T5926] loop3: detected capacity change from 0 to 1024 [ 77.892156][ T5930] exfat: Deprecated parameter 'utf8' [ 77.906443][ T5757] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 77.911569][ T5930] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 77.949903][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.970601][ T5926] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 77.980026][ T5757] usb 2-1: Product: syz [ 77.987084][ T5757] usb 2-1: Manufacturer: syz [ 78.000579][ T5757] usb 2-1: SerialNumber: syz [ 78.063378][ T5757] usb 2-1: config 0 descriptor?? [ 78.083091][ T5757] dw2102: su3000_identify_state [ 78.088193][ T5757] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 78.088589][ T5926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.098800][ T5757] dw2102: su3000_power_ctrl: 1, initialized 0 [ 78.118051][ T5757] dvb-usb: bulk message failed: -22 (2/0) [ 78.145565][ T5757] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.192387][ T5757] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 78.214939][ T5757] usb 2-1: media controller created [ 78.247889][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 78.281055][ T5757] dw2102: i2c transfer failed. [ 78.286342][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 78.322049][ T28] audit: type=1800 audit(1773781148.064:2): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.33" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 78.339560][ T5757] dw2102: i2c transfer failed. [ 78.366437][ T5937] ptrace attach of "./syz-executor exec"[5768] was attempted by "  "[5937] [ 78.371558][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 78.447019][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.460807][ T5920] dw2102: i2c transfer failed. [ 78.481340][ T5920] dvb-usb: bulk message failed: -22 (4/0) [ 78.510921][ T5920] dw2102: i2c transfer failed. [ 78.525103][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 78.557448][ T5920] dw2102: i2c transfer failed. [ 78.573771][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 78.601561][ T5757] dw2102: i2c transfer failed. [ 78.630896][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 78.646393][ T5757] dw2102: i2c transfer failed. [ 78.663952][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 78.683264][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 78.693727][ T5757] dw2102: i2c transfer failed. [ 78.698664][ T5757] dvb-usb: bulk message failed: -22 (6/0) [ 78.714944][ T5757] dw2102: i2c transfer failed. [ 78.725089][ T5757] dvb-usb: MAC address: 02:02:02:02:02:02 [ 78.775224][ T5757] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.841673][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 78.844034][ T5943] loop0: detected capacity change from 0 to 4096 [ 78.852052][ T5757] dw2102: command 0x0e transfer failed. [ 78.870551][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 78.890895][ T5757] dw2102: command 0x0e transfer failed. [ 78.989413][ T5943] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 79.040916][ T5943] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 79.226859][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 79.251341][ T5757] dw2102: command 0x0e transfer failed. [ 79.280564][ T5757] dvb-usb: bulk message failed: -22 (3/0) [ 79.286382][ T5757] dw2102: command 0x0e transfer failed. [ 79.331095][ T5757] dvb-usb: bulk message failed: -22 (1/0) [ 79.347718][ T5757] dw2102: command 0x51 transfer failed. [ 79.510830][ T5757] DVB: Unable to find symbol ds3000_attach() [ 79.521790][ T5757] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 79.605209][ T5942] loop2: detected capacity change from 0 to 32768 [ 79.780619][ T5757] rc_core: IR keymap rc-su3000 not found [ 79.786756][ T5757] Registered IR keymap rc-empty [ 79.844828][ T5757] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 79.892715][ T5757] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 79.942476][ T113] ERROR: (device loop2): diUpdatePMap: the iag is outside the map [ 79.942476][ T113] [ 79.969874][ T5757] dvb-usb: schedule remote query interval to 150 msecs. [ 80.005869][ T5757] dw2102: su3000_power_ctrl: 0, initialized 1 [ 80.012841][ T113] ERROR: (device loop2): remounting filesystem as read-only [ 80.035487][ T5757] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 80.085664][ T5977] capability: warning: `syz.0.57' uses deprecated v2 capabilities in a way that may be insecure [ 80.124311][ T5757] usb 2-1: USB disconnect, device number 2 [ 80.328964][ T5757] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 80.397464][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 80.465535][ T5985] syz_tun: entered promiscuous mode [ 80.482260][ T5985] macsec1: entered promiscuous mode [ 80.532757][ T5985] syz_tun: left promiscuous mode [ 80.705954][ T5966] loop1: detected capacity change from 0 to 32768 [ 81.025641][ T5999] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 81.048699][ T5999] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 81.080925][ T5999] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 81.130693][ T5999] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 81.153666][ T5999] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 81.170740][ T5999] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 