last executing test programs: 5m39.818989445s ago: executing program 0 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5m38.634593596s ago: executing program 0 (id=14): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000001f40)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES64, @ANYRES32], 0xfe, 0x1508, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) 5m38.044241427s ago: executing program 0 (id=17): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000680)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 5m35.662056991s ago: executing program 0 (id=24): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x8814a0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x143042, 0x34) open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0x17c) 5m34.892928251s ago: executing program 0 (id=26): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@nobh}, {@errors_continue}, {@nodelalloc}, {@barrier}]}, 0x21, 0xbd4, &(0x7f0000001500)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x2, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5m30.993606284s ago: executing program 0 (id=38): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@nombcache}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5m30.587887285s ago: executing program 32 (id=38): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@nombcache}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 5m3.761127782s ago: executing program 1 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) fsmount(0xffffffffffffffff, 0x0, 0x80) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 5m2.439107031s ago: executing program 1 (id=108): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x4, 0xaa, {0xaa, 0x30, "36e9c4866c0ab8b6e5d4a64a0fcf9b719fb6f8770d6f67b84df3f5ca8ce151c2d4ac304a3b063f4756a66055c1156a57935b01b67d5295ea7b07b049104d9b2d4ca325be3fea184e484ec818d6f8a6cd851dbcc1f1d3cb6d4b2b0abfab42357676c304aade7a612fc274546ba9b727f3879ed747366fdde41ccd6df0dd6c04c3051036e3826f41af14157a368e06412cc95e0f0f60ca351acfc7bc47fb8fa79e77a8a8525b992876"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m58.799840221s ago: executing program 1 (id=121): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x8c0002) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x4}) 4m57.701342498s ago: executing program 1 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4m56.553336927s ago: executing program 1 (id=126): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000007a40)=ANY=[@ANYBLOB="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"], 0xfd, 0x551b, &(0x7f0000000500)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESDEC=r0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4m52.689645419s ago: executing program 1 (id=138): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="ab8b2cbd7000002300000f00000004"], 0x18}, 0x1, 0x0, 0x0, 0x20048800}, 0x4044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='qse**?,\x00']) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setresuid(0xffffffffffffffff, 0xee01, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) syz_emit_ethernet(0x42, &(0x7f0000000300)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}]}}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @multicast1, @loopback}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) 4m37.640176823s ago: executing program 33 (id=138): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="ab8b2cbd7000002300000f00000004"], 0x18}, 0x1, 0x0, 0x0, 0x20048800}, 0x4044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='qse**?,\x00']) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setresuid(0xffffffffffffffff, 0xee01, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) syz_emit_ethernet(0x42, &(0x7f0000000300)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}]}}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @multicast1, @loopback}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) 17.885761411s ago: executing program 6 (id=900): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") socket(0x2b, 0x1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 17.358632338s ago: executing program 6 (id=902): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x7, 0x42}) 14.277809848s ago: executing program 6 (id=911): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x90) getdents64(r0, 0x0, 0x0) 13.165592656s ago: executing program 6 (id=917): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000240)={[{@norecovery}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@resgid}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x80, 0x8c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x432300c, 0x0, 0x21, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008040}, 0x4000000) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) 11.463593314s ago: executing program 4 (id=922): r0 = syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e5c5b110ff010000000000000dce64b67d4e7052a264b6607b7530"}}, &(0x7f00000005c0), 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x14, @string={0x14, 0x3, "d2a7c993ef2c435eeecdf8e32879569c6a9d"}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$pagemap(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b40)={0x30, 0x2e, 0x503, 0x70bd29, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x7, 0xb, 0x2}}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0xffa6}], 0x1}}], 0x1, 0x24044c45) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 10.38574887s ago: executing program 6 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) unshare(0x20000600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80), 0x1007, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r3, &(0x7f0000001b80), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 8.938588605s ago: executing program 3 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc", 0x7}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/218, 0xda) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x2c, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8, 0x1b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8.138024367s ago: executing program 2 (id=927): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003700), 0x400, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000f, 0x13, r0, 0x8000000) 7.797271325s ago: executing program 2 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0x0, 0x1, 0xc, 0x1}, 0x4, 0x46}, [{0x7, 0x7, 0x40, 0x3, 0x0, 0x1}, {0x3edee688, 0x0, 0xfffffffd, 0x10, 0x5c56b80f, 0x5}, {0x8, 0x4, 0x1, 0x6, 0xf, 0x8001}, {0x4, 0xffffffff, 0x0, 0x8000, 0xffff, 0x9}, {0x0, 0x7, 0xb, 0xffffff81, 0x7fff, 0x4}, {0x1000, 0x81, 0xcec4, 0x1, 0x1, 0x7f}, {0x401, 0x2, 0x8, 0xfffffff7, 0x0, 0x7}, {0x2, 0x1, 0x1000, 0x4, 0x9, 0xa}, {0x8, 0x2, 0xf3320, 0x80000000, 0x9, 0x8}, {0x5, 0x2, 0x5, 0x5, 0x80000001}, {0x3, 0x2, 0x5, 0x3, 0x2, 0x5}, {0xfffffff5, 0x5, 0x6, 0x3, 0x8, 0x200}, {0x0, 0x2, 0x1, 0xc, 0xc61, 0x4}, {0x4, 0x1, 0x2, 0x8, 0xdad, 0xae}, {0x9, 0x4, 0xfff, 0x0, 0x90400000}, {0x7267, 0xe, 0xffffffff, 0x4, 0x3, 0x5}, {0x10000, 0x6, 0x80, 0xfffffff7, 0x20000009, 0x4}, {0x0, 0x7, 0xfa, 0x6, 0x3a00, 0xfffffffe}, {0xa00, 0x9, 0x0, 0x6, 0x7fff, 0x7ff}, {0x42, 0x10, 0x7, 0x10001, 0x2a}, {0x1, 0x2, 0x7fffffff, 0x1, 0x3, 0x7f}, {0x6326e196, 0x200, 0x9, 0x1, 0x6, 0x7}, {0xc8, 0x1, 0x1, 0x8, 0x4, 0x1d}, {0x13f, 0xd, 0x7fff00, 0x7f, 0x7ff, 0xffff}, {0xe, 0x2, 0x2, 0x0, 0x8, 0x6}, {0x5, 0x3, 0x53, 0x4, 0x400000, 0x1}, {0x0, 0xfff, 0x40, 0xfffffffc, 0x6, 0xcb03}, {0x6, 0x0, 0x80000000, 0x5, 0x8, 0x101}, {0xffffffff, 0x7fff, 0x20000000, 0x0, 0x1, 0x8}, {0x625321fa, 0x101, 0x0, 0xe0000000, 0x2, 0x1}, {0x5, 0x8001, 0x7000, 0x7, 0x61ae, 0x80000000}, {0x2, 0x6, 0x5, 0x2, 0x7fffffff, 0x2}, {0x5, 0x2, 0x8, 0x1907, 0x2, 0x3}, {0x8, 0x2, 0x1, 0x1, 0xffff, 0x6}, {0x8, 0x7, 0x6, 0x3, 0x8, 0x6}, {0x2, 0x2, 0x1, 0x200, 0x5}, {0x6, 0x7, 0x7, 0x100, 0x4, 0x3}, {0x100, 0x2, 0x80000001, 0x10, 0xfffffffa, 0xf}, {0xa9, 0xd12, 0xffffffff, 0xa, 0x6, 0x1d}, {0x41, 0x6, 0x0, 0x3, 0x1000, 0x5}, {0x6, 0x800, 0x4, 0x7, 0x1, 0x8001}, {0x4, 0x2, 0xfc0, 0xf898, 0x8001, 0x6}, {0x1, 0x3e, 0x98, 0x0, 0x3ff, 0x101}, {0x3ff, 0x2, 0x6, 0xfffffffb, 0x3ff, 0xa}, {0x7, 0x2, 0x3135, 0x1, 0x9, 0xcf}, {0xfffffffd, 0xf, 0x0, 0x8, 0xebb, 0x4}, {0xc, 0x5, 0x1, 0x6, 0x8}, {0x9, 0x3, 0x4, 0x1, 0x1ff, 0x80000000}, {0x6, 0x7, 0x8b, 0xfb, 0x80, 0x6}, {0x9, 0x80000000, 0xffffffff, 0xfffffa84, 0x6, 0x7f}, {0x1, 0xb, 0xbc, 0x5c, 0x6, 0x5}, {0x7, 0xfe, 0x0, 0x8, 0x5, 0x10}, {0x8, 0x4, 0x4, 0xfffffffb, 0x200, 0xcff}, {0x2, 0x8, 0x7, 0x8, 0x9, 0x35}, {0x0, 0x9, 0x0, 0xa, 0x3, 0xfe}, {0x8, 0x3, 0x0, 0x3c86, 0x56a5, 0x5}, {0xe4, 0x47, 0xffff, 0xd0, 0x2, 0x80000001}, {0x0, 0xa, 0x62, 0x10000, 0x6, 0xfffffff8}, {0x3, 0x4, 0x8d47, 0x710, 0x3c70}, {0x40, 0x7f, 0xd0, 0x0, 0xff, 0x8}, {0x2, 0xacd, 0x75ad, 0x7, 0x9, 0xff}, {0x80, 0x6, 0x10001, 0x1ff, 0x81, 0x12}, {0x0, 0x7a53, 0x5, 0x7, 0x8, 0x3}, {0x7, 0x1000000, 0xfffffff8, 0x9, 0x8, 0x40}, {0xfffffffe, 0x0, 0x6, 0x7fff, 0x80000001, 0x40}, {0x588f, 0x5, 0x7, 0x10001, 0xffffffff, 0x1}, {0x8, 0x4, 0x1c, 0x6, 0x3e, 0x9}, {0x2, 0x7, 0x5, 0x3, 0x8, 0x3}, {0xc, 0xc, 0x1be, 0x8, 0x9, 0x3}, {0x0, 0x7, 0xd94, 0x7, 0x9, 0x2}, {0x4, 0x6, 0x4, 0x3, 0x7, 0xffff}, {0x7, 0xc27, 0x2, 0xc614, 0x5, 0x5}, {0x5, 0x9, 0x7, 0x9, 0x0, 0x4}, {0xbc7, 0x4, 0xf08b, 0x6, 0x9, 0x23}, {0x6, 0x2, 0x6f, 0xea78, 0x9925, 0xb6d}, {0x5, 0xc9, 0x4, 0x0, 0x89, 0x14}, {0x8, 0x3, 0x9da, 0x800, 0xfffffffc, 0xe7e8}, {0x10000, 0x40, 0x5, 0xd0, 0xa9, 0x47a8}, {0x8, 0x3ff, 0x4, 0x3, 0x0, 0x9}, {0x48, 0xc, 0x3ff, 0x4, 0x800, 0xe}, {0x4, 0x1, 0x3, 0x4, 0x1000, 0xda30}, {0x1, 0xffff, 0x8001, 0x98, 0xfffffff8, 0x7}, {0x81, 0x1, 0x2, 0x7, 0xbc9, 0x28000000}, {0x7, 0xada, 0x1, 0x6, 0xfffffffe, 0xb030}, {0x9f, 0x761, 0xf95c, 0x2, 0x86, 0x5}, {0xd3, 0xffff, 0x6, 0xc424, 0x9, 0x4}, {0x5, 0xffffff6e, 0x7fff, 0x3, 0xd, 0x2}, {0x621, 0x2, 0x0, 0x9, 0x3, 0x4854}, {0x3, 0x6, 0x8, 0x1, 0x9, 0xa72}, {0x5, 0x4, 0x6, 0xfffffffa, 0x9, 0x3}, {0x0, 0xfffffff8, 0x8, 0x320, 0x5}, {0x6, 0x3, 0x200, 0x6, 0x1ff, 0x8}, {0x7ff, 0x5, 0x4, 0x4, 0x5, 0x800}, {0xfa4a, 0x5, 0x6, 0xa, 0x5, 0x2}, {0x8, 0x7, 0x5, 0x2, 0x6, 0x80000001}, {0x2, 0xa, 0x2, 0x7, 0x4, 0x5}, {0x9, 0x7, 0x4, 0x9eb, 0xa, 0x8}, {0x2, 0x4, 0x7, 0xffffffff, 0x3, 0x401}, {0x3ff, 0x2, 0x8, 0x3ff, 0xfffffffb, 0x1}, {0x0, 0x0, 0x0, 0xfffff55e, 0x8, 0x6}, {0x1, 0x7fff, 0x8, 0x4, 0x7ff, 0x6}, {0x8, 0x0, 0x0, 0xfffffffd, 0xfff, 0x40}, {0x9, 0x1, 0xa792, 0x5, 0x1ff}, {0xd94b, 0x5, 0x2, 0xff, 0x4f, 0x7ff}, {0xdbc, 0x80000000, 0x5d, 0x3, 0xfffffffc}, {0x8, 0x3, 0x67, 0x8, 0xbdf, 0xf7}, {0x4c0f, 0xfff, 0x0, 0xb, 0x8, 0x100}, {0x400, 0x9, 0x0, 0x4, 0x9, 0x1b}, {0x48fd4449, 0x2, 0x5, 0x4, 0x7f, 0xfffffffc}, {0x7ff, 0x5, 0x3, 0x5c93, 0xc, 0x6}, {0x8, 0x2c2d000, 0x9, 0x2, 0x1, 0x2}, {0xffffffff, 0x8076, 0x7f, 0xffffffc0, 0x7, 0x8001}, {0x0, 0x1, 0x7, 0x200, 0x5}, {0x78, 0x2d, 0x4, 0x4, 0x80000001, 0xe9}, {0x0, 0x6, 0x0, 0x255c, 0x9, 0x1000}, {0x200000, 0x200, 0x6, 0xfffffffd, 0x0, 0x6}, {0x77b, 0x0, 0x2, 0x1e8a, 0x1a, 0x4}, {0x1000, 0x4, 0x0, 0x2, 0x0, 0x1}, {0x7ff, 0x5, 0x5, 0x6, 0x6, 0x2000009}, {0x4, 0x800, 0xea2, 0x8000, 0x0, 0x40}, {0x9, 0x200, 0x539, 0x1, 0xb, 0x7}, {0x2, 0x2, 0x87, 0x7, 0xfffffffe, 0x1}, {0x1e7, 0x2, 0x6, 0x9bb, 0x3, 0x7}, {0x7, 0x3ff, 0xe322, 0x2, 0x4, 0xc}, {0xfffffffa, 0x2, 0x93, 0xfffffffa, 0x10001, 0x40}, {0x7, 0x9bc, 0x800, 0x9, 0x7, 0x3851}, {0xfffffffe, 0x101, 0x3, 0x1, 0x7, 0x4}, {0x5, 0x0, 0xb0, 0xa, 0x5, 0x5}], [{0x4}, {0x3}, {0x2}, {0x3}, {}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x6}, {0x0, 0x1}, {0x7}, {0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x2}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x5}, {}, {0x3, 0x1}, {0x3}, {0x4}, {}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {}, {0x5}, {0x1}, {}, {}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x4}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0xd9d493184d3ac47}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0xc49612a26cceaca7}, {0x0, 0xa5bbafc9e2acde54}, {0x5, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 7.137091958s ago: executing program 5 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) writev(r4, &(0x7f00000000c0), 0x0) 7.076951652s ago: executing program 6 (id=932): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000700)=0x5, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 5.913596433s ago: executing program 5 (id=933): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000240)={[{@norecovery}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@resgid}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x80, 0x8c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40001, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008040}, 0x4000000) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) 5.913138583s ago: executing program 2 (id=934): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x7, 0x42}) 5.696512994s ago: executing program 4 (id=935): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/4089, 0xff9}], 0x1) 5.675252155s ago: executing program 3 (id=936): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x0, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xa, 0x1, 0x4, 0xfffd, 0x0, "13b911e5284250ec81c17349113a3cfb44cacec1b17c5169103aa911ccde13af46942ffe283747525f02c26cacacf4224636c02166494a749e5e3abbd96793dd"}}}, {{@arp={@private=0xa010102, @private=0xa010101, 0xffffff00, 0xff000000, 0x1, 0x5, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x54, 0x9, 0xf9cf, 0x2, 0x6ef4, 0x8, 'gre0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @empty, @private=0xa010101, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0x328}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) 5.427059557s ago: executing program 3 (id=937): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 4.61560694s ago: executing program 5 (id=938): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x60}, 0xc001) 4.488472316s ago: executing program 3 (id=939): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x80000, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x3, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r6, r7+60000000}, {r4, r5+60000000}}, 0x0) fchmod(r0, 0x110) syz_usb_connect(0x3, 0x64, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x0) 4.22576759s ago: executing program 5 (id=940): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000c80)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@nodelalloc}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.574348458s ago: executing program 4 (id=941): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x13, "71feaf33432ed6fe90107884be157e88b3e578"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.395503107s ago: executing program 2 (id=942): socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a5"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 1.257818664s ago: executing program 5 (id=943): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x6) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3, 0xfff}, 0x8) 951.14418ms ago: executing program 3 (id=944): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0x0, 0x1) 913.891692ms ago: executing program 4 (id=945): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @local}, 0x1c) 709.586233ms ago: executing program 3 (id=946): r0 = syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "e5c5b110ff010000000000000dce64b67d4e7052a264b6607b7530"}}, &(0x7f00000005c0), 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x14, @string={0x14, 0x3, "d2a7c993ef2c435eeecdf8e32879569c6a9d"}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_procfs$pagemap(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000b40)={0x30, 0x2e, 0x503, 0x70bd29, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x10, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x8, 0x7, 0xb, 0x2}}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="a4", 0xffa6}], 0x1}}], 0x1, 0x24044c45) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 709.066823ms ago: executing program 2 (id=947): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x0) 632.446577ms ago: executing program 4 (id=948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 467.814336ms ago: executing program 4 (id=949): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x10, 0xbf7, 0x2000402) 362.362781ms ago: executing program 2 (id=950): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400)=""/75, 0x4b) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 0s ago: executing program 5 (id=951): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103000905010200000000000905820200"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/4089, 0xff9}], 0x1) kernel console output (not intermixed with test programs): : set [1, 0] type 2 family 0 port 6081 - 0 [ 174.828211][ T5107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.881612][ T5107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.908783][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.936278][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.958714][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.986361][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.036185][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.057282][ T4862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.050046][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.133922][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.339752][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.950459][ T4654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.305478][ T4654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.477143][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 178.544093][ T5474] loop2: detected capacity change from 0 to 512 [ 178.585636][ T5474] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 178.594143][ T5474] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: comm syz.2.262: inode #1792: comm syz.2.262: iget: illegal inode # [ 178.686338][ T5474] EXT4-fs (loop2): Remounting filesystem read-only [ 178.692958][ T5474] EXT4-fs (loop2): no journal found [ 178.784532][ T5474] EXT4-fs (loop2): can't get journal size [ 178.839855][ T5474] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 179.044387][ T5474] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 179.063547][ T5474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 180.117827][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 180.372304][ T5503] overlayfs: failed to resolve './file0': -2 [ 180.605162][ T4318] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 182.527131][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.550769][ T4318] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 182.610193][ T4318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.624372][ T4318] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 182.655275][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.696673][ T4318] usb 3-1: config 0 descriptor?? [ 182.704945][ T4318] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 182.843486][ T5528] loop4: detected capacity change from 0 to 2048 [ 183.897728][ T5528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 183.971963][ T5528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 184.015104][ T5528] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 184.069535][ T5528] EXT4-fs (loop4): This should not happen!! Data will be lost [ 184.069535][ T5528] [ 184.089115][ T5528] EXT4-fs (loop4): Total free blocks count 0 [ 184.118737][ T5528] EXT4-fs (loop4): Free/Dirty block details [ 184.160599][ T5528] EXT4-fs (loop4): free_blocks=4096 [ 184.190843][ T5528] EXT4-fs (loop4): dirty_blocks=48 [ 184.211591][ T5528] EXT4-fs (loop4): Block reservation details [ 184.231849][ T5528] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 184.344453][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 184.821043][ T5555] loop6: detected capacity change from 0 to 4096 [ 184.948973][ T5555] EXT4-fs: inline encryption not supported [ 185.168182][ T5555] EXT4-fs (loop6): Test dummy encryption mode enabled [ 185.276785][ T5555] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 185.281960][ T4311] usb 3-1: USB disconnect, device number 11 [ 185.313878][ T5555] System zones: 0-5 [ 185.386966][ T5555] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 185.551244][ T5568] syz.4.284 uses obsolete (PF_INET,SOCK_PACKET) [ 185.655448][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 186.655366][ T4311] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.218059][ T4311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.232271][ T4311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.334225][ T5592] netlink: 'syz.5.293': attribute type 10 has an invalid length. [ 187.382060][ T4311] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.957812][ T4311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 187.995380][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 188.025409][ T4311] usb 3-1: Product: syz [ 188.029668][ T4311] usb 3-1: Manufacturer: syz [ 188.034307][ T4311] usb 3-1: SerialNumber: syz [ 189.066436][ T4311] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 189.081618][ T4311] usb 3-1: USB disconnect, device number 12 [ 189.090469][ T4311] usblp0: removed [ 189.221183][ T4312] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 189.418278][ T4312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.448176][ T4312] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.475317][ T4312] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.530212][ T4312] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.562944][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.593382][ T4312] usb 4-1: Product: syz [ 189.597952][ T4312] usb 4-1: Manufacturer: syz [ 189.602607][ T4312] usb 4-1: SerialNumber: syz [ 190.100767][ T4312] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 190.123615][ T4312] cdc_ncm 4-1:1.0: bind() failure [ 190.156482][ T5601] loop6: detected capacity change from 0 to 40427 [ 190.168438][ T4312] usb 4-1: USB disconnect, device number 14 [ 190.271528][ T5601] F2FS-fs (loop6): invalid crc value [ 190.307852][ T5601] F2FS-fs (loop6): Found nat_bits in checkpoint [ 190.320639][ T5606] loop2: detected capacity change from 0 to 40427 [ 190.377375][ T5606] F2FS-fs (loop2): invalid crc value [ 190.404735][ T5606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.557487][ T5601] F2FS-fs (loop6): Start checkpoint disabled! [ 190.649395][ T5606] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 190.666241][ T5601] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 190.732452][ T5606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 190.911641][ T5601] F2FS-fs (loop6): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 190.925420][ T5606] syz.2.297: attempt to access beyond end of device [ 190.925420][ T5606] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 190.959971][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 190.960022][ T26] audit: type=1804 audit(1776727403.099:37): pid=5642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.295" name="/newroot/7/file1/file1" dev="loop6" ino=10 res=1 errno=0 [ 191.208135][ T4617] kworker/u4:14: attempt to access beyond end of device [ 191.208135][ T4617] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.285475][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 191.291571][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 191.297706][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 192.362097][ T5658] loop2: detected capacity change from 0 to 512 [ 192.427211][ T5653] ipt_CLUSTERIP: Please specify destination IP [ 192.830810][ T5658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.990355][ T5658] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.323795][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.332407][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.434738][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 195.404801][ T5695] loop2: detected capacity change from 0 to 512 [ 195.437539][ T5695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.623670][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 197.564856][ T4315] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 197.982489][ T5723] loop2: detected capacity change from 0 to 512 [ 197.997011][ T4315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.008252][ T4315] usb 5-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.021593][ T4315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.028661][ T4315] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 198.093116][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.119716][ T4315] usb 5-1: config 0 descriptor?? [ 198.124387][ T5723] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.141445][ T4315] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 198.166352][ T5723] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.378299][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 200.035900][ T4315] usb 5-1: USB disconnect, device number 12 [ 204.444578][ T5773] loop6: detected capacity change from 0 to 512 [ 204.888418][ T5773] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 205.006530][ T5773] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 205.112343][ T5781] loop2: detected capacity change from 0 to 512 [ 205.162333][ T5773] EXT4-fs (loop6): 1 truncate cleaned up [ 205.205300][ T5773] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 205.216214][ T5781] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 205.395595][ T26] audit: type=1800 audit(1776727417.509:38): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.335" name=05 dev="loop6" ino=18 res=0 errno=0 [ 205.460457][ T5781] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 205.487970][ T5781] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.336: corrupted inode contents [ 205.554545][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 205.564093][ T5781] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.336: mark_inode_dirty error [ 205.629559][ T5781] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.336: invalid indirect mapped block 1 (level 1) [ 205.713152][ T5781] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.336: corrupted inode contents [ 205.762957][ T5781] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 205.793929][ T5781] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.336: corrupted inode contents [ 205.920970][ T5781] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.336: mark_inode_dirty error [ 206.182340][ T5781] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 206.240968][ T5781] EXT4-fs (loop2): 1 truncate cleaned up [ 206.271517][ T5781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.816958][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 208.815373][ T4315] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 209.007838][ T4315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.031518][ T5840] netlink: 'syz.5.351': attribute type 10 has an invalid length. [ 209.039822][ T4315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.065294][ T4315] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.110105][ T4315] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.140503][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.166866][ T4315] usb 7-1: config 0 descriptor?? [ 209.242362][ T5843] netlink: 68 bytes leftover after parsing attributes in process `syz.5.352'. [ 209.790154][ T4315] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 210.214011][ T4315] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 210.331379][ T4315] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 210.473002][ T4315] usb 7-1: USB disconnect, device number 2 [ 210.657031][ T5854] loop3: detected capacity change from 0 to 512 [ 210.708419][ T5854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.796591][ T5854] EXT4-fs (loop3): 1 truncate cleaned up [ 210.802495][ T5854] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 211.052374][ T5859] fido_id[5859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 211.067074][ T26] audit: type=1800 audit(1776727423.189:39): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.355" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 211.245136][ T26] audit: type=1800 audit(1776727423.189:40): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.355" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 211.765011][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 212.097238][ T5882] loop3: detected capacity change from 0 to 512 [ 212.209355][ T5882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.360: missing EA_INODE flag [ 212.373727][ T5882] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.360: error while reading EA inode 12 err=-117 [ 212.428936][ T5882] EXT4-fs (loop3): 1 orphan inode deleted [ 212.458603][ T5882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 212.841981][ T5902] tmpfs: Unknown parameter '' [ 213.512320][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 213.749031][ T5910] loop6: detected capacity change from 0 to 256 [ 213.753139][ T5912] netlink: 68 bytes leftover after parsing attributes in process `syz.3.364'. [ 213.887917][ T5910] FAT-fs (loop6): Directory bread(block 64) failed [ 213.914352][ T5910] FAT-fs (loop6): Directory bread(block 65) failed [ 213.952045][ T5910] FAT-fs (loop6): Directory bread(block 66) failed [ 214.000060][ T5910] FAT-fs (loop6): Directory bread(block 67) failed [ 214.051063][ T5910] FAT-fs (loop6): Directory bread(block 68) failed [ 214.087807][ T5910] FAT-fs (loop6): Directory bread(block 69) failed [ 214.110247][ T5910] FAT-fs (loop6): Directory bread(block 70) failed [ 214.138983][ T5910] FAT-fs (loop6): Directory bread(block 71) failed [ 214.145284][ T4340] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.157845][ T5910] FAT-fs (loop6): Directory bread(block 72) failed [ 214.200754][ T5910] FAT-fs (loop6): Directory bread(block 73) failed [ 214.338942][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.373568][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.408143][ T4340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.459586][ T4340] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.494660][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.542137][ T4340] usb 3-1: config 0 descriptor?? [ 215.058023][ T4340] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 215.114460][ T5931] Illegal XDP return value 4294967274 on prog (id 11) dev syz_tun, expect packet loss! [ 215.367450][ T4340] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 215.639516][ T4340] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 215.698347][ T4340] usb 3-1: USB disconnect, device number 13 [ 215.904845][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 216.059415][ T5938] loop6: detected capacity change from 0 to 16 [ 216.101481][ T5938] erofs: (device loop6): mounted with root inode @ nid 36. [ 216.315637][ T4340] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.505339][ T4340] usb 3-1: Using ep0 maxpacket: 32 [ 216.512831][ T4340] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 216.538637][ T4340] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 216.580439][ T4340] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 216.619243][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.670049][ T4340] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.700301][ T4340] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 216.749776][ T4340] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 216.773930][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.814953][ T4340] usb 3-1: config 0 descriptor?? [ 216.885389][ T4271] Bluetooth: hci1: command 0x0406 tx timeout [ 217.066565][ T4340] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 217.128187][ T4340] usb 3-1: USB disconnect, device number 14 [ 217.152056][ T4340] usblp0: removed [ 217.230193][ T5956] loop6: detected capacity change from 0 to 512 [ 217.322184][ T5956] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.376: missing EA_INODE flag [ 217.357028][ T5956] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.376: error while reading EA inode 12 err=-117 [ 217.371023][ T5956] EXT4-fs (loop6): 1 orphan inode deleted [ 217.383784][ T5956] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 217.763710][ T5966] loop3: detected capacity change from 0 to 256 [ 217.862177][ T5967] tmpfs: Unknown parameter '' [ 218.489571][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 218.532377][ T5973] loop4: detected capacity change from 0 to 512 [ 218.546218][ T5973] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.663864][ T5973] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.382: corrupted xattr entries [ 218.776645][ T5973] EXT4-fs (loop4): 1 truncate cleaned up [ 218.825776][ T5973] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 218.951705][ T5985] loop2: detected capacity change from 0 to 512 [ 219.863789][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 219.900551][ T5985] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 220.090991][ T5985] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 220.107695][ T6000] loop3: detected capacity change from 0 to 512 [ 220.117977][ T5985] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.385: corrupted inode contents [ 220.172559][ T5985] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.385: mark_inode_dirty error [ 220.365595][ T5985] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.385: invalid indirect mapped block 1 (level 1) [ 220.429523][ T5985] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.385: corrupted inode contents [ 220.458911][ T6000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 220.466443][ T5985] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 220.487503][ T6000] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.520657][ T5985] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.385: corrupted inode contents [ 220.543190][ T5985] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.385: mark_inode_dirty error [ 220.724375][ T5985] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 221.029127][ T5985] EXT4-fs (loop2): 1 truncate cleaned up [ 221.203849][ T5985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 221.525681][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 221.738953][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 221.905554][ T6025] loop2: detected capacity change from 0 to 512 [ 221.953337][ T6025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.394: missing EA_INODE flag [ 222.010216][ T6025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.394: error while reading EA inode 12 err=-117 [ 222.022765][ T4312] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 222.065837][ T6025] EXT4-fs (loop2): 1 orphan inode deleted [ 222.071816][ T6025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.215312][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 222.222678][ T4312] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 222.265315][ T4312] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 222.344375][ T4312] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 222.377112][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.458123][ T6044] tmpfs: Unknown parameter '' [ 223.022479][ T6048] loop4: detected capacity change from 0 to 512 [ 223.090996][ T6048] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.110885][ T4312] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.121614][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.123998][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 223.135156][ T4312] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.149830][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.164645][ T4312] usb 4-1: config 0 descriptor?? [ 223.181132][ T6048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.267967][ T6048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.274968][ T6052] loop6: detected capacity change from 0 to 512 [ 223.333986][ T6048] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 223.343603][ T6052] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 223.356124][ T6048] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.385396][ T6052] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.427311][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.465956][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.497140][ T4312] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 223.543751][ T4312] usb 4-1: USB disconnect, device number 15 [ 223.602748][ T4312] usblp0: removed [ 223.635078][ T6064] loop2: detected capacity change from 0 to 512 [ 223.714082][ T6064] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 223.789908][ T6064] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 223.816775][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 223.838859][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 223.851594][ T6064] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.405: corrupted inode contents [ 223.867439][ T6064] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.405: mark_inode_dirty error [ 223.946468][ T6064] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.405: invalid indirect mapped block 1 (level 1) [ 223.993896][ T6064] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.405: corrupted inode contents [ 224.079029][ T6064] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 224.276083][ T6064] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.405: corrupted inode contents [ 224.308925][ T6064] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.405: mark_inode_dirty error [ 224.324539][ T6064] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 224.334837][ T6064] EXT4-fs (loop2): 1 truncate cleaned up [ 224.341887][ T6064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.587019][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 226.273352][ T6110] loop4: detected capacity change from 0 to 512 [ 226.344504][ T6110] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 226.462416][ T6110] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 226.501449][ T6110] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.420: corrupted inode contents [ 226.525054][ T6110] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #11: comm syz.4.420: mark_inode_dirty error [ 226.543361][ T6110] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.420: invalid indirect mapped block 1 (level 1) [ 226.568415][ T6120] loop6: detected capacity change from 0 to 512 [ 226.625446][ T6110] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.420: corrupted inode contents [ 226.669663][ T6120] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 226.716740][ T6110] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 226.744619][ T6110] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.420: corrupted inode contents [ 226.831689][ T6110] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.420: mark_inode_dirty error [ 226.912918][ T6110] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 226.942047][ T4310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 226.973260][ T6110] EXT4-fs (loop4): 1 truncate cleaned up [ 226.989502][ T6110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.016376][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 227.203425][ T4310] usb 4-1: Using ep0 maxpacket: 32 [ 227.210774][ T4310] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 227.234216][ T4310] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 227.437503][ T4310] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 227.447422][ T4310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.457984][ T4310] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.467923][ T4310] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 227.481381][ T4310] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 227.490722][ T4310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.521007][ T4310] usb 4-1: config 0 descriptor?? [ 227.534284][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 227.666487][ T6140] loop2: detected capacity change from 0 to 512 [ 227.732879][ T6141] loop4: detected capacity change from 0 to 2048 [ 227.737168][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.803727][ T6141] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.814889][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.913396][ T4310] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 227.941880][ T4310] usb 4-1: USB disconnect, device number 16 [ 227.951237][ T4310] usblp0: removed [ 227.955124][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 229.888214][ T4318] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 230.284085][ T4318] usb 3-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.309670][ T4318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.316741][ T4318] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 230.326542][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.337024][ T4318] usb 3-1: config 0 descriptor?? [ 230.736979][ T4318] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 231.645341][ T4310] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 231.835320][ T4310] usb 5-1: Using ep0 maxpacket: 32 [ 231.842791][ T4310] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 231.976448][ T4310] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 231.985142][ T4310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 231.994566][ T4310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.999061][ T6217] loop6: detected capacity change from 0 to 512 [ 232.005041][ T4310] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 232.048855][ T4310] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 232.083819][ T6217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.111805][ T4310] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 232.141346][ T6217] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 232.145250][ T4310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.185041][ T4311] usb 3-1: USB disconnect, device number 15 [ 232.208844][ T6217] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 232.216070][ T4310] usb 5-1: config 0 descriptor?? [ 232.275330][ T6217] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 232.336697][ T6217] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 232.353529][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'. [ 232.422375][ T6217] EXT4-fs (loop6): orphan cleanup on readonly fs [ 232.488690][ T6202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.497792][ T6202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.121314][ T4310] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 233.190612][ T6217] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.447: bg 0: block 34: padding at end of block bitmap is not set [ 233.269730][ T6217] Quota error (device loop6): write_blk: dquota write failed [ 233.465984][ T6217] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 233.541414][ T6217] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.447: Failed to acquire dquot type 1 [ 233.600991][ T4310] usb 5-1: USB disconnect, device number 13 [ 233.610354][ T4310] usblp0: removed [ 233.671030][ T6217] EXT4-fs (loop6): 1 truncate cleaned up [ 233.736807][ T6217] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 234.148572][ T6245] loop3: detected capacity change from 0 to 128 [ 234.283388][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.5.459'. [ 234.418851][ T6245] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.512198][ T6245] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.693438][ T6256] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.447: deleted inode referenced: 12 [ 235.335626][ T6245] EXT4-fs (loop3): shut down requested (2) [ 235.474680][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 235.554861][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 235.774852][ T6269] netlink: 104 bytes leftover after parsing attributes in process `syz.3.463'. [ 235.965408][ T4310] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 236.391946][ T4310] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.511551][ T4310] usb 7-1: config 0 interface 0 has no altsetting 0 [ 236.727879][ T4310] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 236.924877][ T4310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.018721][ T4310] usb 7-1: config 0 descriptor?? [ 237.020997][ T6288] loop4: detected capacity change from 0 to 512 [ 237.053367][ T6286] binder: BINDER_SET_CONTEXT_MGR already set [ 237.071961][ T4310] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 237.088527][ T6286] binder: 6285:6286 ioctl 4018620d 200000004a80 returned -16 [ 237.101439][ T6288] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 237.144054][ T6288] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 237.198669][ T6288] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.469: corrupted inode contents [ 237.211527][ T6288] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #11: comm syz.4.469: mark_inode_dirty error [ 237.255677][ T6288] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.469: invalid indirect mapped block 1 (level 1) [ 237.354538][ T6288] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.469: corrupted inode contents [ 237.400676][ T6288] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 237.420760][ T6288] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.469: corrupted inode contents [ 237.423015][ T6301] device geneve2 entered promiscuous mode [ 237.452239][ T6288] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.469: mark_inode_dirty error [ 237.481019][ T6288] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 237.510811][ T6288] EXT4-fs (loop4): 1 truncate cleaned up [ 237.533837][ T6288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 237.731298][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 239.096220][ T126] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 239.170954][ T4311] usb 7-1: USB disconnect, device number 3 [ 239.301238][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.350363][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.391680][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.423735][ T126] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.445236][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.463398][ T126] usb 3-1: config 0 descriptor?? [ 239.623782][ T6343] loop6: detected capacity change from 0 to 512 [ 239.745553][ T6343] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.485: missing EA_INODE flag [ 239.769140][ T6343] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.485: error while reading EA inode 12 err=-117 [ 239.881083][ T6343] EXT4-fs (loop6): 1 orphan inode deleted [ 239.905440][ T6343] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 239.918500][ T126] usbhid 3-1:0.0: can't add hid device: -71 [ 239.924705][ T126] usbhid: probe of 3-1:0.0 failed with error -71 [ 239.970130][ T126] usb 3-1: USB disconnect, device number 16 [ 240.290921][ T6356] tmpfs: Unknown parameter '' [ 240.982909][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 241.302316][ T6364] loop2: detected capacity change from 0 to 512 [ 241.421723][ T6364] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 241.708915][ T6364] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 241.748102][ T6364] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.488: corrupted inode contents [ 241.797003][ T6364] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.488: mark_inode_dirty error [ 241.902001][ T6364] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.488: invalid indirect mapped block 1 (level 1) [ 241.933023][ T6364] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.488: corrupted inode contents [ 241.993093][ T6364] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 242.002568][ T6364] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.488: corrupted inode contents [ 242.025445][ T6364] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.488: mark_inode_dirty error [ 242.045559][ T126] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 242.056238][ T6364] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 242.090597][ T6364] EXT4-fs (loop2): 1 truncate cleaned up [ 242.107103][ T6364] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 242.250989][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 242.264632][ T126] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.395376][ T126] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.402116][ T126] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 242.433378][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.481132][ T126] usb 4-1: config 0 descriptor?? [ 242.569727][ T126] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 242.833536][ T6396] loop6: detected capacity change from 0 to 512 [ 242.951419][ T6396] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.499: inode has both