last executing test programs: 33m24.378487133s ago: executing program 3 (id=683): pipe(&(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000003280)="f6ebd69cb63604dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b95cc166de9fde1ec361ce6d6a73600b2d484b8457469b28fb04cb38d8a13e483efc4f4102fe6accce43ef76ae1bf1f34d051501c250aa2fa4fd1246d049af8bb7c9c9510a879323c67e9e14be35a0ff24a9c56a06c2489f5068b43198feed152c7749f5368a07f20c68ed5192c6c90d48e69046294b1b97c873d09691413243175e8e0091e5b5d8f09f771e2b5ea45f1806a77788434c435e029e8d6c3eb8dd5ce365c52794fdeba397f17c239169772f93af2a9044137b11b0e2e8e03996120b5bd749ee87140dd44a0a2b7472470809acd7a635e842a104ce4ef522cf1c29a602ab806adc85d00bc0bce12d80aad3c94b4e84d25800876137f071ac2eca2ab5b41110bb1b92d7ead272e52679b26359424687374065f02a29a37f53fe6c611953c3fac4898b32df7435e0bca7fdb5153bd2c6b90614e6d437c7b0f0fdf132d6cf57a7225e72116fe404d4b7dceb4a332e623cfa298623cf64728dc66104bc16c799341c5182da780e898bcf71a3561d8f3c60b4077fbb83fdffe581e5f4dfa6497c1a6a7b3f616e22322189ea75aa4960109e0ea55d2eec2646f7339d35d70b0890624bdcea5e9a6b50530005beffd3a74204fcb754ecc7b3b6328b0f586d4ec3a680c2ccba4fae25c93646a3a511d214429338a531b7c97b0e71fef2b65325b651bfb79bec3bd983955e3a6ae6f25420373b705cd5a0ae4e88b0cb798dcdff1840e9c223afd2c2b775ec47d469dbcfc3291351d158f29e91bb8e026a83c3e1119f354b4d6de223fc3841d43b0fcb5ec44322b83e54fce32d21b42e82a9309fbb0a83307dd531372cdcebb9e3ada079fb014445dd3926473befecaea1fa995b8e65422c93715a52aba5634713227b9ab695b7f77e2ff044fb7e94b917cd37ad642a555bb8d2b884252c48147e3545d2a4b448e8be5aa61f7a14257e9f0f777c9a012b15a1c9139d8a4af53cd48c5a70c0729734947c3ac75eacf941fd1aeb771d9c789f04a95155b5154909441ca153df09dfcbde5472c37ebc5a8788e6cc606014e478fe7e2257309929c09351de59cd3de9f2f3ef3a4e7801019cf34833d5c9f55ed06e388948afbaac5224f0bd51ae32d13de5aec183b5906615ede66537a70d07aa75df2d3ca8cd2ff049728d60b8c7d52d8dee72b062e16b00e064a5de0a44ae0f3e0e50cda01e5f44d966727bde3fdcdb40f53669379e790a841e63549b1bcc6fe8b523f8ca110666611543dba205ac9282839b83f62af961b3743bcf5eb16a4182b10f647aec2b4ca6dce273803ad36b70afa6f04be62d3605b11c053a4bd6963adfca9a145edc0259d93295eed70b44abc59878101801563190a31aa37e40800eb03d5f45aaa73f0e23b2eafb4fb2a4f5a04644fd23302c80fe1389d61d6a589e27ccc7067a5ce6fa2f79b6ed5279a59ecb11074bffdc344da78fd6d9d4051dda9380f6a0131beb27dee216255b003cfed235abba923f70f82f059de8254ce74cfbe709cb0fc8898a3a45acdc2d98a83b1abc22b69c9843c2787f6109c9c7f655c12bd6d4494ed02f132ff154a75e65e7e2b8d60535c50ad4eebcaf4650d9c8d297658abcc802008b13c7edef23e65d645fde267dae6d9db8db53c5b4481370ea24f6657ae740ea0074b787cc47ff24617ed30012816998967f942c963f0abde5d76c9d7e036b4130a1e6c3dd27a010e3b62b17167e91b3df5126f679f0f", 0x4fd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff0", 0x8b}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c798", 0x72}, {&(0x7f0000000280)="020000004efaa2ac07000000f82c3e103b796b2aa4ba04", 0x17}, {&(0x7f0000003180)="6d2657493131db30447fce55af67ac7d10106db6d5cacd06cd9a37b801ded29e208feef1fc2a5b2369394c4f45abb57650128aadd2d2c5d12923e59ced50429a6897824e0090dd75bbbc4869c58ec6ab845c5e0e2017cb9d1b31754ebe5caa1dd771d3520e696a2a4acd6032d5ee2fa4dff66e04c87dc5936a617cd9eec3fb68938a7659f8b149c3448d86d4f2f7147b1030bef843cf12730a68ead2567613e33d2ebd8a0e71d5a0aa644a49e6a5103910249b2ea2802be53c6a0021ca78c6d2f49f6fe8e7183fd3548d0010901b1f9fe635372f7f", 0xd5}, {&(0x7f0000003080)="a215c0add719490a88f0d4", 0xb}], 0x5}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="954194bd6e378f15547b36f62457be335521947a9db02e7f988d9d1cc01cac827ceefefdcb666576a3a63428549fba6ebc7ef5f6e94bc5d810d5e1faa382282a28d8268d0dcd384c00784db5d8d693facca9c2f174aecfc20271853d321b961c7487fcb751c897d194cabaf7d059aae9c46585f78c3c1e0dbc7555ca34dda127d81fd07f83191de10d558b5367a85f66cae5600165cd12a4e73612dcb8fd2d7261669dea422005ac8ed1d429c2a5a206e26fb079dbac62fc1336e42a6fbfe89a601d3c224f1fad", 0xc7}, {&(0x7f0000000880)="f3b34a814525128b65c87cfcf403a8fb45f2b836f62fc7966581820843259f62175795356992", 0x26}, {0x0}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="a0000000000000000000000007000000441cf603ffffffff00000005ac1416bb00000008ac1414050000000544148941ac14144300000005e000000200000873072743e0000002ac1414bb7f000001e0000001ffffffffac1e0001ffffffff7f000001ac1e0001443443310000000000000008ac1e0101fffff001e000000100000004ac14143100000004e000000100000005e00000010000000088020000001400000000000000000000000200000001010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a01010200000000000000001400000000000000"], 0xf0}}], 0x3, 0x4000040) 33m24.095850156s ago: executing program 3 (id=684): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) fallocate(r0, 0x0, 0x0, 0x1001f4) 33m22.9252546s ago: executing program 3 (id=691): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700000000000000"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aad", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737491a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f", 0x7e}, {&(0x7f0000000340)}, {&(0x7f0000000640)="2a03a0cba4b85fbbdf75673f3ded77ee28c50735968e37f3e3786478a31197705a76751c11d25805e6658f2b1cd202fc4625cd82d206d0e085ca1ce4570325e54a781f16b031d2f5848c7bd33da968c99f8387c5", 0x54}], 0x3}}], 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_emit_ethernet(0xc6, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080047deffb700000000001190780000000000000000940400000007032800004e20009c61fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f772b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe"], 0x0) setgroups(0x1, &(0x7f0000000080)=[0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 33m22.388752204s ago: executing program 3 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 33m22.115488226s ago: executing program 3 (id=695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x8000000000000}, 0x18) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) 33m21.487583137s ago: executing program 3 (id=698): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 33m21.031533983s ago: executing program 32 (id=698): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r4}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 32m2.115182371s ago: executing program 0 (id=1196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "02ae737e1ec5879b", "51b8ae06e4e0b089a35a8290d874ae76", "1cf94bcb", "d44d78d2c022020d"}, 0x28) 32m1.866474811s ago: executing program 0 (id=1202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xe8, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0xb0, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x8c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xe8}}, 0x0) 32m1.603939533s ago: executing program 0 (id=1204): bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") 31m59.287765419s ago: executing program 0 (id=1207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) 31m59.079705156s ago: executing program 0 (id=1211): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x8000000, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x4040, &(0x7f0000000340)={0x23, 0x1, 0x56, 0x6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 31m56.718983017s ago: executing program 0 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000013c292f8c9e8c292aa4064b4e75d401369d4ea21aaecc5b76db7d1aa66b7c793f3af66615d71660a41127e8ead9ffdda820a0b22d48a5c9d567c832533364cd5bcc0b882b0eed823cb215bb88f5408219485f92e039fd8042ba21d943a10c76b37ddc7dc94f1152715a44426df2e59cae23f27adf28f7e08e68539e6539ab5657d19f34aa1337da387a8319940b268fb4980935d1524a8a994693a5ee2a4b950e0501256f0a557189d0b9d28f6631c3a08628ccba63778fd95611fe6c12e7aa2c33faa0a169967e70e874c5ba163082"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="b80100b711ad1ab4629898", @ANYRES16=r3, @ANYBLOB="000325bd7000fedbdf2515000000240002801c000380080001000100000008000200030000000800020004000000040004009000028044000380080002000100000008000100030000000800010008000000080002000180000008000200406a0000080002000400000008000200000000000800020080000000040003800800010001000000080002000d0000002c00038008000200070000000800010009000000080001000700000008000100ffffffff080002000300000004000400040004001400028008000100030000000800020000000000c800058008000100657468001c00028008000200060000000800020001000000080003000800000034000280080002007105000008000300800e000008000100060000000800010017000000080001001700000008000300000100002400028008000200b200000008000200020000000800030001000100080001000a0000002c0002800800010002000000080003000100000008000300040000000800010012000000080002000800000008000100756470000c00028008000400e70a000007000100696200001400098008000100990300000800020003000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x24000082}, 0xc880) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ptrace$peek(0x3, r5, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) 31m41.55088244s ago: executing program 33 (id=1230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) r2 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="b80100b711ad1ab4629898", @ANYRES16=r3, @ANYBLOB="000325bd7000fedbdf2515000000240002801c000380080001000100000008000200030000000800020004000000040004009000028044000380080002000100000008000100030000000800010008000000080002000180000008000200406a0000080002000400000008000200000000000800020080000000040003800800010001000000080002000d0000002c00038008000200070000000800010009000000080001000700000008000100ffffffff080002000300000004000400040004001400028008000100030000000800020000000000c800058008000100657468001c00028008000200060000000800020001000000080003000800000034000280080002007105000008000300800e000008000100060000000800010017000000080001001700000008000300000100002400028008000200b200000008000200020000000800030001000100080001000a0000002c0002800800010002000000080003000100000008000300040000000800010012000000080002000800000008000100756470000c00028008000400e70a000007000100696200001400098008000100990300000800020003000000"], 0x1b8}, 0x1, 0x0, 0x0, 0x24000082}, 0xc880) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) ptrace$peek(0x3, r5, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) 12.362204132s ago: executing program 4 (id=5607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 11.499500572s ago: executing program 2 (id=5610): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x109000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x2, 0x3ff, 0x4, 0x6, 0x1, 0x8}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 9.845617176s ago: executing program 2 (id=5614): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x109000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x2, 0x3ff, 0x4, 0x6, 0x1, 0x8}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 9.568001978s ago: executing program 5 (id=5616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4441, &(0x7f0000004480)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) 8.975950706s ago: executing program 5 (id=5617): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000210", @ANYBLOB="877036"], 0x18}}, 0x0) 7.855095717s ago: executing program 2 (id=5618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) write$sndseq(r1, &(0x7f0000000280)=[{0x5, 0xd, 0x6, 0x6, @tick=0x3, {0xfe, 0x7f}, {0xd, 0x65}, @time=@tick=0x9}], 0x1c) 7.818417369s ago: executing program 5 (id=5619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040003}, 0x8880) 7.367967455s ago: executing program 1 (id=5620): write$tun(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0000115db66cfc00004d61e9ccdcd00060ec970000302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a000000000000e4bed7bfdcbe50ff435b63f8008902907800000000fc0000000100000000000000000000000000ff00000000000000ffff"], 0xfdef) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000001060103000000000000000007050000009f7cf544e439296cfe7fd690be13ef030c0407f756a9900436a20a"], 0x24}, 0x1, 0x0, 0x0, 0x4003}, 0x40880) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) 6.552817751s ago: executing program 1 (id=5621): socket$nl_generic(0x11, 0x3, 0x10) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x2) 6.042716502s ago: executing program 2 (id=5622): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000680)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@discard}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@flushoncommit}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x2d]}}]}, 0x1, 0x5101, &(0x7f000000f3c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000200)={0x2, 0x6, 0x4000000000000000}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x60842, 0xc) write$FUSE_STATFS(r2, &(0x7f0000000140)={0x60, 0x0, 0x0, {{0x0, 0xf77e, 0x6, 0x2, 0x8, 0x1, 0x4, 0x4}}}, 0xf6d) 5.890523045s ago: executing program 4 (id=5623): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594012124fc60", 0x14}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40094) 5.527891794s ago: executing program 1 (id=5624): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x5adae000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) 5.307438362s ago: executing program 4 (id=5625): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 4.887844276s ago: executing program 4 (id=5626): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) 4.427557393s ago: executing program 4 (id=5627): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xda, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) 4.037117595s ago: executing program 1 (id=5628): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)={[{@nouser_xattr}, {@heartbeat_none}, {@err_ro}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@err_cont}, {@data_writeback}, {@nointr}, {@noacl}]}, 0x1, 0x4431, &(0x7f0000004480)="$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") creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x24) creat(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r1, 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.542702985s ago: executing program 2 (id=5629): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r1 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) fallocate(r1, 0x0, 0x0, 0x7000000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x6}, 0x0) r2 = dup(r0) readv(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001300)={0x0, &(0x7f00000012c0)}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) timer_settime(0x0, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x4, 0x7, 0x0, 0x8, 'syz1\x00'}) 2.431800704s ago: executing program 1 (id=5630): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') symlink(&(0x7f00000000c0)='mnt\x00', &(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) chmod(&(0x7f0000000cc0)='./file0\x00', 0x0) 1.773117687s ago: executing program 1 (id=5631): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r1 = socket(0x14, 0x2, 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x42030028, 0x0, 0x0) 1.145012128s ago: executing program 34 (id=5631): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r1 = socket(0x14, 0x2, 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x42030028, 0x0, 0x0) 1.12210679s ago: executing program 5 (id=5633): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9', 0x1}], 0x1) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x7, 0x5, 0xfc000000}) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1.12137413s ago: executing program 4 (id=5634): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xfe, 0xa46, &(0x7f00000014c0)="$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") r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mknod$loop(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_usb_connect(0x2, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 835.721313ms ago: executing program 5 (id=5635): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x48, &(0x7f0000000540)=[&(0x7f0000000280)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x16000, 0x200}]) 18.187309ms ago: executing program 5 (id=5636): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=5637): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @default, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000140)={@default, @default, 0x2, 0x20}) kernel console output (not intermixed with test programs): 3e) already exists on: batadv_slave_0 [ 1991.505621][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.515512][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1991.564144][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.603923][T24230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1991.638806][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1991.661986][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.682308][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1991.707905][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.736783][T24230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1991.761182][T24230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1991.783659][T24230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1991.823558][T24230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.845864][ T5860] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1991.846454][T24230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.883082][T24230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.895597][T24230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.047961][ T5860] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.072335][ T5860] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1992.084333][T23520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.105725][T23520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.106392][ T5860] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1992.154371][ T5860] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1992.186589][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.193579][T23520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.212989][ T5860] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1992.214162][T23520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.242825][ T5860] usb 6-1: invalid MIDI out EP 0 [ 1992.373069][ T5860] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1992.577566][T21567] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 1992.953934][T24401] loop2: detected capacity change from 0 to 256 [ 1993.125248][T24401] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1993.237301][T24401] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1994.476952][T23980] usb 6-1: USB disconnect, device number 28 [ 1994.503314][T24401] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1994.687024][ T7165] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1995.886559][ T7165] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.925690][ T7165] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1995.955641][ T7165] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1995.989119][ T7165] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1996.009349][ T7165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.032801][ T7165] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1996.051169][ T7165] usb 2-1: invalid MIDI out EP 0 [ 1996.092854][T24417] loop4: detected capacity change from 0 to 4096 [ 1996.116567][ T7165] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 1996.225090][ T5833] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1996.313071][T24419] loop4: detected capacity change from 0 to 4096 [ 1996.332903][T24419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1996.434465][ T5833] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1996.475334][ T5833] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1996.545631][ T5833] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1996.634938][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1996.667855][ T5833] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1996.709604][ T5860] usb 2-1: USB disconnect, device number 30 [ 1996.791993][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.172368][ T5833] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 1997.425179][ T5833] usb 6-1: invalid MIDI out EP 0 [ 1997.677332][ T5833] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 1997.820291][ T5833] usb 6-1: USB disconnect, device number 29 [ 1999.897970][T24445] loop5: detected capacity change from 0 to 4096 [ 2001.922776][T24445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2003.096104][T22790] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2003.107589][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2004.170976][T20529] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2004.457826][T20529] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.493891][T20529] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2004.613055][T20529] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2004.751087][T20529] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2004.843727][T20529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.214923][T20529] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2005.303690][T20529] usb 6-1: invalid MIDI out EP 0 [ 2005.632236][T20529] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 2005.651186][T24459] loop4: detected capacity change from 0 to 32768 [ 2005.683917][T24459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5347 (24459) [ 2005.787971][T24455] loop2: detected capacity change from 0 to 32768 [ 2005.803971][T24455] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.5345 (24455) [ 2005.961496][T24459] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2006.927522][T17114] usb 6-1: USB disconnect, device number 30 [ 2006.935390][T24459] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2006.952882][T24459] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2006.987723][T24459] BTRFS info (device loop4): disabling tree log [ 2007.005437][T24459] BTRFS info (device loop4): turning on sync discard [ 2007.030132][T24459] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2007.055231][T24459] BTRFS info (device loop4): force zstd compression, level 3 [ 2007.064413][T24459] BTRFS info (device loop4): using free space tree [ 2007.076208][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 2007.102930][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 2007.114884][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 2007.143670][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 2007.174066][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 2007.187739][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 2007.230187][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 2007.299998][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 2007.464631][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 2007.544320][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 2007.661553][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 2007.789473][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 2007.889186][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 2008.106411][T24459] BTRFS error (device loop4): open_ctree failed: -12 [ 2008.560780][T24478] loop5: detected capacity change from 0 to 32768 [ 2008.573446][T24478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5350 (24478) [ 2008.585677][T17114] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2008.601507][T24478] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2008.615285][T24478] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2008.624144][T24478] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2008.635771][T24478] BTRFS info (device loop5): disabling tree log [ 2008.642100][T24478] BTRFS info (device loop5): turning on sync discard [ 2008.769014][T17114] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.795760][T24478] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2008.810305][T17114] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2008.835922][T24478] BTRFS info (device loop5): force zstd compression, level 3 [ 2008.845768][T17114] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2008.865380][T24478] BTRFS info (device loop5): using free space tree [ 2008.899661][T17114] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2008.928521][T17114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.972213][T17114] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2008.982537][T24497] loop4: detected capacity change from 0 to 32768 [ 2008.992658][T24497] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5352 (24497) [ 2009.001837][T17114] usb 3-1: invalid MIDI out EP 0 [ 2009.021719][T24478] BTRFS info (device loop5): enabling ssd optimizations [ 2009.052675][T17114] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2009.232829][T24516] loop1: detected capacity change from 0 to 4096 [ 2009.316902][T24516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2010.898819][ T5860] usb 3-1: USB disconnect, device number 39 [ 2011.186889][T24497] loop4: detected capacity change from 0 to 4096 [ 2011.194222][T24497] EXT4-fs: Ignoring removed mblk_io_submit option [ 2011.208972][T24497] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2011.255061][T24497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2011.686538][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2011.837489][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2013.126357][T24526] loop4: detected capacity change from 0 to 32768 [ 2013.145916][T24526] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5356 (24526) [ 2013.185290][T24526] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2013.205785][T24526] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2013.224612][T24526] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2013.251114][T24526] BTRFS info (device loop4): disabling tree log [ 2013.275019][T24526] BTRFS info (device loop4): turning on sync discard [ 2013.315596][T24526] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2013.331066][T24532] loop5: detected capacity change from 0 to 32768 [ 2013.347887][T24526] BTRFS info (device loop4): force zstd compression, level 3 [ 2013.355364][T24526] BTRFS info (device loop4): using free space tree [ 2013.377438][T24532] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.5358 (24532) [ 2013.515049][T24526] BTRFS info (device loop4): enabling ssd optimizations [ 2014.041695][T24532] loop5: detected capacity change from 0 to 4096 [ 2014.154683][T24532] EXT4-fs: Ignoring removed mblk_io_submit option [ 2014.998464][T24532] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2015.109879][T24532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2015.405729][T21669] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2015.609958][T21669] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.635670][T21669] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2015.647396][T21669] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2015.665217][T21669] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2015.678845][T21669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.717984][T21669] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2015.775301][T21669] usb 3-1: invalid MIDI out EP 0 [ 2015.786898][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2015.941436][T21669] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2016.100001][T16412] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2017.202829][T22790] usb 3-1: USB disconnect, device number 40 [ 2017.744733][T24561] loop5: detected capacity change from 0 to 32768 [ 2017.753229][T24561] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5361 (24561) [ 2017.779199][T24561] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2017.789709][T24561] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2017.798648][T24561] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2017.800600][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2017.806966][T24561] BTRFS info (device loop5): disabling tree log [ 2017.822415][T24561] BTRFS info (device loop5): turning on sync discard [ 2017.842729][T24561] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2017.857983][T24561] BTRFS info (device loop5): force zstd compression, level 3 [ 2017.866542][T24561] BTRFS info (device loop5): using free space tree [ 2017.903123][T24561] BTRFS info (device loop5): enabling ssd optimizations [ 2019.543481][T24583] loop1: detected capacity change from 0 to 32768 [ 2019.562795][T24583] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5363 (24583) [ 2019.618448][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2020.041566][T24583] loop1: detected capacity change from 0 to 4096 [ 2020.059100][T24583] EXT4-fs: Ignoring removed mblk_io_submit option [ 2020.073749][T24583] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2020.352820][T24583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2020.393017][T24591] loop2: detected capacity change from 0 to 32768 [ 2020.401618][T24591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5367 (24591) [ 2021.572112][T24591] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2021.585158][T24591] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2021.604963][T24591] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2021.613614][T24591] BTRFS info (device loop2): disabling tree log [ 2022.375676][T24591] BTRFS info (device loop2): turning on sync discard [ 2022.382537][T24591] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2022.425043][T24591] BTRFS info (device loop2): force zstd compression, level 3 [ 2022.460941][T24591] BTRFS info (device loop2): using free space tree [ 2022.545738][T24591] BTRFS info (device loop2): enabling ssd optimizations [ 2022.920168][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2024.306909][T21567] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2024.516740][T24230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2024.825673][T22790] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2024.850291][T24624] loop5: detected capacity change from 0 to 32768 [ 2024.859824][T24622] loop4: detected capacity change from 0 to 32768 [ 2024.877412][T24624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5370 (24624) [ 2024.908750][T24622] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5369 (24622) [ 2024.951065][T24624] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2024.961934][T24624] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2024.971604][T24624] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2025.105516][T24624] BTRFS info (device loop5): disabling tree log [ 2025.112041][T24624] BTRFS info (device loop5): turning on sync discard [ 2025.141036][T24624] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2025.165609][T24624] BTRFS info (device loop5): force zstd compression, level 3 [ 2025.183556][T24624] BTRFS info (device loop5): using free space tree [ 2025.265082][T22790] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.276491][T22790] usb 2-1: config 0 has no interfaces? [ 2025.282102][T22790] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2025.292037][T22790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2025.304439][T22790] usb 2-1: config 0 descriptor?? [ 2025.716439][T24624] BTRFS info (device loop5): enabling ssd optimizations [ 2026.141445][T24622] loop4: detected capacity change from 0 to 4096 [ 2026.188324][T24622] EXT4-fs: Ignoring removed mblk_io_submit option [ 2026.202201][T24622] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2027.111708][T20529] usb 2-1: USB disconnect, device number 31 [ 2027.177643][T24622] EXT4-fs: error -4 creating inode table initialization thread [ 2027.197203][T24622] EXT4-fs (loop4): mount failed [ 2027.301429][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2027.684883][T24658] loop4: detected capacity change from 0 to 4096 [ 2027.720378][T24652] loop2: detected capacity change from 0 to 32768 [ 2027.751080][T24652] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5373 (24652) [ 2027.784728][T24652] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2027.795366][T24652] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2027.804933][T24652] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2027.813371][T24652] BTRFS info (device loop2): disabling tree log [ 2027.831330][T24652] BTRFS info (device loop2): turning on sync discard [ 2027.856740][T24652] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2028.045294][T24663] loop5: detected capacity change from 0 to 4096 [ 2028.082474][T24652] BTRFS info (device loop2): force zstd compression, level 3 [ 2028.127148][T24663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2028.500790][T24652] BTRFS info (device loop2): using free space tree [ 2028.967430][T24652] BTRFS info (device loop2): enabling ssd optimizations [ 2029.841652][T24230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2030.032781][T24685] loop4: detected capacity change from 0 to 4096 [ 2030.241510][T24685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2030.610989][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2030.639143][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2031.425635][T22790] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2031.519753][T24695] loop4: detected capacity change from 0 to 32768 [ 2031.529986][T24692] loop5: detected capacity change from 0 to 32768 [ 2031.538357][T24695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5380 (24695) [ 2031.542524][T24693] loop1: detected capacity change from 0 to 32768 [ 2031.562131][T24692] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.5378 (24692) [ 2031.563750][T24695] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2031.575052][T24693] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5381 (24693) [ 2031.590108][T24695] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2031.602347][T24695] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2031.614114][T24695] BTRFS info (device loop4): disabling tree log [ 2031.620726][T24695] BTRFS info (device loop4): turning on sync