last executing test programs: 42.363893496s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) 41.817748333s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 41.312189015s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x0, 0x0, 0x0) 40.581603064s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0xff7fffffffffffff) 40.138315807s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b708004d105b4d00bfa200000000000007020000f8ffffffb703000008000000b78500000003000000950000000000000000a7016ca800"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000180)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_IOAS_COPY$syz(r3, 0x3b83, &(0x7f0000000140)={0x28, 0x0, 0x0, r4, 0x3f708a}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x4d, 0x0, 0x0, 0x0, "c12513ec9b54ed243bff70eee83acb90956707"}) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="06911949839fee1bbc110bb5a0d04a4d9bc6af14a2edcf773ade420838414dd1707fb1450c659e065f5ae0ba961aae5c556a55456be3575c830ea1be4df91faa3223488ac3a430a04a6fe74144313b9779b3418d5bdce652ed0baffce001fede2984f6b35a1a3b0d2f55e45f091d32b393db4bb61373627942e5e87dff8f0081c275f4c1767c3eafd54e9222d74535188899d7edbf5a8f74772292d3563083325040a4a907c213925c6dd1ff4e9538f1d8a6a71f16c667e0cb8d06de57c9d6c7f03b86f3f443ee33a7f4a311e57403f5ab182b079aecc4a0efe3c597706268c0332cb088d38ddc56b1e28820bc87615c27fe3f6106", @ANYRES16=r5, @ANYRES16=r4, @ANYRES32=r5, @ANYRESOCT=r4, @ANYRESDEC=r5, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r8, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "bf2235978778a43b63105f1741d1bbfd30bfff81b073ec841c62e4accd77e17a048876469c4009b32d3919b7248c701445925dec571697f34ddc39c0626d97c7cafcfd7e8f7181517e547dc92be2d641a9857340e416043c3529ad6612fe2b5508430549bc7c00a1e6883618750bd9c297e9b51f71dc41936266ba9a701668390455a6d2fe6f948e12f91109a34e9f1251d9d4a77a93cf4546ea123db014a5ba90c8a0d15265bf6289d91f775d0549f1c10268fb779bc103000000b0beb3f1f9767e43c0db795f5f466271bd0baaa0fd365eebbb70107d4a3ab1e612be8fd893a63ae7ace79a14c797de0000000000000000000200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}}, 0x120) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f00000000c0)) 39.96797779s ago: executing program 1: clock_gettime(0xfffffff0, &(0x7f0000002840)) 39.412038818s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="03000000cb15070040001280080001007369740034000280", @ANYBLOB='\b'], 0x60}}, 0x0) 39.37873383s ago: executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000140)={0x2}) 39.314992334s ago: executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/xfrm_stat\x00') syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000000), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x3, 0x17ff, 0x10000) pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "488dc807"}, 0x0, 0x2, {0x0}}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000180)="57e6e32083a328c2da3964066135e463f922081ae50887ede09da114c1daa077f9611f8aa81d", 0x26}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f0000000300)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4f3e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d", 0x8d}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xfec7}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6, &(0x7f0000000840)="a6d462c399e20d9d7ab19933a9b3d0e1d617be45eb50440e1e51f20cd773cd1b34e2669a511f6292d81a777376560dc1daae580d2419af271bdd485f32ddaa3679178bcbe6ff6f5d5d758535afbe2a930342eaa16108a32d9d31fbfe8bf4d89784440c3ff3fef2f998aebc9634", 0x6d}, 0x80) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) 38.639670061s ago: executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db4560200000000ff81000e22", 0x1b}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 38.593921932s ago: executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffb, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) pwrite64(r2, &(0x7f0000000000)='+', 0x1, 0x4010000bffd) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x80bf13, 0x28120001) 38.554128475s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x15, 0x0, @val=@tracing}, 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1a, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x40) 38.346395047s ago: executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x2, 0x7fffffffffffffff}) 38.110599189s ago: executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 38.094122213s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 37.902607565s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 37.757912192s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cgroups\x00', 0x0, 0x0) lseek(r1, 0x0, 0x1) 37.666995823s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b708004d105b4d00bfa200000000000007020000f8ffffffb703000008000000b78500000003000000950000000000000000a7016ca800"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000180)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_IOAS_COPY$syz(r3, 0x3b83, &(0x7f0000000140)={0x28, 0x0, 0x0, r4, 0x3f708a}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x4d, 0x0, 0x0, 0x0, "c12513ec9b54ed243bff70eee83acb90956707"}) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="06911949839fee1bbc110bb5a0d04a4d9bc6af14a2edcf773ade420838414dd1707fb1450c659e065f5ae0ba961aae5c556a55456be3575c830ea1be4df91faa3223488ac3a430a04a6fe74144313b9779b3418d5bdce652ed0baffce001fede2984f6b35a1a3b0d2f55e45f091d32b393db4bb61373627942e5e87dff8f0081c275f4c1767c3eafd54e9222d74535188899d7edbf5a8f74772292d3563083325040a4a907c213925c6dd1ff4e9538f1d8a6a71f16c667e0cb8d06de57c9d6c7f03b86f3f443ee33a7f4a311e57403f5ab182b079aecc4a0efe3c597706268c0332cb088d38ddc56b1e28820bc87615c27fe3f6106", @ANYRES16=r5, @ANYRES16=r4, @ANYRES32=r5, @ANYRESOCT=r4, @ANYRESDEC=r5, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r8, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "bf2235978778a43b63105f1741d1bbfd30bfff81b073ec841c62e4accd77e17a048876469c4009b32d3919b7248c701445925dec571697f34ddc39c0626d97c7cafcfd7e8f7181517e547dc92be2d641a9857340e416043c3529ad6612fe2b5508430549bc7c00a1e6883618750bd9c297e9b51f71dc41936266ba9a701668390455a6d2fe6f948e12f91109a34e9f1251d9d4a77a93cf4546ea123db014a5ba90c8a0d15265bf6289d91f775d0549f1c10268fb779bc103000000b0beb3f1f9767e43c0db795f5f466271bd0baaa0fd365eebbb70107d4a3ab1e612be8fd893a63ae7ace79a14c797de0000000000000000000200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}}, 