inline data and extents flags [ 242.975375][ T4340] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.036886][ T6396] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.499: couldn't read orphan inode 15 (err -117) [ 243.123554][ T6396] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 243.177265][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.232615][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.345903][ T4340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.445698][ T4340] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.511175][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.607715][ T4340] usb 5-1: config 0 descriptor?? [ 243.703280][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 244.084584][ T4340] usbhid 5-1:0.0: can't add hid device: -71 [ 244.092173][ T4340] usbhid: probe of 5-1:0.0 failed with error -71 [ 244.118290][ T4340] usb 5-1: USB disconnect, device number 14 [ 244.202641][ T6405] tmpfs: Unknown parameter '' [ 244.664988][ T6408] device ipip0 entered promiscuous mode [ 244.884552][ T4312] usb 4-1: USB disconnect, device number 17 [ 245.885498][ T4254] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 246.157031][ T4254] usb 7-1: device descriptor read/64, error -71 [ 246.221787][ T6425] loop4: detected capacity change from 0 to 512 [ 246.305909][ T6425] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 246.526645][ T6425] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 246.582062][ T4254] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 246.589992][ T6425] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.507: corrupted inode contents [ 246.635503][ T6425] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #11: comm syz.4.507: mark_inode_dirty error [ 246.659497][ T6425] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.507: invalid indirect mapped block 1 (level 1) [ 246.765359][ T6425] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.507: corrupted inode contents [ 246.801934][ T6425] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 246.833031][ T6425] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.507: corrupted inode contents [ 246.877221][ T4254] usb 7-1: device descriptor read/64, error -71 [ 246.893753][ T6425] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.507: mark_inode_dirty error [ 246.921011][ T6425] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 246.951024][ T6425] EXT4-fs (loop4): 1 truncate cleaned up [ 246.959385][ T6425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 246.997758][ T4254] usb usb7-port1: attempt power cycle [ 247.263355][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 247.415262][ T4254] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 247.456157][ T4254] usb 7-1: device descriptor read/8, error -71 [ 247.870091][ T4254] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 247.916293][ T4254] usb 7-1: device descriptor read/8, error -71 [ 247.989858][ T6456] tmpfs: Unknown parameter '' [ 248.045795][ T4254] usb usb7-port1: unable to enumerate USB device [ 248.516974][ T4254] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 248.757344][ T4254] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.793323][ T4254] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.822720][ T4254] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 248.861991][ T4254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.894326][ T4254] usb 5-1: config 0 descriptor?? [ 248.934785][ T6463] loop3: detected capacity change from 0 to 512 [ 248.949058][ T4254] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 249.023539][ T6463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.079011][ T6463] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 249.118295][ T6463] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 249.414940][ T6463] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 250.062198][ T6463] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 250.162426][ T6463] EXT4-fs (loop3): orphan cleanup on readonly fs [ 250.170905][ T6463] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.518: bg 0: block 34: padding at end of block bitmap is not set [ 250.186225][ T6463] Quota error (device loop3): write_blk: dquota write failed [ 250.193825][ T6463] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 250.296446][ T6463] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.518: Failed to acquire dquot type 1 [ 250.410664][ T6463] EXT4-fs (loop3): 1 truncate cleaned up [ 250.458088][ T6463] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 250.980080][ T6496] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.518: deleted inode referenced: 12 [ 251.438611][ T128] usb 5-1: USB disconnect, device number 15 [ 251.447512][ T6499] autofs4:pid:6499:autofs_fill_super: called with bogus options [ 251.580737][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 251.927613][ T6512] loop2: detected capacity change from 0 to 512 [ 252.108376][ T6512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.529: missing EA_INODE flag [ 252.591244][ T6512] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.529: error while reading EA inode 12 err=-117 [ 252.625795][ T6512] EXT4-fs (loop2): 1 orphan inode deleted [ 252.631636][ T6512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 253.000466][ T6525] tmpfs: Unknown parameter '' [ 253.484251][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 254.203433][ T6556] loop2: detected capacity change from 0 to 512 [ 254.331537][ T6556] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.539: missing EA_INODE flag [ 254.424686][ T6556] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.539: error while reading EA inode 12 err=-117 [ 254.495589][ T126] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 254.507155][ T6556] EXT4-fs (loop2): 1 orphan inode deleted [ 254.544469][ T6556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 254.727042][ T126] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 254.755523][ T126] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.789508][ T126] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.809761][ T126] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 254.835856][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.870592][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 254.877839][ T126] usb 7-1: config 0 descriptor?? [ 255.201165][ T6579] loop2: detected capacity change from 0 to 512 [ 255.252699][ T6577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.542'. [ 255.760719][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769637][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.124020][ T126] usbhid 7-1:0.0: can't add hid device: -71 [ 256.130965][ T126] usbhid: probe of 7-1:0.0 failed with error -71 [ 256.139071][ T126] usb 7-1: USB disconnect, device number 8 [ 256.145646][ T6579] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.544: missing EA_INODE flag [ 256.184798][ T6579] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.544: error while reading EA inode 12 err=-117 [ 256.230251][ T6579] EXT4-fs (loop2): 1 orphan inode deleted [ 256.267443][ T6579] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.672806][ T6592] tmpfs: Unknown parameter '' [ 257.277703][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 257.345416][ T126] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 257.506735][ T126] usb 5-1: device descriptor read/64, error -71 [ 258.705414][ T126] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 258.865445][ T126] usb 5-1: device descriptor read/64, error -71 [ 258.995627][ T126] usb usb5-port1: attempt power cycle [ 259.677616][ T128] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 262.940636][ T4312] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 264.781151][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.797622][ T4312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.812321][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.831777][ T4312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.862170][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.884694][ T4312] usb 4-1: config 0 descriptor?? [ 265.319113][ T4312] usbhid 4-1:0.0: can't add hid device: -71 [ 265.331230][ T4312] usbhid: probe of 4-1:0.0 failed with error -71 [ 265.340703][ T4312] usb 4-1: USB disconnect, device number 18 [ 267.627306][ T6670] tipc: Enabling of bearer rejected, failed to enable media [ 267.928171][ T6689] netlink: 68 bytes leftover after parsing attributes in process `syz.6.567'. [ 268.085608][ T4271] Bluetooth: hci5: command 0x0406 tx timeout [ 268.157473][ T6686] device syzkaller0 entered promiscuous mode [ 269.133638][ T6706] loop4: detected capacity change from 0 to 512 [ 269.337322][ T6706] Quota error (device loop4): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 269.372223][ T6706] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 269.466424][ T6706] EXT4-fs (loop4): mount failed [ 270.923350][ T6723] loop3: detected capacity change from 0 to 512 [ 270.956374][ T6723] EXT4-fs: Ignoring removed orlov option [ 270.992589][ T6723] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 271.055820][ T6723] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.574: corrupted in-inode xattr [ 271.172857][ T6723] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.574: couldn't read orphan inode 15 (err -117) [ 271.224791][ T6723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 271.836294][ T6734] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.574: corrupted in-inode xattr [ 272.291731][ T6738] loop4: detected capacity change from 0 to 512 [ 272.361125][ T6738] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 272.450910][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 272.451464][ T6738] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 272.609632][ T6738] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.575: corrupted inode contents [ 272.699654][ T6738] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #11: comm syz.4.575: mark_inode_dirty error [ 272.767267][ T6738] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.575: invalid indirect mapped block 1 (level 1) [ 272.824485][ T6738] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.575: corrupted inode contents [ 272.884947][ T6738] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 272.934093][ T6738] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #11: comm syz.4.575: corrupted inode contents [ 272.983117][ T6738] EXT4-fs error (device loop4): ext4_truncate:4325: inode #11: comm syz.4.575: mark_inode_dirty error [ 273.087158][ T6738] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 273.129923][ T6738] EXT4-fs (loop4): 1 truncate cleaned up [ 273.137509][ T6738] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 273.247818][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 275.015308][ T6746] tipc: Enabling of bearer rejected, failed to enable media [ 275.444639][ T6764] loop6: detected capacity change from 0 to 512 [ 275.629960][ T6764] Quota error (device loop6): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 275.679525][ T6764] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 275.704334][ T6764] EXT4-fs (loop6): mount failed [ 275.954031][ T4315] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 276.115467][ T4315] usb 4-1: device descriptor read/64, error -71 [ 276.445425][ T4315] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 276.615316][ T4315] usb 4-1: device descriptor read/64, error -71 [ 276.736693][ T4315] usb usb4-port1: attempt power cycle [ 276.739364][ T6787] loop2: detected capacity change from 0 to 512 [ 276.884579][ T6787] EXT4-fs: Ignoring removed orlov option [ 276.899605][ T6787] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 276.967889][ T6787] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.588: corrupted in-inode xattr [ 277.015925][ T6787] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.588: couldn't read orphan inode 15 (err -117) [ 277.030907][ T6787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 277.175304][ T4315] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 277.255761][ T4315] usb 4-1: device descriptor read/8, error -71 [ 277.647638][ T4315] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 277.693292][ T6803] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.588: corrupted in-inode xattr [ 277.953678][ T4315] usb 4-1: device descriptor read/8, error -71 [ 278.286724][ T4315] usb usb4-port1: unable to enumerate USB device [ 278.308983][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 278.906033][ T6816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.594'. [ 281.110549][ T6807] tipc: Enabling of bearer rejected, failed to enable media [ 281.662302][ T6840] loop4: detected capacity change from 0 to 512 [ 281.822439][ T6840] Quota error (device loop4): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 281.892735][ T6840] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 281.909720][ T6840] EXT4-fs (loop4): mount failed [ 282.654443][ T6862] loop3: detected capacity change from 0 to 512 [ 282.737643][ T6862] EXT4-fs: Ignoring removed orlov option [ 282.834045][ T6862] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 282.897713][ T6862] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.603: corrupted in-inode xattr [ 282.931282][ T6862] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.603: couldn't read orphan inode 15 (err -117) [ 282.966991][ T6862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 283.185387][ T4318] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 283.225445][ T6877] netlink: 60 bytes leftover after parsing attributes in process `syz.4.608'. [ 283.415298][ T4318] usb 7-1: device descriptor read/64, error -71 [ 284.305369][ T4318] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 284.494774][ T6893] loop4: detected capacity change from 0 to 512 [ 284.545351][ T4318] usb 7-1: device descriptor read/64, error -71 [ 284.581613][ T6896] tipc: Enabling of bearer rejected, failed to enable media [ 284.599086][ T6893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.629723][ T6893] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 284.660246][ T6893] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 284.672038][ T4318] usb usb7-port1: attempt power cycle [ 284.692122][ T6893] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 284.754148][ T6893] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 284.789812][ T6879] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.603: corrupted in-inode xattr [ 284.796374][ T6893] EXT4-fs (loop4): orphan cleanup on readonly fs [ 284.883073][ T6893] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.610: bg 0: block 34: padding at end of block bitmap is not set [ 284.906255][ T6893] Quota error (device loop4): write_blk: dquota write failed [ 284.916794][ T6893] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 284.936369][ T6893] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.610: Failed to acquire dquot type 1 [ 284.979836][ T6893] EXT4-fs (loop4): 1 truncate cleaned up [ 284.998099][ T6893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.095266][ T4318] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 285.135951][ T4318] usb 7-1: device descriptor read/8, error -71 [ 285.398459][ T6914] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.610: deleted inode referenced: 12 [ 285.998671][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 286.035509][ T4318] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 286.075616][ T4318] usb 7-1: device descriptor read/8, error -71 [ 286.205522][ T4318] usb usb7-port1: unable to enumerate USB device [ 286.515384][ T4340] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 286.707222][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.733924][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.762254][ T4254] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 286.790996][ T4340] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.845058][ T4340] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.871306][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.923218][ T4340] usb 5-1: config 0 descriptor?? [ 286.957857][ T4254] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 286.975300][ T4254] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.016962][ T4254] usb 7-1: config 0 has no interface number 0 [ 287.047473][ T4254] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 287.067693][ T4254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.095338][ T4254] usb 7-1: Product: syz [ 287.099623][ T4254] usb 7-1: Manufacturer: syz [ 287.104267][ T4254] usb 7-1: SerialNumber: syz [ 287.135631][ T6942] loop2: detected capacity change from 0 to 512 [ 287.150576][ T4254] usb 7-1: config 0 descriptor?? [ 287.254310][ T6942] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 287.285552][ T6942] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.332248][ T6942] EXT4-fs (loop2): mount failed [ 287.352479][ T4340] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 287.380112][ T4340] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 287.406923][ T4340] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 287.411241][ T6951] netlink: 60 bytes leftover after parsing attributes in process `syz.5.621'. [ 287.446379][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 288.763195][ T4340] usb 5-1: USB disconnect, device number 19 [ 289.152447][ T14] usb 7-1: USB disconnect, device number 13 [ 289.179586][ T6960] tipc: Enabling of bearer rejected, failed to enable media [ 290.642958][ T6994] loop4: detected capacity change from 0 to 512 [ 290.677901][ T6998] 9pnet_fd: Insufficient options for proto=fd [ 290.788899][ T6994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 290.811960][ T7005] netlink: 60 bytes leftover after parsing attributes in process `syz.2.633'. [ 290.915482][ T6994] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.927138][ T7003] loop6: detected capacity change from 0 to 512 [ 290.942214][ T7003] EXT4-fs: Ignoring removed orlov option [ 291.037418][ T7003] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 291.594587][ T7003] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.632: corrupted in-inode xattr [ 291.845760][ T7003] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.632: couldn't read orphan inode 15 (err -117) [ 291.902248][ T7003] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 291.958089][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 292.406281][ T14] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 292.611485][ T7028] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.632: corrupted in-inode xattr [ 293.351950][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 293.436052][ T7032] loop2: detected capacity change from 0 to 512 [ 293.447743][ T14] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 293.464919][ T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.514960][ T14] usb 5-1: config 0 has no interface number 0 [ 293.573836][ T7032] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 293.604582][ T7032] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.618728][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 293.621185][ T7032] EXT4-fs (loop2): mount failed [ 293.634187][ T7036] tipc: Started in network mode [ 293.645439][ T7036] tipc: Node identity d2c8cfc890a8, cluster identity 4711 [ 293.665311][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.697698][ T14] usb 5-1: Product: syz [ 293.702357][ T7036] tipc: Enabled bearer , priority 0 [ 293.707648][ T14] usb 5-1: Manufacturer: syz [ 293.743227][ T14] usb 5-1: SerialNumber: syz [ 293.758115][ T7033] tipc: Disabling bearer [ 293.769571][ T14] usb 5-1: config 0 descriptor?? [ 294.417545][ T7052] netlink: 68 bytes leftover after parsing attributes in process `syz.6.644'. [ 295.032186][ T7063] loop3: detected capacity change from 0 to 512 [ 295.124775][ T14] usb 5-1: USB disconnect, device number 20 [ 295.254015][ T7063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 295.288509][ T7070] device syzkaller0 entered promiscuous mode [ 295.318113][ T7063] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.599212][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 298.145382][ T4318] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 298.377370][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.447994][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.498843][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.551767][ T4318] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.611756][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.639619][ T4318] usb 3-1: config 0 descriptor?? [ 298.754232][ T7102] tipc: Started in network mode [ 298.771558][ T7102] tipc: Node identity 921c4870c47a, cluster identity 4711 [ 298.805696][ T7102] tipc: Enabled bearer , priority 0 [ 298.843967][ T7100] tipc: Disabling bearer [ 299.076824][ T4318] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 299.107876][ T4318] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 299.128129][ T4318] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 299.378175][ T4318] usb 3-1: USB disconnect, device number 18 [ 299.453006][ T7119] loop6: detected capacity change from 0 to 512 [ 299.455441][ T4340] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 299.493798][ T7119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.517191][ T7119] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 299.558490][ T7119] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 299.593520][ T7119] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 299.615546][ T7119] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 299.676444][ T7119] EXT4-fs (loop6): orphan cleanup on readonly fs [ 299.677152][ T4340] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.732165][ T7119] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.658: bg 0: block 34: padding at end of block bitmap is not set [ 299.752889][ T4340] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.775336][ T7119] Quota error (device loop6): write_blk: dquota write failed [ 299.792805][ T4340] usb 5-1: config 0 interface 0 has no altsetting 0 [ 299.793402][ T7119] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 299.810924][ T4340] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 299.824207][ T7127] device syzkaller0 entered promiscuous mode [ 299.837177][ T7119] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.658: Failed to acquire dquot type 1 [ 299.859474][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.870955][ T7119] EXT4-fs (loop6): 1 truncate cleaned up [ 299.904960][ T4340] usb 5-1: config 0 descriptor?? [ 299.909292][ T7119] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 300.388571][ T7136] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.658: deleted inode referenced: 12 [ 301.507594][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 301.684297][ T7141] loop6: detected capacity change from 0 to 512 [ 301.727689][ T4340] usbhid 5-1:0.0: can't add hid device: -71 [ 301.736375][ T4340] usbhid: probe of 5-1:0.0 failed with error -71 [ 301.759016][ T4340] usb 5-1: USB disconnect, device number 21 [ 301.799370][ T7141] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 301.866249][ T7141] EXT4-fs error (device loop6): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 301.905456][ T7141] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #11: comm syz.6.662: corrupted inode contents [ 302.026246][ T7141] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #11: comm syz.6.662: mark_inode_dirty error [ 302.101149][ T7141] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.662: invalid indirect mapped block 1 (level 1) [ 302.242048][ T7141] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #11: comm syz.6.662: corrupted inode contents [ 302.483338][ T7141] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 302.613885][ T7141] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #11: comm syz.6.662: corrupted inode contents [ 302.689342][ T7141] EXT4-fs error (device loop6): ext4_truncate:4325: inode #11: comm syz.6.662: mark_inode_dirty error [ 302.741719][ T7141] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 302.800408][ T7141] EXT4-fs (loop6): 1 truncate cleaned up [ 302.808181][ T7141] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 302.864956][ T7141] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 13: comm syz.6.662: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 303.004983][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 303.055451][ T4340] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 303.247316][ T4340] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 303.255739][ T4340] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.266632][ T4340] usb 5-1: config 0 has no interface number 0 [ 303.292982][ T4340] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 303.311874][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.320090][ T4340] usb 5-1: Product: syz [ 303.324285][ T4340] usb 5-1: Manufacturer: syz [ 303.329097][ T4340] usb 5-1: SerialNumber: syz [ 303.344634][ T4340] usb 5-1: config 0 descriptor?? [ 304.298909][ T4340] usb 5-1: USB disconnect, device number 22 [ 305.550215][ T7177] netlink: 68 bytes leftover after parsing attributes in process `syz.4.669'. [ 306.766887][ T7174] tipc: Enabling of bearer rejected, failed to enable media [ 307.041163][ T7185] loop4: detected capacity change from 0 to 512 [ 307.052722][ T7187] loop3: detected capacity change from 0 to 512 [ 307.110238][ T7185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 307.224424][ T7185] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 307.227290][ T7187] Quota error (device loop3): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 307.245713][ T7187] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 307.269741][ T7185] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 307.290451][ T7185] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 307.303858][ T7187] EXT4-fs (loop3): mount failed [ 309.027771][ T7185] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 309.432864][ T7185] EXT4-fs (loop4): orphan cleanup on readonly fs [ 309.606777][ T7185] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.673: bg 0: block 34: padding at end of block bitmap is not set [ 309.697754][ T7185] Quota error (device loop4): write_blk: dquota write failed [ 309.712381][ T7185] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 309.722944][ T7185] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.673: Failed to acquire dquot type 1 [ 309.807274][ T7185] EXT4-fs (loop4): 1 truncate cleaned up [ 309.844523][ T7185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 310.715927][ T7208] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.673: deleted inode referenced: 12 [ 311.197709][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 311.479549][ T7225] netlink: 68 bytes leftover after parsing attributes in process `syz.4.684'. [ 311.561948][ T7229] device syzkaller0 entered promiscuous mode [ 313.970629][ T7247] loop6: detected capacity change from 0 to 512 [ 314.359897][ T7247] Quota error (device loop6): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 314.655398][ T7247] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 314.776401][ T7247] EXT4-fs (loop6): mount failed [ 317.205014][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.215218][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.812165][ T7285] loop4: detected capacity change from 0 to 512 [ 320.879653][ T7285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.895451][ T7285] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 320.912285][ T7285] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 320.922828][ T7285] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 320.950509][ T7285] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 320.968636][ T7285] EXT4-fs (loop4): orphan cleanup on readonly fs [ 320.996234][ T7285] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.695: bg 0: block 34: padding at end of block bitmap is not set [ 321.045089][ T7285] Quota error (device loop4): write_blk: dquota write failed [ 321.057687][ T7285] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 321.078879][ T7285] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.695: Failed to acquire dquot type 1 [ 321.103428][ T7285] EXT4-fs (loop4): 1 truncate cleaned up [ 321.159149][ T7285] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.526890][ T7290] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.695: deleted inode referenced: 12 [ 322.090766][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 325.231953][ T7316] loop3: detected capacity change from 0 to 512 [ 325.260615][ T7316] EXT4-fs: Ignoring removed orlov option [ 325.289522][ T7316] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 325.405513][ T7316] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.705: corrupted in-inode xattr [ 325.689981][ T7316] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.705: couldn't read orphan inode 15 (err -117) [ 325.892909][ T7316] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 328.311492][ T7329] netlink: 'syz.3.705': attribute type 8 has an invalid length. [ 328.412837][ T7329] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.705: corrupted in-inode xattr [ 329.079096][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 329.122935][ T7332] loop6: detected capacity change from 0 to 512 [ 329.232777][ T7332] Quota error (device loop6): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 329.303800][ T7332] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.404788][ T7332] EXT4-fs (loop6): mount failed [ 333.205371][ T4315] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 333.485362][ T4315] usb 7-1: device descriptor read/64, error -71 [ 333.835601][ T4315] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 334.069386][ T4315] usb 7-1: device descriptor read/64, error -71 [ 334.215412][ T4315] usb usb7-port1: attempt power cycle [ 334.665460][ T4315] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 334.792419][ T4315] usb 7-1: device descriptor read/8, error -71 [ 335.275771][ T4315] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 335.340839][ T4315] usb 7-1: device descriptor read/8, error -71 [ 335.535847][ T4315] usb usb7-port1: unable to enumerate USB device [ 336.278522][ T7404] loop2: detected capacity change from 0 to 512 [ 336.402630][ T7404] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 336.456734][ T7404] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 336.611673][ T7404] EXT4-fs (loop2): mount failed [ 339.065345][ T4315] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 339.485744][ T4315] usb 3-1: device descriptor read/64, error -71 [ 339.896733][ T4315] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 340.115369][ T4315] usb 3-1: device descriptor read/64, error -71 [ 340.335918][ T4315] usb usb3-port1: attempt power cycle [ 343.215257][ T4315] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 343.483826][ T4315] usb 3-1: device not accepting address 21, error -71 [ 343.545230][ T4340] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 343.749422][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.824015][ T4340] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 344.042088][ T4340] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 344.201750][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.408689][ T7470] device syzkaller0 entered promiscuous mode [ 344.546617][ T4340] usb 4-1: config 0 descriptor?? [ 344.556206][ T4340] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 346.553040][ T4309] usb 4-1: USB disconnect, device number 23 [ 348.175597][ T7505] loop3: detected capacity change from 0 to 512 [ 348.380573][ T7505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.482893][ T7505] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 348.603569][ T7505] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 348.744303][ T7505] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 348.941129][ T7505] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 349.049849][ T7505] EXT4-fs (loop3): orphan cleanup on readonly fs [ 349.157623][ T7505] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.753: bg 0: block 34: padding at end of block bitmap is not set [ 349.221400][ T7505] Quota error (device loop3): write_blk: dquota write failed [ 349.229031][ T7505] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 349.242323][ T7505] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.753: Failed to acquire dquot type 1 [ 349.403296][ T7505] EXT4-fs (loop3): 1 truncate cleaned up [ 350.206823][ T7505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 350.776101][ T7510] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.753: deleted inode referenced: 12 [ 351.357592][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 352.098591][ T7519] device syzkaller0 entered promiscuous mode [ 352.285320][ T7522] loop4: detected capacity change from 0 to 512 [ 352.339163][ T7522] Quota error (device loop4): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 352.385052][ T7522] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 352.416467][ T7522] EXT4-fs (loop4): mount failed [ 352.577498][ T5364] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 353.937231][ T7551] binder_alloc: 7550: binder_alloc_buf, no vma [ 355.065072][ T7564] loop4: detected capacity change from 0 to 512 [ 355.282088][ T7564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.295476][ T7564] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 355.306055][ T7564] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 355.316681][ T7564] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 355.328692][ T7564] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 355.338570][ T7564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 355.351821][ T7564] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.767: bg 0: block 34: padding at end of block bitmap is not set [ 355.367283][ T7564] Quota error (device loop4): write_blk: dquota write failed [ 355.374912][ T7564] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 355.385858][ T7564] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.767: Failed to acquire dquot type 1 [ 355.433336][ T7564] EXT4-fs (loop4): 1 truncate cleaned up [ 355.448485][ T7564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 355.838174][ T7567] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.767: deleted inode referenced: 12 [ 356.366777][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 359.063958][ T7588] loop2: detected capacity change from 0 to 512 [ 359.158313][ T7588] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 359.196819][ T7596] binder_alloc: 7595: binder_alloc_buf, no vma [ 359.203262][ T7588] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 359.230942][ T7588] EXT4-fs (loop2): mount failed [ 360.918690][ T7609] loop2: detected capacity change from 0 to 512 [ 360.974842][ T7609] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.779: missing EA_INODE flag [ 361.056289][ T7609] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.779: error while reading EA inode 12 err=-117 [ 361.117159][ T7609] EXT4-fs (loop2): 1 orphan inode deleted [ 361.136962][ T7609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 361.484425][ T7615] tmpfs: Unknown parameter '' [ 362.081783][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 362.898885][ T7626] device syzkaller0 entered promiscuous mode [ 364.185361][ T4309] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 364.392612][ T4309] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 364.428913][ T4309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.441357][ T4309] usb 4-1: config 0 has no interface number 0 [ 364.451046][ T4309] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 364.460494][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.468863][ T4309] usb 4-1: Product: syz [ 364.473424][ T4309] usb 4-1: Manufacturer: syz [ 364.478298][ T4309] usb 4-1: SerialNumber: syz [ 364.493944][ T4309] usb 4-1: config 0 descriptor?? [ 365.666061][ T4309] usb 4-1: USB disconnect, device number 24 [ 367.107780][ T7664] loop3: detected capacity change from 0 to 512 [ 367.128482][ T7664] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 367.194359][ T7664] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 367.216005][ T7664] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.792: corrupted inode contents [ 367.230455][ T7664] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #11: comm syz.3.792: mark_inode_dirty error [ 367.256447][ T7664] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.792: invalid indirect mapped block 1 (level 1) [ 367.285536][ T7664] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.792: corrupted inode contents [ 367.300173][ T7664] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 367.335662][ T7664] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #11: comm syz.3.792: corrupted inode contents [ 367.381066][ T7664] EXT4-fs error (device loop3): ext4_truncate:4325: inode #11: comm syz.3.792: mark_inode_dirty error [ 367.392955][ T7664] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 367.405490][ T7664] EXT4-fs (loop3): 1 truncate cleaned up [ 367.437885][ T7664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 367.676176][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 367.748174][ T7672] loop3: detected capacity change from 0 to 512 [ 367.801747][ T7672] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.794: missing EA_INODE flag [ 367.858431][ T7672] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.794: error while reading EA inode 12 err=-117 [ 367.914049][ T7672] EXT4-fs (loop3): 1 orphan inode deleted [ 367.925399][ T7672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 368.189354][ T7674] tmpfs: Unknown parameter '' [ 368.672893][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 368.865390][ T4340] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 369.185271][ T4340] usb 7-1: device descriptor read/64, error -71 [ 369.191785][ T4309] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 369.505238][ T4309] usb 4-1: Using ep0 maxpacket: 32 [ 369.514959][ T4309] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 369.542900][ T4309] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 369.561335][ T4340] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 369.585084][ T4309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.613993][ T4309] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 369.643905][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 369.665187][ T4309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 369.679002][ T4309] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 369.689377][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.710943][ T4309] usb 4-1: config 0 descriptor?? [ 369.725412][ T4340] usb 7-1: device descriptor read/64, error -71 [ 369.855418][ T4340] usb usb7-port1: attempt power cycle [ 369.926203][ T4309] usb 4-1: USB disconnect, device number 25 [ 370.275300][ T4340] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 370.316028][ T4340] usb 7-1: device descriptor read/8, error -71 [ 370.405330][ T4309] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 370.595671][ T4309] usb 4-1: Using ep0 maxpacket: 32 [ 370.600983][ T4340] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 370.616757][ T4309] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 370.632792][ T4309] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 370.642773][ T4340] usb 7-1: device descriptor read/8, error -71 [ 370.653077][ T4309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.900271][ T4340] usb usb7-port1: unable to enumerate USB device [ 370.907124][ T4309] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 370.917475][ T4309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.928060][ T4309] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 370.941443][ T4309] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 370.950836][ T4309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.971966][ T4309] usb 4-1: config 0 descriptor?? [ 371.084756][ T7709] device syzkaller0 entered promiscuous mode [ 371.679930][ T7723] loop4: detected capacity change from 0 to 512 [ 371.751231][ T7723] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.810: missing EA_INODE flag [ 371.769632][ T7723] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.810: error while reading EA inode 12 err=-117 [ 371.801967][ T7723] EXT4-fs (loop4): 1 orphan inode deleted [ 371.812611][ T7723] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 372.113452][ T7729] tmpfs: Unknown parameter '' [ 372.592249][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 372.607395][ T14] usb 4-1: USB disconnect, device number 26 [ 372.613934][ T4315] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 372.948074][ T4315] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 372.959346][ T4315] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.969648][ T4315] usb 7-1: config 0 interface 0 has no altsetting 0 [ 372.976412][ T4315] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 372.985690][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.011830][ T4315] usb 7-1: config 0 descriptor?? [ 373.444516][ T4315] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 373.655479][ T14] usb 7-1: USB disconnect, device number 23 [ 373.750153][ T7738] fido_id[7738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 374.349946][ T7752] loop6: detected capacity change from 0 to 512 [ 374.380805][ T7752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.409528][ T7752] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 374.426061][ T7752] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 374.443297][ T7752] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 374.484023][ T7752] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 374.502071][ T7752] EXT4-fs (loop6): orphan cleanup on readonly fs [ 374.515856][ T7752] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.817: bg 0: block 34: padding at end of block bitmap is not set [ 374.539020][ T7752] Quota error (device loop6): write_blk: dquota write failed [ 374.550327][ T7752] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 374.570653][ T7752] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.817: Failed to acquire dquot type 1 [ 374.614036][ T7752] EXT4-fs (loop6): 1 truncate cleaned up [ 374.672360][ T7752] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 375.133232][ T7765] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.817: deleted inode referenced: 12 [ 375.692156][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 376.211702][ T126] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 376.339483][ T7777] device batadv_slave_0 entered promiscuous mode [ 376.350659][ T7777] device batadv_slave_0 left promiscuous mode [ 376.419083][ T126] usb 7-1: device descriptor read/64, error -71 [ 377.276563][ T4312] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 377.303256][ T7781] process 'syz.3.826' launched './file1' with NULL argv: empty string added [ 377.365285][ T126] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 377.485271][ T4312] usb 3-1: Using ep0 maxpacket: 32 [ 377.493280][ T4312] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 377.503002][ T4312] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 377.512905][ T4312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.523645][ T4312] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 377.532846][ T126] usb 7-1: device descriptor read/64, error -71 [ 377.539623][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 377.549687][ T4312] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 377.559526][ T4312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 377.572579][ T4312] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 377.581764][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.775315][ T4309] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 377.991831][ T4309] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.027146][ T4309] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.093962][ T4309] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.130199][ T4309] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 378.190730][ T4309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.310763][ T4309] usb 5-1: config 0 descriptor?? [ 378.454728][ T126] usb usb7-port1: attempt power cycle [ 378.462998][ T4312] usb 3-1: config 0 descriptor?? [ 378.584126][ T7794] loop3: detected capacity change from 0 to 512 [ 378.593672][ T7794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 378.603316][ T7794] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 378.613578][ T7794] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 378.623810][ T7794] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 378.640019][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.647492][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.647568][ T7794] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 378.665957][ T7794] EXT4-fs (loop3): orphan cleanup on readonly fs [ 378.678652][ T7794] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.831: bg 0: block 34: padding at end of block bitmap is not set [ 378.683393][ T4315] usb 3-1: USB disconnect, device number 23 [ 378.700074][ T7794] Quota error (device loop3): write_blk: dquota write failed [ 378.711336][ T7794] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 378.722566][ T7794] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.831: Failed to acquire dquot type 1 [ 378.737884][ T7794] EXT4-fs (loop3): 1 truncate cleaned up [ 378.744119][ T7794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 378.875378][ T126] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 378.917392][ T126] usb 7-1: device descriptor read/8, error -71 [ 378.935980][ T4309] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 379.075581][ T7798] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.831: deleted inode referenced: 12 [ 379.285358][ T4315] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 379.587131][ T4340] usb 5-1: USB disconnect, device number 23 [ 379.723776][ T7797] fido_id[7797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 379.752885][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 379.765318][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 379.793216][ T4315] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 379.825984][ T4315] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 379.868659][ T4315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.889257][ T4315] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 379.926561][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.974614][ T4315] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 380.057120][ T7806] device syzkaller0 entered promiscuous mode [ 380.161075][ T4315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 380.174643][ T4315] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 380.183918][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.202656][ T4315] usb 3-1: config 0 descriptor?? [ 380.211632][ T4315] usb 3-1: can't set config #0, error -71 [ 380.220247][ T4315] usb 3-1: USB disconnect, device number 24 [ 380.339297][ T7817] 9pnet_fd: Insufficient options for proto=fd [ 380.885320][ T4315] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 381.045363][ T4315] usb 5-1: device descriptor read/64, error -71 [ 381.315640][ T4315] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 381.485260][ T4315] usb 5-1: device descriptor read/64, error -71 [ 381.606238][ T4315] usb usb5-port1: attempt power cycle [ 382.026636][ T4315] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 382.056010][ T4315] usb 5-1: device descriptor read/8, error -71 [ 382.325288][ T4315] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 382.365946][ T4315] usb 5-1: device descriptor read/8, error -71 [ 382.486168][ T4315] usb usb5-port1: unable to enumerate USB device [ 385.786087][ T4309] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 385.802001][ T7879] binder: BINDER_SET_CONTEXT_MGR already set [ 385.809938][ T7879] binder: 7878:7879 ioctl 4018620d 200000004a80 returned -16 [ 385.994796][ T7881] loop3: detected capacity change from 0 to 512 [ 386.006030][ T4309] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.038442][ T7881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.053859][ T4309] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.077154][ T7881] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 386.104639][ T4309] usb 7-1: config 0 interface 0 has no altsetting 0 [ 386.124529][ T7881] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 386.137893][ T4309] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 386.164203][ T7881] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 386.178556][ T4309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.212695][ T4309] usb 7-1: config 0 descriptor?? [ 386.223918][ T7881] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 386.334642][ T7881] EXT4-fs (loop3): orphan cleanup on readonly fs [ 386.363242][ T7881] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.852: bg 0: block 34: padding at end of block bitmap is not set [ 386.413551][ T7881] Quota error (device loop3): write_blk: dquota write failed [ 386.447761][ T7881] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 386.468281][ T7881] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.852: Failed to acquire dquot type 1 [ 386.479888][ T126] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 386.505590][ T7881] EXT4-fs (loop3): 1 truncate cleaned up [ 386.521915][ T7881] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 386.685238][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 386.692605][ T126] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 386.707848][ T126] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 386.719567][ T126] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.733871][ T126] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 386.745849][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 386.763413][ T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 386.778787][ T126] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 386.794671][ T4309] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x3 [ 386.809129][ T126] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 386.815229][ T4309] hid-steam 0003:28DE:1102.000A: unbalanced collection at end of report description [ 386.820947][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.835773][ T4309] hid-steam 0003:28DE:1102.000A: steam_probe:parse of hid interface failed [ 386.835812][ T4309] hid-steam: probe of 0003:28DE:1102.000A failed with error -22 [ 386.932299][ T7890] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.852: deleted inode referenced: 12 [ 387.124380][ T4309] usb 7-1: USB disconnect, device number 28 [ 387.427358][ T7893] 9pnet_fd: Insufficient options for proto=fd [ 387.501157][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 387.513041][ T126] usb 3-1: config 0 descriptor?? [ 387.748636][ T4309] usb 3-1: USB disconnect, device number 25 [ 388.284062][ T7916] loop3: detected capacity change from 0 to 512 [ 388.315207][ T4309] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 388.408030][ T7916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.860: missing EA_INODE flag [ 388.496196][ T7916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.860: error while reading EA inode 12 err=-117 [ 388.508847][ T4309] usb 3-1: Using ep0 maxpacket: 32 [ 388.522674][ T4309] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 388.549908][ T7916] EXT4-fs (loop3): 1 orphan inode deleted [ 388.559957][ T7916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 388.635430][ T4309] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 388.644248][ T4309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.829981][ T4309] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 388.865255][ T4309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.875000][ T4309] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 388.941850][ T7927] tmpfs: Unknown parameter '' [ 389.355185][ T4309] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 389.374855][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 389.375370][ T4309] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 389.444772][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.506418][ T4309] usb 3-1: config 0 descriptor?? [ 389.523788][ T4309] usb 3-1: can't set config #0, error -71 [ 389.555325][ T4309] usb 3-1: USB disconnect, device number 26 [ 392.085261][ T4318] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 392.245983][ T4318] usb 7-1: device descriptor read/64, error -71 [ 392.321926][ T7953] loop3: detected capacity change from 0 to 512 [ 392.407530][ T7953] Quota error (device loop3): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 392.433964][ T7953] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 392.525187][ T4318] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 392.552395][ T7953] EXT4-fs (loop3): mount failed [ 392.642547][ T7861] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 392.695498][ T4318] usb 7-1: device descriptor read/64, error -71 [ 392.825574][ T4318] usb usb7-port1: attempt power cycle [ 393.630857][ T4318] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? [ 393.664277][ T7985] loop2: detected capacity change from 0 to 512 [ 393.720933][ T7985] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.876: missing EA_INODE flag [ 393.786449][ T7985] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.876: error while reading EA inode 12 err=-117 [ 393.811224][ T4318] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 393.825895][ T7985] EXT4-fs (loop2): 1 orphan inode deleted [ 393.831793][ T7985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 393.876057][ T4318] usb 7-1: Using ep0 maxpacket: 32 [ 393.883125][ T4318] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 393.902526][ T4318] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 393.921278][ T4318] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.952226][ T4318] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 393.978081][ T4318] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 394.008970][ T4318] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 394.112599][ T4318] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 394.112771][ T7985] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 394.266806][ T4318] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 394.374469][ T4318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.387172][ T4318] usb 7-1: config 0 descriptor?? [ 394.403433][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 394.612344][ T14] usb 7-1: USB disconnect, device number 32 [ 395.895509][ T14] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 395.921805][ T126] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 395.964967][ T8011] loop2: detected capacity change from 0 to 512 [ 396.188742][ T8011] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 396.215525][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 396.222654][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.240908][ T14] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 396.265247][ T126] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 396.284780][ T8011] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 396.310164][ T14] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 396.330487][ T126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.351038][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.372681][ T8011] EXT4-fs (loop2): mount failed [ 396.378633][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.395815][ T14] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 396.421549][ T126] usb 5-1: config 0 descriptor?? [ 396.433283][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.443658][ T14] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.465859][ T14] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 396.524232][ T14] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 396.555340][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.590239][ T14] usb 7-1: config 0 descriptor?? [ 396.610183][ T14] usb 7-1: can't set config #0, error -71 [ 396.636817][ T14] usb 7-1: USB disconnect, device number 33 [ 396.802322][ T8020] device syzkaller0 entered promiscuous mode [ 396.916506][ T126] usb 5-1: string descriptor 0 read error: -71 [ 396.942591][ T126] usb 5-1: USB disconnect, device number 28 [ 397.024510][ T8022] loop3: detected capacity change from 0 to 512 [ 397.040176][ T8022] EXT4-fs: Ignoring removed orlov option [ 397.056055][ T8022] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 397.092387][ T8022] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.889: corrupted in-inode xattr [ 397.131284][ T8022] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.889: couldn't read orphan inode 15 (err -117) [ 397.182787][ T8022] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 397.195361][ T14] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 397.402030][ T14] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 397.447660][ T14] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.529376][ T14] usb 7-1: config 0 has no interface number 0 [ 397.576218][ T14] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 397.596287][ T8030] netlink: 'syz.3.889': attribute type 8 has an invalid length. [ 397.604658][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.621031][ T8030] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.889: corrupted in-inode xattr [ 397.622073][ T14] usb 7-1: Product: syz [ 397.653343][ T14] usb 7-1: Manufacturer: syz [ 397.665664][ T26] audit: type=1326 audit(1776727609.809:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 397.694523][ T14] usb 7-1: SerialNumber: syz [ 397.706688][ T14] usb 7-1: config 0 descriptor?? [ 397.724320][ T26] audit: type=1326 audit(1776727609.829:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 397.747908][ T26] audit: type=1326 audit(1776727609.829:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 397.772220][ T26] audit: type=1326 audit(1776727609.829:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 398.366250][ T26] audit: type=1326 audit(1776727609.829:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 398.532698][ T26] audit: type=1326 audit(1776727609.829:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 398.642863][ T26] audit: type=1326 audit(1776727609.829:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 398.671605][ T26] audit: type=1326 audit(1776727609.829:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 398.745181][ T26] audit: type=1326 audit(1776727609.829:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz.2.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5faeb9c819 code=0x7ffc0000 [ 399.009629][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 399.067060][ T14] usb 7-1: USB disconnect, device number 34 [ 399.705311][ T14] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 399.898890][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 400.024922][ T14] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 400.038750][ T14] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 400.052839][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 400.105467][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 400.135178][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 400.144900][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.195149][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 400.235174][ T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 400.244345][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.294363][ T14] usb 4-1: config 0 descriptor?? [ 400.525235][ T14] usb 4-1: USB disconnect, device number 27 [ 401.061691][ T8059] loop4: detected capacity change from 0 to 512 [ 401.145250][ T14] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 401.147752][ T8061] loop6: detected capacity change from 0 to 512 [ 401.179490][ T8059] Quota error (device loop4): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 401.200972][ T8061] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.304420][ T8059] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 401.346090][ T8059] EXT4-fs (loop4): mount failed [ 401.355329][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 401.374938][ T14] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 401.408706][ T14] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 401.449451][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 401.544780][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 401.599900][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 401.640867][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 401.646588][ T8066] loop2: detected capacity change from 0 to 512 [ 401.666218][ T8066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 401.671054][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 401.699925][ T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 401.713050][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.723008][ T8066] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.901: iget: bad extended attribute block 16777216 [ 401.762021][ T14] usb 4-1: config 0 descriptor?? [ 401.811383][ T8066] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.901: couldn't read orphan inode 15 (err -117) [ 401.845852][ T8066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 401.977140][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 402.335231][ T4254] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 402.535696][ T4254] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.665651][ T4315] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 402.694192][ T4254] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.875407][ T4315] usb 5-1: device descriptor read/64, error -71 [ 402.887822][ T4254] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.100994][ T4254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.165421][ T4315] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 403.347110][ T4254] usb 7-1: config 0 descriptor?? [ 403.355271][ T4315] usb 5-1: device descriptor read/64, error -71 [ 403.501375][ T4315] usb usb5-port1: attempt power cycle [ 403.814230][ T4254] usb 7-1: string descriptor 0 read error: -71 [ 403.934418][ T4254] usb 7-1: USB disconnect, device number 35 [ 403.965413][ T4315] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 404.037498][ T4315] usb 5-1: device descriptor read/8, error -71 [ 404.305414][ T4315] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 404.368231][ T4309] usb 4-1: USB disconnect, device number 28 [ 404.407505][ T4315] usb 5-1: device descriptor read/8, error -71 [ 404.545766][ T4315] usb usb5-port1: unable to enumerate USB device [ 405.316384][ T8092] loop6: detected capacity change from 0 to 512 [ 405.390926][ T8092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.535525][ T8092] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 405.575788][ T8092] EXT4-fs error (device loop6): ext4_readdir:223: inode #12: comm syz.6.911: path /126/file0/file0: directory fails checksum at offset 0 [ 405.607868][ T8102] loop4: detected capacity change from 0 to 512 [ 405.739431][ T8102] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.914: missing EA_INODE flag [ 405.784587][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 405.792812][ T8102] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.914: error while reading EA inode 12 err=-117 [ 405.835778][ T8102] EXT4-fs (loop4): 1 orphan inode deleted [ 405.841612][ T8102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 405.906371][ T8102] tmpfs: Unknown parameter '' [ 406.212529][ T8111] loop6: detected capacity change from 0 to 512 [ 406.295272][ T8111] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.481506][ T8111] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 406.563360][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 406.702529][ T8111] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 406.938273][ T8111] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 407.197735][ T8111] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 407.261907][ T8111] EXT4-fs (loop6): orphan cleanup on readonly fs [ 407.366578][ T8111] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.917: bg 0: block 34: padding at end of block bitmap is not set [ 407.416021][ T8111] Quota error (device loop6): write_blk: dquota write failed [ 407.443965][ T8111] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 407.471014][ T8111] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.917: Failed to acquire dquot type 1 [ 407.579665][ T8111] EXT4-fs (loop6): 1 truncate cleaned up [ 407.602744][ T8111] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 