81.179974][ T6005] [U] [ 81.183348][ T5999] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 81.202345][ T5999] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 81.216464][ T5999] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 81.237304][ T5999] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 81.249824][ T5999] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 81.289558][ T5999] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 81.319360][ T6001] loop0: detected capacity change from 0 to 8192 [ 81.350029][ T6001] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 81.377925][ T6001] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 81.401099][ T6001] REISERFS (device loop0): using ordered data mode [ 81.436114][ T6001] reiserfs: using flush barriers [ 81.491599][ T6001] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.577289][ T6001] REISERFS (device loop0): checking transaction log (loop0) [ 81.614496][ T6001] REISERFS (device loop0): Using r5 hash to sort names [ 81.638393][ T6001] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 82.219965][ T6011] loop2: detected capacity change from 0 to 40427 [ 82.277295][ T9] cfg80211: failed to load regulatory.db [ 82.278905][ T6011] F2FS-fs (loop2): invalid crc value [ 82.312457][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 82.326108][ T6011] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.386653][ T6034] syz_tun: entered promiscuous mode [ 82.392173][ T6034] macsec1: entered promiscuous mode [ 82.410438][ T6034] syz_tun: left promiscuous mode [ 82.533915][ T6011] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.652026][ T6042] loop1: detected capacity change from 0 to 4096 [ 82.692061][ T6042] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 82.734994][ T6042] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 82.749709][ T5768] syz-executor: attempt to access beyond end of device [ 82.749709][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.766917][ T6042] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 82.790814][ T6042] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 82.812655][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 82.879466][ T6042] ntfs: volume version 3.1. [ 82.930055][ T6042] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccyrillic. You might want to try to use the mount option nls=utf8. [ 82.970938][ T6042] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 83.656561][ T6053] loop3: detected capacity change from 0 to 32768 [ 83.679533][ T6053] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.80 (6053) [ 83.756687][ T6053] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.772228][ T6053] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 83.784368][ T6053] BTRFS info (device loop3): using free space tree [ 83.886405][ T6053] BTRFS info (device loop3): enabling ssd optimizations [ 83.903510][ T6053] BTRFS info (device loop3): auto enabling async discard [ 84.091741][ T6059] loop1: detected capacity change from 0 to 40427 [ 84.116936][ T6059] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 84.143769][ T6059] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.167140][ T6059] F2FS-fs (loop1): invalid crc value [ 84.217143][ T6059] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.273668][ T5765] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.352051][ T6059] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.359326][ T6059] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.996197][ T6093] loop3: detected capacity change from 0 to 4096 [ 85.012919][ T6093] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 85.176998][ T6093] ntfs: volume version 3.1. [ 85.285824][ T6086] loop0: detected capacity change from 0 to 32768 [ 85.324670][ T6086] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.92 (6086) [ 85.357679][ T6086] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.400693][ T6086] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 85.409407][ T6086] BTRFS info (device loop0): using free space tree [ 85.502561][ T6086] BTRFS info (device loop0): enabling ssd optimizations [ 85.509890][ T6086] BTRFS info (device loop0): auto enabling async discard [ 85.544764][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 85.565506][ T6110] syz_tun: entered promiscuous mode [ 85.572275][ T6110] macsec1: entered promiscuous mode [ 85.580964][ T6110] syz_tun: left promiscuous mode [ 85.745650][ T5766] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.037645][ T5773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (5773) [ 86.552402][ T6117] loop1: detected capacity change from 0 to 40427 [ 86.567609][ T6117] F2FS-fs (loop1): invalid crc value [ 86.577899][ T6117] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.634206][ T6117] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.749428][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.98'. [ 86.773595][ T5767] syz-executor: attempt to access beyond end of device [ 86.773595][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.810659][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 87.681464][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 87.805855][ T6161] loop3: detected capacity change from 0 to 128 [ 87.837540][ T6140] loop0: detected capacity change from 0 to 40427 [ 87.874676][ T6140] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.885949][ T6161] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.888622][ T6140] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.938548][ T6161] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.003153][ T6140] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 88.045479][ T6140] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.135796][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.213619][ T6140] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.260221][ T6140] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.302863][ T6140] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 88.402447][ T6175] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 88.414698][ T6175] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 88.431222][ T6157] loop1: detected capacity change from 0 to 32768 [ 88.438504][ T6175] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 88.481881][ T6175] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 88.499428][ T6175] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 88.527420][ T6175] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 88.558392][ T6175] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 89.058094][ T6192] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.122'. [ 89.072780][ T6192] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 89.103194][ T6192] openvswitch: netlink: Message has 1 unknown bytes. [ 89.326533][ T6201] vlan2: entered promiscuous mode [ 89.331802][ T6201] macvtap0: entered promiscuous mode [ 89.387093][ T6203] sp0: Synchronizing with TNC [ 89.928844][ T6222] use of bytesused == 0 is deprecated and will be removed in the future, [ 89.951857][ T6218] loop1: detected capacity change from 0 to 4096 [ 89.959340][ T6222] use the actual size instead. [ 90.042570][ T6225] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.239391][ T6230] loop3: detected capacity change from 0 to 256 [ 90.831085][ T5084] Bluetooth: hci3: command tx timeout [ 91.042104][ T6266] syz.2.155 uses obsolete (PF_INET,SOCK_PACKET) [ 91.662342][ T28] audit: type=1326 audit(1773781161.404:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5a79c799 code=0x7ffc0000 [ 91.696765][ T28] audit: type=1326 audit(1773781161.434:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5a79c799 code=0x7ffc0000 [ 91.769587][ T28] audit: type=1326 audit(1773781161.434:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d5a79c799 code=0x7ffc0000 [ 91.822754][ T6271] loop2: detected capacity change from 0 to 32768 [ 91.852595][ T28] audit: type=1326 audit(1773781161.434:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5a79c799 code=0x7ffc0000 [ 91.880883][ T28] audit: type=1326 audit(1773781161.444:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f7d5a79c799 code=0x7ffc0000 [ 91.903814][ T28] audit: type=1326 audit(1773781161.444:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5a79c799 code=0x7ffc0000 [ 91.934059][ T28] audit: type=1326 audit(1773781161.444:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5a79c799 code=0x7ffc0000 [ 91.951243][ T6271] [ 91.951243][ T6271] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.951243][ T6271] [ 92.044663][ T6271] ERROR: (device loop2): dbReAlloc: the block is outside the filesystem [ 92.044663][ T6271] [ 92.073103][ T6271] ERROR: (device loop2): remounting filesystem as read-only [ 92.083399][ T6271] jfs_mkdir: dtInsert returned -EIO [ 92.089080][ T6271] ERROR: (device loop2): jfs_mkdir: [ 92.089080][ T6271] [ 92.264966][ T6298] loop1: detected capacity change from 0 to 1024 [ 92.344251][ T6298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.451783][ T6289] loop0: detected capacity change from 0 to 40427 [ 92.494658][ T6289] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 92.510348][ T6289] F2FS-fs (loop0): Image doesn't support compression [ 92.529584][ T6298] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 92.543736][ T6289] F2FS-fs (loop0): Image doesn't support compression [ 92.566406][ T6289] F2FS-fs (loop0): invalid crc value [ 92.586679][ T6289] F2FS-fs (loop0): Found nat_bits in checkpoint [ 92.611065][ T6308] syz.3.173 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 92.677925][ T6298] EXT4-fs (loop1): Remounting filesystem read-only [ 92.691782][ T6298] overlayfs: failed to verify origin (/, ino=2, err=-5) [ 92.704541][ T6298] overlayfs: failed to verify upper root origin [ 92.737909][ T6289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.807719][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.929184][ T5766] syz-executor: attempt to access beyond end of device [ 92.929184][ T5766] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.930883][ T6314] loop3: detected capacity change from 0 to 64 [ 92.954901][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 92.982071][ T5770] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 93.180295][ T5770] usb 3-1: config 0 has no interfaces? [ 93.223643][ T5770] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.243372][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.264906][ T5770] usb 3-1: Product: syz [ 93.283205][ T5770] usb 3-1: Manufacturer: syz [ 93.287968][ T5770] usb 3-1: SerialNumber: syz [ 93.298647][ T5770] usb 3-1: config 0 descriptor?? [ 93.520356][ T5770] usb 3-1: USB disconnect, device number 2 [ 93.649770][ T6322] loop1: detected capacity change from 0 to 32768 [ 93.731791][ T6322] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 93.731791][ T6322] [ 93.896489][ T6325] loop0: detected capacity change from 0 to 32768 [ 93.971065][ T6325] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 93.993683][ T6325] JBD2: Ignoring recovery information on journal [ 94.156318][ T6325] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 94.159071][ T6332] loop2: detected capacity change from 0 to 512 [ 94.284563][ T6332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.297407][ T6332] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.319562][ T6336] loop3: detected capacity change from 0 to 512 [ 94.442056][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.485818][ T5766] ocfs2: Unmounting device (7,0) on (node local) [ 94.498911][ T6336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.559708][ T6336] EXT4-fs error (device loop3): ext4_get_first_dir_block:3584: inode #12: comm syz.3.183: Directory block failed checksum [ 94.701115][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.868722][ T6347] loop3: detected capacity change from 0 to 128 [ 94.926482][ T6347] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.980302][ T6347] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.345469][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.543215][ T6375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 95.583197][ T6375] IPVS: Error connecting to the multicast addr [ 96.086088][ T28] audit: type=1326 audit(1773781165.824:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff499f9c799 code=0x7ffc0000 [ 96.140771][ T28] audit: type=1326 audit(1773781165.824:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff499f9c799 code=0x7ffc0000 [ 96.163045][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.184401][ T6366] loop0: detected capacity change from 0 to 40427 [ 96.220279][ T28] audit: type=1326 audit(1773781165.864:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.1.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7ff499f9c799 code=0x7ffc0000 [ 96.251589][ T6366] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 96.281963][ T6366] F2FS-fs (loop0): heap/no_heap options were deprecated [ 96.322104][ T6366] F2FS-fs (loop0): invalid crc value [ 96.364155][ T6366] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.552675][ T6366] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.658907][ T6366] syz.0.195: attempt to access beyond end of device [ 96.658907][ T6366] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.717387][ T6366] F2FS-fs (loop0): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x99c/0x1a00 [ 96.752818][ T6366] syz.0.195: attempt to access beyond end of device [ 96.752818][ T6366] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 96.805678][ T6366] syz.0.195: attempt to access beyond end of device [ 96.805678][ T6366] loop0: rw=2049, sector=45160, nr_sectors = 24 limit=40427 [ 96.867967][ T6366] syz.0.195: attempt to access beyond end of device [ 96.867967][ T6366] loop0: rw=2049, sector=45208, nr_sectors = 16 limit=40427 [ 96.915281][ T6366] syz.0.195: attempt to access beyond end of device [ 96.915281][ T6366] loop0: rw=2049, sector=45256, nr_sectors = 8 limit=40427 [ 96.935068][ T6366] syz.0.195: attempt to access beyond end of device [ 96.935068][ T6366] loop0: rw=2049, sector=45288, nr_sectors = 32 limit=40427 [ 97.032374][ T5766] syz-executor: attempt to access beyond end of device [ 97.032374][ T5766] loop0: rw=2049, sector=45328, nr_sectors = 8 limit=40427 [ 97.057641][ T5766] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 97.111069][ T6413] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.118006][ T6413] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.138100][ T6413] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.144646][ T6413] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.152872][ T6413] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.159406][ T6413] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.171263][ T6413] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.177708][ T6413] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.194011][ T6413] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.200747][ T6413] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.459117][ T6417] set_capacity_and_notify: 1 callbacks suppressed [ 97.459134][ T6417] loop3: detected capacity change from 0 to 4096 [ 97.666890][ T6417] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 97.698596][ T6417] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 98.027802][ T6437] loop3: detected capacity change from 0 to 128 [ 98.082144][ T6438] loop1: detected capacity change from 0 to 2048 [ 98.105632][ T6438] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 98.124484][ T6437] FAT-fs (loop3): Directory bread(block 32) failed [ 98.154745][ T6437] FAT-fs (loop3): Directory bread(block 33) failed [ 98.186191][ T6437] FAT-fs (loop3): Directory bread(block 34) failed [ 98.201845][ T5979] udevd[5979]: incorrect nilfs2 