last executing test programs: 9.244598834s ago: executing program 1 (id=293): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x6, 0x56dd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@deltclass={0x38, 0x29, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffff}, {0x0, 0x1}, {0xffe0, 0xc}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6d6e2f707172737475767778795a30313233343536"], 0x29, 0xfffffffffffffffc) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0xde, @string={0xde, 0x3, "2431daa7dc448f65496993b81809abb673b5b261eaf377172e6227c75ab1a276ac22a3c586f71cd770b83ecb0ded87b95acdf5fa641e5e2c01855a8b6f920795c87875c5085dddcedab4bd4c0314c0223b01ab4641d687c55107b88b7085fbf88e7242c86b431321bd7e1a4e5d3fadeac86cc4a7d030ec8154748be563cbdce38113aaf6f70aada4b98e057e40ba028aa848c58e4c6175f7549f3b8bd7d1a9455a2588211a07be98c07f86973e5939fa8d89723b4a68533ac19372e43ef6ecd084475fe7db236474cf523e7d7628da5b989791a322dccfcdb9800b30"}}, 0x0, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x669}}}}, &(0x7f0000000980)={0x18, &(0x7f0000000580)={0x0, 0xc, 0xe3, "ff06b79759e8eac970f17c6874af30b60f5dea268e5b74a7aa9d788ae091c71c80d09fd3b049176f33f4cdd96be18dea78e64590bd00e11a48a9295c8b51ec4b7257c9dd5b057ca347e53d659ad5a7f479b58e2af53e1f4f41694307e52f71f1355507e63a4c131c1496fa75e0ef01159e7443d5f806bc32ca1283cc6a659dfbd841852232f9cba621e29ba39cefd8dfd36132e910048b1af2d3d9c866c4512d6886471553f971914284f13e24d717f09fbc9efcee66d0d40961b6912ce30d0cef8062e9846596cf883cfc7857c36ba9a625f5b8dedf749a61718de9c866895b9b5d40"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000740)={0x20, 0x1, 0x54, "5c65384872b72263760a08ec524da4c53a5102f87ed3a19534a67d46490fce44d8f4504d04011481290f99e10a5eeba1798bd8c50760c2a623415346797d6bc417ebdeac3f368ea57050180330b0ffde62672db9"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x7}}) syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="000704a012704c6f011367acc6ae8fb462852ab71c7c6f55b1b4a47a69445efcc2e32c4d490fec2c09f2a282f690ad436cb19f682e0c5057a8335d1c7b4f56aff9319a78ec3079531468811b33b5d83aa6b2fb3e91d9c8446fa08b4e3b086fb3e4699b52c12cb5346981b1411dbe467f7613e498d4858ad51883225a1fc73ed7219ec2d34c4a94b4b673866ad068b3fce87bd0504e4c6b10c84bc9520eba51484a2e3bc36d461d72"], 0x1, 0x166, &(0x7f0000000480)="$eJzs281KOmEUx/Hf+Pr/2/vbplVQUJucNGhql5ciOpk0lmQbJYgupSvrBhTqBppglKkZgiZDH9LvB2TOEQ7nPItHjwsFYG6tSrJkKSvJ9/2Hyz1LO6aHAjAVvt58APMq/WJ6AgBmDCrpYA9oS3p+va/1R69swv1hUEkFz3NJ/U/1uaT1j1bw3M5E6/OS/iXZX56G9fux/v9/2L8Qqy8krh+e/2A3Wr8gaVHSkqRlSSuj31prkta/6F+P9d9K2B/4DUvFeB55I6WLpucehXk2yEthngvyciw/DvN8kBdrN159UkcAMKbUN/c/Hbv/mdj9B/B3dbq9q6rnubcEBAQEYWD6kwnApNl3rbbd6fYOm61qw22412XnzHFKp6UTxw42fzu6/wOYHR9f+qYnAQAAAAAAAAAAAAAA49qQtGl6CAAAAABTMY2/E5k+IwAAAAAAAAAAAAAAAAAAADAr3gMAAP//s9VQng==") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000004540)=ANY=[@ANYBLOB="0c000000004d00000001000000010000"], 0xc}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x66, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 7.42644326s ago: executing program 1 (id=297): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xc) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0xcc, 0xb3, 0x43, 0x40, 0x40a, 0x2, 0x9ce5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x51, 0x36, 0xbb, 0x2c}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5.181744958s ago: executing program 2 (id=305): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @desc4}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 3.943710799s ago: executing program 1 (id=308): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.943442749s ago: executing program 2 (id=310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) 3.873656761s ago: executing program 0 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000040000000240012800c0001006d6163766c616e001400028008000900ffffffff0800bdff01000080140035006d6163766c616e3000000000"], 0x58}}, 0x8000) 3.870213751s ago: executing program 3 (id=312): socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x1) 3.766211254s ago: executing program 1 (id=313): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x7) landlock_restrict_self(r0, 0x9) landlock_restrict_self(r0, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r6, &(0x7f0000004440)=""/4096, 0x1000) 3.683624176s ago: executing program 0 (id=314): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080), &(0x7f0000000180)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000c80)={&(0x7f0000000240)="76f00e6e65f34a02c1963c278d61b9537e3429e5d29feff9dc8c3c5df16615b0b67046", &(0x7f0000000a00)=""/214, &(0x7f0000000b00)="9df23a7cf43cd45f25b842448ddb8754582e7041ee9f30e8d44c31bfd62253e14f807447745b40adec0480ef8888777e5b5b3d10eadfd710e56beba02aded8330448794f1c1cbb630635d46e51654e72c64b5cdaf7c36a420da9f9e4e093903db9d9e26c18dc196a7b62aef042e8d870b7003765b6b0e389440617f5ba0b0bb9802e3f54e3646d4175403cc27b3f239eaed4f9de47f2a308283355ab40fa76932294a249f055", &(0x7f0000000bc0)="74ebce7b54e2283f6f3e7ef7e196d043308783af3565c7683d356904f70287e2da7cf20d0873ea544c0eb35e", 0xae6, r2, 0x4}, 0x38) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x88a8, 0x400, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0x8}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f00000005c0)={0x8000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200), {0x8}, &(0x7f0000000300)=""/205, 0xcd, &(0x7f0000000400)=""/75, &(0x7f00000004c0)=[r1, 0xffffffffffffffff, 0x0, r3, r4, r5], 0x6}, 0x58) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r7 = fcntl$dupfd(r6, 0x406, r6) read$FUSE(r7, 0x0, 0x0) 2.779128459s ago: executing program 1 (id=315): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x61) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}], 0x1, 0x5, &(0x7f0000000340)={[0xffffffff]}, 0x8) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)={0x42, 0x1, 0x1000000000000c5, 0x375, 0x2, 0xfffffffffffff595, 0x4, 0x10000000007, 0x5164}) 2.674688161s ago: executing program 2 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80002000}) 2.051640287s ago: executing program 3 (id=317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0100001000130400000000fbdbdf25fe800000000000000000000000000000ac1414bb00000000000000000000000000000000468f73466d5b57117d4d0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101000000000000000000000000000000000032000000fe8800000000000000000000000001010000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000b000000000000000000000000000000008000000000000000000000000000000000000000000000000000010a"], 0x13c}}, 0x4000080) 2.045659398s ago: executing program 2 (id=318): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000010c0)={0xa, 0x4e23, 0x8001, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x2}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.840885672s ago: executing program 0 (id=319): openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.120903641s ago: executing program 2 (id=320): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x0, 0x5, 0x12, 0x110}, 0x50) 1.120762661s ago: executing program 3 (id=321): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.120588981s ago: executing program 1 (id=322): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000005c0)={[{@sysvgroups}, {@bsdgroups}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x6, 0x7e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) getxattr(0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) futimesat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.120170551s ago: executing program 0 (id=323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) dup3(r1, r0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000002c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000010400)={0xa0002012}) 951.777155ms ago: executing program 2 (id=324): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(0x0, 0x0, 0x6) 951.095275ms ago: executing program 3 (id=325): socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x1) 858.770158ms ago: executing program 0 (id=326): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x90, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) syz_mount_image$vfat(&(0x7f0000005880), &(0x7f00000001c0)='./bus\x00', 