0x120) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f00000000c0)) 37.269343618s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="03000000cb15070040001280080001007369740034000280", @ANYBLOB='\b'], 0x60}}, 0x0) 37.109880209s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac01]}]]}, 0x34}}, 0x0) 31.5746939s ago: executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 31.319928993s ago: executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x11, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2122], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe00}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x2, 0x0) r6 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x40009) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_ext_remove_space_done\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="68696465967362736563746f723d3078303003003030303030303030303030332c6d6f64653d3078666666666666666666666666656364422c6d6f64000000003030303030303030303030303030323130303030303030303030612c00"/109, @ANYBLOB="1c09928e76a91ed121c0cb12fbb38ef2226daf032a21a98920809c8947a2944bbbd6a327b8470e359231a41df2ececee08b16faecd3bc15ce937c8a12091fac831301a250300008a0f9f6ef49a5ed967616bfecc0a5f", @ANYRES8=r9, @ANYRES16=r10], 0x0, 0x655, &(0x7f0000000700)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00005400000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0035dca39311d28dd50ab64fa5a0f1b50000000000000000000000000000000000000000390c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faa84bd9d7494a720fcf"], 0xb8}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaacce3906777428100000086dd600cbb0500302f00fc010000000000000000000000000000fe8000000000000000000000000000aa0300907800000000600120d200000000ff020000000000000000000000000001fe000000000000000000000000bb"], 0x0) 30.66660835s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001040)=[{0x0}, {&(0x7f0000001280)=""/149, 0x95}], 0x2}}], 0x3, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x2}], 0xf}], 0x49249249249261c, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000200)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000180000003500001f0000000085000000070000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x9b, &(0x7f0000000040)=""/155}, 0x87) 30.321832118s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b708004d105b4d00bfa200000000000007020000f8ffffffb703000008000000b78500000003000000950000000000000000a7016ca800"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000180)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x8000000000000000}) ioctl$IOMMU_IOAS_COPY$syz(r3, 0x3b83, &(0x7f0000000140)={0x28, 0x0, 0x0, r4, 0x3f708a}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x0, 0x4d, 0x0, 0x0, 0x0, "c12513ec9b54ed243bff70eee83acb90956707"}) r5 = dup(r2) write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="06911949839fee1bbc110bb5a0d04a4d9bc6af14a2edcf773ade420838414dd1707fb1450c659e065f5ae0ba961aae5c556a55456be3575c830ea1be4df91faa3223488ac3a430a04a6fe74144313b9779b3418d5bdce652ed0baffce001fede2984f6b35a1a3b0d2f55e45f091d32b393db4bb61373627942e5e87dff8f0081c275f4c1767c3eafd54e9222d74535188899d7edbf5a8f74772292d3563083325040a4a907c213925c6dd1ff4e9538f1d8a6a71f16c667e0cb8d06de57c9d6c7f03b86f3f443ee33a7f4a311e57403f5ab182b079aecc4a0efe3c597706268c0332cb088d38ddc56b1e28820bc87615c27fe3f6106", @ANYRES16=r5, @ANYRES16=r4, @ANYRES32=r5, @ANYRESOCT=r4, @ANYRESDEC=r5, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x0, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r7, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r8, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "bf2235978778a43b63105f1741d1bbfd30bfff81b073ec841c62e4accd77e17a048876469c4009b32d3919b7248c701445925dec571697f34ddc39c0626d97c7cafcfd7e8f7181517e547dc92be2d641a9857340e416043c3529ad6612fe2b5508430549bc7c00a1e6883618750bd9c297e9b51f71dc41936266ba9a701668390455a6d2fe6f948e12f91109a34e9f1251d9d4a77a93cf4546ea123db014a5ba90c8a0d15265bf6289d91f775d0549f1c10268fb779bc103000000b0beb3f1f9767e43c0db795f5f466271bd0baaa0fd365eebbb70107d4a3ab1e612be8fd893a63ae7ace79a14c797de0000000000000000000200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}}, 0x120) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f00000000c0)) 30.036285154s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="05003901"], 0x44}}, 0x0) 8.053565435s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x0, 0x0, 0x0) 7.819334116s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) rmdir(0x0) mount(0x0, 0x0, &(0x7f0000000100)='cgroup2\x00', 0x4002, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000780)="50b83e051004005304005300000f01c1b8050000b1b9f4300e004e0f01d90fc79d00300080646564f30fc7fb360f011b8fc868a6ef003666f10ff138818b34dba25f66b8bc000f00d00f017800", 0x4d}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.225883077s ago: executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x1, 0x9}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d030000008498ed5d3a7dcca8f113000004000000000000fe00"}}) 7.054359391s ago: executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 0s ago: executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x20000000, 0x1}) kernel console output (not intermixed with test programs): 112][ T3831] hfsplus: b-tree write err: -5, ino 4 [ 1099.530090][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1099.771115][T16592] loop1: detected capacity change from 0 to 1024 [ 1100.077377][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1100.374866][ T5162] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1100.598816][ T5162] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1100.621348][ T5162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.634818][ T5162] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.644938][ T5162] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1100.677722][ T5162] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1100.693821][ T5162] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1100.710511][ T5162] usb 1-1: Manufacturer: syz [ 1100.995779][ T5124] Bluetooth: hci0: command tx timeout [ 1101.094726][ T5162] usb 1-1: config 0 descriptor?? [ 1102.297752][ T5162] appleir 0003:05AC:8243.0014: unknown main item tag 0x0 [ 1102.358423][ T5162] appleir 0003:05AC:8243.0014: No inputs registered, leaving [ 1102.395020][ T5162] appleir 0003:05AC:8243.