discard [ 2031.632587][T24695] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2031.642768][T24695] BTRFS info (device loop4): force zstd compression, level 3 [ 2031.653169][T22790] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.668903][T22790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2031.675746][T24695] BTRFS info (device loop4): using free space tree [ 2031.684307][T22790] usb 3-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 2031.701019][T22790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.712486][T22790] usb 3-1: config 0 descriptor?? [ 2031.835752][T24695] BTRFS info (device loop4): enabling ssd optimizations [ 2031.948119][T24693] loop1: detected capacity change from 0 to 4096 [ 2031.955991][T24693] EXT4-fs: Ignoring removed mblk_io_submit option [ 2031.981581][T24692] loop5: detected capacity change from 0 to 4096 [ 2031.989106][T24692] EXT4-fs: Ignoring removed mblk_io_submit option [ 2031.996810][T24693] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2032.006736][T24692] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2032.020288][T24692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2032.035839][T24693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2032.149219][T22790] logitech 0003:046D:C283.0004: item fetching failed at offset 6/7 [ 2032.158847][T22790] logitech 0003:046D:C283.0004: parse failed [ 2032.167312][T22790] logitech: probe of 0003:046D:C283.0004 failed with error -22 [ 2032.439924][ T5833] usb 3-1: USB disconnect, device number 41 [ 2032.876870][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2032.948924][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2033.034693][T16412] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2034.209335][T24722] loop2: detected capacity change from 0 to 4096 [ 2036.102216][T24727] loop1: detected capacity change from 0 to 32768 [ 2036.110678][T24727] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5386 (24727) [ 2036.126616][T24727] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2036.137999][T24727] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2036.146883][T24727] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2036.155010][T24727] BTRFS info (device loop1): disabling tree log [ 2036.173925][T24727] BTRFS info (device loop1): turning on sync discard [ 2036.185624][T24727] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2036.199951][T24727] BTRFS info (device loop1): force zstd compression, level 3 [ 2036.217905][T24727] BTRFS info (device loop1): using free space tree [ 2036.476193][T24742] loop2: detected capacity change from 0 to 4096 [ 2036.555843][T24742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2037.696752][T20529] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2037.913491][T20529] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.937024][T20529] usb 6-1: config 0 has no interfaces? [ 2037.942589][T20529] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2038.000023][T20529] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.029388][T20529] usb 6-1: config 0 descriptor?? [ 2038.071832][T24739] loop4: detected capacity change from 0 to 32768 [ 2038.088119][T24727] BTRFS error (device loop1): open_ctree failed: -4 [ 2038.092976][T24739] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5389 (24739) [ 2038.531888][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.552790][T24739] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2038.573336][T24739] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2038.600351][T24739] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2039.448936][ T5833] usb 6-1: USB disconnect, device number 31 [ 2039.455085][T24739] BTRFS info (device loop4): disabling tree log [ 2039.512467][T24739] BTRFS info (device loop4): turning on sync discard [ 2039.540799][T24739] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2039.576950][T24230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2039.584019][T24739] BTRFS info (device loop4): force zstd compression, level 3 [ 2039.593541][T24739] BTRFS info (device loop4): using free space tree [ 2039.606013][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 2039.606879][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 2039.641586][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 2039.670454][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 2039.699347][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 2039.718345][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 2039.745460][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 2039.756560][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 2039.783568][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 2039.809229][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 2039.821300][T24739] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 2039.853647][T24739] BTRFS error (device loop4): open_ctree failed: -12 [ 2040.145697][ T7167] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2040.297263][T24782] loop1: detected capacity change from 0 to 32768 [ 2040.305199][T24782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5393 (24782) [ 2040.321457][T24782] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2040.332330][T24782] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2040.341240][T24782] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2040.349683][T24782] BTRFS info (device loop1): disabling tree log [ 2040.349904][ T7167] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2040.356270][T24782] BTRFS info (device loop1): turning on sync discard [ 2040.373177][T24782] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2040.373220][ T7167] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2040.382755][T24782] BTRFS info (device loop1): force zstd compression, level 3 [ 2040.396746][ T7167] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2040.413538][ T7167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.413847][T24782] BTRFS info (device loop1): using free space tree [ 2040.431517][ T7167] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2040.456763][ T7167] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 2040.474299][T24782] BTRFS info (device loop1): enabling ssd optimizations [ 2040.835463][T24801] loop5: detected capacity change from 0 to 4096 [ 2041.980515][T21669] usb 3-1: USB disconnect, device number 42 [ 2042.262616][T23115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2042.767006][T24807] loop5: detected capacity change from 0 to 32768 [ 2042.785718][T24807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5396 (24807) [ 2042.802555][T24807] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2042.814974][T24807] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2042.823903][T24807] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2042.832189][T24807] BTRFS info (device loop5): disabling tree log [ 2042.838610][T24807] BTRFS info (device loop5): turning on sync discard [ 2042.845465][T24807] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2042.856394][T24807] BTRFS info (device loop5): force zstd compression, level 3 [ 2042.863860][T24807] BTRFS info (device loop5): using free space tree [ 2042.896333][T24807] BTRFS info (device loop5): enabling ssd optimizations [ 2043.202609][T24809] loop1: detected capacity change from 0 to 32768 [ 2043.245359][T24809] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5397 (24809) [ 2043.727724][ T7167] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2044.423995][ T7167] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.432448][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2044.459191][ T7167] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2045.445685][ T7167] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2045.454800][ T7167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.519951][ T7167] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2045.618264][ T7167] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 2045.811898][T24809] loop1: detected capacity change from 0 to 4096 [ 2045.866995][T24809] EXT4-fs: Ignoring removed mblk_io_submit option [ 2046.177791][T24809] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2047.152716][T24809] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 2047.155063][T24809] EXT4-fs: failed to create workqueue [ 2047.170706][T21669] usb 3-1: USB disconnect, device number 43 [ 2047.194763][T24809] EXT4-fs (loop1): mount failed [ 2049.281863][T24847] loop1: detected capacity change from 0 to 32768 [ 2049.308662][T24847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5403 (24847) [ 2049.343795][T24847] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2049.353561][T24853] loop2: detected capacity change from 0 to 32768 [ 2049.367848][T24853] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.5404 (24853) [ 2049.374611][T24847] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2049.394590][T24847] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2049.403535][T24847] BTRFS info (device loop1): disabling tree log [ 2049.411202][T24847] BTRFS info (device loop1): turning on sync discard [ 2049.418068][T24847] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2049.433204][T24847] BTRFS info (device loop1): force zstd compression, level 3 [ 2049.441164][T24847] BTRFS info (device loop1): using free space tree [ 2049.512445][T24851] loop5: detected capacity change from 0 to 32768 [ 2049.528288][T24851] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.5405 (24851) [ 2049.550127][T24847] BTRFS info (device loop1): enabling ssd optimizations [ 2049.669396][T24853] loop2: detected capacity change from 0 to 4096 [ 2049.677514][T24853] EXT4-fs: Ignoring removed mblk_io_submit option [ 2049.686932][T24853] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2049.737183][T24853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2050.011272][T24851] loop5: detected capacity change from 0 to 4096 [ 2050.020844][T24851] EXT4-fs: Ignoring removed mblk_io_submit option [ 2050.031478][T24851] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2050.060735][T24851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2050.195303][T24230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2050.237948][T23115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2053.259432][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2053.585775][T17114] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2053.795020][T17114] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2053.806381][T17114] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2053.819057][T17114] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2053.896759][T17114] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2053.906117][T17114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.042212][T17114] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2054.058129][T17114] usb 2-1: invalid MIDI out EP 0 [ 2054.127858][T17114] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 2056.483680][T17114] usb 2-1: USB disconnect, device number 32 [ 2056.866780][T24891] loop4: detected capacity change from 0 to 32768 [ 2056.877474][T24891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5411 (24891) [ 2056.916194][T21669] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2056.924855][T24891] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2056.936106][T24891] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2056.950841][T24891] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2056.979279][T24891] BTRFS info (device loop4): disabling tree log [ 2057.005570][T24891] BTRFS info (device loop4): turning on sync discard [ 2057.015612][T24891] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2057.035368][T24891] BTRFS info (device loop4): force zstd compression, level 3 [ 2057.055805][T24891] BTRFS info (device loop4): using free space tree [ 2057.128068][T21669] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.139315][T21669] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2057.151114][T21669] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2057.162156][T21669] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2057.203863][T21669] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2057.213357][T21669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.246609][T21669] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2057.255631][T21669] usb 3-1: invalid MIDI out EP 0 [ 2057.270951][T24891] BTRFS error (device loop4): open_ctree failed: -4 [ 2057.302023][T21669] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2058.953193][ T7165] usb 3-1: USB disconnect, device number 44 [ 2059.093513][T24902] loop5: detected capacity change from 0 to 32768 [ 2059.151917][T24902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5414 (24902) [ 2059.174485][T24902] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2059.202114][T24902] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2059.225728][T24902] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2059.234387][T24918] loop4: detected capacity change from 0 to 32768 [ 2059.240747][T24918] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5415 (24918) [ 2059.263185][T24902] BTRFS info (device loop5): disabling tree log [ 2059.270991][T24902] BTRFS info (device loop5): turning on sync discard [ 2059.281855][T24902] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2059.293058][T24902] BTRFS info (device loop5): force zstd compression, level 3 [ 2059.304562][T24902] BTRFS info (device loop5): using free space tree [ 2059.359731][T24902] BTRFS info (device loop5): enabling ssd optimizations [ 2059.458461][T24920] loop1: detected capacity change from 0 to 32768 [ 2059.473599][T24920] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5416 (24920) [ 2059.573852][T24918] loop4: detected capacity change from 0 to 4096 [ 2059.585100][T24918] EXT4-fs: Ignoring removed mblk_io_submit option [ 2059.602445][T24918] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2059.649185][T24918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2059.981747][T24920] loop1: detected capacity change from 0 to 4096 [ 2059.989511][T24920] EXT4-fs: Ignoring removed mblk_io_submit option [ 2060.098092][T24920] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2060.229103][T24920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2060.363520][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2060.436381][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2060.959127][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2063.037068][T24952] loop5: detected capacity change from 0 to 32768 [ 2063.054140][T24952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5419 (24952) [ 2063.099336][T24952] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2063.117373][T24952] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2063.127634][T24952] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2063.136126][T24952] BTRFS info (device loop5): disabling tree log [ 2063.142637][T24952] BTRFS info (device loop5): turning on sync discard [ 2063.149591][T24952] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2063.159540][T24952] BTRFS info (device loop5): force zstd compression, level 3 [ 2063.167118][T24952] BTRFS info (device loop5): using free space tree [ 2063.839853][T24952] BTRFS info (device loop5): enabling ssd optimizations [ 2064.203499][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2065.414904][T24965] loop1: detected capacity change from 0 to 32768 [ 2065.445826][T24965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5423 (24965) [ 2065.514723][T24965] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2065.543124][T24965] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2065.560573][T24965] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2065.597500][T24965] BTRFS info (device loop1): disabling tree log [ 2065.605000][T24965] BTRFS info (device loop1): turning on sync discard [ 2065.641101][T24965] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2065.706057][T24965] BTRFS info (device loop1): force zstd compression, level 3 [ 2065.801298][T24965] BTRFS info (device loop1): using free space tree [ 2066.123078][T24965] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 2066.160049][T24965] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 2066.462283][T24965] BTRFS error (device loop1): open_ctree failed: -12 [ 2066.542364][T24984] loop2: detected capacity change from 0 to 32768 [ 2067.067237][T24984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5424 (24984) [ 2067.216198][T24984] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2067.241056][T24984] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2067.253405][T24984] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2067.293908][T24984] BTRFS info (device loop2): disabling tree log [ 2067.315652][T24984] BTRFS info (device