last executing test programs: 6.038442134s ago: executing program 3 (id=341): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x18000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4005) 5.477941797s ago: executing program 3 (id=343): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) pwrite64(r1, &(0x7f0000000300)="fd", 0x1, 0xc78) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x1000, 0x6}) 5.198769254s ago: executing program 1 (id=345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)={0x1, 0x0, [{0x6, 0x1, 0x0, 0x0, @adapter={0xfffffffffffffff7, 0xf, 0x2, 0x1, 0x5}}]}) 4.838867643s ago: executing program 1 (id=347): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310) syz_usb_connect$midi(0x2, 0x31, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x763, 0x150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xf9, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0xee640842aed3cc28, 0x7, [], [{{0x9, 0x5, 0x1, 0x8, 0x200, 0x7e, 0xa, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 4.743561175s ago: executing program 3 (id=349): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) timer_getoverrun(0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f87040000002a9000070900be0083000000000b09"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') read$char_usb(0xffffffffffffffff, 0x0, 0x0) 4.626752258s ago: executing program 2 (id=350): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd, 0x0, 0xfdfffffc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000580)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c48040000db", 0x2a}, {&(0x7f00000005c0)="0046053cb304538a9927911e00005a", 0xf}, {&(0x7f0000000240)="a43b2eaab4000000000080", 0xb}, {&(0x7f0000000540)="57348a", 0x3}], 0x4) 3.622579892s ago: executing program 2 (id=352): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000080)='}.+/\'$$/\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x3]}, {0x101, 0x7, 0xa187, 0x10001}}, 0x8000, 0x0, 0x0}, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) 3.615563083s ago: executing program 0 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0xa, 0xbe5, 0xf8, 0x4, 0x4, 0x92, 0x6, 0x8, 0x5, 0x1f, 0x6, 0x91, 0x333}, {0x80000001, 0x101, 0x6, 0xed, 0x1, 0x81, 0xc, 0x4, 0xa, 0x8, 0x36, 0x5, 0xcecc}, {0x3, 0x0, 0x5, 0x6, 0x1, 0x59, 0x9, 0x9, 0x4, 0x8, 0xa, 0x5, 0x7}], 0xfff}) 3.468843066s ago: executing program 2 (id=354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x7) 2.995315337s ago: executing program 2 (id=355): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) r2 = dup3(r1, r0, 0x80000) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.994365017s ago: executing program 0 (id=363): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000080)='}.+/\'$$/\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x9, 0x3]}, {0x101, 0x7, 0xa187, 0x10001}}, 0x8000, 0x0, 0x0}, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r3, r2, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[], 0x0) 2.725775044s ago: executing program 0 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, 0x0}], 0x1, 0x29, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001ec0)=@vmx={0x100, 0x0, 0x2080, {0x10000, 0x6000, {}, 0x0, 0x7f}, {"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", "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"}}) 2.295058604s ago: executing program 1 (id=357): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00') socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x822b01) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000100)={[{@discard}, {@data_err_ignore}, {@stripe={'stripe', 0x3d, 0xd3}}]}, 0xfe, 0x27a, &(0x7f0000000980)="$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") 2.145635978s ago: executing program 0 (id=358): lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 1.857972865s ago: executing program 0 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, 0x0, 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000003c0)=0x1, 0x30) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{r3, r4/1000+60000}, {0x77359400}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0xffffffffffffffff) 1.573932532s ago: executing program 2 (id=360): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffd, 0x0, 0xfdfffffc}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000580)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c48040000db", 0x2a}, {&(0x7f00000005c0)="0046053cb304538a9927911e00005a", 0xf}, {&(0x7f0000000240)="a43b2eaab4000000000080", 0xb}, {&(0x7f0000000540)="57348a", 0x3}], 0x4) 1.457583455s ago: executing program 3 (id=361): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x18000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) r1 = dup(r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4005) 688.434453ms ago: executing program 1 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x53) 620.815375ms ago: executing program 0 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000f3, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 533.573267ms ago: executing program 3 (id=365): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000380)={0x7162, r0}, 0x0) landlock_restrict_self(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x12b442, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 372.977301ms ago: executing program 2 (id=366): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000002, &(0x7f0000000180), 0x2, 0x7a1, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000008c0)=[{&(0x7f0000000100)="aa99", 0x2}], 0x1, 0x800e7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0xfffffffffeff0000, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 361.373791ms ago: executing program 1 (id=367): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@nombcache}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x105180, 0x85) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) preadv2(r1, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4110, 0x100e}], 0x1, 0x4f1ff, 0x10, 0x0) 281.624503ms ago: executing program 3 (id=368): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804002, &(0x7f0000000380)=ANY=[@ANYBLOB='nls=default,nodecompose,nobarrier,uid=', @ANYRESHEX=0x0, @ANYBLOB=',part=0x00000000000000ff,gid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00ecompose,nobarrier,\x00'], 0xff, 0x6d2, &(0x7f0000001340)="$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") lsetxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) 0s ago: executing program 1 (id=369): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmmsg$unix(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000340)="fe", 0x1}], 0x1, 0x0, 0x0, 0x20048010}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001080)="d3", 0x1}], 0x28, &(0x7f00000015c0)=[@rights={{0x10}}], 0x10, 0x8800}}], 0x2, 0x8090) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 91.466190][ T5763] cgroup: Unknown subsys name 'net' [ 91.630917][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.621702][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.456685][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.473813][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.491553][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.511147][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.537678][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.540587][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.551346][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.554122][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.563432][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.569043][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.580154][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.583001][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.590871][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.599569][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.607753][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.609865][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.624170][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.634987][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.644275][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.658770][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.669370][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.684674][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.695189][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.708608][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.185819][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 96.359703][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 96.431916][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 96.444963][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 96.474640][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.482676][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.490098][ T5781] bridge_slave_0: entered allmulticast mode [ 96.497972][ T5781] bridge_slave_0: entered promiscuous mode [ 96.548926][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.556230][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.563981][ T5781] bridge_slave_1: entered allmulticast mode [ 96.571671][ T5781] bridge_slave_1: entered promiscuous mode [ 96.640762][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.648557][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.659481][ T5782] bridge_slave_0: entered allmulticast mode [ 96.666831][ T5782] bridge_slave_0: entered promiscuous mode [ 96.676257][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.683575][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.690940][ T5782] bridge_slave_1: entered allmulticast mode [ 96.700061][ T5782] bridge_slave_1: entered promiscuous mode [ 96.758933][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.810736][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.832887][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.877895][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.885242][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.893418][ T5779] bridge_slave_0: entered allmulticast mode [ 96.901023][ T5779] bridge_slave_0: entered promiscuous mode [ 96.913293][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.946982][ T5781] team0: Port device team_slave_0 added [ 96.953992][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.961856][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.969348][ T5780] bridge_slave_0: entered allmulticast mode [ 96.977171][ T5780] bridge_slave_0: entered promiscuous mode [ 96.985231][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.992680][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.999931][ T5779] bridge_slave_1: entered allmulticast mode [ 97.007892][ T5779] bridge_slave_1: entered promiscuous mode [ 97.029469][ T5782] team0: Port device team_slave_0 added [ 97.038670][ T5781] team0: Port device team_slave_1 added [ 97.048107][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.055588][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.063365][ T5780] bridge_slave_1: entered allmulticast mode [ 97.071327][ T5780] bridge_slave_1: entered promiscuous mode [ 97.099187][ T5782] team0: Port device team_slave_1 added [ 97.185022][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.192306][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.219642][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.233064][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.240083][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.266961][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.291198][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.298263][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.325106][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.341049][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.352164][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.359228][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.386846][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.402213][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.416658][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.431565][ T28] cfg80211: failed to load regulatory.db [ 97.450953][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.533120][ T5779] team0: Port device team_slave_0 added [ 97.547029][ T5780] team0: Port device team_slave_0 added [ 97.571322][ T5779] team0: Port device team_slave_1 added [ 97.591145][ T5780] team0: Port device team_slave_1 added [ 97.603064][ T5781] hsr_slave_0: entered promiscuous mode [ 97.613499][ T5781] hsr_slave_1: entered promiscuous mode [ 97.685619][ T5782] hsr_slave_0: entered promiscuous mode [ 97.692727][ T5782] hsr_slave_1: entered promiscuous mode [ 97.700427][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.709304][ T5782] Cannot create hsr debugfs directory [ 97.721247][ T5789] Bluetooth: hci3: command tx timeout [ 97.735061][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.742158][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.768742][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.783262][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.790516][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.816595][ T5789] Bluetooth: hci2: command tx timeout [ 97.822348][ T5789] Bluetooth: hci1: command tx timeout [ 97.828087][ T5789] Bluetooth: hci0: command tx timeout [ 97.835643][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.867014][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.874431][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.900736][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.914167][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.921445][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.947502][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.118294][ T5779] hsr_slave_0: entered promiscuous mode [ 98.125261][ T5779] hsr_slave_1: entered promiscuous mode [ 98.131853][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.139443][ T5779] Cannot create hsr debugfs directory [ 98.163344][ T5780] hsr_slave_0: entered promiscuous mode [ 98.170179][ T5780] hsr_slave_1: entered promiscuous mode [ 98.177111][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.184959][ T5780] Cannot create hsr debugfs directory [ 98.509086][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.557306][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.588123][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.599150][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.689523][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.701697][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.726889][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.738577][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.873139][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.889989][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.901232][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.916678][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.970197][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.048236][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.072992][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.086823][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.098043][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.116350][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.143493][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.151662][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.179370][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.199783][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.207007][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.278675][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.308727][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.315932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.358445][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.365697][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.423712][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.526441][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.583497][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.598717][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.605988][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.643823][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.651162][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.753468][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.803255][ T5789] Bluetooth: hci3: command tx timeout [ 99.832659][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.840377][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.883578][ T5789] Bluetooth: hci0: command tx timeout [ 99.889800][ T5789] Bluetooth: hci1: command tx timeout [ 99.896830][ T51] Bluetooth: hci2: command tx timeout [ 99.913140][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.920995][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.038793][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.187586][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.269653][ T5782] veth0_vlan: entered promiscuous mode [ 100.323880][ T5782] veth1_vlan: entered promiscuous mode [ 100.379187][ T5781] veth0_vlan: entered promiscuous mode [ 100.412804][ T5781] veth1_vlan: entered promiscuous mode [ 100.462869][ T5782] veth0_macvtap: entered promiscuous mode [ 100.503538][ T5782] veth1_macvtap: entered promiscuous mode [ 100.559108][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.588040][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.615510][ T5781] veth0_macvtap: entered promiscuous mode [ 100.635715][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.652717][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.663179][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.673860][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.686557][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.706234][ T5781] veth1_macvtap: entered promiscuous mode [ 100.767927][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.784978][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.798725][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.814507][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.826884][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.838919][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.859051][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.882102][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.892273][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.907554][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.918484][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.984781][ T5780] veth0_vlan: entered promiscuous mode [ 101.067053][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.097730][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.139272][ T5780] veth1_vlan: entered promiscuous mode [ 101.206182][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.226122][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.299080][ T5779] veth0_vlan: entered promiscuous mode [ 101.306620][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.318579][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.352057][ T5779] veth1_vlan: entered promiscuous mode [ 101.413040][ T5780] veth0_macvtap: entered promiscuous mode [ 101.448700][ T5780] veth1_macvtap: entered promiscuous mode [ 101.472748][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.484263][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.564765][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.609196][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.627455][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.642319][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.661828][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.681895][ T5779] veth0_macvtap: entered promiscuous mode [ 101.698192][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.738219][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.756551][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.785424][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.799888][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.824906][ T5779] veth1_macvtap: entered promiscuous mode [ 101.839230][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.856169][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.874060][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.885957][ T5789] Bluetooth: hci3: command tx timeout [ 101.898807][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.963230][ T5789] Bluetooth: hci1: command tx timeout [ 101.971320][ T51] Bluetooth: hci2: command tx timeout [ 101.978150][ T51] Bluetooth: hci0: command tx timeout [ 102.193627][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.238596][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.279917][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.350974][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.365330][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.376515][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.391690][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.450003][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.471803][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.486415][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.497682][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.521039][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.539085][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.555243][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.597871][ T5853] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6'. [ 102.626942][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.639802][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.650628][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.655163][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.668495][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.678296][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.759430][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.777576][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.939871][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.980656][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.093097][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.108071][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.130770][ T5862] syz.1.2[5862]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 103.192559][ T5862] loop1: detected capacity change from 0 to 512 [ 103.244363][ T5862] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.296699][ T5862] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.422851][ T5862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.474838][ T5862] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.521173][ T5873] loop0: detected capacity change from 0 to 512 [ 103.604595][ T5862] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.2: corrupted inode contents [ 103.627932][ T5873] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1: iget: bad extra_isize 58 (inode size 256) [ 103.632211][ T5874] loop3: detected capacity change from 0 to 4096 [ 103.669729][ T5862] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #2: comm syz.1.2: mark_inode_dirty error [ 103.688130][ T5873] EXT4-fs (loop0): Remounting filesystem read-only [ 103.704848][ T5873] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.729550][ T5862] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.2: corrupted inode contents [ 103.755090][ T5873] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 103.785260][ T5873] EXT4-fs (loop0): 1 orphan inode deleted [ 103.799150][ T5876] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.2: corrupted inode contents [ 103.828551][ T5873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.861500][ T5876] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #2: comm syz.1.2: mark_inode_dirty error [ 103.913823][ T5876] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #2: comm syz.1.2: corrupted inode contents [ 103.961949][ T5784] Bluetooth: hci3: command tx timeout [ 104.008906][ T5876] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #2: comm syz.1.2: mark_inode_dirty error [ 104.043632][ T5784] Bluetooth: hci1: command tx timeout [ 104.050743][ T5789] Bluetooth: hci0: command tx timeout [ 104.056333][ T5789] Bluetooth: hci2: command tx timeout [ 104.158222][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.187943][ T5874] EXT4-fs: Ignoring removed orlov option [ 104.226614][ T5874] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.282745][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.330128][ T5874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.481706][ T27] audit: type=1800 audit(1785083938.259:2): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 104.720075][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.289462][ T5900] loop2: detected capacity change from 0 to 512 [ 105.340728][ T5848] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.353783][ T5900] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.19: iget: bad extra_isize 58 (inode size 256) [ 105.378547][ T5900] EXT4-fs (loop2): Remounting filesystem read-only [ 105.402431][ T5900] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 105.426954][ T5900] EXT4-fs (loop2): 1 orphan inode deleted [ 105.435871][ T5900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.497485][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.530396][ T5770] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.590637][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 105.600598][ T5905] loop2: detected capacity change from 0 to 2048 [ 105.609082][ T5848] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 105.622527][ T5848] usb 1-1: config 0 has no interface number 0 [ 105.637777][ T5848] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 105.650032][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.663137][ T5848] usb 1-1: Product: syz [ 105.667432][ T5848] usb 1-1: Manufacturer: syz [ 105.672445][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.682065][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.696505][ T5848] usb 1-1: SerialNumber: syz [ 105.726119][ T5848] usb 1-1: config 0 descriptor?? [ 105.749368][ T5770] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 105.764553][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.782664][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.794106][ T5770] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.817197][ T5770] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.830576][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.855364][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.869595][ T5770] usb 2-1: config 0 descriptor?? [ 105.887686][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.917248][ T23] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 105.930522][ T23] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 105.942350][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.985230][ T23] usb 4-1: config 0 descriptor?? [ 105.991891][ T5848] usb 1-1: USB disconnect, device number 2 [ 106.139906][ T5910] loop2: detected capacity change from 0 to 512 [ 106.148331][ T5910] ======================================================= [ 106.148331][ T5910] WARNING: The mand mount option has been deprecated and [ 106.148331][ T5910] and is ignored by this kernel. Remove the mand [ 106.148331][ T5910] option from the mount to silence this warning. [ 106.148331][ T5910] ======================================================= [ 106.214225][ T5910] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.292414][ T5910] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.22: bg 0: block 64: padding at end of block bitmap is not set [ 106.316931][ T5910] Quota error (device loop2): write_blk: dquota write failed [ 106.336566][ T5770] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 106.350800][ T5910] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 106.350851][ T5770] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 106.390766][ T5910] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.22: Failed to acquire dquot type 0 [ 106.413553][ T5910] EXT4-fs (loop2): 1 truncate cleaned up [ 106.421584][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.429798][ T5770] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 106.449912][ T23] Bluetooth: Can't get version to change to load ram patch err [ 106.466296][ T23] Bluetooth: Loading patch file failed [ 106.472624][ T23] ath3k: probe of 4-1:0.0 failed with error -71 [ 106.490679][ T23] usb 4-1: USB disconnect, device number 2 [ 106.553910][ T5910] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 106.627775][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.697947][ T5770] usb 2-1: USB disconnect, device number 2 [ 106.840137][ T5913] fido_id[5913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 106.975844][ T5919] loop2: detected capacity change from 0 to 1024 [ 106.991685][ T5919] EXT4-fs: Ignoring removed orlov option [ 107.111436][ T5919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.272522][ T5919] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.23: Invalid inode table block 7469298916241199015 in block_group 0 [ 107.330484][ T5919] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 107.393465][ T5925] loop3: detected capacity change from 0 to 256 [ 107.416708][ T5925] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 107.441979][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.457744][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.498556][ T5925] process 'syz.3.26' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.796441][ T5935] loop3: detected capacity change from 0 to 512 [ 107.937768][ T5935] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.30: iget: bad extra_isize 58 (inode size 256) [ 107.955193][ T5935] EXT4-fs (loop3): Remounting filesystem read-only [ 107.965853][ T5935] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 107.980416][ T5935] EXT4-fs (loop3): 1 orphan inode deleted [ 107.991584][ T5940] loop1: detected capacity change from 0 to 128 [ 108.022798][ T5935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.087002][ T5940] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.104560][ T5940] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.240567][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.452729][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.639345][ T5949] loop1: detected capacity change from 0 to 256 [ 108.808324][ T5953] loop3: detected capacity change from 0 to 512 [ 108.834117][ T5949] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xd119abc7) [ 108.890440][ T5949] exFAT-fs (loop1): invalid boot region [ 108.942821][ T5949] exFAT-fs (loop1): failed to recognize exfat type [ 108.957021][ T5953] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.995974][ T5955] loop2: detected capacity change from 0 to 512 [ 109.098953][ T5955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.195589][ T5953] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.36: Allocating blocks 41-42 which overlap fs metadata [ 109.212473][ T5955] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.308766][ T5953] EXT4-fs (loop3): Remounting filesystem read-only [ 109.361865][ T5953] Quota error (device loop3): write_blk: dquota write failed [ 109.410957][ T5953] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 109.474228][ T5953] Quota error (device loop3): write_blk: dquota write failed [ 109.506390][ T5953] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 109.520619][ T5953] EXT4-fs (loop3): 1 truncate cleaned up [ 109.584079][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.599125][ T5953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.734776][ T5962] loop1: detected capacity change from 0 to 4096 [ 109.763105][ T5962] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.844278][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.858445][ T5962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.029448][ T5974] loop3: detected capacity change from 0 to 512 [ 110.086426][ T5974] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 110.186244][ T5974] EXT4-fs (loop3): 1 truncate cleaned up [ 110.216624][ T5974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.352020][ T5974] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 177 (only 1 groups) [ 110.521981][ T5962] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 110.619855][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.683310][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.839080][ T5988] loop0: detected capacity change from 0 to 512 [ 110.941323][ T5796] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.068531][ T5995] futex_wake_op: syz.3.46 tries to shift op by 144; fix this program [ 111.316253][ T5995] loop3: detected capacity change from 0 to 256 [ 111.548385][ T5995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 111.746203][ T27] audit: type=1800 audit(1785083945.529:3): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.46" name="file1" dev="loop3" ino=1048592 res=0 errno=0 [ 112.210344][ T27] audit: type=1326 audit(1785083945.989:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.0.53" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea0699de99 code=0x0 [ 112.335879][ T6005] loop1: detected capacity change from 0 to 8192 [ 112.961518][ T6018] loop2: detected capacity change from 0 to 512 [ 113.047414][ T6018] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.56: iget: bad extra_isize 58 (inode size 256) [ 113.070388][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.098942][ T6018] EXT4-fs (loop2): Remounting filesystem read-only [ 113.109668][ T6018] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 113.121968][ T6018] EXT4-fs (loop2): 1 orphan inode deleted [ 113.137372][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.272702][ T9] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.290390][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.302021][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.332399][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 113.349042][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.404176][ T9] usb 2-1: Product: syz [ 113.409728][ T9] usb 2-1: Manufacturer: syz [ 113.459617][ T9] usb 2-1: SerialNumber: syz [ 113.507113][ T9] usb 2-1: config 0 descriptor?? [ 113.552436][ T9] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 113.588737][ T6026] loop0: detected capacity change from 0 to 256 [ 113.601699][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 113.628382][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 113.674874][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 113.692912][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 113.701389][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 113.712544][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 113.725771][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 113.809842][ T6026] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 113.825726][ T5770] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.921684][ T6026] syz.0.60: attempt to access beyond end of device [ 113.921684][ T6026] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 114.004629][ T6026] syz.0.60: attempt to access beyond end of device [ 114.004629][ T6026] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 114.055698][ T6026] syz.0.60: attempt to access beyond end of device [ 114.055698][ T6026] loop0: rw=0, sector=280, nr_sectors = 8 limit=256 [ 114.076356][ T5770] usb 3-1: Using ep0 maxpacket: 16 [ 114.093197][ T5770] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.123859][ T27] audit: type=1800 audit(1785083947.899:5): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.60" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 114.151353][ T5770] usb 3-1: config 25 has an invalid interface number: 91 but max is 0 [ 114.151429][ T5770] usb 3-1: config 25 has an invalid descriptor of length 138, skipping remainder of the config [ 114.151454][ T5770] usb 3-1: config 25 has no interface number 0 [ 114.151515][ T5770] usb 3-1: config 25 interface 91 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.151548][ T5770] usb 3-1: config 25 interface 91 has no altsetting 0 [ 114.240328][ T5770] usb 3-1: New USB device found, idVendor=0421, idProduct=09ab, bcdDevice=ee.96 [ 114.253570][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 114.266983][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 114.269792][ T5770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.296132][ T5770] usb 3-1: Product: syz [ 114.300963][ T5770] usb 3-1: Manufacturer: syz [ 114.305710][ T5770] usb 3-1: SerialNumber: syz [ 114.652920][ T5770] usb 3-1: bad CDC descriptors [ 114.738146][ T5770] usb 3-1: bad CDC descriptors [ 114.811435][ T6033] loop1: detected capacity change from 0 to 16 [ 114.832381][ T5770] usb 3-1: USB disconnect, device number 2 [ 114.887640][ T9] keyspan 2-1:0.0: unsupported endpoint type 0 [ 114.894312][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 114.905871][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 114.928394][ T9] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 114.959455][ T9] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 114.973625][ T6033] erofs: (device loop1): mounted with root inode @ nid 36. [ 115.063356][ T9] usb 2-1: USB disconnect, device number 3 [ 115.131075][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 115.199700][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 115.251778][ T9] keyspan 2-1:0.0: device disconnected [ 115.507343][ T6042] loop0: detected capacity change from 0 to 512 [ 115.606042][ T6042] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.66: iget: bad extra_isize 58 (inode size 256) [ 115.633319][ T6044] loop2: detected capacity change from 0 to 2048 [ 115.668287][ T6042] EXT4-fs (loop0): Remounting filesystem read-only [ 115.693800][ T6049] loop1: detected capacity change from 0 to 164 [ 115.694532][ T6042] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 115.733383][ T6050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.746848][ T6042] EXT4-fs (loop0): 1 orphan inode deleted [ 115.758800][ T6049] rock: directory entry would overflow storage [ 115.769986][ T6042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.788422][ T6044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.794991][ T6049] rock: sig=0x4543, size=28, remaining=18 [ 116.172277][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.720654][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.924907][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 116.942655][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 116.956882][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.969927][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.991642][ T9] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 117.009439][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.019935][ T9] usb 4-1: Product: syz [ 117.031742][ T9] usb 4-1: Manufacturer: syz [ 117.038338][ T9] usb 4-1: SerialNumber: syz [ 117.282114][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.302907][ T6076] loop2: detected capacity change from 0 to 164 [ 117.304381][ T9] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 117.329858][ T6076] rock: directory entry would overflow storage [ 117.336401][ T6076] rock: sig=0x4543, size=28, remaining=18 [ 117.353560][ T9] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 117.432529][ T9] usb 4-1: USB disconnect, device number 3 [ 117.480579][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 117.500896][ T23] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 117.527392][ T6078] loop2: detected capacity change from 0 to 512 [ 117.534047][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.549187][ T23] usb 2-1: config 0 has no interface number 0 [ 117.575776][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 117.592571][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.596227][ T6078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.623448][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.649202][ T23] usb 2-1: Product: syz [ 117.659888][ T23] usb 2-1: Manufacturer: syz [ 117.667844][ T6078] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.682128][ T23] usb 2-1: SerialNumber: syz [ 117.700298][ T23] usb 2-1: config 0 descriptor?? [ 117.766061][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.930839][ T23] usb 2-1: USB disconnect, device number 4 [ 117.957531][ T6084] loop2: detected capacity change from 0 to 512 [ 117.975746][ T6084] EXT4-fs (loop2): Test dummy encryption mode enabled [ 117.989149][ T6084] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.018178][ T6086] loop3: detected capacity change from 0 to 512 [ 118.045816][ T6084] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.069071][ T6084] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.82: bad orphan inode 131083 [ 118.091943][ T6084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.121632][ T6086] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.81: iget: bad extra_isize 58 (inode size 256) [ 118.196779][ T6086] EXT4-fs (loop3): Remounting filesystem read-only [ 118.221220][ T6086] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 118.268214][ T6086] EXT4-fs (loop3): 1 orphan inode deleted [ 118.281932][ T6086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.555885][ T6090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.82'. [ 118.882806][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.233216][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.797579][ T6104] loop1: detected capacity change from 0 to 512 [ 119.872743][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.920946][ T6104] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.938015][ T6108] loop3: detected capacity change from 0 to 164 [ 120.009422][ T6108] rock: directory entry would overflow storage [ 120.037594][ T6108] rock: sig=0x4543, size=28, remaining=18 [ 120.073941][ T23] kernel write not supported for file /vcsa1 (pid: 23 comm: kworker/1:0) [ 120.139407][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.413902][ T6113] loop0: detected capacity change from 0 to 764 [ 120.454349][ T6113] rock: directory entry would overflow storage [ 120.591223][ T6113] rock: sig=0x4654, size=5, remaining=4 [ 121.281980][ T6118] loop1: detected capacity change from 0 to 1024 [ 121.448863][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.556590][ T6124] loop0: detected capacity change from 0 to 512 [ 121.597437][ T6124] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.628983][ T6124] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.704580][ T6124] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.93: bad orphan inode 131083 [ 121.793469][ T6124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.200464][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.640980][ T6137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'. [ 123.314773][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.555272][ T9] kernel write not supported for file /vcsa1 (pid: 9 comm: kworker/0:1) [ 123.705653][ T6145] loop0: detected capacity change from 0 to 512 [ 123.776698][ T6151] loop2: detected capacity change from 0 to 128 [ 123.785360][ T6145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.821775][ T6153] loop1: detected capacity change from 0 to 764 [ 123.830656][ T6145] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.886585][ T6153] rock: directory entry would overflow storage [ 123.925534][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.942680][ T6153] rock: sig=0x4654, size=5, remaining=4 [ 124.384743][ T6160] loop2: detected capacity change from 0 to 1024 [ 124.434423][ T6160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.564997][ T6164] loop3: detected capacity change from 0 to 512 [ 124.815118][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.862068][ T6168] loop3: detected capacity change from 0 to 512 [ 124.923204][ T6168] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 124.944340][ T6168] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 124.959674][ T6168] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 124.981967][ T6168] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 125.022564][ T6168] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 125.032441][ T6168] EXT4-fs (loop3): orphan cleanup on readonly fs [ 125.055345][ T6168] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.109: bg 0: block 34: padding at end of block bitmap is not set [ 125.091985][ T6168] Quota error (device loop3): write_blk: dquota write failed [ 125.102350][ T6168] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 125.117088][ T6168] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.109: Failed to acquire dquot type 1 [ 125.148874][ T6168] EXT4-fs (loop3): 1 truncate cleaned up [ 125.212588][ T6168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.249924][ T6168] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.457170][ T6177] loop1: detected capacity change from 0 to 512 [ 125.473834][ T6177] EXT4-fs (loop1): Test dummy encryption mode enabled [ 125.548663][ T6179] loop3: detected capacity change from 0 to 512 [ 125.556231][ T6177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.591297][ T6177] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.111: bad orphan inode 131083 [ 125.639833][ T6185] loop2: detected capacity change from 0 to 1024 [ 125.653580][ T6185] EXT4-fs: inline encryption not supported [ 125.666233][ T6185] EXT4-fs: Ignoring removed bh option [ 125.681042][ T6185] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 125.683408][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.740781][ T6179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.784162][ T6185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.819605][ T6179] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.316416][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.358813][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.475861][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.111'. [ 127.384180][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.463509][ T56] kernel write not supported for file /vcsa1 (pid: 56 comm: kworker/1:2) [ 127.718883][ T6208] loop3: detected capacity change from 0 to 764 [ 127.779479][ T6208] rock: directory entry would overflow storage [ 127.800709][ T6208] rock: sig=0x4654, size=5, remaining=4 [ 127.967482][ T6214] loop0: detected capacity change from 0 to 1024 [ 128.094355][ T6214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.416206][ T6225] loop3: detected capacity change from 0 to 256 [ 128.476624][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.490465][ T6225] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 128.686074][ T6225] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560612053 (7121224106 ns) > initial count (2096900638 ns). Using initial count to start timer. [ 128.794006][ T6234] netlink: 'syz.0.125': attribute type 16 has an invalid length. [ 128.861386][ T6234] netlink: 'syz.0.125': attribute type 17 has an invalid length. [ 128.910702][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.945623][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.077004][ T6239] loop3: detected capacity change from 0 to 512 [ 129.098493][ T6239] EXT4-fs (loop3): Test dummy encryption mode enabled [ 129.134761][ T6239] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.166699][ T6239] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.126: bad orphan inode 131083 [ 129.231561][ T6239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.795186][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.126'. [ 130.722250][ T6256] loop0: detected capacity change from 0 to 512 [ 130.753272][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.780078][ T6256] EXT4-fs: Ignoring removed orlov option [ 130.833880][ T6256] ext4: Unknown parameter 'nouser_xattr' [ 131.513634][ T6267] loop0: detected capacity change from 0 to 512 [ 131.552420][ T6266] loop2: detected capacity change from 0 to 764 [ 131.594547][ T6267] EXT4-fs (loop0): Test dummy encryption mode enabled [ 131.633917][ T6266] rock: directory entry would overflow storage [ 131.663929][ T6267] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 131.711854][ T6266] rock: sig=0x4654, size=5, remaining=4 [ 131.775885][ T6267] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.140: bad orphan inode 131083 [ 131.833506][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.434579][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 133.331378][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.339851][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.415276][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.458180][ T6278] loop3: detected capacity change from 0 to 1024 [ 133.621514][ T6278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.875282][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.217850][ T6294] capability: warning: `syz.0.141' uses deprecated v2 capabilities in a way that may be insecure [ 134.286232][ T6296] loop1: detected capacity change from 0 to 256 [ 134.304630][ T6296] exfat: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ0177777777777777777777718446744073709551615' [ 134.435096][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 134.480697][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 135.455503][ T6321] loop6: detected capacity change from 0 to 1 [ 136.153743][ T6314] sched: RT throttling activated [ 136.444872][ T6321] Dev loop6: unable to read RDB block 1 [ 136.451390][ T6321] loop6: unable to read partition table [ 136.457434][ T6321] loop6: partition table beyond EOD, truncated [ 136.464957][ T6321] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.851758][ T6329] loop2: detected capacity change from 0 to 512 [ 136.879911][ T6330] loop3: detected capacity change from 0 to 1024 [ 136.902403][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.966841][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.983531][ T6330] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.004974][ T27] audit: type=1800 audit(1785083970.789:6): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.154" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 137.030173][ T6330] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.154: lblock 0 mapped to illegal pblock 0 (length 1) [ 137.252195][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.495924][ T6344] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.155: Unimplemented hash flags: 0x0001 [ 137.508800][ T6344] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.155: Corrupt directory, running e2fsck is recommended [ 137.527379][ T6344] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.155: path /42/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 138.258913][ T6346] loop3: detected capacity change from 0 to 512 [ 138.314127][ T6346] EXT4-fs: Ignoring removed bh option [ 138.319606][ T6346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.364883][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.454829][ T6346] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.158: inode has both inline data and extents flags [ 138.484282][ T6346] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.158: couldn't read orphan inode 15 (err -117) [ 138.512027][ T6346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.596872][ T6346] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.158: Directory hole found for htree leaf block 0 [ 138.757263][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.057646][ T6360] loop3: detected capacity change from 0 to 2048 [ 139.386203][ T6360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.741753][ T5784] Bluetooth: hci2: link tx timeout [ 140.749952][ T5784] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.812884][ T5789] Bluetooth: hci2: link tx timeout [ 140.818364][ T5789] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.843598][ T5789] Bluetooth: hci2: link tx timeout [ 140.849870][ T5789] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.005696][ T5789] Bluetooth: hci2: link tx timeout [ 141.011779][ T5789] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.213818][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 141.291605][ T6384] loop0: detected capacity change from 0 to 512 [ 141.349877][ T6386] Illegal XDP return value 4292407296 on prog (id 6) dev syz_tun, expect packet loss! [ 141.363315][ T6384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 141.492741][ T6389] loop1: detected capacity change from 0 to 1024 [ 141.808696][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.895095][ T6395] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.168: Unimplemented hash flags: 0x0001 [ 141.908306][ T6395] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.168: Corrupt directory, running e2fsck is recommended [ 141.924716][ T6395] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.168: path /42/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 141.988292][ T27] audit: type=1804 