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 1102.623232][ T5162] usb 1-1: USB disconnect, device number 20 [ 1103.004705][ T5124] Bluetooth: hci0: command tx timeout [ 1103.283748][T16540] chnl_net:caif_netlink_parms(): no params data found [ 1103.713254][ T11] IPVS: stop unused estimator thread 0... [ 1103.756251][T16625] loop0: detected capacity change from 0 to 512 [ 1103.808887][T16625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1103.833117][T16625] EXT4-fs: old and new quota format mixing [ 1103.988047][T16625] loop0: detected capacity change from 0 to 1764 [ 1104.003974][T16540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.025517][T16540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.036757][T16540] bridge_slave_0: entered allmulticast mode [ 1104.064120][T16540] bridge_slave_0: entered promiscuous mode [ 1104.111541][T16540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.121871][T16540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.130658][T16540] bridge_slave_1: entered allmulticast mode [ 1104.140402][T16540] bridge_slave_1: entered promiscuous mode [ 1104.329370][T16540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.360205][T16540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.435771][T16629] loop1: detected capacity change from 0 to 1024 [ 1104.534400][T16540] team0: Port device team_slave_0 added [ 1104.588663][T16540] team0: Port device team_slave_1 added [ 1104.601446][T16612] loop3: detected capacity change from 0 to 32768 [ 1104.695887][T16612] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1104.747736][T16540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.763912][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.811542][T16540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.815238][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1104.830843][T16540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.840606][T16540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.883039][T16540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.904041][T16612] XFS (loop3): Ending clean mount [ 1104.941977][T16612] XFS (loop3): Quotacheck needed: Please wait. [ 1105.087406][T16612] XFS (loop3): Quotacheck: Done. [ 1105.110733][T16540] hsr_slave_0: entered promiscuous mode [ 1105.149342][T16540] hsr_slave_1: entered promiscuous mode [ 1105.281723][T16641] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1105.345556][T16232] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1105.895722][T16648] loop0: detected capacity change from 0 to 8 [ 1106.035312][ T29] audit: type=1400 audit(1717408486.841:2803): avc: denied { read write } for pid=16647 comm="syz-executor.0" name="file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1106.126429][ T29] audit: type=1400 audit(1717408486.841:2804): avc: denied { open } for pid=16647 comm="syz-executor.0" path="/root/syzkaller-testdir3027320261/syzkaller.VlQlN8/27/file0/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1106.745677][T16657] loop2: detected capacity change from 0 to 2048 [ 1106.790158][T16661] loop0: detected capacity change from 0 to 64 [ 1106.817221][T16657] udf: Unknown parameter '' [ 1106.853277][T16661] hfs: session requires an argument [ 1106.865744][T16540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1106.875006][T16661] hfs: unable to parse mount options [ 1106.896125][T16540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1106.932806][T16540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1107.021563][T16540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1107.452536][T16540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.554088][T16540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.618007][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.625396][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.691149][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.698494][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.822026][T16671] loop3: detected capacity change from 0 to 8 [ 1108.159826][T16678] loop1: detected capacity change from 0 to 64 [ 1108.432540][T16540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.655996][ T29] audit: type=1800 audit(1717408489.471:2805): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1945 res=0 errno=0 [ 1108.700489][ T29] audit: type=1804 audit(1717408489.471:2806): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1801616929/syzkaller.V2mdbe/23/file0" dev="sda1" ino=1945 res=1 errno=0 [ 1109.086712][ T29] audit: type=1800 audit(1717408489.901:2807): pid=16695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1961 res=0 errno=0 [ 1109.196483][T16692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16692 comm=syz-executor.1 [ 1109.203134][ T29] audit: type=1804 audit(1717408489.951:2808): pid=16695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3027320261/syzkaller.VlQlN8/30/file0" dev="sda1" ino=1961 res=1 errno=0 [ 1109.244104][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1109.743120][T16540] veth0_vlan: entered promiscuous mode [ 1109.772401][T16540] veth1_vlan: entered promiscuous mode [ 1109.873695][T16540] veth0_macvtap: entered promiscuous mode [ 1109.912704][T16540] veth1_macvtap: entered promiscuous mode [ 