0x2000041, 0x0, 0x3, 0x0, &(0x7f0000000240)) 583.788275ms ago: executing program 0 (id=327): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080), &(0x7f0000000180)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000c80)={&(0x7f0000000240)="76f00e6e65f34a02c1963c278d61b9537e3429e5d29feff9dc8c3c5df16615b0b67046", &(0x7f0000000a00)=""/214, &(0x7f0000000b00)="9df23a7cf43cd45f25b842448ddb8754582e7041ee9f30e8d44c31bfd62253e14f807447745b40adec0480ef8888777e5b5b3d10eadfd710e56beba02aded8330448794f1c1cbb630635d46e51654e72c64b5cdaf7c36a420da9f9e4e093903db9d9e26c18dc196a7b62aef042e8d870b7003765b6b0e389440617f5ba0b0bb9802e3f54e3646d4175403cc27b3f239eaed4f9de47f2a308283355ab40fa76932294a249f055", &(0x7f0000000bc0)="74ebce7b54e2283f6f3e7ef7e196d043308783af3565c7683d356904f70287e2da7cf20d0873ea544c0eb35e", 0xae6, r2, 0x4}, 0x38) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x88a8, 0x400, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0x8}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f00000005c0)={0x8000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200), {0x8}, &(0x7f0000000300)=""/205, 0xcd, &(0x7f0000000400)=""/75, &(0x7f00000004c0)=[r1, 0xffffffffffffffff, 0x0, r3, r4, r5], 0x6}, 0x58) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r7 = fcntl$dupfd(r6, 0x406, r6) read$FUSE(r7, 0x0, 0x0) 53.535589ms ago: executing program 3 (id=328): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x56}, 0x28) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 0s ago: executing program 3 (id=329): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7e, 0xffffffff}) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 42.237013][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.255342][ T5438] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. syzkaller login: [ 62.175913][ T5756] cgroup: Unknown subsys name 'net' [ 62.306910][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.706675][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.119363][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.128495][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.136536][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.144819][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.147428][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.160336][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.169788][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.170294][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.178408][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.184851][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.200172][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.200739][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.214708][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.214726][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.224090][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.237223][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.237329][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.259251][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.259475][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.274131][ T5088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.281482][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.282978][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.289113][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.303001][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.706848][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 65.739991][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 65.821910][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 65.843212][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 65.969030][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.976339][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.984139][ T5767] bridge_slave_0: entered allmulticast mode [ 65.992402][ T5767] bridge_slave_0: entered promiscuous mode [ 66.001359][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.008511][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.018616][ T5768] bridge_slave_0: entered allmulticast mode [ 66.025530][ T5768] bridge_slave_0: entered promiscuous mode [ 66.034602][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.041895][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.049197][ T5768] bridge_slave_1: entered allmulticast mode [ 66.056565][ T5768] bridge_slave_1: entered promiscuous mode [ 66.086707][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.094116][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.102180][ T5767] bridge_slave_1: entered allmulticast mode [ 66.109189][ T5767] bridge_slave_1: entered promiscuous mode [ 66.133579][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.141364][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.148551][ T5769] bridge_slave_0: entered allmulticast mode [ 66.156184][ T5769] bridge_slave_0: entered promiscuous mode [ 66.185565][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.205735][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.216023][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.223468][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.231433][ T5769] bridge_slave_1: entered allmulticast mode [ 66.238274][ T5769] bridge_slave_1: entered promiscuous mode [ 66.255773][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.263807][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.273577][ T5770] bridge_slave_0: entered allmulticast mode [ 66.280280][ T5770] bridge_slave_0: entered promiscuous mode [ 66.315908][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.326117][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.333577][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.340905][ T5770] bridge_slave_1: entered allmulticast mode [ 66.347591][ T5770] bridge_slave_1: entered promiscuous mode [ 66.364003][ T5768] team0: Port device team_slave_0 added [ 66.381522][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.401880][ T5768] team0: Port device team_slave_1 added [ 66.410065][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.421872][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.447248][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.458553][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.505948][ T5767] team0: Port device team_slave_0 added [ 66.516054][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.523333][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.549474][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.575758][ T5770] team0: Port device team_slave_0 added [ 66.591102][ T5767] team0: Port device team_slave_1 added [ 66.599661][ T5769] team0: Port device team_slave_0 added [ 66.606358][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.613776][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.639778][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.659922][ T5770] team0: Port device team_slave_1 added [ 66.677518][ T5769] team0: Port device team_slave_1 added [ 66.735429][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.742476][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.768605][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.802338][ T5768] hsr_slave_0: entered promiscuous mode [ 66.808925][ T5768] hsr_slave_1: entered promiscuous mode [ 66.816413][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.824171][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.850757][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.862440][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.870198][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.897121][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.909030][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.918377][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.944561][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.956919][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.964342][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.990491][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.002066][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.009191][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.038800][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.084003][ T5769] hsr_slave_0: entered promiscuous mode [ 67.091218][ T5769] hsr_slave_1: entered promiscuous mode [ 67.097494][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.105814][ T5769] Cannot create hsr debugfs directory [ 67.248413][ T5770] hsr_slave_0: entered promiscuous mode [ 67.257258][ T5770] hsr_slave_1: entered promiscuous mode [ 67.263646][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.271593][ T5770] Cannot create hsr debugfs directory [ 67.281218][ T51] Bluetooth: hci2: command tx timeout [ 67.301494][ T5767] hsr_slave_0: entered promiscuous mode [ 67.308237][ T5767] hsr_slave_1: entered promiscuous mode [ 67.316722][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.324573][ T5767] Cannot create hsr debugfs directory [ 67.361089][ T5774] Bluetooth: hci3: command tx timeout [ 67.367158][ T5781] Bluetooth: hci1: command tx timeout [ 67.370848][ T51] Bluetooth: hci0: command tx timeout [ 67.608410][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.635541][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.649504][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.671370][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.765505][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.780370][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.793641][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.823082][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.892275][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.905633][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.926967][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.936729][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.956739][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.036239][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.048650][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.079805][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.094923][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.117106][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.129220][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.136601][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.148575][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.155778][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.201606][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.253924][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.277923][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.285653][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.314267][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.321513][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.353194][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.446661][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.492247][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.499427][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.545004][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.563236][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.570472][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.643981][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.659958][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.667225][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.689604][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.713743][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.720933][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.874324][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.972639][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.020112][ T5768] veth0_vlan: entered promiscuous mode [ 69.084210][ T5768] veth1_vlan: entered promiscuous mode [ 69.143311][ T5769] veth0_vlan: entered promiscuous mode [ 69.178268][ T5769] veth1_vlan: entered promiscuous mode [ 69.200000][ T5768] veth0_macvtap: entered promiscuous mode [ 69.217726][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.235641][ T5768] veth1_macvtap: entered promiscuous mode [ 69.272469][ T5769] veth0_macvtap: entered promiscuous mode [ 69.302232][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.312906][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.323322][ T5769] veth1_macvtap: entered promiscuous mode [ 69.340172][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.361360][ T5781] Bluetooth: hci2: command tx timeout [ 69.373864][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.385595][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.398728][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.410086][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.421700][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.432973][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.441104][ T5781] Bluetooth: hci1: command tx timeout [ 69.441993][ T51] Bluetooth: hci3: command tx timeout [ 69.446535][ T5781] Bluetooth: hci0: command tx timeout [ 69.465370][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.474450][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.483724][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.494838][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.511213][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.520034][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.530023][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.539451][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.550489][ T5767] veth0_vlan: entered promiscuous mode [ 69.597188][ T5767] veth1_vlan: entered promiscuous mode [ 69.688995][ T5770] veth0_vlan: entered promiscuous mode [ 69.728143][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.738823][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.755343][ T5770] veth1_vlan: entered promiscuous mode [ 69.779024][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.788455][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.813176][ T5767] veth0_macvtap: entered promiscuous mode [ 69.840949][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.848904][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.858163][ T5767] veth1_macvtap: entered promiscuous mode [ 69.911364][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.926640][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.938336][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.949780][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.950059][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.968946][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.982419][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.017239][ T5770] veth0_macvtap: entered promiscuous mode [ 70.030126][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.044815][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.055534][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.067314][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.079386][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.094384][ T5770] veth1_macvtap: entered promiscuous mode [ 70.122914][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.133558][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.143424][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.152616][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.190284][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.203755][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.214922][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.226206][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.239299][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.255696][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.275345][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.332807][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.349383][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.359662][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.377187][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.389283][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.405487][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.423538][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.444044][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.475818][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.491571][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.505121][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.727940][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.741825][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.850111][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.872565][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.943289][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.974185][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.108633][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.142538][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.362565][ T5847] syz.1.2[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.379536][ T5847] loop1: detected capacity change from 0 to 128 [ 71.442954][ T5781] Bluetooth: hci2: command tx timeout [ 71.455655][ T5847] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.485376][ T5845] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 71.520648][ T5781] Bluetooth: hci3: command tx timeout [ 71.529417][ T5774] Bluetooth: hci1: command tx timeout [ 71.536230][ T51] Bluetooth: hci0: command tx timeout [ 71.539202][ T5847] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.573672][ C1] vkms_vblank_simulate: vblank timer overrun [ 71.686236][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.695685][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.417223][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.273762][ T5774] Bluetooth: hci2: command tx timeout [ 74.274009][ T5781] Bluetooth: hci0: command tx timeout [ 74.279240][ T5774] Bluetooth: hci1: command tx timeout [ 74.290238][ T51] Bluetooth: hci3: command tx timeout [ 74.600941][ T967] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.069991][ T967] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 75.250548][ T967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.267119][ T967] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 75.299256][ T967] usb 1-1: config 0 has no interface number 0 [ 75.308392][ T967] usb 1-1: config 0 has no interface number 1 [ 75.316242][ T967] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 75.354091][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.398829][ T967] usb 1-1: config 0 descriptor?? [ 75.430869][ T967] usb 1-1: unknown number of interfaces: 2 [ 76.740177][ T8] usb 1-1: USB disconnect, device number 2 [ 76.767159][ T5892] loop1: detected capacity change from 0 to 128 [ 76.866564][ T5892] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.940837][ T5892] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.217089][ T5878] loop2: detected capacity change from 0 to 32768 [ 77.272629][ T5898] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 77.275876][ T5878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.305331][ T5878] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.553372][ T5878] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 77.651072][ T5773] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.678285][ T5773] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.836186][ T5773] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 157ms [ 77.921606][ T5773] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.927630][ T5878] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 78.409046][ T5878] gfs2: fsid=syz:syz.0: found 1 quota changes [ 78.523164][ T5767] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 78.523164][ T5767] inode = 11 2339 [ 78.523164][ T5767] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 78.552574][ T5767] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 78.580153][ T5767] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5767 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 78.611728][ T5767] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 78.631726][ T5767] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 78.683148][ T5767] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 78.706258][ T5767] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 78.726844][ T5767] gfs2: fsid=syz:syz.0: File system withdrawn [ 78.743332][ T5767] CPU: 0 PID: 5767 Comm: syz-executor Not tainted syzkaller #0 [ 78.750981][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.761073][ T5767] Call Trace: [ 78.764384][ T5767] [ 78.767347][ T5767] dump_stack_lvl+0x18c/0x250 [ 78.772099][ T5767] ? kobject_uevent_env+0x363/0x8b0 [ 78.777328][ T5767] ? show_regs_print_info+0x20/0x20 [ 78.782606][ T5767] ? load_image+0x420/0x420 [ 78.787147][ T5767] ? kobject_uevent_env+0x363/0x8b0 [ 78.792414][ T5767] gfs2_withdraw+0xb24/0x13d0 [ 78.797124][ T5767] ? gfs2_lm+0x240/0x240 [ 78.801406][ T5767] ? gfs2_consist_inode_i+0xf5/0x110 [ 78.806758][ T5767] gfs2_inode_refresh+0xc50/0x1160 [ 78.811981][ T5767] ? gfs2_inode_metasync+0xf0/0xf0 [ 78.817107][ T5767] ? gfs2_glock_nq+0xd4f/0x1420 [ 78.821995][ T5767] gfs2_instantiate+0x162/0x220 [ 78.826908][ T5767] gfs2_glock_wait+0x1d4/0x2a0 [ 78.831715][ T5767] do_sync+0x4c6/0xe50 [ 78.835818][ T5767] ? gfs2_quota_sync+0x411/0x5a0 [ 78.840787][ T5767] ? bh_get+0x760/0x760 [ 78.845050][ T5767] ? __lock_acquire+0x7d40/0x7d40 [ 78.850094][ T5767] ? do_raw_spin_lock+0x11f/0x2c0 [ 78.855150][ T5767] ? gfs2_quota_sync+0x411/0x5a0 [ 78.860194][ T5767] ? do_raw_spin_unlock+0x121/0x230 [ 78.865448][ T5767] gfs2_quota_sync+0x411/0x5a0 [ 78.870242][ T5767] gfs2_sync_fs+0x4c/0xb0 [ 78.874592][ T5767] sync_filesystem+0xea/0x220 [ 78.879287][ T5767] generic_shutdown_super+0x6f/0x2b0 [ 78.884595][ T5767] kill_block_super+0x44/0x90 [ 78.889287][ T5767] deactivate_locked_super+0x97/0x100 [ 78.894692][ T5767] cleanup_mnt+0x43b/0x4d0 [ 78.899190][ T5767] task_work_run+0x1d4/0x260 [ 78.903816][ T5767] ? task_work_cancel+0x220/0x220 [ 78.908875][ T5767] ? exit_to_user_mode_loop+0x3b/0x110 [ 78.914381][ T5767] exit_to_user_mode_loop+0xe6/0x110 [ 78.919697][ T5767] exit_to_user_mode_prepare+0xee/0x180 [ 78.925274][ T5767] syscall_exit_to_user_mode+0x1a/0x50 [ 78.930855][ T5767] do_syscall_64+0x61/0xa0 [ 78.935293][ T5767] ? clear_bhb_loop+0x40/0x90 [ 78.939996][ T5767] ? clear_bhb_loop+0x40/0x90 [ 78.944713][ T5767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.950635][ T5767] RIP: 0033:0x7f364599e017 [ 78.955123][ T5767] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 78.974767][ T5767] RSP: 002b:00007ffdd6baa5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.983217][ T5767] RAX: 0000000000000000 RBX: 00007f3645a32120 RCX: 00007f364599e017 [ 78.991234][ T5767] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd6baa670 [ 78.999231][ T5767] RBP: 00007ffdd6baa670 R08: 00007ffdd6bab670 R09: 00000000ffffffff [ 79.007228][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd6bab700 [ 79.015259][ T5767] R13: 00007f3645a32120 R14: 000000000001269b R15: 00007ffdd6bab740 [ 79.023272][ T5767] [ 79.026407][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.040046][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.103769][ T9] cfg80211: failed to load regulatory.db [ 82.207749][ T5944] loop1: detected capacity change from 0 to 128 [ 82.253371][ T5944] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.273356][ T5944] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.359687][ T5950] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 84.885710][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.831164][ T5988] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 88.439616][ T6002] loop2: detected capacity change from 0 to 128 [ 88.577553][ T6002] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.663196][ T6002] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.392833][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.990900][ T6047] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 92.733829][ T6052] loop0: detected capacity change from 0 to 128 [ 92.767186][ T6052] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.839045][ T6052] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.709534][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.687850][ T6091] loop1: detected capacity change from 0 to 128 [ 95.732382][ T6091] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.789277][ T6091] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.901082][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.080645][ T23] usb 3-1: device descriptor read/64, error -71 [ 96.633462][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.830541][ T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 96.980600][ T23] usb 3-1: device descriptor read/64, error -71 [ 97.104788][ T23] usb usb3-port1: attempt power cycle [ 97.328531][ T6102] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.264548][ T6130] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 100.530443][ C0] sched: RT throttling activated [ 100.650512][ T5809] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 101.179035][ T5809] usb 3-1: device descriptor read/64, error -71 [ 101.470545][ T5809] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 101.661836][ T5809] usb 3-1: device descriptor read/64, error -71 [ 101.792569][ T5809] usb usb3-port1: attempt power cycle [ 102.220529][ T5809] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 102.284559][ T5809] usb 3-1: device descriptor read/8, error -71 [ 104.291632][ T6182] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 105.200614][ T5773] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 105.372328][ T5773] usb 1-1: device descriptor read/64, error -71 [ 105.655932][ T5773] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 105.821947][ T5773] usb 1-1: device descriptor read/64, error -71 [ 105.950762][ T5773] usb usb1-port1: attempt power cycle [ 106.378972][ T5773] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 106.421837][ T5773] usb 1-1: device descriptor read/8, error -71 [ 106.760690][ T5773] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 106.801272][ T5773] usb 1-1: device descriptor read/8, error -71 [ 106.920857][ T5773] usb usb1-port1: unable to enumerate USB device [ 108.554350][ T6220] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 109.970649][ T5827] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 110.660801][ T5827] usb 1-1: device descriptor read/64, error -71 [ 110.930578][ T5827] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 111.080974][ T5827] usb 1-1: device descriptor read/64, error -71 [ 111.212729][ T5827] usb usb1-port1: attempt power cycle [ 111.690778][ T5827] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 111.807153][ T5827] usb 1-1: device descriptor read/8, error -71 [ 111.956595][ T6246] loop3: detected capacity change from 0 to 128 [ 112.013482][ T6246] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.034758][ T6246] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.170561][ T5827] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 112.211533][ T5827] usb 1-1: device descriptor read/8, error -71 [ 112.407063][ T5827] usb usb1-port1: unable to enumerate USB device [ 114.868312][ T6277] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 114.910906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 116.350989][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.730662][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 117.033209][ T8] usb 2-1: device descriptor read/64, error -71 [ 117.470929][ T8] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 117.750868][ T8] usb 2-1: device descriptor read/64, error -71 [ 117.870824][ T8] usb usb2-port1: attempt power cycle [ 118.280523][ T8] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 118.321302][ T8] usb 2-1: device descriptor read/8, error -71 [ 118.719491][ T8] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 119.610632][ T8] usb 2-1: device not accepting address 5, error -71 [ 119.633204][ T8] usb usb2-port1: unable to enumerate USB device [ 119.720279][ T6318] loop0: detected capacity change from 0 to 128 [ 119.770576][ T6318] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.800993][ T6318] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.658345][ T6329] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 121.236140][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.720701][ T5827] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.934840][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.970567][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.011018][ T5827] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 122.042775][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.081936][ T5827] usb 1-1: config 0 descriptor?? [ 122.243591][ T5827] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 123.590507][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 124.460168][ T5827] usb 1-1: USB disconnect, device number 11 [ 124.541999][ T9] usb 4-1: device descriptor read/64, error -71 [ 124.921575][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 125.601118][ T9] usb 4-1: device descriptor read/64, error -71 [ 125.721166][ T9] usb usb4-port1: attempt power cycle [ 126.140928][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 126.181255][ T9] usb 4-1: device descriptor read/8, error -71 [ 126.450756][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 126.492010][ T9] usb 4-1: device descriptor read/8, error -71 [ 126.649608][ T9] usb usb4-port1: unable to enumerate USB device [ 127.113192][ T6372] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 127.170566][ T5827] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 127.846203][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.192659][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.205717][ T5827] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 128.215276][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.236017][ T5827] usb 1-1: config 0 descriptor?? [ 128.258928][ T5827] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 128.560392][ T6387] loop2: detected capacity change from 0 to 128 [ 128.596202][ T6387] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.611388][ T6387] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.850574][ T27] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 130.713063][ T27] usb 2-1: config 0 has no interfaces? [ 130.718765][ T27] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 130.734233][ T1192] usb 1-1: USB disconnect, device number 12 [ 130.758432][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.804300][ T27] usb 2-1: config 0 descriptor?? [ 130.975355][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.436387][ T27] usb 2-1: string descriptor 0 read error: -71 [ 132.510865][ T27] usb 2-1: USB disconnect, device number 6 [ 132.903152][ T6421] loop3: detected capacity change from 0 to 128 [ 132.977606][ T6421] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.080057][ T6421] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.126169][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.156965][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.211509][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.734910][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.751290][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.766469][ T27] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 133.775732][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.901798][ T27] usb 2-1: config 0 descriptor?? [ 133.929627][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 135.073928][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.934946][ T6458] overlayfs: missing 'workdir' [ 136.128149][ T27] usb 2-1: USB disconnect, device number 7 [ 136.441685][ T6466] loop2: detected capacity change from 0 to 2048 [ 136.597031][ T6466] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.660047][ T6471] loop0: detected capacity change from 0 to 128 [ 136.727287][ T6471] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.762361][ T28] audit: type=1800 audit(1777450325.231:2): pid=6466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.197" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 136.827214][ T6471] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.007816][ T6476] loop2: detected capacity change from 0 to 2048 [ 137.031792][ T6476] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.085894][ T6477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.265575][ T6476] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 137.291932][ T28] audit: type=1800 audit(1777450325.721:3): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.199" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 137.373404][ T6476] Remounting filesystem read-only [ 139.250812][ T5773] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.453595][ T5773] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.477086][ T5773] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 139.500289][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.508718][ T6484] loop2: detected capacity change from 0 to 32768 [ 139.541099][ T5773] usb 2-1: config 0 descriptor?? [ 139.566451][ T5773] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 139.643437][ T6484] add_index: next_index = 0. Resetting! [ 139.649415][ T6484] find_entry called with index >= next_index [ 139.670794][ T6484] find_entry called with index >= next_index [ 139.692787][ T6484] find_entry called with index >= next_index [ 139.698853][ T6484] find_entry called with index >= next_index [ 139.857362][ T6507] loop5: detected capacity change from 0 to 7 [ 139.893973][ T6507] Dev loop5: unable to read RDB block 7 [ 139.901082][ T6507] loop5: AHDI p1 [ 139.905109][ T6507] loop5: partition table partially beyond EOD, truncated [ 140.794242][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.300284][ T6515] loop2: detected capacity change from 0 to 32768 [ 141.342225][ T6515] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.209 (6515) [ 141.685759][ T6513] loop3: detected capacity change from 0 to 131072 [ 141.716142][ T6513] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.795690][ T6515] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 141.807517][ T6513] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.840632][ T6515] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 141.858611][ T6515] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.869175][ T6515] BTRFS info (device loop2): use zstd compression, level 3 [ 141.905868][ T5827] usb 2-1: USB disconnect, device number 8 [ 141.922564][ T6513] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 141.952441][ T6513] process 'syz.3.211' launched './file0' with NULL argv: empty string added [ 141.958880][ T6515] BTRFS info (device loop2): using free space tree [ 141.965207][ T6513] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 142.415215][ T6515] BTRFS info (device loop2): enabling ssd optimizations [ 142.468654][ T6515] BTRFS info (device loop2): auto enabling async discard [ 142.639637][ T28] audit: type=1800 audit(1777450331.101:4): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.209" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 143.969101][ T6557] loop0: detected capacity change from 0 to 2048 [ 144.079413][ T6558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.100129][ T5767] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.150554][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 148.340946][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 148.362667][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.380984][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.431173][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.468901][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.525116][ T27] usb 1-1: config 0 descriptor?? [ 149.393557][ T27] hub 1-1:0.0: USB hub found [ 149.600900][ T27] hub 1-1:0.0: 26 ports detected [ 149.609501][ T27] hub 1-1:0.0: insufficient power available to use all downstream ports [ 149.665307][ T6594] loop3: detected capacity change from 0 to 32768 [ 149.745319][ T6594] add_index: next_index = 0. Resetting! [ 149.778253][ T6594] find_entry called with index >= next_index [ 149.808732][ T6594] find_entry called with index >= next_index [ 149.864717][ T6594] find_entry called with index >= next_index [ 149.907953][ T6594] find_entry called with index >= next_index [ 150.612042][ T27] usb 1-1: USB disconnect, device number 13 [ 150.875447][ T6609] Bluetooth: MGMT ver 1.22 [ 150.894957][ T6610] loop1: detected capacity change from 0 to 256 [ 150.925835][ T6610] ======================================================= [ 150.925835][ T6610] WARNING: The mand mount option has been deprecated and [ 150.925835][ T6610] and is ignored by this kernel. Remove the mand [ 150.925835][ T6610] option from the mount to silence this warning. [ 150.925835][ T6610] ======================================================= [ 151.123236][ T6610] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 151.145887][ T6610] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 152.719437][ T6632] loop3: detected capacity change from 0 to 32768 [ 152.735435][ T6632] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.245 (6632) [ 152.765730][ T6632] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.776130][ T6632] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 152.785066][ T6632] BTRFS info (device loop3): turning on sync discard [ 152.791945][ T6632] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 152.802064][ T6632] BTRFS info (device loop3): use zstd compression, level 3 [ 152.809417][ T6632] BTRFS info (device loop3): turning on async discard [ 152.816485][ T6632] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 152.827287][ T6632] BTRFS info (device loop3): trying to use backup root at mount time [ 152.835444][ T6632] BTRFS info (device loop3): enabling auto defrag [ 152.842054][ T6632] BTRFS info (device loop3): using free space tree [ 153.720654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 153.978753][ T2987] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 154.056111][ T6632] BTRFS error (device loop3): failed to load root extent [ 154.063483][ T6632] BTRFS warning (device loop3): try to load backup roots slot 1 [ 154.072202][ T1101] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 154.111134][ T6632] BTRFS warning (device loop3): couldn't read tree root [ 154.118196][ T6632] BTRFS warning (device loop3): try to load backup roots slot 2 [ 154.128523][ T2976] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 154.157636][ T6632] BTRFS warning (device loop3): couldn't read tree root [ 154.165351][ T6632] BTRFS warning (device loop3): try to load backup roots slot 3 [ 154.274107][ T6632] BTRFS info (device loop3): enabling ssd optimizations [ 154.291048][ T6632] BTRFS info (device loop3): rebuilding free space tree [ 154.569553][ T6632] BTRFS info (device loop3): checking UUID tree [ 155.166810][ T6665] loop2: detected capacity change from 0 to 32768 [ 155.803658][ T5768] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.523329][ T6681] ±ÿþ€: renamed from team_slave_1 (while UP) [ 158.484032][ T6687] loop3: detected capacity change from 0 to 32768 [ 158.547391][ T6687] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.610598][ T1192] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.666718][ T6687] XFS (loop3): Ending clean mount [ 158.820651][ T1192] usb 3-1: Using ep0 maxpacket: 32 [ 158.845848][ T1192] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 158.860524][ T1192] usb 3-1: config 0 has no interface number 0 [ 158.866017][ T28] audit: type=1804 audit(1777450347.331:5): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.253" name="/newroot/65/file1/file1" dev="loop3" ino=6150 res=1 errno=0 [ 158.866659][ T1192] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.935124][ T1192] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.955978][ T1192] usb 3-1: config 0 interface 89 has no altsetting 0 [ 158.963329][ T5768] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.972765][ T1192] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 158.990919][ T1192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.009462][ T1192] usb 3-1: Product: syz [ 159.038397][ T1192] usb 3-1: Manufacturer: syz [ 159.043643][ T1192] usb 3-1: SerialNumber: syz [ 159.069147][ T1192] usb 3-1: config 0 descriptor?? [ 159.087029][ T1192] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 159.160484][ T1192] em28xx 3-1:0.89: Video interface 89 found: isoc [ 159.411934][ T6706] loop1: detected capacity change from 0 to 32768 [ 159.659779][ T1192] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 159.827149][ T6706] add_index: next_index = 0. Resetting! [ 159.880899][ T6706] find_entry called with index >= next_index [ 159.887297][ T6706] find_entry called with index >= next_index [ 159.915011][ T6706] find_entry called with index >= next_index [ 159.976735][ T1192] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 160.004321][ T6706] find_entry called with index >= next_index [ 160.051534][ T1192] em28xx 3-1:0.89: board has no eeprom [ 160.190759][ T1192] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 160.310711][ T1192] em28xx 3-1:0.89: analog set to isoc mode. [ 160.317082][ T9] em28xx 3-1:0.89: Registering V4L2 extension [ 160.371608][ T1192] usb 3-1: USB disconnect, device number 9 [ 160.421025][ T1192] em28xx 3-1:0.89: Disconnecting em28xx [ 160.485455][ T9] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 160.500806][ T9] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 160.542283][ T6723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 161.246531][ T6723] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 161.256564][ T6723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 161.266203][ T9] em28xx 3-1:0.89: No AC97 audio processor [ 161.272200][ T6723] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 161.305009][ T9] usb 3-1: Decoder not found [ 161.309664][ T9] em28xx 3-1:0.89: failed to create media graph [ 161.313899][ T6723] syz.1.270 (6723) used greatest stack depth: 17936 bytes left [ 161.316082][ T28] audit: type=1800 audit(1777450349.711:6): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 161.462496][ T9] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 161.639379][ T9] em28xx 3-1:0.89: Registering snapshot button... [ 161.686699][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input5 [ 161.810066][ T5827] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.999431][ T9] em28xx 3-1:0.89: Remote control support is not available for this card. [ 162.013806][ T1192] em28xx 3-1:0.89: Closing input extension [ 162.025783][ T1192] em28xx 3-1:0.89: Deregistering snapshot button [ 162.134372][ T5827] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 162.157519][ T1192] em28xx 3-1:0.89: Freeing device [ 162.175845][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.228913][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.260913][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 162.277545][ T5827] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 162.291210][ T5827] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 162.309848][ T5827] usb 4-1: Manufacturer: syz [ 162.794797][ T5827] usb 4-1: config 0 descriptor?? [ 162.800910][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 163.003601][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.021625][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 163.040701][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 163.055658][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.073715][ T9] usb 1-1: config 0 descriptor?? [ 163.087580][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 163.557665][ T5827] usbhid 4-1:0.0: can't add hid device: -71 [ 163.583193][ T5827] usbhid: probe of 4-1:0.0 failed with error -71 [ 163.625982][ T5827] usb 4-1: USB disconnect, device number 6 [ 165.454561][ T967] usb 1-1: USB disconnect, device number 14 [ 165.497054][ T6750] loop3: detected capacity change from 0 to 32768 [ 165.524006][ T6750] add_index: next_index = 0. Resetting! [ 165.529903][ T6750] find_entry called with index >= next_index [ 165.536479][ T6750] find_entry called with index >= next_index [ 165.543189][ T6750] find_entry called with index >= next_index [ 165.549205][ T6750] find_entry called with index >= next_index [ 165.622412][ T6763] loop1: detected capacity change from 0 to 4096 [ 165.644941][ T6763] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 165.664175][ T6763] ntfs3: loop1: It is recommened to use chkdsk. [ 165.914435][ T6770] loop2: detected capacity change from 0 to 4096 [ 165.961854][ T6770] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 167.495773][ T28] audit: type=1800 audit(1777450355.961:7): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.287" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 167.520704][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 167.549647][ T28] audit: type=1800 audit(1777450356.001:8): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.287" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 167.662302][ T6770] ntfs3: loop2: ino=1e, "file1" ntfs3_write_inode failed, -22. [ 167.723187][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.763951][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 167.795291][ T9] usb 4-1: config 0 has no interface number 0 [ 167.822707][ T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 167.866418][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.908390][ T9] usb 4-1: config 0 descriptor?? [ 167.986115][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 168.454572][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.676660][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 168.688567][ T9] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 168.699175][ T9] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 168.711405][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 169.234129][ T9] usb 3-1: config 1 has no interface number 0 [ 169.444191][ T5827] usb 4-1: USB disconnect, device number 7 [ 169.500611][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.506271][ T6793] loop1: detected capacity change from 0 to 64 [ 169.558326][ T9] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 169.614720][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 169.630657][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 169.638898][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 169.671387][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.716222][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 169.890556][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 169.910777][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 169.916876][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 169.918237][ T6803] loop3: detected capacity change from 0 to 32768 [ 169.937986][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 169.978286][ T6803] add_index: next_index = 0. Resetting! [ 169.985195][ T6803] find_entry called with index >= next_index [ 169.993438][ T6803] find_entry called with index >= next_index [ 169.999830][ T6803] find_entry called with index >= next_index [ 170.008159][ T6803] find_entry called with index >= next_index [ 170.103130][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.113557][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.126495][ T8] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 170.136013][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.147481][ T8] usb 1-1: config 0 descriptor?? [ 170.160362][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 170.238870][ T6793] ceph: No mds server is up or the cluster is laggy [ 170.370882][ T5809] usb 3-1: USB disconnect, device number 10 [ 170.387536][ T5809] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 170.830799][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 171.089947][ T9] usb 2-1: config 127 has an invalid interface number: 84 but max is 0 [ 171.114553][ T9] usb 2-1: config 127 has no interface number 0 [ 171.128764][ T9] usb 2-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 171.145815][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.181420][ T9] usb 2-1: Product: syz [ 171.188841][ T9] usb 2-1: Manufacturer: syz [ 171.205964][ T9] usb 2-1: SerialNumber: syz [ 171.573936][ T9] gspca_main: spca501-2.14.0 probing 040a:0002 [ 172.629339][ T9] gspca_spca501: reg write: error -110 [ 172.646255][ T9] spca501 2-1:127.84: Reg write failed for 0x00,0x01,0x02 [ 172.653543][ T9] spca501: probe of 2-1:127.84 failed with error -22 [ 173.093472][ T9] usb 1-1: USB disconnect, device number 15 [ 173.140880][ T6832] loop2: detected capacity change from 0 to 512 [ 173.164183][ T6832] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 173.185548][ T6835] loop3: detected capacity change from 0 to 256 [ 173.226518][ T6832] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.369789][ T6832] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.305: bad orphan inode 131083 [ 173.605438][ T6832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.758850][ T6832] syz.2.305 (pid 6832) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 173.789933][ T27] usb 2-1: USB disconnect, device number 9 [ 173.903699][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.585771][ T6863] loop1: detected capacity change from 0 to 512 [ 175.630581][ T6863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 175.679685][ T6863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.750771][ T6863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.764046][ T6863] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.932264][ T6867] netlink: 76 bytes leftover after parsing attributes in process `syz.3.317'. [ 176.691486][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.948069][ T6883] loop1: detected capacity change from 0 to 1024 [ 176.990027][ T6883] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.040319][ T6883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.074191][ T6883] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.108105][ T6883] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #11: comm syz.1.322: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 177.144045][ T6883] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.322: couldn't read orphan inode 11 (err -117) [ 177.161974][ T6883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.741905][ T6883] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.322: Invalid block bitmap block 0 in block_group 0 [ 177.827964][ T6883] BUG: unable to handle page fault for address: ffffffffffffff93 [ 177.835882][ T6883] #PF: supervisor read access in kernel mode [ 177.841878][ T6883] #PF: error_code(0x0000) - not-present page [ 177.847893][ T6883] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 177.854072][ T6883] Oops: 0000 [#1] PREEMPT SMP KASAN [ 177.859308][ T6883] CPU: 1 PID: 6883 Comm: syz.1.322 Not tainted syzkaller #0 [ 177.866608][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 177.876701][ T6883] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 177.882824][ T6883] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 f7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 177.902537][ T6883] RSP: 0018:ffffc900038771a0 EFLAGS: 00010246 [ 177.908625][ T6883] RAX: 0000000000000000 RBX: ffffffffffffff8b RCX: 0000000000080000 [ 177.916665][ T6883] RDX: ffffc9000d343000 RSI: 0000000000027a67 RDI: ffffffffffffff93 [ 177.924655][ T6883] RBP: ffffc90003877450 R08: ffffffff911c6667 R09: 1ffffffff2238ccc [ 177.932658][ T6883] R10: dffffc0000000000 R11: fffffbfff2238ccd R12: 0000000000000001 [ 177.940641][ T6883] R13: 1ffff9200070ee60 R14: dffffc0000000000 R15: ffffffffffffff8b [ 177.948635][ T6883] FS: 00007f6023c706c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 177.957757][ T6883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.964367][ T6883] CR2: ffffffffffffff93 CR3: 00000000549fd000 CR4: 00000000003506e0 [ 177.972456][ T6883] Call Trace: [ 177.975748][ T6883] [ 177.978698][ T6883] ? __might_sleep+0xe0/0xe0 [ 177.983310][ T6883] ? ext4_ext_release+0x10/0x10 [ 177.988184][ T6883] ? __lock_acquire+0x7d40/0x7d40 [ 177.993240][ T6883] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 177.999168][ T6883] ? lockdep_hardirqs_on+0x98/0x150 [ 178.004400][ T6883] ? ext4_es_lookup_extent+0x60e/0xa00 [ 178.009886][ T6883] ext4_map_blocks+0x9e2/0x1b80 [ 178.014763][ T6883] ? kasan_set_track+0x5f/0x70 [ 178.019548][ T6883] ? kasan_set_track+0x4e/0x70 [ 178.024336][ T6883] ? ext4_acquire_dquot+0x2e3/0x4b0 [ 178.029652][ T6883] ? do_mkdirat+0x1dc/0x450 [ 178.034175][ T6883] ? ext4_issue_zeroout+0x250/0x250 [ 178.039413][ T6883] ext4_getblk+0x1d0/0x6f0 [ 178.043858][ T6883] ? ext4_get_block_unwritten+0x100/0x100 [ 178.049610][ T6883] ? kasan_quarantine_put+0xd8/0x220 [ 178.054929][ T6883] ? lockdep_hardirqs_on+0x98/0x150 [ 178.060242][ T6883] ext4_bread+0x2a/0x170 [ 178.064520][ T6883] ext4_quota_write+0x23a/0x580 [ 178.069493][ T6883] ? ext4_quota_read+0x380/0x380 [ 178.074454][ T6883] ? make_kuid+0x680/0x680 [ 178.078895][ T6883] write_blk+0x115/0x220 [ 178.083168][ T6883] ? ext4_quota_read+0x380/0x380 [ 178.088310][ T6883] do_insert_tree+0xad2/0x10a0 [ 178.093122][ T6883] qtree_write_dquot+0x4a1/0x5d0 [ 178.098092][ T6883] ? qtree_entry_unused+0xe0/0xe0 [ 178.099726][ T6904] loop3: detected capacity change from 0 to 40427 [ 178.103128][ T6883] ? down_write+0x16e/0x200 [ 178.103149][ T6883] ? rcu_is_watching+0x15/0xb0 [ 178.103174][ T6883] v2_write_dquot+0x10c/0x1a0 [ 178.123497][ T6883] dquot_acquire+0x320/0x610 [ 178.128171][ T6883] ext4_acquire_dquot+0x2e3/0x4b0 [ 178.133201][ T6883] dqget+0x77c/0xeb0 [ 178.137102][ T6883] __dquot_initialize+0x3c7/0xcd0 [ 178.142116][ T6883] ? dquot_initialize+0x20/0x20 [ 178.146965][ T6883] ? end_current_label_crit_section+0x149/0x170 [ 178.153191][ T6883] ext4_mkdir+0x1a9/0xce0 [ 178.157506][ T6883] ? make_vfsuid+0x51/0xb0 [ 178.161907][ T6883] ? generic_permission+0x1f3/0x590 [ 178.167094][ T6883] ? ext4_symlink+0x980/0x980 [ 178.171761][ T6883] ? inode_permission+0xf3/0x480 [ 178.176681][ T6883] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 178.181687][ T6883] ? security_inode_mkdir+0xb7/0x100 [ 178.186989][ T6883] vfs_mkdir+0x296/0x440 [ 178.191240][ T6883] do_mkdirat+0x1dc/0x450 [ 178.195568][ T6883] ? vfs_mkdir+0x440/0x440 [ 178.199980][ T6883] __x64_sys_mkdirat+0x89/0xa0 [ 178.204726][ T6883] do_syscall_64+0x55/0xa0 [ 178.209119][ T6883] ? clear_bhb_loop+0x40/0x90 [ 178.213778][ T6883] ? clear_bhb_loop+0x40/0x90 [ 178.218437][ T6883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.224588][ T6883] RIP: 0033:0x7f6022d9cdd9 [ 178.229048][ T6883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.248649][ T6883] RSP: 002b:00007f6023c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 178.257069][ T6883] RAX: ffffffffffffffda RBX: 00007f6023015fa0 RCX: 00007f6022d9cdd9 [ 178.265064][ T6883] RDX: 00000000000000a1 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 178.273025][ T6883] RBP: 00007f6022e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 178.280996][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.289048][ T6883] R13: 00007f6023016038 R14: 00007f6023015fa0 R15: 00007ffeafccc4d8 [ 178.297031][ T6883] [ 178.300044][ T6883] Modules linked in: [ 178.304079][ T6883] CR2: ffffffffffffff93 [ 178.308521][ T6883] ---[ end trace 0000000000000000 ]--- [ 178.314408][ T6883] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 178.320650][ T6883] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 f7 e0 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 178.340947][ T6883] RSP: 0018:ffffc900038771a0 EFLAGS: 00010246 [ 178.347012][ T6883] RAX: 0000000000000000 RBX: ffffffffffffff8b RCX: 0000000000080000 [ 178.355070][ T6883] RDX: ffffc9000d343000 RSI: 0000000000027a67 RDI: ffffffffffffff93 [ 178.363120][ T6883] RBP: ffffc90003877450 R08: ffffffff911c6667 R09: 1ffffffff2238ccc [ 178.371086][ T6883] R10: dffffc0000000000 R11: fffffbfff2238ccd R12: 0000000000000001 [ 178.379059][ T6883] R13: 1ffff9200070ee60 R14: dffffc0000000000 R15: ffffffffffffff8b [ 178.387140][ T6883] FS: 00007f6023c706c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 178.396069][ T6883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.402644][ T6883] CR2: ffffffffffffff93 CR3: 00000000549fd000 CR4: 00000000003506e0 [ 178.410694][ T6883] Kernel panic - not syncing: Fatal exception [ 178.416862][ T6883] Kernel Offset: disabled [ 178.421192][ T6883] Rebooting in 86400 seconds..