checksum on /dev/loop1 [ 98.204016][ T6441] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.221583][ T6437] FAT-fs (loop3): Directory bread(block 35) failed [ 98.228567][ T6437] FAT-fs (loop3): Directory bread(block 36) failed [ 98.280961][ T6437] FAT-fs (loop3): Directory bread(block 37) failed [ 98.287876][ T6437] FAT-fs (loop3): Directory bread(block 38) failed [ 98.327588][ T6437] FAT-fs (loop3): Directory bread(block 39) failed [ 98.350753][ T6437] FAT-fs (loop3): Directory bread(block 40) failed [ 98.357537][ T6437] FAT-fs (loop3): Directory bread(block 41) failed [ 98.707455][ T6446] fuse: Unknown parameter '01777777777777777777777' [ 98.728309][ T6434] loop0: detected capacity change from 0 to 32768 [ 98.773674][ T6434] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.026896][ T6434] XFS (loop0): Ending clean mount [ 99.051782][ T6434] XFS (loop0): Quotacheck needed: Please wait. [ 99.122718][ T6434] XFS (loop0): Quotacheck: Done. [ 99.124719][ T6461] team0: Device ip6tnl1 is of different type [ 99.252621][ T5766] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 99.306776][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 99.909484][ T6480] loop2: detected capacity change from 0 to 128 [ 100.067611][ T6480] loop2: detected capacity change from 0 to 1024 [ 100.087974][ T6480] hfsplus: unable to parse mount options [ 100.146582][ T6487] netlink: 277 bytes leftover after parsing attributes in process `syz.1.246'. [ 100.563746][ T6501] loop3: detected capacity change from 0 to 4096 [ 100.580167][ T6501] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 100.681155][ T6501] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 100.892858][ T6508] loop1: detected capacity change from 0 to 512 [ 100.896988][ T4189] ntfs3: loop3: ino=1e, ntfs3_write_inode failed, -22. [ 100.913221][ T6508] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.062930][ T6515] loop0: detected capacity change from 0 to 1024 [ 101.178284][ T6508] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.255: corrupted inode contents [ 101.209397][ T6508] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #16: comm syz.1.255: mark_inode_dirty error [ 101.233202][ T6508] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.255: corrupted inode contents [ 101.282941][ T6508] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.255: mark_inode_dirty error [ 101.308794][ T6508] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.255: corrupted inode contents [ 101.353267][ T6508] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 101.406356][ T6523] loop0: detected capacity change from 0 to 1024 [ 101.413337][ T6508] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.255: corrupted inode contents [ 101.448738][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.451003][ T6508] EXT4-fs error (device loop1): ext4_truncate:4294: inode #16: comm syz.1.255: mark_inode_dirty error [ 101.477547][ T6508] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 101.487767][ T6523] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.556543][ T6508] EXT4-fs (loop1): 1 truncate cleaned up [ 101.577161][ T218] __quota_error: 3 callbacks suppressed [ 101.577182][ T218] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.621982][ T6508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.639630][ T218] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 1 [ 101.655124][ T6508] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.721308][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.847231][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.005753][ T6535] nbd: socks must be embedded in a SOCK_ITEM attr [ 102.214151][ T6521] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.356501][ T5765] ocfs2: Unmounting device (7,3) on (node local) [ 102.443990][ T6545] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.482680][ T6548] erofs: (device loop1): mounted with root inode @ nid 36. [ 103.401289][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.405950][ T6581] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.498835][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.607680][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.638822][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.638838][ T6587] set_capacity_and_notify: 2 callbacks suppressed [ 103.638848][ T6587] loop2: detected capacity change from 0 to 256 [ 103.696874][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= c.00 [ 103.706512][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 103.719132][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.737852][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.748155][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.767262][ T6587] FAT-fs (loop2): Directory bread(block 64) failed [ 103.774609][ T6587] FAT-fs (loop2): Directory bread(block 65) failed [ 103.788082][ T8] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice=ff.00 [ 103.799893][ T9] usb 1-1: config 0 descriptor?? [ 103.800747][ T6587] FAT-fs (loop2): Directory bread(block 66) failed [ 103.807425][ T8] usb 4-1: New USB device strings: Mfr=3, Product=0, SerialNumber=0 [ 103.820665][ T8] usb 4-1: Manufacturer: syz [ 103.820744][ T6587] FAT-fs (loop2): Directory bread(block 67) failed [ 