407.845596][ T7] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 407.945202][ T4309] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 408.017775][ T8130] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.917: deleted inode referenced: 12 [ 408.135575][ T4309] usb 3-1: Using ep0 maxpacket: 32 [ 408.162224][ T4309] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 408.276143][ T4309] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 408.310851][ T4309] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 408.371979][ T4309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 408.411104][ T4309] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 408.451782][ T4309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.492650][ T4309] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 408.557609][ T4309] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 408.589391][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.622110][ T4309] usb 3-1: config 0 descriptor?? [ 408.642130][ T5107] EXT4-fs (loop6): unmounting filesystem. [ 408.666959][ T7] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 408.687190][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.697601][ T7] usb 5-1: config 0 has no interface number 0 [ 408.706729][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 408.722055][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.730309][ T7] usb 5-1: Product: syz [ 408.734654][ T7] usb 5-1: Manufacturer: syz [ 408.739464][ T7] usb 5-1: SerialNumber: syz [ 408.765265][ T7] usb 5-1: config 0 descriptor?? [ 408.859868][ T4309] usb 3-1: USB disconnect, device number 27 [ 409.685484][ T4309] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 410.055199][ T4309] usb 3-1: Using ep0 maxpacket: 32 [ 410.063512][ T4309] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 410.072331][ T4309] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 410.088668][ T4309] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 410.113302][ T4309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 410.133249][ T4309] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 410.146454][ T4309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.160272][ T4309] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 410.165837][ T7] usb 5-1: USB disconnect, device number 33 [ 410.182152][ T4309] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 410.210523][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.259101][ T4309] usb 3-1: config 0 descriptor?? [ 410.543647][ T4309] usb 3-1: USB disconnect, device number 28 [ 413.455247][ T14] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 414.417054][ T14] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 414.448463][ T7] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 414.476357][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 414.534910][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 414.554878][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.604471][ T14] usb 3-1: config 0 descriptor?? [ 414.617848][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 414.685757][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 414.716485][ T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 414.745300][ T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 414.763636][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 414.783104][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 415.225308][ T8081] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 415.425319][ T8081] usb 4-1: device descriptor read/64, error -71 [ 415.705396][ T8081] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 415.885512][ T8081] usb 4-1: device descriptor read/64, error -71 [ 416.022557][ T8081] usb usb4-port1: attempt power cycle [ 416.335165][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 416.345008][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 416.355271][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 416.368526][ T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 416.455399][ T8081] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 416.567502][ T8081] usb 4-1: device descriptor read/8, error -71 [ 416.925352][ T8081] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 416.967088][ T8081] usb 4-1: device descriptor read/8, error -71 [ 417.096354][ T8081] usb usb4-port1: unable to enumerate USB device [ 417.336037][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.346323][ T7] usb 5-1: config 0 descriptor?? [ 417.353052][ T7] usb 5-1: can't set config #0, error -71 [ 417.361162][ T7] usb 5-1: USB disconnect, device number 34 [ 417.552182][ T8081] usb 3-1: USB disconnect, device number 29 [ 417.877266][ T8200] device syzkaller1 entered promiscuous mode [ 418.393942][ T8211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.434200][ T8211] team0: Port device bond0 added [ 418.555389][ T7] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 418.627556][ T8215] loop4: detected capacity change from 0 to 512 [ 418.673699][ T8215] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.701664][ T8217] loop2: detected capacity change from 0 to 512 [ 418.752767][ T8217] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 418.761802][ T8215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 418.763133][ T7] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 418.779184][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.789705][ T7] usb 4-1: config 0 has no interface number 0 [ 418.807657][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 418.825177][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.833468][ T7] usb 4-1: Product: syz [ 418.837415][ T8217] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 418.837752][ T7] usb 4-1: Manufacturer: syz [ 418.865211][ T7] usb 4-1: SerialNumber: syz [ 418.865804][ T8215] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.882052][ T7] usb 4-1: config 0 descriptor?? [ 418.923931][ T8217] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.950: corrupted inode contents [ 418.984234][ T8217] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #11: comm syz.2.950: mark_inode_dirty error [ 419.018965][ T8215] [ 419.021397][ T8215] ====================================================== [ 419.028492][ T8215] WARNING: possible circular locking dependency detected [ 419.035536][ T8215] syzkaller #0 Not tainted [ 419.039974][ T8215] ------------------------------------------------------ [ 419.047114][ T8215] syz.4.949/8215 is trying to acquire lock: [ 419.053487][ T8215] ffff888054594268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 419.062512][ T8215] [ 419.062512][ T8215] but task is already holding lock: [ 419.070087][ T8215] ffff888050c5b4b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 419.079646][ T8215] [ 419.079646][ T8215] which lock already depends on the new lock. [ 419.079646][ T8215] [ 419.081604][ T8217] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.950: invalid indirect mapped block 1 (level 1) [ 419.090062][ T8215] [ 419.090062][ T8215] the existing dependency chain (in reverse order) is: [ 419.090074][ T8215] [ 419.090074][ T8215] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 419.090112][ T8215] down_read+0x42/0x2d0 [ 419.090143][ T8215] ext4_map_blocks+0x323/0x1b70 [ 419.090169][ T8215] ext4_getblk+0x1cc/0x6f0 [ 419.135388][ T8215] ext4_bread+0x26/0x170 [ 419.140177][ T8215] ext4_quota_write+0x236/0x580 [ 419.145567][ T8215] get_free_dqblk+0x312/0x660 [ 419.150797][ T8215] do_insert_tree+0x22b/0x1040 [ 419.156195][ T8215] do_insert_tree+0x9eb/0x1040 [ 419.161500][ T8215] qtree_write_dquot+0x49d/0x5d0 [ 419.167063][ T8215] v2_write_dquot+0x108/0x190 [ 419.172277][ T8215] dquot_acquire+0x2d5/0x520 [ 419.177399][ T8215] ext4_acquire_dquot+0x2d9/0x4a0 [ 419.182966][ T8215] dqget+0x778/0xeb0 [ 419.187405][ T8215] __dquot_initialize+0x3c3/0xcd0 [ 419.193069][ T8215] ext4_xattr_set+0xd8/0x320 [ 419.198375][ T8215] __vfs_setxattr+0x3e0/0x420 [ 419.203764][ T8215] __vfs_setxattr_noperm+0x129/0x5e0 [ 419.209591][ T8215] vfs_setxattr+0x167/0x2e0 [ 419.214651][ T8215] ovl_verify_set_fh+0x19f/0x410 [ 419.220142][ T8215] ovl_get_indexdir+0x14a/0x5e0 [ 419.225538][ T8215] ovl_fill_super+0x1b17/0x2a30 [ 419.230931][ T8215] mount_nodev+0x52/0xe0 [ 419.235885][ T8215] legacy_get_tree+0xe6/0x180 [ 419.241099][ T8215] vfs_get_tree+0x88/0x270 [ 419.246057][ T8215] do_new_mount+0x24a/0xa40 [ 419.251094][ T8215] __se_sys_mount+0x2e3/0x3d0 [ 419.256391][ T8215] do_syscall_64+0x4c/0xa0 [ 419.261351][ T8215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.268042][ T8215] [ 419.268042][ T8215] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 419.276138][ T8215] down_read+0x42/0x2d0 [ 419.280857][ T8215] v2_read_dquot+0x4a/0x110 [ 419.285909][ T8215] dquot_acquire+0x152/0x520 [ 419.291038][ T8215] ext4_acquire_dquot+0x2d9/0x4a0 [ 419.296607][ T8215] dqget+0x778/0xeb0 [ 419.301051][ T8215] __dquot_initialize+0x3c3/0xcd0 [ 419.306619][ T8215] ext4_mkdir+0x1a5/0xce0 [ 419.311512][ T8215] vfs_mkdir+0x387/0x570 [ 419.316296][ T8215] do_mkdirat+0x1d8/0x440 [ 419.321158][ T8215] __x64_sys_mkdirat+0x85/0x90 [ 419.326523][ T8215] do_syscall_64+0x4c/0xa0 [ 419.331657][ T8215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.338175][ T8215] [ 419.338175][ T8215] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 419.345845][ T8215] __lock_acquire+0x2d07/0x7d10 [ 419.351495][ T8215] lock_acquire+0x1bb/0x4a0 [ 419.356550][ T8215] __mutex_lock+0x12d/0xaf0 [ 419.361763][ T8215] dquot_commit+0x5a/0x410 [ 419.366707][ T8215] ext4_write_dquot+0x1f0/0x360 [ 419.372092][ T8215] mark_all_dquot_dirty+0xf9/0x400 [ 419.377737][ T8215] __dquot_alloc_space+0x5fc/0xe60 [ 419.383380][ T8215] ext4_mb_new_blocks+0xfc4/0x4610 [ 419.389055][ T8215] ext4_ext_map_blocks+0x195b/0x6810 [ 419.394876][ T8215] ext4_map_blocks+0x9de/0x1b70 [ 419.400268][ T8215] ext4_alloc_file_blocks+0x378/0xb60 [ 419.406179][ T8215] ext4_zero_range+0x43a/0xe00 [ 419.411483][ T8215] ext4_fallocate+0x54f/0x2000 [ 419.416783][ T8215] vfs_fallocate+0x584/0x6f0 [ 419.421905][ T8215] __x64_sys_fallocate+0xbd/0x100 [ 419.427466][ T8215] do_syscall_64+0x4c/0xa0 [ 419.432427][ T8215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.438875][ T8215] [ 419.438875][ T8215] other info that might help us debug this: [ 419.438875][ T8215] [ 419.449126][ T8215] Chain exists of: [ 419.449126][ T8215] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 419.449126][ T8215] [ 419.463355][ T8215] Possible unsafe locking scenario: [ 419.463355][ T8215] [ 419.471005][ T8215] CPU0 CPU1 [ 419.476435][ T8215] ---- ---- [ 419.482188][ T8215] lock(&ei->i_data_sem/2); [ 419.487157][ T8215] lock(&s->s_dquot.dqio_sem); [ 419.494640][ T8215] lock(&ei->i_data_sem/2); [ 419.501856][ T8215] lock(&dquot->dq_lock); [ 419.506292][ T8215] [ 419.506292][ T8215] *** DEADLOCK *** [ 419.506292][ T8215] [ 419.514703][ T8215] 4 locks held by syz.4.949/8215: [ 419.519736][ T8215] #0: ffff8880766d0460 (sb_writers#4){.+.+}-{0:0}, at: vfs_fallocate+0x4f1/0x6f0 [ 419.528987][ T8215] #1: ffff888050c5b628 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_zero_range+0x26b/0xe00 [ 419.539798][ T8215] #2: ffff888050c5b4b0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x910/0x1b70 [ 419.549833][ T8215] #3: ffffffff8cc74a48 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x173/0xe60 [ 419.559887][ T8215] [ 419.559887][ T8215] stack backtrace: [ 419.565878][ T8215] CPU: 1 PID: 8215 Comm: syz.4.949 Not tainted syzkaller #0 [ 419.573178][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 419.583245][ T8215] Call Trace: [ 419.586552][ T8215] [ 419.589494][ T8215] dump_stack_lvl+0x188/0x24e [ 419.594204][ T8215] ? load_image+0x400/0x400 [ 419.598724][ T8215] ? show_regs_print_info+0x12/0x12 [ 419.604034][ T8215] ? print_circular_bug+0x12b/0x1a0 [ 419.609252][ T8215] check_noncircular+0x296/0x330 [ 419.614214][ T8215] ? add_chain_block+0x940/0x940 [ 419.619168][ T8215] ? lockdep_lock+0xf1/0x1f0 [ 419.623870][ T8215] ? _find_first_zero_bit+0xcf/0x100 [ 419.629300][ T8215] __lock_acquire+0x2d07/0x7d10 [ 419.634522][ T8215] ? check_path+0x40/0x40 [ 419.638883][ T8215] ? check_noncircular+0x189/0x330 [ 419.644047][ T8215] ? add_chain_block+0x940/0x940 [ 419.649023][ T8215] ? lockdep_unlock+0x142/0x2e0 [ 419.653980][ T8215] ? verify_lock_unused+0x140/0x140 [ 419.659207][ T8215] ? mark_lock+0x94/0x320 [ 419.663759][ T8215] ? __lock_acquire+0x13cf/0x7d10 [ 419.668836][ T8215] lock_acquire+0x1bb/0x4a0 [ 419.673376][ T8215] ? dquot_commit+0x5a/0x410 [ 419.678112][ T8215] ? __might_sleep+0xd0/0xd0 [ 419.682897][ T8215] ? read_lock_is_recursive+0x10/0x10 [ 419.688480][ T8215] __mutex_lock+0x12d/0xaf0 [ 419.693089][ T8215] ? dquot_commit+0x5a/0x410 [ 419.697786][ T8215] ? __might_sleep+0xd0/0xd0 [ 419.702389][ T8215] ? dquot_commit+0x5a/0x410 [ 419.707002][ T8215] ? mutex_lock_nested+0x10/0x10 [ 419.711957][ T8215] ? ext4_journal_check_start+0x17e/0x240 [ 419.717690][ T8215] dquot_commit+0x5a/0x410 [ 419.722136][ T8215] ext4_write_dquot+0x1f0/0x360 [ 419.727008][ T8215] mark_all_dquot_dirty+0xf9/0x400 [ 419.732138][ T8215] __dquot_alloc_space+0x5fc/0xe60 [ 419.737443][ T8215] ? _raw_spin_unlock+0x40/0x40 [ 419.742306][ T8215] ? __dquot_alloc_space+0x173/0xe60 [ 419.747697][ T8215] ext4_mb_new_blocks+0xfc4/0x4610 [ 419.753273][ T8215] ? ext4_find_extent+0x367/0xe00 [ 419.758318][ T8215] ? rcu_is_watching+0x11/0xa0 [ 419.763294][ T8215] ? memset+0x1e/0x40 [ 419.767344][ T8215] ? ext4_mb_pa_callback+0xd0/0xd0 [ 419.772561][ T8215] ? ext4_ext_check_overlap+0x15f/0x560 [ 419.778136][ T8215] ? ext4_inode_to_goal_block+0x313/0x450 [ 419.784045][ T8215] ext4_ext_map_blocks+0x195b/0x6810 [ 419.789401][ T8215] ? ext4_ext_release+0x10/0x10 [ 419.794354][ T8215] ? rwsem_write_trylock+0x135/0x1c0 [ 419.799677][ T8215] ext4_map_blocks+0x9de/0x1b70 [ 419.804554][ T8215] ? __might_sleep+0xd0/0xd0 [ 419.809526][ T8215] ? ext4_issue_zeroout+0x250/0x250 [ 419.814786][ T8215] ? ext4_journal_check_start+0x17e/0x240 [ 419.821241][ T8215] ? ext4_chunk_trans_blocks+0x1e9/0x270 [ 419.826896][ T8215] ext4_alloc_file_blocks+0x378/0xb60 [ 419.832294][ T8215] ? trace_ext4_fallocate_enter+0x270/0x270 [ 419.838201][ T8215] ? file_modified_flags+0x39a/0x440 [ 419.843595][ T8215] ? file_modified+0x20/0x20 [ 419.848224][ T8215] ? inode_newsize_ok+0x179/0x1b0 [ 419.853334][ T8215] ext4_zero_range+0x43a/0xe00 [ 419.858116][ T8215] ext4_fallocate+0x54f/0x2000 [ 419.862899][ T8215] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 419.868473][ T8215] ? common_file_perm+0x171/0x1c0 [ 419.873509][ T8215] vfs_fallocate+0x584/0x6f0 [ 419.878211][ T8215] __x64_sys_fallocate+0xbd/0x100 [ 419.883346][ T8215] do_syscall_64+0x4c/0xa0 [ 419.887845][ T8215] ? clear_bhb_loop+0x60/0xb0 [ 419.892716][ T8215] ? clear_bhb_loop+0x60/0xb0 [ 419.897498][ T8215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.903470][ T8215] RIP: 0033:0x7fac6919c819 [ 419.907992][ T8215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.927703][ T8215] RSP: 002b:00007fac6a017028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 419.936135][ T8215] RAX: ffffffffffffffda RBX: 00007fac69415fa0 RCX: 00007fac6919c819 [ 419.944203][ T8215] RDX: 0000000000000bf7 RSI: 0000000000000010 RDI: 0000000000000004 [ 419.952290][ T8215] RBP: 00007fac69232c91 R08: 0000000000000000 R09: 0000000000000000 [ 419.960379][ T8215] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000000 [ 419.968479][ T8215] R13: 00007fac69416038 R14: 00007fac69415fa0 R15: 00007ffcc30ec978 [ 419.976562][ T8215] [ 420.024863][ T8217] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.950: corrupted inode contents [ 420.045813][ T8217] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 420.063254][ T8217] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.950: corrupted inode contents [ 420.082105][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 420.089827][ T8217] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.950: mark_inode_dirty error [ 420.103838][ T8217] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 420.113369][ T8217] EXT4-fs (loop2): 1 truncate cleaned up [ 420.121184][ T8217] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 420.288894][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 420.385319][ T7] usb 4-1: USB disconnect, device number 33