1110.033983][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.048639][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.077725][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.100415][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.120615][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.135458][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.145650][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.158475][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.169370][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.182045][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.216192][T16540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.277379][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.315618][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.353883][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.384870][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.432066][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.467644][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.506616][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.544634][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.583405][T16540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1110.640262][T16540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.676981][T16540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.734342][T16540] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.753457][T16540] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.777933][T16540] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.806235][T16540] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.300097][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.323437][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.594257][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.615730][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.955677][T16717] loop1: detected capacity change from 0 to 128 [ 1112.020515][T16717] zonefs: Unknown parameter 'uĂď“ĽQ±Ě€¤%râĘŁTęâĘËđkýźť' [ 1113.239013][T16713] loop0: detected capacity change from 0 to 32768 [ 1113.372431][T16713] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1113.554612][T16713] XFS (loop0): Ending clean mount [ 1113.633972][T16731] loop1: detected capacity change from 0 to 64 [ 1113.648191][T16713] XFS (loop0): Quotacheck needed: Please wait. [ 1113.821646][T16713] XFS (loop0): Quotacheck: Done. [ 1114.010129][T16130] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1114.450895][T16736] mac80211_hwsim hwsim74 wlan1: entered allmulticast mode [ 1114.460067][T16736] mac80211_hwsim hwsim74 wlan1: left allmulticast mode [ 1114.876978][T16738] loop4: detected capacity change from 0 to 4096 [ 1115.086294][T16742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16742 comm=syz-executor.2 [ 1115.160379][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1115.162420][T16738] ntfs3: loop4: failed to convert "0080" to koi8-ru [ 1115.190046][T16738] ntfs3: loop4: failed to convert name for inode 1e. [ 1115.884225][T16754] loop2: detected capacity change from 0 to 64 [ 1115.942626][T16752] loop4: detected capacity change from 0 to 128 [ 1115.990114][T16752] zonefs: Unknown parameter 'uĂď“ĽQ±Ě€¤%râĘŁTęâĘËđkýźť' [ 1117.678142][T16746] loop0: detected capacity change from 0 to 32768 [ 1117.754611][T16746] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (16746) [ 1117.800162][T16746] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1117.820242][T16746] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1117.834538][T16746] BTRFS info (device loop0): using free-space-tree [ 1118.330061][ T29] audit: type=1800 audit(1717408499.130:2809): pid=16787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=264 res=0 errno=0 [ 1118.644726][ T29] audit: type=1400 audit(1717408499.450:2810): avc: denied { remove_name } for pid=16744 comm="syz-executor.0" name="file1" dev="loop0" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1118.795112][ T29] audit: type=1400 audit(1717408499.530:2811): avc: denied { unlink } for pid=16744 comm="syz-executor.0" name="file1" dev="loop0" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1118.823958][ C0] vkms_vblank_simulate: vblank timer overrun [ 1119.227541][T16130] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1119.933036][T16791] loop4: detected capacity change from 0 to 4096 [ 1120.242583][T16784] loop3: detected capacity change from 0 to 32768 [ 1120.264565][T16791] ntfs3: loop4: failed to convert "0080" to koi8-ru [ 1120.276622][T16791] ntfs3: loop4: failed to convert name for inode 1e. [ 1120.320773][T16784] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 1120.320773][T16784] clean (size 2912): [ 1120.320773][T16784] flags: 0 [ 1120.320773][T16784] journal_seq: 8 [ 1120.320773][T16784] usage: type=inodes v=8 [ 1120.320773][T16784] usage: type=key_version v=0 [ 1120.320773][T16784] usage: type=reserved v=0 [ 1120.320773][T16784] usage: type=reserved v=0 [ 1120.320773][T16784] usage: type=reserved v=0 [ 1120.320773][T16784] usage: type=reserved v=0 [ 1120.320773][T16784] data_usage: btree: 1/1 [0]=2816 [ 1120.320773][T16784] data_usage: journal: 1/1 [0]=0 [ 1120.320773][T16784] data_usage: user: 1/1 [0]=32 [ 1120.320773][T16784] dev_usage: dev=0free: buckets=83 sectors=0 fragmented=0sb: buckets=25 sectors=6152 fragmented=248journal: buckets=8 sectors=2048 fragmented=0btree: buckets=11 sectors=2816 fragmented=0user: buckets=1 sectors=32 fragmented=224cached: buckets=8 sectors=0 fragmented=0parity: buckets=0 sectors=0 fragmented=0stripe: buckets=0 sectors=0 fragmented=0need_gc_gens: buckets=0 sectors=0 fragmented=0need_discard: buckets=0 sectors=0 fragmented=0 [ 1120.320773][T16784] clock: read=0 [ 1120.320773][T16784] clock: write=1288 [ 1120.320773][T16784] btree_root: btree=extents l=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS [ 1121.152264][T16801] loop4: detected capacity change from 0 to 128 [ 1121.328328][T16801] zonefs: Unknown parameter 'uĂď“ĽQ±Ě€¤%râĘŁTęâĘËđkýźť' [ 1121.374851][T16804] loop1: detected capacity change from 0 to 64 [ 1121.758726][T16796] loop0: detected capacity change from 0 to 32768 [ 1121.799299][T16796] bcachefs: bch2_parse_mount_opts() Invalid mount option data_checksum: invalid selection [ 1123.121049][T16821] loop0: detected capacity change from 0 to 4096 [ 1123.531662][T16821] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 1123.580624][T16821] ntfs3: loop0: failed to convert name for inode 1e. [ 1123.831188][T16810] loop2: detected capacity change from 0 to 32768 [ 1123.890054][T16810] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (16810) [ 1123.952355][T16810] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1123.974419][T16810] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1123.995750][T16810] BTRFS info (device loop2): using free-space-tree [ 1124.040578][T16815] loop3: detected capacity change from 0 to 32768 [ 1124.143741][T16815] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1124.300499][ T29] audit: type=1800 audit(1717408505.110:2812): pid=16810 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=264 res=0 errno=0 [ 1124.436585][T16817] loop4: detected capacity change from 0 to 32768 [ 1124.534625][T16817] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1124.566586][T16815] XFS (loop3): Ending clean mount [ 1124.583930][T16086] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1124.592141][T16815] XFS (loop3): Quotacheck needed: Please wait. [ 1124.758583][T16817] XFS (loop4): Ending clean mount [ 1124.787021][T16817] XFS (loop4): Quotacheck needed: Please wait. [ 1124.947876][T16815] XFS (loop3): Quotacheck: Done. [ 1125.215838][T16817] XFS (loop4): Quotacheck: Done. [ 1125.306676][T16232] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1126.019002][T16540] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1126.403984][T16854] loop0: detected capacity change from 0 to 32768 [ 1126.449694][T16854] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 1126.449694][T16854] clean (size 2912): [ 1126.449694][T16854] flags: 0 [ 1126.449694][T16854] journal_seq: 8 [ 1126.449694][T16854] usage: type=inodes v=8 [ 1126.449694][T16854] usage: type=key_version v=0 [ 1126.449694][T16854] usage: type=reserved v=0 [ 1126.449694][T16854] usage: type=reserved v=0 [ 1126.449694][T16854] usage: type=reserved v=0 [ 1126.449694][T16854] usage: type=reserved v=0 [ 1126.449694][T16854] data_usage: btree: 1/1 [0]=2816 [ 1126.449694][T16854] data_usage: journal: 1/1 [0]=0 [ 1126.449694][T16854] data_usage: user: 1/1 [0]=32 [ 1126.449694][T16854] dev_usage: dev=0free: buckets=83 sectors=0 fragmented=0sb: buckets=25 sectors=6152 fragmented=248journal: buckets=8 sectors=2048 fragmented=0btree: buckets=11 sectors=2816 fragmented=0user: buckets=1 sectors=32 fragmented=224cached: buckets=8 sectors=0 fragmented=0parity: buckets=0 sectors=0 fragmented=0stripe: buckets=0 sectors=0 fragmented=0need_gc_gens: buckets=0 sectors=0 fragmented=0need_discard: buckets=0 sectors=0 fragmented=0 [ 1126.449694][T16854] clock: read=0 [ 1126.449694][T16854] clock: write=1288 [ 1126.449694][T16854] btree_root: btree=extents l=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS [ 1127.415590][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.597362][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.632761][ T29] audit: type=1400 audit(1717408508.440:2813): avc: denied { map } for pid=16879 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1127.865630][T16886] loop4: detected capacity change from 0 to 512 [ 1127.958660][T16886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1127.993561][T16886] ext4 filesystem being mounted at /root/syzkaller-testdir2397476138/syzkaller.AuqXvj/11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.261506][T16886] bridge0: port 3(vlan2) entered blocking state [ 1128.296027][T16886] bridge0: port 3(vlan2) entered disabled state [ 1128.320099][T16886] vlan2: entered allmulticast mode [ 1128.354771][T16886] vlan2: left allmulticast mode [ 1128.576118][T16896] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 1128.614665][T16896] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 1128.657331][T16896] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 1128.703169][T16896] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 1129.096632][T16540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.764975][T16893] loop1: detected capacity change from 0 to 32768 [ 1129.794962][T16893] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (16893) [ 1129.872264][T16893] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1129.896392][T16893] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1129.907016][T16893] BTRFS info (device loop1): using free-space-tree [ 1130.270589][ T29] audit: type=1800 audit(1717408511.060:2814): pid=16893 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=264 res=0 errno=0 [ 1130.510230][T16900] loop3: detected capacity change from 0 to 32768 [ 1130.573205][T16176] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1130.630887][T16900] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1131.039008][T16900] XFS (loop3): Ending clean mount [ 1131.069478][T16900] XFS (loop3): Quotacheck needed: Please wait. [ 1131.282007][T16900] XFS (loop3): Quotacheck: Done. [ 1131.376383][ T29] audit: type=1800 audit(1717408512.180:2815): pid=16900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=9291 res=0 errno=0 [ 1131.768015][T16952] loop2: detected capacity change from 0 to 512 [ 1131.908953][T16952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.951403][T16952] ext4 filesystem being mounted at /root/syzkaller-testdir3774343547/syzkaller.usoceh/53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.039884][T16232] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1132.075501][T16952] bridge0: port 3(vlan2) entered blocking state [ 1132.083000][T16952] bridge0: port 3(vlan2) entered disabled state [ 1132.092918][T16952] vlan2: entered allmulticast mode [ 1132.111437][T16952] vlan2: left allmulticast mode [ 1132.482354][T16959] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 1132.557834][T16959] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error [ 1132.602886][T16959] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents [ 1132.671084][T16959] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error [ 1133.426139][T16086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.821612][T16977] loop4: detected capacity change from 0 to 512 [ 