audit(1785083975.669:7): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.170" name="/newroot/41/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 142.500347][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.564639][ T6399] loop2: detected capacity change from 0 to 512 [ 142.608396][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.712308][ T6403] loop1: detected capacity change from 0 to 2048 [ 142.745837][ T6399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.763593][ T6399] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.841791][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 142.858280][ T6403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.126129][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.108496][ T6419] loop3: detected capacity change from 0 to 512 [ 144.175886][ T6419] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.185650][ T6419] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.181: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 144.222823][ T6419] EXT4-fs (loop3): Remounting filesystem read-only [ 144.230105][ T6419] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.181: ea_inode dec ref err=-117 [ 144.273943][ T6419] EXT4-fs (loop3): 1 orphan inode deleted [ 144.299186][ T6419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.331144][ T6426] loop0: detected capacity change from 0 to 1024 [ 144.408632][ T6426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.469695][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.512655][ T6430] loop2: detected capacity change from 0 to 128 [ 144.536354][ T6430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 144.582495][ T27] audit: type=1804 audit(1785083978.369:8): pid=6426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.184" name="/newroot/45/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 144.630867][ T6430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.700699][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.808807][ T6434] loop3: detected capacity change from 0 to 512 [ 144.909249][ T6434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.978168][ T6436] loop0: detected capacity change from 0 to 2048 [ 145.153277][ T6436] loop0: p3 < > p4 < > [ 145.157576][ T6436] loop0: partition table partially beyond EOD, truncated [ 145.217140][ T6436] loop0: p3 start 4284289 is beyond EOD, truncated [ 145.411544][ T6445] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.187: Unimplemented hash flags: 0x0001 [ 145.423365][ T6445] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.187: Corrupt directory, running e2fsck is recommended [ 145.437293][ T6445] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.187: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 146.054522][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.196203][ T6453] loop3: detected capacity change from 0 to 512 [ 146.224046][ T6449] loop0: detected capacity change from 0 to 2048 [ 146.238238][ T6453] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.297400][ T6449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.500819][ T6453] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.193: corrupted in-inode xattr: e_value size too large [ 146.588408][ T6453] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.193: couldn't read orphan inode 15 (err -117) [ 146.663855][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.682391][ T6457] loop1: detected capacity change from 0 to 256 [ 146.773169][ T6457] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 146.891063][ T27] audit: type=1800 audit(1785083980.669:9): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.196" name="file1" dev="loop1" ino=1048600 res=0 errno=0 [ 146.970456][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.007064][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.067007][ T6463] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.171021][ T6463] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.245626][ T27] audit: type=1804 audit(1785083981.019:10): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.197" name="/newroot/52/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 147.293130][ T6463] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.198: checksumming directory block 0 [ 147.427687][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.492664][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.766658][ T6477] set_capacity_and_notify: 2 callbacks suppressed [ 147.766685][ T6477] loop1: detected capacity change from 0 to 512 [ 147.804502][ T6477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.059660][ T6487] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.202: Unimplemented hash flags: 0x0001 [ 149.071603][ T6487] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.202: Corrupt directory, running e2fsck is recommended [ 149.087518][ T6487] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.202: path /49/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 149.530088][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.583846][ T6489] loop2: detected capacity change from 0 to 2048 [ 149.678193][ T6489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.763203][ T6493] loop1: detected capacity change from 0 to 256 [ 149.813922][ T6493] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.018937][ T6501] loop3: detected capacity change from 0 to 1024 [ 150.124884][ T6501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.376429][ T27] audit: type=1804 audit(1785083984.159:11): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.210" name="/newroot/51/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 150.459287][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.073973][ T6516] loop0: detected capacity change from 0 to 512 [ 151.501139][ T6516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.160898][ T6529] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.218: Unimplemented hash flags: 0x0001 [ 152.176397][ T6529] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.218: Corrupt directory, running e2fsck is recommended [ 152.190895][ T6529] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.218: path /54/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 153.402358][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.825711][ T6539] loop2: detected capacity change from 0 to 512 [ 153.921263][ T6542] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.954265][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.159175][ T6544] loop1: detected capacity change from 0 to 256 [ 154.201715][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.241603][ T6544] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 154.480343][ T5825] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 154.690332][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 154.699197][ T5825] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 154.736633][ T5825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 154.799069][ T5825] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 154.848088][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.898258][ T5825] usb 1-1: Product: syz [ 154.949506][ T5825] usb 1-1: Manufacturer: syz [ 154.968564][ T5825] usb 1-1: SerialNumber: syz [ 155.894942][ T6534] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 156.268988][ T5825] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 156.296650][ T5825] usb 1-1: MIDIStreaming interface descriptor not found [ 156.327989][ T5825] usb 1-1: too many endpoints [ 156.475441][ T5825] usb 1-1: USB disconnect, device number 3 [ 156.551167][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.637088][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.238'. [ 160.039415][ T6604] loop0: detected capacity change from 0 to 164 [ 160.573471][ T6611] loop3: detected capacity change from 0 to 512 [ 160.696406][ T6611] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.245: invalid indirect mapped block 10 (level 1) [ 160.817551][ T6611] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.245: invalid indirect mapped block 8 (level 1) [ 160.889875][ T6619] loop2: detected capacity change from 0 to 16 [ 160.917478][ T6611] EXT4-fs (loop3): 1 truncate cleaned up [ 160.955705][ T6611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.042981][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.190725][ T6611] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.245: inode has both inline data and extents flags [ 161.510344][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 161.521412][ T5848] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 161.529975][ T5848] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.541342][ T5848] usb 1-1: config 1 has no interface number 0 [ 161.547529][ T5848] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.561734][ T5848] usb 1-1: config 1 interface 105 has no altsetting 0 [ 161.587498][ T5848] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 161.601908][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 161.709983][ T5848] usb 1-1: Product: syz [ 161.797067][ T5848] usb 1-1: Manufacturer: syz [ 161.918958][ T5848] usb 1-1: SerialNumber: syz [ 162.396038][ T5848] aqc111: probe of 1-1:1.105 failed with error -22 [ 162.576574][ T6627] loop1: detected capacity change from 0 to 128 [ 162.604200][ T6615] loop0: detected capacity change from 0 to 512 [ 162.661263][ T6627] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 162.669567][ T6627] FAT-fs (loop1): Filesystem has been set read-only [ 162.691730][ T6615] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 162.740947][ T6615] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 162.749580][ T6615] System zones: 0-1, 15-15, 18-18, 34-34 [ 162.840190][ T6615] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.847466][ T6615] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 162.933106][ T6615] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.963151][ T6615] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 163.016552][ T6615] EXT4-fs (loop0): 1 truncate cleaned up [ 163.055782][ T6615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.132312][ T6530] usb 1-1: USB disconnect, device number 4 [ 163.691234][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.743176][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.846861][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 166.457892][ T6654] loop2: detected capacity change from 0 to 8 [ 167.792673][ T6668] loop3: detected capacity change from 0 to 16 [ 167.846703][ T6668] erofs: (device loop3): mounted with root inode @ nid 36. [ 168.187714][ T6679] loop2: detected capacity change from 0 to 128 [ 169.261915][ T6679] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.365009][ T6679] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.545885][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.071230][ T6707] loop2: detected capacity change from 0 to 512 [ 171.079598][ T6707] EXT4-fs: Ignoring removed i_version option [ 171.165776][ T6707] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.232039][ T6707] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 171.337727][ T6707] Quota error (device loop2): write_blk: dquota write failed [ 171.373895][ T6707] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 171.432997][ T6707] Quota error (device loop2): write_blk: dquota write failed [ 171.462038][ T6707] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 171.492177][ T6707] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.276: Failed to acquire dquot type 1 [ 171.529733][ T6707] EXT4-fs (loop2): 1 truncate cleaned up [ 171.552266][ T6707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.623392][ T6718] loop1: detected capacity change from 0 to 1024 [ 171.672729][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.920385][ T5826] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.772166][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.786674][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.848549][ T5826] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 172.978101][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.176328][ T5826] usb 1-1: config 0 descriptor?? [ 173.318202][ T49] hfsplus: b-tree write err: -5, ino 25 [ 173.386862][ T49] hfsplus: b-tree write err: -5, ino 4 [ 173.471189][ T49] hfsplus: b-tree write err: -5, ino 2 [ 173.766631][ T5826] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x2 [ 173.799520][ T5826] hid-led 0003:27B8:01ED.0002: item fetching failed at offset 1/5 [ 173.819551][ T5826] hid-led: probe of 0003:27B8:01ED.0002 failed with error -22 [ 173.984016][ T6721] loop0: detected capacity change from 0 to 128 [ 174.027417][ T6721] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.158378][ T6721] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.273880][ T5848] usb 1-1: USB disconnect, device number 5 [ 174.324424][ T6743] loop2: detected capacity change from 0 to 512 [ 174.397543][ T6743] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 174.470811][ T6743] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 174.578099][ T6743] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.290: iget: bad i_size value: 12154757448730 [ 174.645773][ T6743] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.290: couldn't read orphan inode 13 (err -117) [ 174.683282][ T6743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.753593][ T6743] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 174.888928][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.076928][ T6750] loop2: detected capacity change from 0 to 1024 [ 175.233931][ T6750] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 175.253026][ T6753] syzkaller0: entered promiscuous mode [ 175.282262][ T6753] syzkaller0: entered allmulticast mode [ 176.727713][ T6770] loop1: detected capacity change from 0 to 256 [ 176.790660][ T6770] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.867087][ T6770] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.936658][ T6772] loop0: detected capacity change from 0 to 1024 [ 177.174226][ T12] hfsplus: b-tree write err: -5, ino 25 [ 177.215165][ T12] hfsplus: b-tree write err: -5, ino 4 [ 177.223515][ T12] hfsplus: b-tree write err: -5, ino 2 [ 177.438298][ T6778] loop0: detected capacity change from 0 to 512 [ 177.499495][ T6778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.535204][ T6782] loop1: detected capacity change from 0 to 128 [ 177.541942][ T6778] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.661753][ T6778] EXT4-fs error (device loop0): ext4_get_inode_usage:888: inode #12: comm syz.0.303: corrupted xattr block 6: invalid header [ 177.789681][ T6778] EXT4-fs (loop0): Remounting filesystem read-only [ 177.813048][ T6782] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.888565][ T6782] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.558542][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.588864][ T6782] syz.1.304 (pid 6782) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 178.731711][ T49] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 178.780532][ T49] Quota error (device loop0): write_blk: dquota write failed [ 178.809760][ T49] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 178.924778][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.166438][ T6797] loop3: detected capacity change from 0 to 1024 [ 179.191039][ T6799] loop2: detected capacity change from 0 to 2048 [ 179.273517][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 179.316704][ T5826] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 179.369981][ T6799] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 179.389308][ T6799] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 179.403821][ T6799] EXT4-fs (loop2): This should not happen!! Data will be lost [ 179.403821][ T6799] [ 179.413679][ T6799] EXT4-fs (loop2): Total free blocks count 0 [ 179.420009][ T6799] EXT4-fs (loop2): Free/Dirty block details [ 179.426229][ T6799] EXT4-fs (loop2): free_blocks=2415919104 [ 179.432317][ T6799] EXT4-fs (loop2): dirty_blocks=16 [ 179.437513][ T6799] EXT4-fs (loop2): Block reservation details [ 179.451803][ T6799] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 179.544434][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.570508][ T5826] usb 1-1: not running at top speed; connect to a high speed hub [ 179.591168][ T5826] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 179.619003][ T5826] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 179.649699][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.653349][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 179.669759][ T5826] usb 1-1: Product: syz [ 179.676807][ T5826] usb 1-1: Manufacturer: syz [ 179.687616][ T5826] usb 1-1: SerialNumber: syz [ 179.810836][ T42] hfsplus: b-tree write err: -5, ino 25 [ 179.817021][ T42] hfsplus: b-tree write err: -5, ino 4 [ 179.854817][ T42] hfsplus: b-tree write err: -5, ino 2 [ 179.933326][ T5826] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 179.941344][ T5826] usb 1-1: MIDIStreaming interface descriptor not found [ 180.044731][ T5826] usb 1-1: USB disconnect, device number 6 [ 180.166262][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.179329][ T6812] loop2: detected capacity change from 0 to 8 [ 180.266850][ T6813] loop3: detected capacity change from 0 to 1024 [ 182.378233][ T6836] loop2: detected capacity change from 0 to 1024 [ 182.812585][ T6841] loop0: detected capacity change from 0 to 8 [ 183.125083][ T42] hfsplus: b-tree write err: -5, ino 25 [ 183.139424][ T42] hfsplus: b-tree write err: -5, ino 4 [ 183.151399][ T42] hfsplus: b-tree write err: -5, ino 2 [ 183.550381][ T5848] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 183.762979][ T5848] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.791307][ T5848] usb 3-1: not running at top speed; connect to a high speed hub [ 183.813168][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 183.833063][ T5848] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 183.842776][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.857847][ T5848] usb 3-1: Product: syz [ 183.863278][ T5848] usb 3-1: Manufacturer: syz [ 183.868010][ T5848] usb 3-1: SerialNumber: syz [ 183.892719][ T6862] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.987210][ T6862] loop3: detected capacity change from 0 to 512 [ 184.106949][ T6862] EXT4-fs: Ignoring removed nobh option [ 184.246325][ T5848] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 184.286760][ T5848] usb 3-1: MIDIStreaming interface descriptor not found [ 184.571969][ T6862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.078479][ T6862] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.242337][ T5848] usb 3-1: USB disconnect, device number 3 [ 185.418319][ T6569] udevd[6569]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.566013][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.433982][ T6897] loop3: detected capacity change from 0 to 512 [ 186.553453][ T6897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.600538][ T6897] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.885316][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.971277][ T6530] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 188.060502][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 188.175100][ T6530] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.205009][ T6530] usb 2-1: not running at top speed; connect to a high speed hub [ 188.214677][ T6530] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 188.229252][ T6530] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 188.239887][ T6530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.249836][ T6530] usb 2-1: Product: syz [ 188.256414][ T6530] usb 2-1: Manufacturer: syz [ 188.270372][ T6530] usb 2-1: SerialNumber: syz [ 188.270379][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 188.287260][ T6928] loop2: detected capacity change from 0 to 1024 [ 188.306380][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.321029][ T6928] EXT4-fs: Ignoring removed orlov option [ 188.359503][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.391930][ T6928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.406510][ T5858] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 188.456132][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.485271][ T5858] usb 4-1: config 0 descriptor?? [ 188.543853][ T6530] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 188.558826][ T6530] usb 2-1: MIDIStreaming interface descriptor not found [ 188.594845][ T6530] usb 2-1: USB disconnect, device number 5 [ 188.713253][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.759191][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.007570][ T5858] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 189.027177][ T5858] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 189.048477][ T5858] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 189.065730][ T5858] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 189.079100][ T5858] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 189.097979][ T5858] HID 045e:07da: Invalid code 65791 type 1 [ 189.127150][ T5858] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input6 [ 189.191108][ T5858] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 189.433717][ T5858] usb 4-1: USB disconnect, device number 4 [ 189.540946][ T6947] loop1: detected capacity change