103.843516][ T8] usb 4-1: config 0 descriptor?? [ 103.851011][ T6587] FAT-fs (loop2): Directory bread(block 68) failed [ 103.867912][ T6587] FAT-fs (loop2): Directory bread(block 69) failed [ 103.891704][ T6587] FAT-fs (loop2): Directory bread(block 70) failed [ 103.898340][ T6587] FAT-fs (loop2): Directory bread(block 71) failed [ 103.908488][ T6587] FAT-fs (loop2): Directory bread(block 72) failed [ 103.915305][ T6587] FAT-fs (loop2): Directory bread(block 73) failed [ 104.136409][ T6589] loop1: detected capacity change from 0 to 32768 [ 104.190294][ T6589] JFS: metapage_get_blocks failed [ 104.204543][ T6589] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 104.204543][ T6589] [ 104.233249][ T6589] ERROR: (device loop1): remounting filesystem as read-only [ 104.273745][ T9] asus 0003:0B05:18C6.0001: ignoring exceeding usage max [ 104.287752][ T8] waltop 0003:172F:0037.0002: item fetching failed at offset 0/3 [ 104.309324][ T8] waltop: probe of 0003:172F:0037.0002 failed with error -22 [ 104.344908][ T9] asus 0003:0B05:18C6.0001: hidraw0: USB HID v0.06 Device [HID 0b05:18c6] on usb-dummy_hcd.0-1/input0 [ 104.362427][ T112] blkno = 5002c, nblocks = 1 [ 104.367260][ T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 104.367260][ T112] [ 104.373725][ T9] asus 0003:0B05:18C6.0001: Asus input not registered [ 104.434945][ T9] asus: probe of 0003:0B05:18C6.0001 failed with error -12 [ 104.481265][ T9] usb 1-1: USB disconnect, device number 2 [ 104.485323][ T6597] loop2: detected capacity change from 0 to 256 [ 104.520194][ T8] usb 4-1: USB disconnect, device number 2 [ 104.586236][ T6595] fido_id[6595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 104.739287][ T6602] loop2: detected capacity change from 0 to 1024 [ 104.782717][ T6602] hfsplus: found bad thread record in catalog [ 104.790350][ T6602] hfsplus: catalog searching failed [ 104.833173][ T1089] hfsplus: b-tree write err: -5, ino 4 [ 104.839186][ T1089] hfsplus: b-tree write err: -5, ino 2 [ 105.298712][ T6619] loop3: detected capacity change from 0 to 128 [ 105.323503][ T5770] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 105.337164][ T6619] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.352796][ T6619] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.457553][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.524580][ T5770] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.547370][ T5770] usb 3-1: config 0 has no interface number 0 [ 105.580003][ T5770] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 105.594355][ T6623] loop1: detected capacity change from 0 to 512 [ 105.606318][ T5770] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 105.649962][ T6623] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 105.666736][ T5770] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.690890][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.708659][ T6623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e028, mo2=0002] [ 105.743294][ T5770] usb 3-1: config 0 descriptor?? [ 105.762074][ T6608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.791111][ T6623] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.863162][ T6623] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.305: bg 0: block 361: padding at end of block bitmap is not set [ 105.884139][ T5770] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 105.919605][ T6623] EXT4-fs (loop1): Remounting filesystem read-only [ 105.936769][ T6623] EXT4-fs (loop1): 1 truncate cleaned up [ 105.944461][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 105.949338][ T6632] loop3: detected capacity change from 0 to 1024 [ 105.988028][ T6632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.014608][ T6632] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.026207][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 106.128305][ T5757] usb 3-1: USB disconnect, device number 3 [ 106.257254][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.517878][ T6651] loop3: detected capacity change from 0 to 256 [ 106.880757][ T6661] overlayfs: missing 'lowerdir' [ 106.928206][ T6663] loop2: detected capacity change from 0 to 1024 [ 107.200231][ T12] hfsplus: b-tree write err: -5, ino 25 [ 107.210444][ T12] hfsplus: b-tree write err: -5, ino 4 [ 107.226435][ T12] hfsplus: b-tree write err: -5, ino 2 [ 107.412722][ T6675] overlay: Unknown parameter '\yzkaller' [ 107.465230][ T6655] loop0: detected capacity change from 0 to 32768 [ 107.526854][ T6655] [ 107.526854][ T6655] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.526854][ T6655] [ 107.578495][ T6655] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 107.578495][ T6655] [ 107.606526][ T6655] xtLookup: xtSearch returned -5 [ 107.634139][ T6655] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 107.634139][ T6655] [ 107.649552][ T6655] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 107.649552][ T6655] [ 107.665487][ T6655] xtLookup: xtSearch returned -5 [ 107.673252][ T6655] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 107.673252][ T6655] [ 107.702673][ T6679] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.712356][ T6679] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.721525][ T6679] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.730748][ T6679] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.752554][ T4189] [ 107.752554][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.752554][ T4189] [ 107.793714][ T4189] [ 107.793714][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.793714][ T4189] [ 107.823335][ T6679] Zero length message leads to an empty skb [ 107.839939][ T5766] [ 107.839939][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.839939][ T5766] [ 107.858415][ T5766] [ 107.858415][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.858415][ T5766] [ 107.890562][ T113] ================================================================== [ 107.898677][ T113] BUG: KASAN: slab-use-after-free in __lock_acquire+0x10d/0x7d40 [ 107.906432][ T113] Read of size 8 at addr ffff88801d7c60d8 by task jfsCommit/113 [ 107.914090][ T113] [ 107.916514][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 107.924261][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.934701][ T113] Call Trace: [ 107.938002][ T113] [ 107.940928][ T113] dump_stack_lvl+0x18c/0x250 [ 107.945716][ T113] ? __lock_acquire+0x7d40/0x7d40 [ 107.950738][ T113] ? show_regs_print_info+0x20/0x20 [ 107.955932][ T113] ? load_image+0x400/0x400 [ 107.960424][ T113] ? __virt_addr_valid+0x469/0x540 [ 107.965530][ T113] print_report+0xa8/0x210 [ 107.969937][ T113] ? __lock_acquire+0x10d/0x7d40 [ 107.974952][ T113] kasan_report+0x117/0x150 [ 107.979719][ T113] ? __lock_acquire+0x10d/0x7d40 [ 107.985422][ T113] __lock_acquire+0x10d/0x7d40 [ 107.990213][ T113] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 107.996190][ T113] ? lock_chain_count+0x20/0x20 [ 108.001056][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 108.006250][ T113] ? finish_task_switch+0x265/0x8f0 [ 108.011441][ T113] ? verify_lock_unused+0x140/0x140 [ 108.016641][ T113] ? __schedule+0x155b/0x45a0 [ 108.021318][ T113] ? lock_chain_count+0x20/0x20 [ 108.026158][ T113] lock_acquire+0x19e/0x420 [ 108.030652][ T113] ? __mutex_lock+0x3c0/0xcc0 [ 108.035321][ T113] ? asan.module_dtor+0x20/0x20 [ 108.040163][ T113] ? mutex_spin_on_owner+0x27e/0x340 [ 108.045440][ T113] ? read_lock_is_recursive+0x20/0x20 [ 108.050819][ T113] _raw_spin_lock+0x2e/0x40 [ 108.055316][ T113] ? __mutex_lock+0x3c0/0xcc0 [ 108.059981][ T113] __mutex_lock+0x3c0/0xcc0 [ 108.064475][ T113] ? jfs_syncpt+0x25/0x90 [ 108.068790][ T113] ? mutex_lock_nested+0x20/0x20 [ 108.073730][ T113] ? __rwlock_init+0x150/0x150 [ 108.078487][ T113] jfs_syncpt+0x25/0x90 [ 108.082636][ T113] txEnd+0x2e5/0x520 [ 108.086521][ T113] jfs_lazycommit+0x5a4/0xa70 [ 108.091285][ T113] ? txFreelock+0x5a0/0x5a0 [ 108.095818][ T113] ? do_task_dead+0xd0/0xd0 [ 108.100578][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 108.105551][ T113] kthread+0x2fa/0x390 [ 108.109671][ T113] ? txFreelock+0x5a0/0x5a0 [ 108.114523][ T113] ? kthread_blkcg+0xd0/0xd0 [ 108.119189][ T113] ret_from_fork+0x48/0x80 [ 108.123598][ T113] ? kthread_blkcg+0xd0/0xd0 [ 108.128175][ T113] ret_from_fork_asm+0x11/0x20 [ 108.133029][ T113] [ 108.136056][ T113] [ 108.138365][ T113] Allocated by task 6655: [ 108.142680][ T113] kasan_set_track+0x4e/0x70 [ 108.147268][ T113] __kasan_kmalloc+0x8f/0xa0 [ 108.151844][ T113] lmLogOpen+0x2df/0xfb0 [ 108.156106][ T113] jfs_mount_rw+0xef/0x670 [ 108.160628][ T113] jfs_fill_super+0x598/0xad0 [ 108.165314][ T113] mount_bdev+0x221/0x2d0 [ 108.169640][ T113] legacy_get_tree+0xea/0x180 [ 108.174317][ T113] vfs_get_tree+0x8c/0x280 [ 108.178991][ T113] do_new_mount+0x24b/0xa40 [ 108.183575][ T113] __se_sys_mount+0x2e7/0x3d0 [ 108.188334][ T113] do_syscall_64+0x55/0xa0 [ 108.192750][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.198826][ T113] [ 108.201312][ T113] Freed by task 5766: [ 108.205374][ T113] kasan_set_track+0x4e/0x70 [ 108.210054][ T113] kasan_save_free_info+0x2e/0x50 [ 108.215109][ T113] ____kasan_slab_free+0x126/0x1e0 [ 108.220222][ T113] slab_free_freelist_hook+0x130/0x1a0 [ 108.225671][ T113] __kmem_cache_free+0xba/0x1e0 [ 108.230796][ T113] lmLogClose+0x297/0x520 [ 108.235127][ T113] jfs_umount+0x2ef/0x3c0 [ 108.239445][ T113] jfs_put_super+0x8c/0x190 [ 108.243937][ T113] generic_shutdown_super+0x134/0x2b0 [ 108.249301][ T113] kill_block_super+0x44/0x90 [ 108.253963][ T113] deactivate_locked_super+0x97/0x100 [ 108.259494][ T113] cleanup_mnt+0x43b/0x4d0 [ 108.263903][ T113] task_work_run+0x1d4/0x260 [ 108.268486][ T113] exit_to_user_mode_loop+0xe6/0x110 [ 108.273939][ T113] exit_to_user_mode_prepare+0xee/0x180 [ 108.279477][ T113] syscall_exit_to_user_mode+0x1a/0x50 [ 108.284924][ T113] do_syscall_64+0x61/0xa0 [ 108.289473][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.295358][ T113] [ 108.297731][ T113] The buggy address belongs to the object at ffff88801d7c6000 [ 108.297731][ T113] which belongs to the cache kmalloc-1k of size 1024 [ 108.311905][ T113] The buggy address is located 216 bytes inside of [ 108.311905][ T113] freed 1024-byte region [ffff88801d7c6000, ffff88801d7c6400) [ 108.325952][ T113] [ 108.328279][ T113] The buggy address belongs to the physical page: [ 108.334773][ T113] page:ffffea000075f000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d7c0 [ 108.345056][ T113] head:ffffea000075f000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.354343][ T113] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 108.362380][ T113] page_type: 0xffffffff() [ 108.366966][ T113] raw: 00fff00000000840 ffff888017c41dc0 dead000000000100 dead000000000122 [ 108.376249][ T113] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 108.385509][ T113] page dumped because: kasan: bad access detected [ 108.391921][ T113] page_owner tracks the page as allocated [ 108.397622][ T113] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5534, tgid 5534 (dhcpcd-run-hook), ts 45349106778, free_ts 45336451816 [ 108.419728][ T113] post_alloc_hook+0x1c1/0x200 [ 108.424619][ T113] get_page_from_freelist+0x1951/0x19e0 [ 108.430258][ T113] __alloc_pages+0x1f0/0x460 [ 108.434868][ T113] alloc_slab_page+0x5d/0x160 [ 108.439680][ T113] new_slab+0x87/0x2d0 [ 108.443762][ T113] ___slab_alloc+0xc5d/0x12f0 [ 108.448527][ T113] __kmem_cache_alloc_node+0x19e/0x250 [ 108.454128][ T113] __kmalloc+0xa4/0x230 [ 108.458370][ T113] load_elf_phdrs+0x136/0x240 [ 108.463232][ T113] load_elf_binary+0x93c/0x2860 [ 108.468092][ T113] bprm_execve+0xb08/0x1700 [ 108.472598][ T113] do_execveat_common+0x51b/0x6c0 [ 108.477787][ T113] __x64_sys_execve+0x92/0xa0 [ 108.482460][ T113] do_syscall_64+0x55/0xa0 [ 108.486877][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.492763][ T113] page last free stack trace: [ 108.497421][ T113] free_unref_page_prepare+0x7b2/0x8c0 [ 108.502875][ T113] free_unref_page+0x32/0x2e0 [ 108.507546][ T113] __slab_free+0x35a/0x400 [ 108.512222][ T113] qlist_free_all+0x75/0xd0 [ 108.516793][ T113] kasan_quarantine_reduce+0x143/0x160 [ 108.522251][ T113] __kasan_slab_alloc+0x22/0x80 [ 108.527127][ T113] slab_post_alloc_hook+0x6e/0x4b0 [ 108.532239][ T113] kmem_cache_alloc+0x11a/0x2d0 [ 108.537082][ T113] vm_area_alloc+0x24/0x1d0 [ 108.541572][ T113] mmap_region+0xc2f/0x2000 [ 108.546066][ T113] do_mmap+0x92c/0x10a0 [ 108.550305][ T113] vm_mmap_pgoff+0x1c4/0x3f0 [ 108.554930][ T113] ksys_mmap_pgoff+0x520/0x700 [ 108.559971][ T113] do_syscall_64+0x55/0xa0 [ 108.564595][ T113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.570604][ T113] [ 108.573006][ T113] Memory state around the buggy address: [ 108.578709][ T113] ffff88801d7c5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.587058][ T113] ffff88801d7c6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.595221][ T113] >ffff88801d7c6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.603268][ T113] ^ [ 108.610189][ T113] ffff88801d7c6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.619302][ T113] ffff88801d7c6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.627382][ T113] ================================================================== [ 108.635449][ T113] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.642632][ T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 108.650094][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.660313][ T113] Call Trace: [ 108.663674][ T113] [ 108.666647][ T113] dump_stack_lvl+0x18c/0x250 [ 108.671325][ T113] ? show_regs_print_info+0x20/0x20 [ 108.676516][ T113] ? load_image+0x400/0x400 [ 108.681014][ T113] panic+0x2dc/0x730 [ 108.684920][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 108.689437][ T113] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 108.695320][ T113] ? _raw_spin_unlock+0x40/0x40 [ 108.700243][ T113] ? print_memory_metadata+0x314/0x400 [ 108.705868][ T113] ? __lock_acquire+0x10d/0x7d40 [ 108.710903][ T113] check_panic_on_warn+0x84/0xa0 [ 108.715943][ T113] ? __lock_acquire+0x10d/0x7d40 [ 108.720902][ T113] end_report+0x6f/0x130 [ 108.725147][ T113] kasan_report+0x128/0x150 [ 108.729650][ T113] ? __lock_acquire+0x10d/0x7d40 [ 108.734584][ T113] __lock_acquire+0x10d/0x7d40 [ 108.739424][ T113] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 108.745409][ T113] ? lock_chain_count+0x20/0x20 [ 108.750256][ T113] ? lockdep_hardirqs_on+0x98/0x150 [ 108.755446][ T113] ? finish_task_switch+0x265/0x8f0 [ 108.760724][ T113] ? verify_lock_unused+0x140/0x140 [ 108.766002][ T113] ? __schedule+0x155b/0x45a0 [ 108.771145][ T113] ? lock_chain_count+0x20/0x20 [ 108.776170][ T113] lock_acquire+0x19e/0x420 [ 108.780768][ T113] ? __mutex_lock+0x3c0/0xcc0 [ 108.785469][ T113] ? asan.module_dtor+0x20/0x20 [ 108.790433][ T113] ? mutex_spin_on_owner+0x27e/0x340 [ 108.795947][ T113] ? read_lock_is_recursive+0x20/0x20 [ 108.801430][ T113] _raw_spin_lock+0x2e/0x40 [ 108.805946][ T113] ? __mutex_lock+0x3c0/0xcc0 [ 108.811080][ T113] __mutex_lock+0x3c0/0xcc0 [ 108.815594][ T113] ? jfs_syncpt+0x25/0x90 [ 108.820140][ T113] ? mutex_lock_nested+0x20/0x20 [ 108.825195][ T113] ? __rwlock_init+0x150/0x150 [ 108.830016][ T113] jfs_syncpt+0x25/0x90 [ 108.834357][ T113] txEnd+0x2e5/0x520 [ 108.838300][ T113] jfs_lazycommit+0x5a4/0xa70 [ 108.842997][ T113] ? txFreelock+0x5a0/0x5a0 [ 108.848012][ T113] ? do_task_dead+0xd0/0xd0 [ 108.852687][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 108.857616][ T113] kthread+0x2fa/0x390 [ 108.861856][ T113] ? txFreelock+0x5a0/0x5a0 [ 108.866532][ T113] ? kthread_blkcg+0xd0/0xd0 [ 108.871229][ T113] ret_from_fork+0x48/0x80 [ 108.875654][ T113] ? kthread_blkcg+0xd0/0xd0 [ 108.880409][ T113] ret_from_fork_asm+0x11/0x20 [ 108.885174][ T113] [ 108.888422][ T113] Kernel Offset: disabled [ 108.892929][ T113] Rebooting in 86400 seconds..