1133.939770][T16977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.956946][T16977] ext4 filesystem being mounted at /root/syzkaller-testdir2397476138/syzkaller.AuqXvj/16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.029710][T16977] bridge0: port 3(vlan2) entered blocking state [ 1134.036633][T16977] bridge0: port 3(vlan2) entered disabled state [ 1134.046216][T16977] vlan2: entered allmulticast mode [ 1134.056339][T16977] vlan2: left allmulticast mode [ 1134.287925][T16977] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 1134.315467][T16977] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 1134.340865][T16977] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 1134.383558][T16977] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 1134.841670][T16540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.437867][T16997] loop1: detected capacity change from 0 to 512 [ 1135.559500][T16997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.602222][T16997] ext4 filesystem being mounted at /root/syzkaller-testdir2965445747/syzkaller.pmrHNJ/57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.883071][T16997] bridge0: port 1(vlan2) entered blocking state [ 1135.923094][T16997] bridge0: port 1(vlan2) entered disabled state [ 1135.947593][T16997] vlan2: entered allmulticast mode [ 1135.970005][T16997] vlan2: left allmulticast mode [ 1136.310749][T16997] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 1136.355090][T16997] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 1136.440630][T16990] loop2: detected capacity change from 0 to 32768 [ 1136.456655][T16997] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents [ 1136.478979][T16997] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error [ 1136.562837][T16990] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1136.699696][T16992] loop0: detected capacity change from 0 to 32768 [ 1136.798498][T16992] btrfs: Deprecated parameter 'usebackuproot' [ 1136.804683][T16992] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1136.841648][T16992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (16992) [ 1136.853277][T16990] XFS (loop2): Ending clean mount [ 1136.875136][T16176] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.902582][T16992] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1136.917939][T16990] XFS (loop2): Quotacheck needed: Please wait. [ 1136.979485][T16992] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1136.995175][T16992] BTRFS info (device loop0): disk space caching is enabled [ 1137.051319][T16998] loop4: detected capacity change from 0 to 32768 [ 1137.192935][T16990] XFS (loop2): Quotacheck: Done. [ 1137.223428][T16998] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1137.248312][ T29] audit: type=1800 audit(1717408518.060:2816): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 1137.403328][T16992] btrfs: Deprecated parameter 'usebackuproot' [ 1137.439880][T16992] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1137.450858][T16992] BTRFS info (device loop0 state M): rebuilding free space tree [ 1137.479338][T16998] XFS (loop4): Ending clean mount [ 1137.523119][T16998] XFS (loop4): Quotacheck needed: Please wait. [ 1137.703169][T16992] BTRFS info (device loop0 state M): disabling free space tree [ 1137.720553][T16992] BTRFS info (device loop0 state M): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1137.747008][T16998] XFS (loop4): Quotacheck: Done. [ 1137.762986][T16992] BTRFS info (device loop0 state M): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1137.961251][T16992] BTRFS info (device loop0 state M): force clearing of disk cache [ 1137.976646][T16992] BTRFS info (device loop0 state M): trying to use backup root at mount time [ 1138.114798][T16086] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1138.151711][T16992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1138.339934][T16540] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1138.554109][T16130] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1138.973549][T17047] loop3: detected capacity change from 0 to 512 [ 1139.172453][T17047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.255831][T17047] ext4 filesystem being mounted at /root/syzkaller-testdir1801616929/syzkaller.V2mdbe/42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.461647][ T29] audit: type=1800 audit(1717408520.270:2817): pid=17049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 1139.708458][T17047] bridge0: port 1(vlan2) entered blocking state [ 1139.733210][T17047] bridge0: port 1(vlan2) entered disabled state [ 1139.741562][T17047] vlan2: entered allmulticast mode [ 1139.891626][T17047] vlan2: left allmulticast mode [ 1140.385228][T17047] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 1140.404899][T17047] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 1140.441854][T17047] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 1140.486585][T17047] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 1140.823814][T16232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.270173][ T29] audit: type=1400 audit(1717408523.080:2818): avc: denied { setopt } for pid=17084 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1152.482300][T17177] loop1: detected capacity change from 0 to 64 [ 1153.368784][T17169] loop0: detected capacity change from 0 to 32768 [ 1153.414997][T17169] btrfs: Deprecated parameter 'usebackuproot' [ 1153.459974][T17169] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1153.517636][T17169] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (17169) [ 1153.726718][T17169] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1153.746449][T17169] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1154.002298][T17169] BTRFS info (device loop0): disk space caching is enabled [ 1154.359048][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1154.397121][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1154.496699][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1154.840353][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1154.885041][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1154.962851][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1155.239102][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1155.678864][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1155.747990][T17169] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1155.876316][T17169] BTRFS