from 0 to 128 [ 189.576369][ T6947] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.590187][ T6947] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 190.942202][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.345648][ T6972] loop1: detected capacity change from 0 to 1024 [ 191.363500][ T6972] EXT4-fs: Ignoring removed bh option [ 191.414800][ T6972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.442738][ T6975] loop2: detected capacity change from 0 to 2048 [ 191.460422][ T6976] loop3: detected capacity change from 0 to 1024 [ 191.502231][ T27] audit: type=1804 audit(1785084025.289:12): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.367" name="/newroot/93/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 191.579246][ T6975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.620989][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.728795][ T6975] [ 191.731398][ T6975] ====================================================== [ 191.738573][ T6975] WARNING: possible circular locking dependency detected [ 191.746542][ T6975] syzkaller #0 Not tainted [ 191.751643][ T6975] ------------------------------------------------------ [ 191.760293][ T6975] syz.2.366/6975 is trying to acquire lock: [ 191.766957][ T6975] ffff88805bec5ac8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 191.778244][ T6975] [ 191.778244][ T6975] but task is already holding lock: [ 191.778553][ T6981] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, [ 191.785925][ T6975] ffff888022064c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 191.785984][ T6975] [ 191.785984][ T6975] which lock already depends on the new lock. [ 191.785984][ T6975] [ 191.785991][ T6975] [ 191.785991][ T6975] the existing dependency chain (in reverse order) is: [ 191.785997][ T6975] [ 191.785997][ T6975] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 191.786027][ T6975] percpu_down_read+0x44/0x1a0 [ 191.786058][ T6975] ext4_writepages+0x1a4/0x350 [ 191.786074][ T6975] do_writepages+0x351/0x590 [ 191.786112][ T6975] __writeback_single_inode+0x14e/0xee0 [ 191.786142][ T6975] writeback_single_inode+0x21f/0x760 [ 191.795261][ T6981] block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 191.805680][ T6975] write_inode_now+0x183/0x210 [ 191.805723][ T6975] iput+0x58f/0x900 [ 191.805744][ T6975] ext4_xattr_block_set+0x2228/0x2fe0 [ 191.889416][ T6975] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 191.896307][ T6975] __ext4_expand_extra_isize+0x306/0x400 [ 191.902518][ T6975] __ext4_mark_inode_dirty+0x458/0x6d0 [ 191.908660][ T6975] ext4_evict_inode+0x7dd/0xe70 [ 191.914791][ T6975] evict+0x4b7/0x8a0 [ 191.919354][ T6975] ext4_orphan_cleanup+0xc33/0x1470 [ 191.925995][ T6975] ext4_fill_super+0x5fb5/0x6870 [ 191.932211][ T6975] get_tree_bdev+0x3e5/0x520 [ 191.937504][ T6975] vfs_get_tree+0x8c/0x280 [ 191.942623][ T6975] do_new_mount+0x24a/0xa40 [ 191.947792][ T6975] __se_sys_mount+0x2e7/0x3d0 [ 191.954574][ T6975] do_syscall_64+0x55/0xb0 [ 191.959615][ T6975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.966274][ T6975] [ 191.966274][ T6975] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 191.974396][ T6975] __lock_acquire+0x37ef/0x7d80 [ 191.979848][ T6975] lock_acquire+0x19e/0x420 [ 191.984906][ T6975] down_write+0x97/0x200 [ 191.990223][ T6975] ext4_destroy_inline_data+0x28/0xe0 [ 191.996959][ T6975] ext4_do_writepages+0x4f2/0x3990 [ 192.002772][ T6975] ext4_writepages+0x1dd/0x350 [ 192.008380][ T6975] do_writepages+0x351/0x590 [ 192.014164][ T6975] filemap_fdatawrite_wbc+0x122/0x180 [ 192.020473][ T6975] file_write_and_wait_range+0x197/0x280 [ 192.026990][ T6975] generic_buffers_fsync_noflush+0x6f/0x160 [ 192.034349][ T6975] ext4_sync_file+0x460/0xd50 [ 192.039710][ T6975] ext4_buffered_write_iter+0x2c0/0x350 [ 192.046000][ T6975] ext4_file_write_iter+0x1e7/0x1980 [ 192.052234][ T6975] do_iter_write+0x747/0xc50 [ 192.057677][ T6975] do_pwritev+0x242/0x3a0 [ 192.063107][ T6975] do_syscall_64+0x55/0xb0 [ 192.068201][ T6975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.074779][ T6975] [ 192.074779][ T6975] other info that might help us debug this: [ 192.074779][ T6975] [ 192.085290][ T6975] Possible unsafe locking scenario: [ 192.085290][ T6975] [ 192.093296][ T6975] CPU0 CPU1 [ 192.101442][ T6975] ---- ---- [ 192.107816][ T6975] rlock(&sbi->s_writepages_rwsem); [ 192.113237][ T6975] lock(&ei->xattr_sem); [ 192.120112][ T6975] lock(&sbi->s_writepages_rwsem); [ 192.128402][ T6975] lock(&ei->xattr_sem); [ 192.133335][ T6975] [ 192.133335][ T6975] *** DEADLOCK *** [ 192.133335][ T6975] [ 192.142865][ T6975] 2 locks held by syz.2.366/6975: [ 192.148054][ T6975] #0: ffff888022066418 (sb_writers#4){.+.+}-{0:0}, at: do_pwritev+0x22b/0x3a0 [ 192.157354][ T6975] #1: ffff888022064c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 192.167839][ T6975] [ 192.167839][ T6975] stack backtrace: [ 192.173774][ T6975] CPU: 0 PID: 6975 Comm: syz.2.366 Not tainted syzkaller #0 [ 192.181125][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 192.191308][ T6975] Call Trace: [ 192.194615][ T6975] [ 192.197667][ T6975] dump_stack_lvl+0x18c/0x250 [ 192.202404][ T6975] ? load_image+0x420/0x420 [ 192.207091][ T6975] ? show_regs_print_info+0x20/0x20 [ 192.212353][ T6975] ? print_circular_bug+0x12b/0x1a0 [ 192.217609][ T6975] check_noncircular+0x2fc/0x400 [ 192.222598][ T6975] ? print_deadlock_bug+0x5d0/0x5d0 [ 192.227915][ T6975] ? lockdep_lock+0xf5/0x230 [ 192.232727][ T6975] ? _find_first_zero_bit+0xd6/0x100 [ 192.238248][ T6975] __lock_acquire+0x37ef/0x7d80 [ 192.243437][ T6975] ? verify_lock_unused+0x140/0x140 [ 192.248987][ T6975] ? deref_stack_reg+0x1ab/0x230 [ 192.254088][ T6975] ? __lock_acquire+0x7d80/0x7d80 [ 192.259369][ T6975] ? verify_lock_unused+0x140/0x140 [ 192.264689][ T6975] ? mark_lock+0x94/0x320 [ 192.269062][ T6975] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.275369][ T6975] ? __lock_acquire+0x7d80/0x7d80 [ 192.280452][ T6975] ? lock_chain_count+0x20/0x20 [ 192.285357][ T6975] lock_acquire+0x19e/0x420 [ 192.289918][ T6975] ? ext4_destroy_inline_data+0x28/0xe0 [ 192.295517][ T6975] ? __might_sleep+0xe0/0xe0 [ 192.300170][ T6975] ? read_lock_is_recursive+0x20/0x20 [ 192.305609][ T6975] ? __might_sleep+0xe0/0xe0 [ 192.310250][ T6975] ? register_lock_class+0xc4/0x8a0 [ 192.315490][ T6975] down_write+0x97/0x200 [ 192.319779][ T6975] ? ext4_destroy_inline_data+0x28/0xe0 [ 192.325411][ T6975] ? down_read_killable+0x340/0x340 [ 192.330685][ T6975] ? ext4_block_write_begin+0x55f/0x1540 [ 192.336360][ T6975] ? ext4_journal_check_start+0x178/0x250 [ 192.342253][ T6975] ext4_destroy_inline_data+0x28/0xe0 [ 192.347670][ T6975] ext4_do_writepages+0x4f2/0x3990 [ 192.352960][ T6975] ? verify_lock_unused+0x140/0x140 [ 192.358376][ T6975] ? __lock_acquire+0x1336/0x7d80 [ 192.363477][ T6975] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 192.370386][ T6975] ? rcu_read_lock_any_held+0xb4/0x140 [ 192.375922][ T6975] ext4_writepages+0x1dd/0x350 [ 192.380727][ T6975] ? ext4_read_folio+0x2f0/0x2f0 [ 192.385703][ T6975] ? __rwlock_init+0x150/0x150 [ 192.390509][ T6975] ? do_raw_spin_unlock+0x121/0x230 [ 192.395777][ T6975] ? ext4_read_folio+0x2f0/0x2f0 [ 192.400745][ T6975] do_writepages+0x351/0x590 [ 192.405394][ T6975] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 192.411154][ T6975] ? __lock_acquire+0x7d80/0x7d80 [ 192.416302][ T6975] ? __rwlock_init+0x150/0x150 [ 192.421193][ T6975] ? do_raw_spin_unlock+0x121/0x230 [ 192.426425][ T6975] filemap_fdatawrite_wbc+0x122/0x180 [ 192.431865][ T6975] file_write_and_wait_range+0x197/0x280 [ 192.437568][ T6975] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 192.443090][ T6975] ? __might_sleep+0xe0/0xe0 [ 192.447716][ T6975] ? __ext4_journal_stop+0x34/0x190 [ 192.453591][ T6975] generic_buffers_fsync_noflush+0x6f/0x160 [ 192.459695][ T6975] ext4_sync_file+0x460/0xd50 [ 192.464443][ T6975] ? trace_ext4_fsmap_mapping+0x210/0x210 [ 192.470254][ T6975] ? vfs_fsync_range+0x130/0x1a0 [ 192.475455][ T6975] ext4_buffered_write_iter+0x2c0/0x350 [ 192.481087][ T6975] ext4_file_write_iter+0x1e7/0x1980 [ 192.487010][ T6975] ? plist_add+0x3db/0x490 [ 192.491659][ T6975] ? verify_lock_unused+0x140/0x140 [ 192.497109][ T6975] ? aa_path_link+0xf80/0xf80 [ 192.501941][ T6975] ? ext4_file_read_iter+0x660/0x660 [ 192.507355][ T6975] ? common_file_perm+0x198/0x1f0 [ 192.512446][ T6975] do_iter_write+0x747/0xc50 [ 192.517422][ T6975] ? vfs_iter_write+0xa0/0xa0 [ 192.522159][ T6975] ? rcu_read_lock_any_held+0xb4/0x140 [ 192.527752][ T6975] do_pwritev+0x242/0x3a0 [ 192.532119][ T6975] ? do_preadv+0x390/0x390 [ 192.536572][ T6975] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 192.542598][ T6975] ? lock_chain_count+0x20/0x20 [ 192.547520][ T6975] ? lockdep_hardirqs_on+0x98/0x150 [ 192.552760][ T6975] ? __x64_sys_pwritev2+0xbe/0x100 [ 192.558179][ T6975] do_syscall_64+0x55/0xb0 [ 192.562721][ T6975] ? clear_bhb_loop+0x40/0x90 [ 192.567464][ T6975] ? clear_bhb_loop+0x40/0x90 [ 192.572315][ T6975] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.578308][ T6975] RIP: 0033:0x7f504b79de99 [ 192.582775][ T6975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.603388][ T6975] RSP: 002b:00007f504c720028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 192.611870][ T6975] RAX: ffffffffffffffda RBX: 00007f504ba25fa0 RCX: 00007f504b79de99 [ 192.620140][ T6975] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000004 [ 192.628802][ T6975] RBP: 00007f504b833eaf R08: 0000000000000000 R09: 0000000000000000 [ 192.636814][ T6975] R10: 0000000000800e7b R11: 0000000000000246 R12: 0000000000000000 [ 192.645560][ T6975] R13: 00007f504ba26038 R14: 00007f504ba25fa0 R15: 00007ffc163cfe08 [ 192.653674][ T6975] [ 192.681922][ T2967] hfsplus: b-tree write err: -5, ino 25 [ 192.684611][ T6975] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4097 with max blocks 1 with error 28 [ 192.688173][ T2967] hfsplus: b-tree write err: -5, ino 4 [ 192.707147][ T2967] hfsplus: b-tree write err: -5, ino 2 [ 192.762782][ T6975] EXT4-fs (loop2): This should not happen!! Data will be lost [ 192.762782][ T6975] [ 192.766358][ T6981] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 192.792607][ T6981] EXT4-fs (loop2): This should not happen!! Data will be lost [ 192.792607][ T6981] [ 192.812147][ T6975] EXT4-fs (loop2): Total free blocks count 0 [ 192.825568][ T6975] EXT4-fs (loop2): Free/Dirty block details [ 192.832000][ T6975] EXT4-fs (loop2): free_blocks=4096 [ 192.837861][ T6975] EXT4-fs (loop2): dirty_blocks=32 [ 192.844305][ T6975] EXT4-fs (loop2): Block reservation details [ 194.685063][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.691742][ T1289] ieee802154 phy1 wpan1: encryption failed: -22