loop2): turning on sync discard [ 2067.343544][T24984] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2067.361254][T24984] BTRFS info (device loop2): force zstd compression, level 3 [ 2067.384442][T24984] BTRFS info (device loop2): using free space tree [ 2067.399365][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 2067.401928][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 2067.439689][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 2067.477965][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 2067.511426][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 2067.631704][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 2067.662258][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 2067.717883][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 2067.763380][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 2067.796534][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 2067.831279][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 2067.859633][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 2067.895459][T24984] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 2067.920534][T24984] BTRFS error (device loop2): open_ctree failed: -12 [ 2068.099359][T25012] loop4: detected capacity change from 0 to 32768 [ 2068.126487][T25012] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5429 (25012) [ 2068.205477][T25012] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2068.226141][T25012] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2068.234921][T25012] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2068.260393][T25012] BTRFS info (device loop4): disabling tree log [ 2068.289396][T25012] BTRFS info (device loop4): turning on sync discard [ 2068.305624][T25012] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2068.325631][T25012] BTRFS info (device loop4): force zstd compression, level 3 [ 2068.333113][T25012] BTRFS info (device loop4): using free space tree [ 2068.511626][T25012] BTRFS info (device loop4): enabling ssd optimizations [ 2068.788245][T25025] loop1: detected capacity change from 0 to 32768 [ 2068.814560][T25021] loop5: detected capacity change from 0 to 40427 [ 2068.836828][T25021] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 2068.843852][T25021] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2068.856295][T25025] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5428 (25025) [ 2068.866027][T25021] F2FS-fs (loop5): invalid crc value [ 2068.881750][T25021] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2069.585738][ T28] audit: type=1800 audit(1754267767.900:3091): pid=25054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5429" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 2069.653587][ T28] audit: type=1800 audit(1754267767.980:3092): pid=25054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5429" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 2069.687271][T25021] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2069.725190][T25021] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2069.912807][T25025] loop1: detected capacity change from 0 to 4096 [ 2069.924202][T25025] EXT4-fs: Ignoring removed mblk_io_submit option [ 2069.954919][T25025] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2070.013286][T25025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2070.104839][T16412] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2070.298275][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2071.210074][T25057] loop2: detected capacity change from 0 to 32768 [ 2071.302065][T25057] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5432 (25057) [ 2071.323555][T25068] loop4: detected capacity change from 0 to 4096 [ 2071.348415][T25068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2071.404278][T25057] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2071.432784][T25057] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2071.451309][T25057] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2071.478117][T25057] BTRFS info (device loop2): disabling tree log [ 2071.484481][T25057] BTRFS info (device loop2): turning on sync discard [ 2071.542590][T25057] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2071.574474][T25057] BTRFS info (device loop2): force zstd compression, level 3 [ 2071.582032][T25057] BTRFS info (device loop2): using free space tree [ 2071.660671][T25057] BTRFS info (device loop2): enabling ssd optimizations [ 2071.904273][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2072.935766][T24230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2074.326924][T25093] loop5: detected capacity change from 0 to 32768 [ 2074.339998][T25093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5437 (25093) [ 2074.360457][T25093] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2074.372097][T25093] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2074.381292][T25093] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2074.390344][T25093] BTRFS info (device loop5): disabling tree log [ 2074.396863][T25093] BTRFS info (device loop5): turning on sync discard [ 2074.403622][T25093] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2074.413251][T25093] BTRFS info (device loop5): force zstd compression, level 3 [ 2074.420773][T25093] BTRFS info (device loop5): using free space tree [ 2074.440149][T17114] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2074.468266][T25093] BTRFS info (device loop5): enabling ssd optimizations [ 2074.641509][T17114] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.653259][T17114] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2074.664812][T17114] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2074.678210][T17114] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2074.687376][T17114] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.717406][T17114] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2074.724999][T17114] usb 3-1: invalid MIDI out EP 0 [ 2074.844457][T17114] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2074.891120][T21669] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2075.206162][T21669] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.228457][T21669] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2075.240172][T21669] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2076.204136][T18178] usb 3-1: USB disconnect, device number 45 [ 2076.239888][T21669] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2076.268724][T21669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.270741][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2076.321297][T21669] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2076.349763][T21669] usb 2-1: invalid MIDI out EP 0 [ 2076.421963][T21669] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 2076.993441][T21669] usb 2-1: USB disconnect, device number 33 [ 2077.861357][T25126] loop5: detected capacity change from 0 to 32768 [ 2077.879932][T25126] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5442 (25126) [ 2077.913207][T25126] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2077.935658][T25126] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 2077.944421][T25126] BTRFS info (device loop5): setting nodatacow, compression disabled [ 2077.965587][T25126] BTRFS info (device loop5): disabling tree log [ 2077.971916][T25126] BTRFS info (device loop5): turning on sync discard [ 2077.995642][T25126] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2078.005114][T25126] BTRFS info (device loop5): force zstd compression, level 3 [ 2078.035606][T25126] BTRFS info (device loop5): using free space tree [ 2078.082746][T25126] BTRFS info (device loop5): enabling ssd optimizations [ 2078.247639][T25130] loop2: detected capacity change from 0 to 32768 [ 2078.257029][T25130] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.5443 (25130) [ 2078.660079][T15867] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2078.788658][T25130] loop2: detected capacity change from 0 to 4096 [ 2078.798362][T25130] EXT4-fs: Ignoring removed mblk_io_submit option [ 2078.878474][T25130] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2078.989077][T25130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2079.427668][T25157] loop5: detected capacity change from 0 to 4096 [ 2079.447915][T18178] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2079.568009][T25157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2080.092016][T18178] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.116869][T18178] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2080.205715][T18178] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2080.259170][T18178] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2080.309483][T18178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.364190][T18178] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2080.380873][T18178] usb 2-1: invalid MIDI out EP 0 [ 2080.444520][T18178] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 2080.528902][T24230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2081.370602][T21669] usb 2-1: USB disconnect, device number 34 [ 2083.781751][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2084.010797][T21567] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 2084.575125][T25175] loop1: detected capacity change from 0 to 32768 [ 2084.597314][T25175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5451 (25175) [ 2084.633075][T25175] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2084.664401][T25175] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2084.695737][T25175] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2084.703897][T25175] BTRFS info (device loop1): disabling tree log [ 2084.725765][T25175] BTRFS info (device loop1): turning on sync discard [ 2084.748222][T25175] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2084.763784][T25178] loop4: detected capacity change from 0 to 32768 [ 2084.780334][T25175] BTRFS info (device loop1): force zstd compression, level 3 [ 2084.791823][T25178] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5452 (25178) [ 2084.807323][T25175] BTRFS info (device loop1): using free space tree [ 2084.908599][T25183] loop5: detected capacity change from 0 to 32768 [ 2084.919909][T25183] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.5454 (25183) [ 2084.925806][T25175] BTRFS info (device loop1): enabling ssd optimizations [ 2085.095319][T25181] loop2: detected capacity change from 0 to 40427 [ 2085.115208][T25181] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 2085.125966][T25181] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2085.143023][T25181] F2FS-fs (loop2): invalid crc value [ 2085.153939][T25181] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2085.232907][T25181] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2085.266875][T25181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2085.465468][T25183] loop5: detected capacity change from 0 to 4096 [ 2085.506015][T25183] EXT4-fs: Ignoring removed mblk_io_submit option [ 2085.538652][T25183] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2085.589179][T25183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2086.521248][T21567] Bluetooth: hci1: command 0x0406 tx timeout [ 2087.035193][T23115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2087.212000][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2087.837799][T25216] loop4: detected capacity change from 0 to 32768 [ 2087.862242][T25216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5456 (25216) [ 2087.909287][T25216] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2087.970744][T25216] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2088.027582][T25216] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2088.045740][T25216] BTRFS info (device loop4): disabling tree log [ 2088.055767][T25216] BTRFS info (device loop4): turning on sync discard [ 2088.070152][T25216] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2088.092535][T25216] BTRFS info (device loop4): force zstd compression, level 3 [ 2088.107917][T25216] BTRFS info (device loop4): using free space tree [ 2088.376118][T25216] BTRFS info (device loop4): enabling ssd optimizations [ 2088.789954][T25241] loop5: detected capacity change from 0 to 4096 [ 2088.986751][T25241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2089.668986][T25221] loop1: detected capacity change from 0 to 32768 [ 2089.712799][T25221] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5457 (25221) [ 2090.632041][T25221] loop1: detected capacity change from 0 to 4096 [ 2090.639389][T25221] EXT4-fs: Ignoring removed mblk_io_submit option [ 2090.675992][T25221] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2090.701427][T16412] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2090.721123][T25221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2091.962617][T24221] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2091.999544][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2092.083449][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2092.340881][ T7165] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2092.525849][T21669] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2092.793332][T21669] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.955038][T21669] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2093.229078][T21669] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2093.244658][T21669] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2093.253962][T21669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.279030][T21669] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2093.296404][T21669] usb 6-1: invalid MIDI out EP 0 [ 2093.330133][ T7165] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2093.355658][ T7165] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2093.380735][T21669] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 2093.385651][ T7165] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2093.411259][ T7165] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2093.430649][ T7165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2093.464303][ T7165] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2093.482782][ T7165] usb 3-1: invalid MIDI out EP 0 [ 2093.577194][ T7165] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2095.018374][ T7165] usb 3-1: USB disconnect, device number 46 [ 2095.044976][T21669] usb 6-1: USB disconnect, device number 32 [ 2095.145060][T25263] loop4: detected capacity change from 0 to 40427 [ 2095.159623][T25263] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 2095.166081][T25265] loop1: detected capacity change from 0 to 32768 [ 2095.169864][T25263] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2095.179346][T25265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5466 (25265) [ 2095.190569][T25263] F2FS-fs (loop4): invalid crc value [ 2095.202778][T25265] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2095.206224][T25263] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2095.213511][T25265] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2095.228942][T25265] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2095.238023][T25265] BTRFS info (device loop1): disabling tree log [ 2095.244628][T25265] BTRFS info (device loop1): turning on sync discard [ 2095.256497][T25265] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2095.266485][T25265] BTRFS info (device loop1): force zstd compression, level 3 [ 2095.274018][T25265] BTRFS info (device loop1): using free space tree [ 2095.293663][T25263] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2095.303271][T25263] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2095.316483][T25265] BTRFS info (device loop1): enabling ssd optimizations [ 2096.647163][T23115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2096.695392][ T5833] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2097.279066][ T5833] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.420857][ T5833] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2097.580130][ T5833] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2097.760852][ T5833] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2097.770392][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.821225][ T5833] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2097.864322][ T5833] usb 6-1: invalid MIDI out EP 0 [ 2098.008578][ T5833] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 2099.771151][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2100.105811][T17114] usb 6-1: USB disconnect, device number 33 [ 2100.167037][T24221] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 2100.239221][T25309] loop1: detected capacity change from 0 to 32768 [ 2100.247605][T25309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5469 (25309) [ 