error (device loop0): open_ctree failed [ 1156.374383][T17210] loop3: detected capacity change from 0 to 4096 [ 1156.451475][T17214] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1158.410690][T17225] loop1: detected capacity change from 0 to 512 [ 1158.445427][T17225] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1158.490161][T17225] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1158.512171][T17225] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 1158.573271][T17225] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1158.936796][T17235] loop4: detected capacity change from 0 to 64 [ 1158.997391][ T29] audit: type=1400 audit(1717408539.810:2819): avc: denied { rename } for pid=17223 comm="syz-executor.1" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1158.999662][T17235] hfs: unable to locate alternate MDB [ 1159.612349][T17235] hfs: continuing without an alternate MDB [ 1160.018856][T16176] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1160.601665][T17247] loop1: detected capacity change from 0 to 1024 [ 1163.285098][T17259] loop4: detected capacity change from 0 to 4096 [ 1163.385278][T17262] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1163.797526][T17268] loop2: detected capacity change from 0 to 512 [ 1163.833779][T17268] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1163.895041][T17268] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 1163.911963][T17268] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 1163.941475][T17268] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1164.072667][T17273] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1164.184383][T17276] loop1: detected capacity change from 0 to 64 [ 1164.218683][T17276] hfs: unable to locate alternate MDB [ 1164.227056][T17276] hfs: continuing without an alternate MDB [ 1164.412097][T16086] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1164.538869][T17280] loop3: detected capacity change from 0 to 512 [ 1164.574858][T17280] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 1164.788092][T17280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1165.018121][T17284] loop0: detected capacity change from 0 to 1024 [ 1165.343912][ T8736] Bluetooth: hci4: command 0x0406 tx timeout [ 1165.811456][T17290] loop1: detected capacity change from 0 to 16 [ 1166.013370][T17290] erofs: (device loop1): mounted with root inode @ nid 36. [ 1166.535709][T17295] loop2: detected capacity change from 0 to 4096 [ 1166.618489][T17300] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1167.355366][T17314] loop2: detected capacity change from 0 to 64 [ 1167.404891][T17313] loop0: detected capacity change from 0 to 512 [ 1167.429335][T17314] hfs: unable to locate alternate MDB [ 1167.441999][T17314] hfs: continuing without an alternate MDB [ 1167.452863][T17313] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 1167.495864][T17317] loop3: detected capacity change from 0 to 64 [ 1167.595552][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1167.819936][T17321] loop4: detected capacity change from 0 to 1024 [ 1168.124655][T17324] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 1168.586577][T17331] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1169.030081][T17320] loop1: detected capacity change from 0 to 32768 [ 1169.151941][T17320] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1169.410389][T17320] XFS (loop1): Ending clean mount [ 1169.439256][T17320] XFS (loop1): Quotacheck needed: Please wait. [ 1169.623452][T17320] XFS (loop1): Quotacheck: Done. [ 1169.662719][T17353] loop3: detected capacity change from 0 to 512 [ 1169.739411][T17361] loop2: detected capacity change from 0 to 64 [ 1169.755720][T17353] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1169.758543][T17360] loop4: detected capacity change from 0 to 512 [ 1169.763765][T17353] EXT4-fs (loop3): mount failed [ 1169.898037][T17360] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 1169.942967][T16176] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1170.050684][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1170.447364][T17329] Bluetooth: hci2: command 0x0406 tx timeout [ 1170.459791][T17329] Bluetooth: hci1: command 0x0406 tx timeout [ 1170.524607][T17366] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 1170.986885][T17373] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1172.151219][T17396] loop2: detected capacity change from 0 to 512 [ 1172.204048][T17396] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1172.213800][T17396] EXT4-fs (loop2): mount failed [ 1172.308282][T17403] loop4: detected capacity change from 0 to 2048 [ 1172.434677][T17403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.921706][T16540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.049197][T17387] loop3: detected capacity change from 0 to 32768 [ 1173.093270][T17387] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1173.279959][T17387] XFS (loop3): Ending clean mount [ 1173.315349][T17387] XFS (loop3): Quotacheck needed: Please wait. [ 1173.509669][T17387] XFS (loop3): Quotacheck: Done. [ 