2100.280328][T25309] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2100.307813][T25309] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2100.328236][T25309] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2100.339194][T25309] BTRFS info (device loop1): disabling tree log [ 2100.346993][T25309] BTRFS info (device loop1): turning on sync discard [ 2100.355171][T25309] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2100.368522][T25309] BTRFS info (device loop1): force zstd compression, level 3 [ 2100.383545][T25309] BTRFS info (device loop1): using free space tree [ 2100.384348][T25307] loop2: detected capacity change from 0 to 32768 [ 2100.403512][T25307] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.5472 (25307) [ 2100.441213][T25309] BTRFS info (device loop1): enabling ssd optimizations [ 2101.080776][T25339] loop5: detected capacity change from 0 to 4096 [ 2101.093754][T25339] EXT4-fs: Ignoring removed mblk_io_submit option [ 2101.142603][T25339] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2101.182479][T25339] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2101.294782][T25325] loop4: detected capacity change from 0 to 32768 [ 2101.782233][T25325] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5474 (25325) [ 2102.460184][T23115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2103.397521][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2105.434847][T24221] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2105.682461][T25376] loop4: detected capacity change from 0 to 4096 [ 2105.770750][T25376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2107.485290][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2108.428732][T25391] loop1: detected capacity change from 0 to 40427 [ 2108.455728][T25391] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2108.462843][T25391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2108.478061][T25391] F2FS-fs (loop1): invalid crc value [ 2108.516037][T25391] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2108.566362][T25391] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2108.573478][T25391] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2109.155707][T18178] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2109.348432][T18178] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2109.363837][T18178] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2109.375341][T18178] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2109.392870][T18178] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2109.402853][T18178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.434980][T18178] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2109.447817][T18178] usb 6-1: invalid MIDI out EP 0 [ 2109.492717][T18178] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 2110.835914][T24221] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2111.818511][T18178] usb 6-1: USB disconnect, device number 34 [ 2111.935018][T25408] loop2: detected capacity change from 0 to 32768 [ 2111.954273][T25408] XFS: ikeep mount option is deprecated. [ 2111.983139][T25408] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2112.039211][T25408] XFS (loop2): Ending clean mount [ 2112.047627][T25408] XFS (loop2): Quotacheck needed: Please wait. [ 2112.074614][T25432] loop4: detected capacity change from 0 to 4096 [ 2112.100457][T25432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2112.238126][T25408] XFS (loop2): Quotacheck: Done. [ 2112.373991][T25421] loop1: detected capacity change from 0 to 32768 [ 2112.383726][T25421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.5494 (25421) [ 2112.404556][T25421] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2112.415067][T25421] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2112.424140][T25421] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2112.436742][T25421] BTRFS info (device loop1): disabling tree log [ 2112.443345][T25421] BTRFS info (device loop1): turning on sync discard [ 2112.450243][T25421] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2112.460023][T25421] BTRFS info (device loop1): force zstd compression, level 3 [ 2112.467602][T25421] BTRFS info (device loop1): using free space tree [ 2112.480057][T24230] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2112.510501][T25421] BTRFS info (device loop1): enabling ssd optimizations [ 2113.071577][T23115] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2113.094470][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2113.459949][T25453] loop5: detected capacity change from 0 to 40427 [ 2113.468275][T25453] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 2113.475315][T25453] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2113.486089][T25453] F2FS-fs (loop5): invalid crc value [ 2113.563499][T25453] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2113.626230][T25453] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2113.633352][T25453] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2114.344123][T25466] loop1: detected capacity change from 0 to 2048 [ 2114.397583][T25466] FAT-fs (loop1): Unrecognized mount option "msdos" or missing value [ 2114.989198][T25465] loop2: detected capacity change from 0 to 32768 [ 2115.043923][T25465] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5496 (25465) [ 2115.170144][T25465] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2115.203170][T25465] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2115.225964][T25465] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2115.234116][T25465] BTRFS info (device loop2): disabling tree log [ 2115.267990][T25465] BTRFS info (device loop2): turning on sync discard [ 2115.285127][T25465] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2115.320311][T25465] BTRFS info (device loop2): force zstd compression, level 3 [ 2115.335752][T25465] BTRFS info (device loop2): using free space tree [ 2115.406148][T25465] BTRFS info (device loop2): enabling ssd optimizations [ 2115.916650][T25485] loop1: detected capacity change from 0 to 40427 [ 2115.953176][T25485] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2115.960342][T25485] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2115.977732][T25485] F2FS-fs (loop1): invalid crc value [ 2116.004661][T25485] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2116.039702][T25487] loop5: detected capacity change from 0 to 40427 [ 2116.055958][T25487] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 2116.062989][T25487] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2116.077192][T25487] F2FS-fs (loop5): invalid crc value [ 2116.084780][T25485] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2116.092654][T25485] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2116.104353][T25487] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2116.194749][T25487] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2116.201950][T25487] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2117.707633][T24230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2119.584377][T25509] loop2: detected capacity change from 0 to 32768 [ 2119.592761][T25509] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5504 (25509) [ 2119.620329][T25509] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2119.623958][T25505] loop1: detected capacity change from 0 to 32768 [ 2119.645172][T25509] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2119.661108][T25509] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2119.667741][T25505] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5502 (25505) [ 2119.669518][T25509] BTRFS info (device loop2): disabling tree log [ 2119.695033][T25509] BTRFS info (device loop2): turning on sync discard [ 2119.701949][T25509] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2119.712194][T25509] BTRFS info (device loop2): force zstd compression, level 3 [ 2119.719853][T25509] BTRFS info (device loop2): using free space tree [ 2120.603352][T25509] BTRFS info (device loop2): enabling ssd optimizations [ 2120.831042][T25536] loop5: detected capacity change from 0 to 4096 [ 2120.860424][T25536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2121.023716][T25505] loop1: detected capacity change from 0 to 4096 [ 2121.031454][T25505] EXT4-fs: Ignoring removed mblk_io_submit option [ 2121.047114][T25505] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2121.078650][T25505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2121.656935][T25534] loop4: detected capacity change from 0 to 32768 [ 2121.676735][T25534] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5507 (25534) [ 2121.677535][T24230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2121.700526][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2123.200979][T25534] loop4: detected capacity change from 0 to 4096 [ 2123.208358][T25534] EXT4-fs: Ignoring removed mblk_io_submit option [ 2123.226511][T25534] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2123.287836][T25534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2123.344350][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2125.440195][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2125.465904][T21669] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2126.398994][T21669] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2126.420710][T21669] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2126.445582][T21669] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2126.475828][T21669] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2126.490584][T21669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.700303][T21669] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2127.077819][T21669] usb 2-1: invalid MIDI out EP 0 [ 2127.770964][T21669] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 2127.802186][T25571] loop2: detected capacity change from 0 to 40427 [ 2127.827931][T25571] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 2127.834956][T25571] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2127.854581][T25571] F2FS-fs (loop2): invalid crc value [ 2127.893666][T25571] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2127.957081][T25563] loop4: detected capacity change from 0 to 32768 [ 2127.963611][T25571] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2127.970801][T25571] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2128.040305][T25564] loop5: detected capacity change from 0 to 32768 [ 2128.066181][T25563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5513 (25563) [ 2128.121537][T25564] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.5514 (25564) [ 2128.232336][T25563] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2128.302065][ T7165] usb 2-1: USB disconnect, device number 35 [ 2128.315806][T25563] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2128.324592][T25563] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2128.666782][T25563] BTRFS info (device loop4): disabling tree log [ 2128.714283][T25563] BTRFS info (device loop4): turning on sync discard [ 2128.754971][T25563] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2128.808681][T25563] BTRFS info (device loop4): force zstd compression, level 3 [ 2128.864618][T25563] BTRFS info (device loop4): using free space tree [ 2129.115810][T25563] BTRFS info (device loop4): enabling ssd optimizations [ 2129.330821][T25564] loop5: detected capacity change from 0 to 4096 [ 2129.363632][ T28] audit: type=1800 audit(1754267827.690:3093): pid=25596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5513" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 2129.411991][T25564] EXT4-fs: Ignoring removed mblk_io_submit option [ 2129.712486][T25598] loop2: detected capacity change from 0 to 40427 [ 2129.735754][T25598] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 2129.742911][T25598] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2129.757178][T25598] F2FS-fs (loop2): invalid crc value [ 2129.768491][T25564] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2129.796732][T25564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2129.811033][T25598] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2129.879844][T25598] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2129.887040][T25598] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2130.801592][T16412] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2130.955906][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2132.374584][T25625] loop5: detected capacity change from 0 to 4096 [ 2132.392557][T25625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2132.406434][T25613] loop2: detected capacity change from 0 to 32768 [ 2132.418842][T25613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5519 (25613) [ 2132.444145][T25622] loop1: detected capacity change from 0 to 4096 [ 2132.458937][T25622] EXT4-fs: Ignoring removed mblk_io_submit option [ 2132.480866][T25622] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2132.509394][T25613] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2132.534152][T25622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2132.555029][T25613] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2132.574827][T25613] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2132.592508][T25613] BTRFS info (device loop2): disabling tree log [ 2132.599554][T25613] BTRFS info (device loop2): turning on sync discard [ 2132.609503][T25618] loop4: detected capacity change from 0 to 32768 [ 2132.613009][T25613] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2132.628208][T25618] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.5518 (25618) [ 2132.631262][T25613] BTRFS info (device loop2): force zstd compression, level 3 [ 2132.675754][T25613] BTRFS info (device loop2): using free space tree [ 2132.776961][T25613] BTRFS info (device loop2): enabling ssd optimizations [ 2132.997881][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2133.359330][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2133.661342][T25648] loop1: detected capacity change from 0 to 40427 [ 2133.673704][T25648] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2133.681314][T25648] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2133.694894][T25648] F2FS-fs (loop1): invalid crc value [ 2133.716390][T25648] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2133.789574][T25648] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2133.796923][T25648] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2135.794379][T24230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2137.850834][T25670] loop2: detected capacity change from 0 to 40427 [ 2137.852572][T25663] loop4: detected capacity change from 0 to 32768 [ 2137.869065][T25670] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 2137.877137][T25670] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2137.890078][T25670] F2FS-fs (loop2): invalid crc value [ 2137.898911][T25663] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5528 (25663) [ 2137.929391][T25670] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2137.984582][T25663] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2138.009271][T25670] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2138.015715][T25663] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2138.016458][T25670] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2138.030473][T25663] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2138.078767][T25663] BTRFS info (device loop4): disabling tree log [ 2138.099471][T25663] BTRFS info (device loop4): turning on sync discard [ 2138.119787][T25663] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2138.145570][T25663] BTRFS info (device loop4): force zstd compression, level 3 [ 2138.163644][T25663] BTRFS info (device loop4): using free space tree [ 2138.346531][T25663] BTRFS info (device loop4): enabling ssd optimizations [ 2138.636040][T25672] loop1: detected capacity change from 0 to 32768 [ 2138.644594][T25672] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.5529 (25672) [ 2139.528379][T25672] loop1: detected capacity change from 0 to 4096 [ 2139.557043][T25672] EXT4-fs: Ignoring removed mblk_io_submit option [ 2139.594446][T25672] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2139.662263][T25672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2140.089523][T16412] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2140.093651][T25701] loop5: detected capacity change from 0 to 2048 [ 2140.291134][T25701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2140.340387][T25701] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2140.532020][T25698] loop2: detected capacity change from 0 to 32768 [ 2140.551800][T25698] XFS: ikeep mount option is deprecated. [ 2140.591284][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2140.648097][T25698] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2140.682938][T23115] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2140.749850][T25713] loop5: detected capacity change from 0 to 2048 [ 2140.757583][T25713] FAT-fs (loop5): Unrecognized mount option "msdos" or missing value [ 2140.838362][T25698] XFS (loop2): Ending clean mount [ 2140.854025][T25698] XFS (loop2): Quotacheck needed: Please wait. [ 2140.942712][T25698] XFS (loop2): Quotacheck: Done. [ 2140.988233][T25715] loop4: detected capacity change from 0 to 4096 [ 2141.043043][T25715] EXT4-fs: Ignoring removed mblk_io_submit option [ 2141.068324][T25717] loop1: detected capacity change from 0 to 2048 [ 2141.075963][T25717] FAT-fs (loop1): Unrecognized mount option "msdos" or missing value [ 2141.100742][T25715] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2141.114077][T25715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2141.653566][T24230] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2142.753455][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2143.072273][T25729] loop1: detected capacity change from 0 to 40427 [ 2143.087629][T25729] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2143.094797][T25729] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2143.106871][T25729] F2FS-fs (loop1): invalid crc value [ 2143.150452][T25729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2143.226346][T25729] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2143.233478][T25729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2145.451443][T25744] loop2: detected capacity change from 0 to 40427 [ 2145.478896][T25744] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 2145.486061][T25744] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2145.497582][T25744] F2FS-fs (loop2): invalid crc value [ 2145.507718][T25744] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2145.553084][T25744] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2145.560808][T25744] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2147.490862][T17114] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2148.240511][T17114] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2148.256330][T17114] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2148.271508][T17114] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2148.286053][T17114] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2148.299093][T17114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.333849][T17114] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 2148.347760][T17114] usb 2-1: invalid MIDI out EP 0 [ 2148.728136][T25767] loop4: detected capacity change from 0 to 40427 [ 2148.744548][T25767] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 2148.751677][T25767] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2148.762368][T25767] F2FS-fs (loop4): invalid crc value [ 2148.814339][T25767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2148.915644][T25767] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2148.922892][T25767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2149.793049][T17114] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 2149.817545][ T7165] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2149.821185][T17114] usb 2-1: USB disconnect, device number 36 [ 2150.070130][ T7165] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.093592][ T7165] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2150.113676][ T7165] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2150.146045][ T7165] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2150.155268][ T7165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.259102][T25783] loop5: detected capacity change from 0 to 4096 [ 2150.305125][T25784] loop4: detected capacity change from 0 to 2048 [ 2150.314553][T25784] FAT-fs (loop4): Unrecognized mount option "msdos" or missing value [ 2150.335137][T25783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2151.914462][T25792] loop4: detected capacity change from 0 to 40427 [ 2151.936207][T25792] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 2151.943265][T25792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2151.955871][T25792] F2FS-fs (loop4): invalid crc value [ 2151.968979][T25792] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2152.022481][T25792] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2152.029790][T25792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2152.726197][ T7165] usb 3-1: can't set config #27, error -71 [ 2152.733507][ T7165] usb 3-1: USB disconnect, device number 47 [ 2153.006122][T15867] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2155.174941][T25807] loop1: detected capacity change from 0 to 40427 [ 2155.213681][T25807] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2155.220904][T25807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2155.232631][T25807] F2FS-fs (loop1): invalid crc value [ 2155.297509][T25807] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2155.362013][T25807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2155.369289][T25807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2155.656120][ T7165] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2155.668748][T25821] loop4: detected capacity change from 0 to 4096 [ 2155.676300][T25821] EXT4-fs: Ignoring removed mblk_io_submit option [ 2155.684217][T25821] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2155.704016][T25821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2155.875137][ T7165] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.000525][ T7165] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2156.045570][ T7165] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2156.080257][ T7165] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2156.320260][ T7165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.769436][ T7165] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2156.805847][ T7165] usb 3-1: invalid MIDI out EP 0 [ 2156.920087][ T7165] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2157.257922][T18178] usb 3-1: USB disconnect, device number 48 [ 2158.093195][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2158.332851][T25838] loop4: detected capacity change from 0 to 4096 [ 2158.510715][T25833] loop5: detected capacity change from 0 to 40427 [ 2158.525366][T25833] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 2158.532520][T25833] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2158.543877][T25833] F2FS-fs (loop5): invalid crc value [ 2158.562725][T25838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2158.562808][T25833] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2158.649626][T25833] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2158.656948][T25833] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2160.170879][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2160.225209][T25852] loop2: detected capacity change from 0 to 4096 [ 2160.339754][T25850] loop1: detected capacity change from 0 to 40427 [ 2160.347859][T25850] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2160.354876][T25850] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2160.368351][T25850] F2FS-fs (loop1): invalid crc value [ 2160.408134][T25850] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2160.475702][T25850] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2160.482816][T25850] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2160.775733][ T7165] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2161.226475][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.414483][ T7165] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2161.462986][ T7165] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2161.493421][ T7165] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2161.553111][ T7165] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2161.585792][ T7165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.630289][ T7165] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 2161.674231][ T7165] usb 6-1: invalid MIDI out EP 0 [ 2161.812343][ T7165] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 2164.556707][T18178] usb 6-1: USB disconnect, device number 35 [ 2169.476651][T24221] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 2171.105955][ T5860] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2171.847046][ T5860] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.865830][ T5860] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2171.878017][ T5860] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2171.891366][ T5860] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2171.913604][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.028162][ T5860] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 2172.045156][ T5860] usb 3-1: invalid MIDI out EP 0 [ 2172.160205][ T5860] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 2173.911202][ T5860] usb 3-1: USB disconnect, device number 49 [ 2177.168322][T24221] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 2177.695607][ T5860] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2180.205698][ T5860] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2180.251802][ T5860] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2180.295017][ T5860] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2180.335204][ T5860] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2181.538446][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.819292][ T5860] usb 6-1: can't set config #27, error -71 [ 2181.940888][ T5860] usb 6-1: USB disconnect, device number 36 [ 2184.884419][T24221] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2187.395392][T26026] loop4: detected capacity change from 0 to 4096 [ 2187.456275][T26026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2187.789592][T24221] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 2190.120456][T26051] loop5: detected capacity change from 0 to 32768 [ 2190.176879][T26051] JBD2: Ignoring recovery information on journal [ 2190.229438][T26051] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2190.339628][T15867] ocfs2: Unmounting device (7,5) on (node local) [ 2190.988298][T26047] loop1: detected capacity change from 0 to 32768 [ 2191.042502][T26047] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2191.267837][T26047] XFS (loop1): Ending clean mount [ 2191.306000][T26047] XFS (loop1): Quotacheck needed: Please wait. [ 2191.525154][T26047] XFS (loop1): Quotacheck: Done. [ 2191.981832][T23115] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 2192.331247][T26067] loop2: detected capacity change from 0 to 32768 [ 2192.363610][T26067] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.5618 (26067) [ 2192.424722][T26067] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2192.464028][T26067] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 2192.525903][T26067] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2192.555641][T26067] BTRFS info (device loop2): use zstd compression, level 3 [ 2192.564056][T26067] BTRFS info (device loop2): using free space tree [ 2192.815698][T26084] [U]  [ 2192.819220][T26084] [U] K{ [ 2192.843150][T26084] [U] t 1ŠFfˊ`GJgo/mC [ 2192.852779][T26067] BTRFS info (device loop2): enabling ssd optimizations [ 2192.883198][T26084] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 2192.883294][T26084] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 2192.883365][T26084] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 2192.883477][T26084] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 2192.883519][T26084] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 2192.883541][T26084] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 2192.883590][T26084] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 2192.883837][T26084] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 2192.883880][T26084] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 2192.883898][T26084] [U] 22Ʃx?0;3u [ 2192.883961][T26084] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 2192.883999][T26084] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 2192.884026][T26084] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 2192.884042][T26084] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 2192.884071][T26084] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 2192.884110][T26084] [U] ec [ 2192.884124][T26084] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 2192.884442][T26067] BTRFS info (device loop2): auto enabling async discard [ 2192.959774][ T28] audit: type=1800 audit(1754267891.270:3094): pid=26067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5618" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 2193.311815][T24230] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2193.485948][T16412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2193.662227][T26082] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 2194.239511][T26101] ksmbd: Unknown IPC event: 6, ignore. [ 2195.240619][T26102] loop2: detected capacity change from 0 to 32768 [ 2195.265744][T26102] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5622 (26102) [ 2195.332715][T26102] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2195.353994][T26102] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 2195.390479][T26102] BTRFS info (device loop2): setting nodatacow, compression disabled [ 2195.410114][T26102] BTRFS info (device loop2): max_inline at 0 [ 2195.425667][T26102] BTRFS info (device loop2): enabling disk space caching [ 2195.438641][T26102] BTRFS info (device loop2): turning off barriers [ 2195.455378][T26102] BTRFS info (device loop2): turning on flush-on-commit [ 2195.482455][T26102] BTRFS info (device loop2): turning on sync discard [ 2195.492607][T26102] BTRFS info (device loop2): doing ref verification [ 2195.505614][T26102] BTRFS info (device loop2): force clearing of disk cache [ 2195.523069][T26102] BTRFS info (device loop2): enabling ssd optimizations [ 2195.535873][T26102] BTRFS info (device loop2): max_inline at 4096 [ 2195.555615][T26102] BTRFS info (device loop2): disk space caching is enabled [ 2195.675269][T26102] BTRFS info (device loop2): rebuilding free space tree [ 2195.766992][T26102] BTRFS info (device loop2): disabling free space tree [ 2195.774176][T26102] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2195.791749][T26102] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2195.954806][T26110] loop1: detected capacity change from 0 to 32768 [ 2195.991842][ T28] audit: type=1804 audit(1754267894.320:3095): pid=26128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5622" name="/newroot/80/file1/file1" dev="loop2" ino=260 res=1 errno=0 [ 2196.015003][T26126] loop2: detected capacity change from 32768 to 0 [ 2196.044544][T26102] syz.2.5622: attempt to access beyond end of device [ 2196.044544][T26102] loop2: rw=2051, sector=10264, nr_sectors = 8 limit=0 [ 2196.085142][T26110] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 2196.150919][T26128] syz.2.5622: attempt to access beyond end of device [ 2196.150919][T26128] loop2: rw=6145, sector=10248, nr_sectors = 8 limit=0 [ 2196.151216][T26102] syz.2.5622: attempt to access beyond end of device [ 2196.151216][T26102] loop2: rw=2051, sector=10288, nr_sectors = 8 limit=0 [ 2196.208853][T26102] syz.2.5622: attempt to access beyond end of device [ 2196.208853][T26102] loop2: rw=2051, sector=10368, nr_sectors = 8 limit=0 [ 2196.247752][T26128] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 2196.267352][T26102] syz.2.5622: attempt to access beyond end of device [ 2196.267352][T26102] loop2: rw=2051, sector=10464, nr_sectors = 16 limit=0 [ 2196.282843][T26102] BTRFS info (device loop2): balance: start -ssoft,profiles=dup|raid6|raid1c4|0x5c44542a0888a000,usage=766006932..2341711214,drange=12296802055398073629..16733318416619989533,vrange=5986487686051707152..2728221534624543347 [ 2196.309131][T26128] syz.2.5622: attempt to access beyond end of device [ 2196.309131][T26128] loop2: rw=6145, sector=10256, nr_sectors = 8 limit=0 [ 2196.323459][T26102] BTRFS info (device loop2): balance: ended with status: 0 [ 2196.334754][T26128] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 2196.351648][T26128] syz.2.5622: attempt to access beyond end of device [ 2196.351648][T26128] loop2: rw=6145, sector=10552, nr_sectors = 8 limit=0 [ 2196.366397][T26128] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 2196.389661][T17114] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 2196.405241][T17114] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2196.415513][T26128] syz.2.5622: attempt to access beyond end of device [ 2196.415513][T26128] loop2: rw=6145, sector=10544, nr_sectors = 8 limit=0 [ 2196.429731][T26128] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 2196.443358][T26102] BTRFS error (device loop2: state AL): Transaction aborted (error -5) [ 2196.456123][T26102] BTRFS: error (device loop2: state AL) in free_log_tree:3299: errno=-5 IO failure [ 2196.465697][T26102] BTRFS info (device loop2: state EAL): forced readonly [ 2196.472930][T26102] BTRFS: error (device loop2: state EAL) in free_log_tree:3299: errno=-5 IO failure [ 2196.487556][T26133] loop1: detected capacity change from 32768 to 0 [ 2196.509010][T26102] BTRFS warning (device loop2: state EAL): Skipping commit of aborted transaction. [ 2196.521838][T26102] BTRFS: error (device loop2: state EAL) in cleanup_transaction:2004: errno=-5 IO failure [ 2196.533641][T12057] loop: Write error at byte offset 9223372036855103487, length 512. [ 2196.546387][ C1] I/O error, dev loop1, sector 640 op 0x1:(WRITE) flags 0x9800 phys_seg 1 prio class 2 [ 2196.556164][ C1] Buffer I/O error on dev loop1, logical block 640, lost sync page write [ 2196.568611][T26130] JBD2: I/O error when updating journal superblock for loop1-75. [ 2196.578226][T26130] Aborting journal on device loop1-75. [ 2196.585211][T26102] BTRFS: error (device loop2: state EAL) in reset_balance_state:3651: errno=-5 IO failure [ 2196.587321][T26130] jbd2/loop1-75: attempt to access beyond end of device [ 2196.587321][T26130] loop1: rw=38913, sector=640, nr_sectors = 1 limit=0 [ 2196.610421][T26130] Buffer I/O error on dev loop1, logical block 640, lost sync page write [ 2196.610710][T26109] (syz.1.5628,26109,1):ocfs2_start_trans:379 ERROR: status = -30 [ 2196.619064][T26130] JBD2: I/O error when updating journal superblock for loop1-75. [ 2196.619123][T26130] journal_release_journal_head: freeing b_committed_data [ 2196.636918][T26109] OCFS2: abort (device loop1): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 2196.689492][T26110] (syz.1.5628,26110,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 2196.702545][T26109] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2196.731982][T26109] OCFS2: Returning error to the calling process. [ 2196.741553][T26109] (syz.1.5628,26109,1):ocfs2_remove_inode:668 ERROR: status = -30 [ 2196.753220][T26109] (syz.1.5628,26109,1):ocfs2_wipe_inode:821 ERROR: status = -30 [ 2196.771007][T26109] (syz.1.5628,26109,1):ocfs2_delete_inode:1082 ERROR: status = -30 [ 2196.782511][T26110] syz.1.5628 (26110) used greatest stack depth: 17712 bytes left [ 2196.797006][T24230] BTRFS info (device loop2: state EAL): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2196.834100][T23115] syz-executor: attempt to access beyond end of device [ 2196.834100][T23115] loop1: rw=0, sector=17057, nr_sectors = 1 limit=0 [ 2196.849798][T23115] (syz-executor,23115,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 2196.917690][T23115] (syz-executor,23115,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 2197.032322][T25755] (syz.1.5539,25755,1):ocfs2_start_trans:379 ERROR: status = -30 [ 2197.042308][T25755] OCFS2: abort (device loop1): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal [ 2197.054420][T25755] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2197.065828][T25755] OCFS2: Returning error to the calling process. [ 2197.072202][T25755] (syz.1.5539,25755,1):ocfs2_shutdown_local_alloc:418 ERROR: status = -30 [ 2197.080956][T25755] Buffer I/O error on dev loop1, logical block 17024, lost sync page write [ 2197.090552][T25755] (syz.1.5539,25755,1):ocfs2_write_block:78 ERROR: status = -5 [ 2197.101803][T25755] (syz.1.5539,25755,1):ocfs2_update_disk_slot:199 ERROR: status = -5 [ 2197.110386][T25755] (syz.1.5539,25755,1):ocfs2_put_slot:517 ERROR: status = -5 [ 2197.118971][T25755] (syz.1.5539,25755,1):ocfs2_journal_shutdown:1107 ERROR: status = -5 [ 2197.129759][T25755] ocfs2: Unmounting device (7,1) on (node local) [ 2197.870211][T24044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.978528][T26069] Set syz1 is full, maxelem 65536 reached [ 2198.098303][T24044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.244588][T24044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.348284][T26141] loop4: detected capacity change from 0 to 2048 [ 2198.450151][T24044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.519594][T26145] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2198.566878][T26146] loop5: detected capacity change from 0 to 256 [ 2198.622734][T26146] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 2198.805679][T26146] loop5: detected capacity change from 256 to 0 [ 2198.854517][T26148] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2198.921747][T26146] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2198.978352][T26146] Buffer I/O error on dev loop5, logical block 136, lost sync page write [ 2199.022321][T26146] Buffer I/O error on dev loop5, logical block 136, lost sync page write [ 2199.062500][T26146] Buffer I/O error on dev loop5, logical block 136, lost sync page write [ 2199.081855][T26146] Buffer I/O error on dev loop5, logical block 136, lost sync page write [ 2199.092084][T21567] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2199.104097][T21567] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2199.115573][T21567] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2199.128531][T21567] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2199.146178][T21567] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2199.155058][T21567] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2199.473089][T25659] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 2199.680415][T26154] netlink: 296 bytes leftover after parsing attributes in process `syz.2.5638'. [ 2199.701240][T26154] unsupported nlmsg_type 40 [ 2200.476979][T26149] chnl_net:caif_netlink_parms(): no params data found [ 2201.153088][T26149] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.165633][T26149] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.176202][T26149] bridge_slave_0: entered allmulticast mode [ 2201.194195][T26149] bridge_slave_0: entered promiscuous mode [ 2201.272079][T26147] syz.4.5634 (26147): drop_caches: 2 [ 2201.295691][T21567] Bluetooth: hci2: command tx timeout [ 2201.317361][T26149] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.328948][T26149] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.338798][T26149] bridge_slave_1: entered allmulticast mode [ 2201.354203][T26149] bridge_slave_1: entered promiscuous mode [ 2201.465404][T24044] hsr_slave_0: left promiscuous mode [ 2201.506175][T24044] hsr_slave_1: left promiscuous mode [ 2201.533713][T24044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2201.545730][T24044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2201.566624][T24044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2201.574703][T24044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2201.606794][T24044] bridge_slave_1: left allmulticast mode [ 2201.612524][T24044] bridge_slave_1: left promiscuous mode [ 2201.625872][T24044] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.646605][T24044] bridge_slave_0: left allmulticast mode [ 2201.652357][T24044] bridge_slave_0: left promiscuous mode [ 2201.666001][T24044] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.680362][T26162] loop2: detected capacity change from 0 to 32768 [ 2201.741585][T26162] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 2201.753997][T24044] veth1_macvtap: left promiscuous mode [ 2201.759687][T26162] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 2201.759808][T24044] veth0_macvtap: left promiscuous mode [ 2201.776637][T26168] loop4: detected capacity change from 0 to 64 [ 2201.805260][T24044] veth1_vlan: left promiscuous mode [ 2201.834670][T24044] veth0_vlan: left promiscuous mode [ 2201.868979][T24221] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2201.882734][T24221] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2201.892904][T24221] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2201.903482][T24221] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2201.911751][T24221] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2201.921096][T24221] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2201.924915][T26162] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 2201.992644][ T7167] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 2202.005902][ T7167] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 2202.097556][ T7167] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 2202.112040][ T7167] gfs2: fsid=syz:syz.0: jid=0: Done [ 2202.124943][T26162] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 2202.922276][T26162] loop2: detected capacity change from 32768 to 0 [ 2203.169811][T26162] bio_check_eod: 22 callbacks suppressed [ 2203.169920][T26162] syz.2.5640: attempt to access beyond end of device [ 2203.169920][T26162] loop2: rw=2049, sector=18822, nr_sectors = 2 limit=0 [ 2203.191581][T26162] Buffer I/O error on dev loop2, logical block 9411, lost async page write [ 2203.218769][T26162] syz.2.5640: attempt to access beyond end of device [ 2203.218769][T26162] loop2: rw=2049, sector=18824, nr_sectors = 2 limit=0 [ 2203.235392][T26162] Buffer I/O error on dev loop2, logical block 9412, lost async page write [ 2203.240002][T24044] team0 (unregistering): Port device team_slave_1 removed [ 2203.246659][T26162] syz.2.5640: attempt to access beyond end of device [ 2203.246659][T26162] loop2: rw=2049, sector=18826, nr_sectors = 2 limit=0 [ 2203.265318][T26162] Buffer I/O error on dev loop2, logical block 9413, lost async page write [ 2203.274126][T26162] syz.2.5640: attempt to access beyond end of device [ 2203.274126][T26162] loop2: rw=2049, sector=18828, nr_sectors = 2 limit=0 [ 2203.291664][T26162] Buffer I/O error on dev loop2, logical block 9414, lost async page write [ 2203.360956][T24044] team0 (unregistering): Port device team_slave_0 removed [ 2203.370491][T21567] Bluetooth: hci2: command tx timeout [ 2203.371347][T26162] syz.2.5640: attempt to access beyond end of device [ 2203.371347][T26162] loop2: rw=1, sector=2972, nr_sectors = 2114 limit=0 [ 2203.408364][T26162] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 [ 2203.465864][T24044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2203.503698][T26162] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 2203.562374][T24044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2204.009491][T21567] Bluetooth: hci3: command tx timeout [ 2204.540722][T24044] bond0 (unregistering): Released all slaves [ 2204.639798][T26149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2204.653770][T26149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2204.711923][T26149] team0: Port device team_slave_0 added [ 2204.724647][T26149] team0: Port device team_slave_1 added [ 2204.818379][T26149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2204.825385][T26149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2204.852093][T26149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2204.877854][T26149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2204.884887][T26149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2204.911252][T26149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2205.049857][T26149] hsr_slave_0: entered promiscuous mode [ 2205.058313][T26149] hsr_slave_1: entered promiscuous mode [ 2205.064648][T26149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2205.072303][T26149] Cannot create hsr debugfs directory [ 2205.373659][T26170] chnl_net:caif_netlink_parms(): no params data found [ 2205.446789][T21567] Bluetooth: hci2: command tx timeout [ 2205.457685][T24044] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.491695][T26149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2205.501697][T26149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2205.519413][T26149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2205.534730][T26149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2205.600050][T24044] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.619111][T26170] bridge0: port 1(bridge_slave_0) entered blocking state [ 2205.626428][T26170] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.633648][T26170] bridge_slave_0: entered allmulticast mode [ 2205.641840][T26170] bridge_slave_0: entered promiscuous mode [ 2205.652888][T26170] bridge0: port 2(bridge_slave_1) entered blocking state [ 2205.660305][T26170] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.668451][T26170] bridge_slave_1: entered allmulticast mode [ 2205.675621][T26170] bridge_slave_1: entered promiscuous mode [ 2205.704020][T24044] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.808320][T24044] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.831522][T26170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.844468][T26170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.895686][T26170] team0: Port device team_slave_0 added [ 2205.904951][T26170] team0: Port device team_slave_1 added [ 2205.962518][T26170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2205.971352][T26170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2205.998027][T26170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2206.018407][T26170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2206.025414][T26170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.052777][T26170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2206.085739][T21567] Bluetooth: hci3: command tx timeout [ 2206.159314][T26170] hsr_slave_0: entered promiscuous mode [ 2206.167721][T26170] hsr_slave_1: entered promiscuous mode [ 2206.174149][T26170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2206.182378][T26170] Cannot create hsr debugfs directory [ 2206.237525][T26149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2206.258640][T24044] tipc: Left network mode [ 2206.406868][T26149] 8021q: adding VLAN 0 to HW filter on device team0 [ 2206.461886][T20122] bridge0: port 1(bridge_slave_0) entered blocking state [ 2206.469199][T20122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2206.501487][T20122] bridge0: port 2(bridge_slave_1) entered blocking state [ 2206.508689][T20122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2206.692971][T26170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2206.731075][T26170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2206.742189][T26170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2206.752432][T26170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2206.982026][T26170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2207.069937][T26170] 8021q: adding VLAN 0 to HW filter on device team0 [ 2207.113287][T26149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2207.155492][T20122] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.162715][T20122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.235333][T20122] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.242571][T20122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.458499][T24044] hsr_slave_0: left promiscuous mode [ 2207.464684][T24044] hsr_slave_1: left promiscuous mode [ 2207.477951][T24044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2207.496208][T24044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2207.517125][T24044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2207.524617][T24044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2207.526033][T21567] Bluetooth: hci2: command tx timeout [ 2207.544046][T24044] bridge_slave_1: left allmulticast mode [ 2207.554176][T24044] bridge_slave_1: left promiscuous mode [ 2207.564972][T24044] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.579046][T24044] bridge_slave_0: left allmulticast mode [ 2207.584769][T24044] bridge_slave_0: left promiscuous mode [ 2207.594158][T24044] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.630774][T24044] veth1_macvtap: left promiscuous mode [ 2207.636879][T24044] veth0_macvtap: left promiscuous mode [ 2207.642500][T24044] veth1_vlan: left promiscuous mode [ 2207.648994][T24044] veth0_vlan: left promiscuous mode [ 2208.170861][T21567] Bluetooth: hci3: command tx timeout [ 2208.592295][T24044] team0 (unregistering): Port device team_slave_1 removed [ 2208.681279][T26162] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 2208.692683][T26162] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 2208.699310][T24044] team0 (unregistering): Port device team_slave_0 removed [ 2208.704103][T26162] gfs2: fsid=syz:syz.0: File system withdrawn [ 2208.714985][T26162] CPU: 1 PID: 26162 Comm: syz.2.5640 Not tainted 6.6.101-syzkaller #0 [ 2208.723205][T26162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2208.733311][T26162] Call Trace: [ 2208.736641][T26162] [ 2208.739623][T26162] dump_stack_lvl+0x16c/0x230 [ 2208.744407][T26162] ? kobject_uevent_env+0x363/0x8c0 [ 2208.749724][T26162] ? show_regs_print_info+0x20/0x20 [ 2208.754938][T26162] ? load_image+0x3b0/0x3b0 [ 2208.759489][T26162] ? kobject_uevent_env+0x363/0x8c0 [ 2208.764716][T26162] gfs2_withdraw+0xf16/0x14b0 [ 2208.769436][T26162] ? gfs2_lm+0x220/0x220 [ 2208.773714][T26162] ? wake_bit_function+0x200/0x200 [ 2208.778847][T26162] ? up_write+0x1c3/0x410 [ 2208.783190][T26162] gfs2_log_flush+0x1d3e/0x24b0 [ 2208.788074][T26162] ? gfs2_ail_empty_tr+0x2f0/0x2f0 [ 2208.793198][T26162] ? __lock_acquire+0x7c80/0x7c80 [ 2208.798250][T26162] ? do_raw_spin_lock+0x121/0x2c0 [ 2208.803329][T26162] ? __rwlock_init+0x150/0x150 [ 2208.808148][T26162] gfs2_jdata_writepages+0xf9/0x150 [ 2208.813369][T26162] ? gfs2_jdata_writepage+0x410/0x410 [ 2208.818767][T26162] do_writepages+0x3a2/0x600 [ 2208.823401][T26162] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 2208.829250][T26162] ? __lock_acquire+0x7c80/0x7c80 [ 2208.834296][T26162] ? __rwlock_init+0x150/0x150 [ 2208.839086][T26162] ? do_raw_spin_unlock+0x121/0x230 [ 2208.844319][T26162] filemap_fdatawrite_wbc+0x122/0x180 [ 2208.849733][T26162] filemap_fdatawrite_range+0xce/0x120 [ 2208.855226][T26162] ? filemap_fdatawrite+0x120/0x120 [ 2208.860460][T26162] ? lockref_put_or_lock+0x72/0xb0 [ 2208.865590][T26162] ? gfs2_file_buffered_write+0x747/0x820 [ 2208.871335][T26162] ? rcu_is_watching+0x15/0xb0 [ 2208.876154][T26162] ? gfs2_file_buffered_write+0x747/0x820 [ 2208.881901][T26162] ? kfree+0x31/0x1a0 [ 2208.885913][T26162] ? gfs2_file_buffered_write+0x773/0x820 [ 2208.891688][T26162] gfs2_fsync+0xdf/0x350 [ 2208.895957][T26162] ? vfs_fsync_range+0x130/0x1a0 [ 2208.900919][T26162] gfs2_file_write_iter+0xc72/0xe10 [ 2208.906149][T26162] ? verify_lock_unused+0x140/0x140 [ 2208.911372][T26162] ? aa_path_link+0xdd0/0xdd0 [ 2208.916081][T26162] ? __mutex_trylock_common+0x153/0x250 [ 2208.921674][T26162] ? gfs2_file_read_iter+0xc70/0xc70 [ 2208.926986][T26162] ? common_file_perm+0x198/0x1f0 [ 2208.932066][T26162] do_iter_write+0x79a/0xc70 [ 2208.936700][T26162] ? vfs_iter_write+0xa0/0xa0 [ 2208.941405][T26162] ? rcu_read_lock_any_held+0xb4/0x120 [ 2208.946900][T26162] do_writev+0x252/0x410 [ 2208.951182][T26162] ? do_readv+0x3e0/0x3e0 [ 2208.955549][T26162] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2208.961577][T26162] ? lock_chain_count+0x20/0x20 [ 2208.966463][T26162] ? lockdep_hardirqs_on+0x98/0x150 [ 2208.971717][T26162] do_syscall_64+0x55/0xb0 [ 2208.976154][T26162] ? clear_bhb_loop+0x40/0x90 [ 2208.980913][T26162] ? clear_bhb_loop+0x40/0x90 [ 2208.985610][T26162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2208.991568][T26162] RIP: 0033:0x7f8f5978eb69 [ 2208.996003][T26162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2209.015661][T26162] RSP: 002b:00007f8f5a68d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2209.024108][T26162] RAX: ffffffffffffffda RBX: 00007f8f599b5fa0 RCX: 00007f8f5978eb69 [ 2209.032108][T26162] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000008 [ 2209.040101][T26162] RBP: 00007f8f59811df1 R08: 0000000000000000 R09: 0000000000000000 [ 2209.048229][T26162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2209.056223][T26162] R13: 0000000000000000 R14: 00007f8f599b5fa0 R15: 00007ffe8b974038 [ 2209.064229][T26162] [ 2209.190434][T24044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2209.239858][T25742] ================================================================== [ 2209.247968][T25742] BUG: KASAN: slab-use-after-free in gfs2_invalidate_folio+0x463/0xa50 [ 2209.256257][T25742] Read of size 8 at addr ffff88805b4a8248 by task syz.2.5535/25742 [ 2209.264191][T25742] [ 2209.266530][T25742] CPU: 1 PID: 25742 Comm: syz.2.5535 Not tainted 6.6.101-syzkaller #0 [ 2209.274700][T25742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2209.284765][T25742] Call Trace: [ 2209.288064][T25742] [ 2209.291021][T25742] dump_stack_lvl+0x16c/0x230 [ 2209.295739][T25742] ? __lock_acquire+0x7c80/0x7c80 [ 2209.300799][T25742] ? show_regs_print_info+0x20/0x20 [ 2209.306016][T25742] ? load_image+0x3b0/0x3b0 [ 2209.310563][T25742] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 2209.316073][T25742] ? __virt_addr_valid+0x18c/0x540 [ 2209.321230][T25742] ? __virt_addr_valid+0x469/0x540 [ 2209.326364][T25742] print_report+0xac/0x220 [ 2209.330804][T25742] ? gfs2_invalidate_folio+0x463/0xa50 [ 2209.336296][T25742] kasan_report+0x117/0x150 [ 2209.340865][T25742] ? gfs2_invalidate_folio+0x463/0xa50 [ 2209.346364][T25742] gfs2_invalidate_folio+0x463/0xa50 [ 2209.351680][T25742] ? gfs2_bmap+0x200/0x200 [ 2209.356125][T25742] truncate_cleanup_folio+0x220/0x5c0 [ 2209.361559][T25742] truncate_inode_pages_range+0x229/0xf00 [ 2209.367351][T25742] ? __lock_acquire+0x1334/0x7c80 [ 2209.372403][T25742] ? mapping_evict_folio+0x510/0x510 [ 2209.377715][T25742] ? _raw_spin_lock_irq+0xaf/0xe0 [ 2209.382763][T25742] ? _raw_spin_unlock_irq+0x23/0x50 [ 2209.387984][T25742] ? lockdep_hardirqs_on+0x98/0x150 [ 2209.393206][T25742] gfs2_evict_inode+0x3d8/0x1220 [ 2209.398164][T25742] ? do_raw_spin_unlock+0x121/0x230 [ 2209.403402][T25742] ? gfs2_drop_inode+0x380/0x380 [ 2209.408398][T25742] ? _raw_spin_unlock+0x28/0x40 [ 2209.413281][T25742] ? inode_wait_for_writeback+0x1b4/0x200 [ 2209.419020][T25742] ? evict+0x451/0x870 [ 2209.423107][T25742] ? sb_clear_inode_writeback+0x360/0x360 [ 2209.428931][T25742] ? do_raw_spin_lock+0x121/0x2c0 [ 2209.434005][T25742] ? do_raw_spin_unlock+0x121/0x230 [ 2209.439256][T25742] ? gfs2_drop_inode+0x380/0x380 [ 2209.444211][T25742] evict+0x486/0x870 [ 2209.448121][T25742] ? iput+0x70a/0x920 [ 2209.452117][T25742] ? proc_nr_inodes+0x230/0x230 [ 2209.457007][T25742] ? do_raw_spin_unlock+0x121/0x230 [ 2209.462315][T25742] ? _raw_spin_unlock+0x28/0x40 [ 2209.467199][T25742] gfs2_kill_sb+0x230/0x320 [ 2209.471726][T25742] deactivate_locked_super+0x97/0x100 [ 2209.477211][T25742] cleanup_mnt+0x429/0x4c0 [ 2209.481730][T25742] task_work_run+0x1ce/0x250 [ 2209.486439][T25742] ? task_work_cancel+0x240/0x240 [ 2209.491492][T25742] ? do_exit+0x906/0x23c0 [ 2209.495844][T25742] ? kmem_cache_free+0xf8/0x280 [ 2209.500713][T25742] do_exit+0x90b/0x23c0 [ 2209.504981][T25742] ? put_task_struct+0xc0/0xc0 [ 2209.509768][T25742] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2209.515773][T25742] ? get_signal+0x1255/0x1400 [ 2209.520470][T25742] ? lock_chain_count+0x20/0x20 [ 2209.525334][T25742] do_group_exit+0x21b/0x2d0 [ 2209.529946][T25742] ? lockdep_hardirqs_on+0x98/0x150 [ 2209.535170][T25742] get_signal+0x12fc/0x1400 [ 2209.539788][T25742] arch_do_signal_or_restart+0x96/0x780 [ 2209.545358][T25742] ? __remove_hrtimer+0x470/0x470 [ 2209.550398][T25742] ? get_sigframe_size+0x20/0x20 [ 2209.555364][T25742] ? __se_sys_clock_nanosleep+0x2ea/0x370 [ 2209.561095][T25742] ? exit_to_user_mode_loop+0x3b/0x110 [ 2209.566582][T25742] exit_to_user_mode_loop+0x70/0x110 [ 2209.571890][T25742] exit_to_user_mode_prepare+0xb1/0x140 [ 2209.577464][T25742] syscall_exit_to_user_mode+0x1a/0x50 [ 2209.582941][T25742] do_syscall_64+0x61/0xb0 [ 2209.587371][T25742] ? clear_bhb_loop+0x40/0x90 [ 2209.592058][T25742] ? clear_bhb_loop+0x40/0x90 [ 2209.596752][T25742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2209.602755][T25742] RIP: 0033:0x7f8f597c1425 [ 2209.607203][T25742] Code: Unable to access opcode bytes at 0x7f8f597c13fb. [ 2209.614227][T25742] RSP: 002b:00007f8f5a64af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2209.622677][T25742] RAX: fffffffffffffdfc RBX: 00007f8f599b6160 RCX: 00007f8f597c1425 [ 2209.630663][T25742] RDX: 00007f8f5a64afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2209.638644][T25742] RBP: 00007f8f59811df1 R08: 0000000000000000 R09: 0000000000000000 [ 2209.646638][T25742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2209.654630][T25742] R13: 0000000000000000 R14: 00007f8f599b6160 R15: 00007ffe8b974038 [ 2209.662624][T25742] [ 2209.665652][T25742] [ 2209.668005][T25742] Allocated by task 26162: [ 2209.672435][T25742] kasan_set_track+0x4e/0x70 [ 2209.677043][T25742] __kasan_slab_alloc+0x6c/0x80 [ 2209.681904][T25742] slab_post_alloc_hook+0x6e/0x4d0 [ 2209.687087][T25742] kmem_cache_alloc+0x11e/0x2e0 [ 2209.691953][T25742] gfs2_trans_add_data+0x1ff/0x620 [ 2209.697084][T25742] gfs2_trans_add_databufs+0x15a/0x1c0 [ 2209.702556][T25742] gfs2_iomap_put_folio+0x1be/0x400 [ 2209.707766][T25742] iomap_write_end+0x631/0xb90 [ 2209.712543][T25742] iomap_file_buffered_write+0x710/0xd10 [ 2209.718192][T25742] gfs2_file_buffered_write+0x4bd/0x820 [ 2209.723756][T25742] gfs2_file_write_iter+0x427/0xe10 [ 2209.728972][T25742] vfs_write+0x43b/0x940 [ 2209.733227][T25742] ksys_write+0x147/0x250 [ 2209.737571][T25742] do_syscall_64+0x55/0xb0 [ 2209.742003][T25742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2209.747918][T25742] [ 2209.750264][T25742] Freed by task 26162: [ 2209.754333][T25742] kasan_set_track+0x4e/0x70 [ 2209.758930][T25742] kasan_save_free_info+0x2e/0x50 [ 2209.763968][T25742] ____kasan_slab_free+0x126/0x1e0 [ 2209.769151][T25742] slab_free_freelist_hook+0x130/0x1b0 [ 2209.774622][T25742] kmem_cache_free+0xf8/0x280 [ 2209.779318][T25742] gfs2_log_flush+0x18d1/0x24b0 [ 2209.784176][T25742] gfs2_jdata_writepages+0xf9/0x150 [ 2209.789391][T25742] do_writepages+0x3a2/0x600 [ 2209.794000][T25742] filemap_fdatawrite_wbc+0x122/0x180 [ 2209.799412][T25742] filemap_fdatawrite_range+0xce/0x120 [ 2209.804914][T25742] gfs2_fsync+0xdf/0x350 [ 2209.809178][T25742] gfs2_file_write_iter+0xc72/0xe10 [ 2209.814391][T25742] do_iter_write+0x79a/0xc70 [ 2209.818998][T25742] do_writev+0x252/0x410 [ 2209.823259][T25742] do_syscall_64+0x55/0xb0 [ 2209.827686][T25742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2209.833596][T25742] [ 2209.835928][T25742] The buggy address belongs to the object at ffff88805b4a8230 [ 2209.835928][T25742] which belongs to the cache gfs2_bufdata of size 80 [ 2209.849993][T25742] The buggy address is located 24 bytes inside of [ 2209.849993][T25742] freed 80-byte region [ffff88805b4a8230, ffff88805b4a8280) [ 2209.863630][T25742] [ 2209.865962][T25742] The buggy address belongs to the physical page: [ 2209.872380][T25742] page:ffffea00016d2a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b4a8 [ 2209.882550][T25742] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 2209.890102][T25742] page_type: 0xffffffff() [ 2209.894445][T25742] raw: 00fff00000000800 ffff8881442dd140 dead000000000122 0000000000000000 [ 2209.903040][T25742] raw: 0000000000000000 0000000000240024 00000001ffffffff 0000000000000000 [ 2209.911626][T25742] page dumped because: kasan: bad access detected [ 2209.918053][T25742] page_owner tracks the page as allocated [ 2209.923780][T25742] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 26162, tgid 26161 (syz.2.5640), ts 2202792462719, free_ts 2200945524094 [ 2209.943680][T25742] post_alloc_hook+0x1cd/0x210 [ 2209.948466][T25742] get_page_from_freelist+0x195c/0x19f0 [ 2209.954029][T25742] __alloc_pages+0x1e3/0x460 [ 2209.958650][T25742] alloc_slab_page+0x5d/0x170 [ 2209.963341][T25742] new_slab+0x87/0x2e0 [ 2209.967429][T25742] ___slab_alloc+0xc6d/0x12f0 [ 2209.972119][T25742] kmem_cache_alloc+0x1b7/0x2e0 [ 2209.976986][T25742] gfs2_trans_add_meta+0x30c/0xc20 [ 2209.982111][T25742] gfs2_fileattr_set+0x77d/0x9b0 [ 2209.987064][T25742] vfs_fileattr_set+0x846/0xaf0 [ 2209.991929][T25742] do_vfs_ioctl+0x135a/0x1bb0 [ 2209.996615][T25742] __se_sys_ioctl+0x83/0x170 [ 2210.001214][T25742] do_syscall_64+0x55/0xb0 [ 2210.005641][T25742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2210.011554][T25742] page last free stack trace: [ 2210.016228][T25742] free_unref_page_prepare+0x7ce/0x8e0 [ 2210.021703][T25742] free_unref_page+0x32/0x2e0 [ 2210.026394][T25742] vfree+0x1a6/0x320 [ 2210.030303][T25742] kcov_close+0x2b/0x50 [ 2210.034475][T25742] __fput+0x234/0x970 [ 2210.038475][T25742] task_work_run+0x1ce/0x250 [ 2210.043081][T25742] do_exit+0x90b/0x23c0 [ 2210.047256][T25742] do_group_exit+0x21b/0x2d0 [ 2210.051862][T25742] __x64_sys_exit_group+0x3f/0x40 [ 2210.056901][T25742] do_syscall_64+0x55/0xb0 [ 2210.061327][T25742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2210.067245][T25742] [ 2210.069580][T25742] Memory state around the buggy address: [ 2210.075217][T25742] ffff88805b4a8100: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 2210.083295][T25742] ffff88805b4a8180: fb fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb [ 2210.091381][T25742] >ffff88805b4a8200: fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 2210.099460][T25742] ^ [ 2210.105875][T25742] ffff88805b4a8280: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fc fc [ 2210.114030][T25742] ffff88805b4a8300: fc fc fa fb fb fb fb fb fb fb fb fb fc fc fc fc [ 2210.122095][T25742] ================================================================== [ 2210.132339][T25742] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2210.139586][T25742] CPU: 1 PID: 25742 Comm: syz.2.5535 Not tainted 6.6.101-syzkaller #0 [ 2210.147773][T25742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2210.157857][T25742] Call Trace: [ 2210.161149][T25742] [ 2210.164092][T25742] dump_stack_lvl+0x16c/0x230 [ 2210.168788][T25742] ? show_regs_print_info+0x20/0x20 [ 2210.174004][T25742] ? load_image+0x3b0/0x3b0 [ 2210.178542][T25742] panic+0x2c0/0x710 [ 2210.182459][T25742] ? bpf_jit_dump+0xd0/0xd0 [ 2210.187000][T25742] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 2210.192918][T25742] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2210.198832][T25742] ? _raw_spin_unlock+0x40/0x40 [ 2210.203705][T25742] ? print_memory_metadata+0x314/0x400 [ 2210.209175][T25742] ? gfs2_invalidate_folio+0x463/0xa50 [ 2210.214672][T25742] check_panic_on_warn+0x84/0xa0 [ 2210.219638][T25742] ? gfs2_invalidate_folio+0x463/0xa50 [ 2210.225324][T25742] end_report+0x6f/0x140 [ 2210.229591][T25742] kasan_report+0x128/0x150 [ 2210.234123][T25742] ? gfs2_invalidate_folio+0x463/0xa50 [ 2210.239605][T25742] gfs2_invalidate_folio+0x463/0xa50 [ 2210.244910][T25742] ? gfs2_bmap+0x200/0x200 [ 2210.249364][T25742] truncate_cleanup_folio+0x220/0x5c0 [ 2210.254874][T25742] truncate_inode_pages_range+0x229/0xf00 [ 2210.260627][T25742] ? __lock_acquire+0x1334/0x7c80 [ 2210.265678][T25742] ? mapping_evict_folio+0x510/0x510 [ 2210.270991][T25742] ? _raw_spin_lock_irq+0xaf/0xe0 [ 2210.276040][T25742] ? _raw_spin_unlock_irq+0x23/0x50 [ 2210.281260][T25742] ? lockdep_hardirqs_on+0x98/0x150 [ 2210.286482][T25742] gfs2_evict_inode+0x3d8/0x1220 [ 2210.291449][T25742] ? do_raw_spin_unlock+0x121/0x230 [ 2210.296694][T25742] ? gfs2_drop_inode+0x380/0x380 [ 2210.301646][T25742] ? _raw_spin_unlock+0x28/0x40 [ 2210.306602][T25742] ? inode_wait_for_writeback+0x1b4/0x200 [ 2210.312337][T25742] ? evict+0x451/0x870 [ 2210.316422][T25742] ? sb_clear_inode_writeback+0x360/0x360 [ 2210.322178][T25742] ? do_raw_spin_lock+0x121/0x2c0 [ 2210.327411][T25742] ? do_raw_spin_unlock+0x121/0x230 [ 2210.332630][T25742] ? gfs2_drop_inode+0x380/0x380 [ 2210.337592][T25742] evict+0x486/0x870 [ 2210.341524][T25742] ? iput+0x70a/0x920 [ 2210.345537][T25742] ? proc_nr_inodes+0x230/0x230 [ 2210.350406][T25742] ? do_raw_spin_unlock+0x121/0x230 [ 2210.355618][T25742] ? _raw_spin_unlock+0x28/0x40 [ 2210.360488][T25742] gfs2_kill_sb+0x230/0x320 [ 2210.365013][T25742] deactivate_locked_super+0x97/0x100 [ 2210.370405][T25742] cleanup_mnt+0x429/0x4c0 [ 2210.374849][T25742] task_work_run+0x1ce/0x250 [ 2210.379542][T25742] ? task_work_cancel+0x240/0x240 [ 2210.384586][T25742] ? do_exit+0x906/0x23c0 [ 2210.388938][T25742] ? kmem_cache_free+0xf8/0x280 [ 2210.393807][T25742] do_exit+0x90b/0x23c0 [ 2210.398012][T25742] ? put_task_struct+0xc0/0xc0 [ 2210.402899][T25742] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2210.408893][T25742] ? get_signal+0x1255/0x1400 [ 2210.413600][T25742] ? lock_chain_count+0x20/0x20 [ 2210.418473][T25742] do_group_exit+0x21b/0x2d0 [ 2210.423089][T25742] ? lockdep_hardirqs_on+0x98/0x150 [ 2210.428325][T25742] get_signal+0x12fc/0x1400 [ 2210.432876][T25742] arch_do_signal_or_restart+0x96/0x780 [ 2210.438448][T25742] ? __remove_hrtimer+0x470/0x470 [ 2210.443493][T25742] ? get_sigframe_size+0x20/0x20 [ 2210.448471][T25742] ? __se_sys_clock_nanosleep+0x2ea/0x370 [ 2210.454222][T25742] ? exit_to_user_mode_loop+0x3b/0x110 [ 2210.459750][T25742] exit_to_user_mode_loop+0x70/0x110 [ 2210.465057][T25742] exit_to_user_mode_prepare+0xb1/0x140 [ 2210.470628][T25742] syscall_exit_to_user_mode+0x1a/0x50 [ 2210.476196][T25742] do_syscall_64+0x61/0xb0 [ 2210.480626][T25742] ? clear_bhb_loop+0x40/0x90 [ 2210.485344][T25742] ? clear_bhb_loop+0x40/0x90 [ 2210.490052][T25742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2210.495989][T25742] RIP: 0033:0x7f8f597c1425 [ 2210.500422][T25742] Code: Unable to access opcode bytes at 0x7f8f597c13fb. [ 2210.507449][T25742] RSP: 002b:00007f8f5a64af80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2210.515909][T25742] RAX: fffffffffffffdfc RBX: 00007f8f599b6160 RCX: 00007f8f597c1425 [ 2210.523897][T25742] RDX: 00007f8f5a64afc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2210.531970][T25742] RBP: 00007f8f59811df1 R08: 0000000000000000 R09: 0000000000000000 [ 2210.540038][T25742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2210.548018][T25742] R13: 0000000000000000 R14: 00007f8f599b6160 R15: 00007ffe8b974038 [ 2210.556011][T25742] [ 2210.559332][T25742] Kernel Offset: disabled [ 2210.563660][T25742] Rebooting in 86400 seconds..