1174.349184][T16232] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1174.380678][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1174.746397][T17432] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1175.663261][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.695361][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.709154][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.732968][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.735256][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.741404][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.766985][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.768088][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.783167][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.791461][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.802386][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.817339][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.829203][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.840882][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.849142][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.862647][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.869117][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.874805][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.888859][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.901887][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.904490][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.914275][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.924669][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.944552][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.949005][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.952795][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.967527][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.972362][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1175.975150][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1175.993821][ T5162] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1175.995756][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.003857][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.010223][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1176.035210][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.044698][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.046004][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.071572][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.075759][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.082754][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.097400][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.103708][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.104924][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.119986][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.135619][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.138901][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.147329][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.161335][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.169114][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.173655][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.201490][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.214073][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.228285][ T45] usb 3-1: config 0 has no interfaces? [ 1176.253726][ T45] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 1176.254885][ T5162] usb 2-1: config 0 has no interfaces? [ 1176.280780][ T45] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 1176.290987][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.292843][ T5162] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 1176.317812][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.328443][T17454] loop0: detected capacity change from 0 to 512 [ 1176.340519][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.340568][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.340609][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.340648][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.340688][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.340728][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 1176.349301][ T5162] usb 2-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 1176.371957][ T45] usb 3-1: Product: syz [ 1176.371992][ T45] usb 3-1: Manufacturer: syz [ 1176.372021][ T45] usb 3-1: SerialNumber: syz [ 1176.381228][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.433655][ T8] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1176.451276][ T45] usb 3-1: config 0 descriptor?? [ 1176.462340][ T5162] usb 2-1: Product: syz [ 1176.472429][T17454] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1176.475751][ T5162] usb 2-1: Manufacturer: syz [ 1176.479217][T17454] EXT4-fs (loop0): mount failed [ 1176.511596][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.522796][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.550424][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.560190][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.572259][ T5162] usb 2-1: SerialNumber: syz [ 1176.572774][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.584795][T15323] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1176.606813][T15323] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1176.617328][ T5162] usb 2-1: config 0 descriptor?? [ 1176.854099][ T45] usb 3-1: USB disconnect, device number 15 [ 1177.044180][ T5195] usb 2-1: USB disconnect, device number 16 [ 1177.510199][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1177.856011][ T29] audit: type=1400 audit(1717408558.669:2820): avc: denied { ioctl } for pid=17483 comm="syz-executor.3" path="socket:[75817]" dev="sockfs" ino=75817 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1178.185927][T17477] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1178.660004][T17480] loop0: detected capacity change from 0 to 40427 [ 1178.735184][T17480] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1178.753041][T17480] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1178.775726][T17480] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1178.973402][T17480] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1179.006831][T17480] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1179.079107][T17503] loop3: detected capacity change from 0 to 1764 [ 1179.331424][ T29] audit: type=1400 audit(1717408560.149:2821): avc: denied { lock } for pid=17478 comm="syz-executor.0" path="/root/syzkaller-testdir3027320261/syzkaller.VlQlN8/83/bus/pids.current" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1179.368373][T17480] syz-executor.0: attempt to access beyond end of device [ 1179.368373][T17480] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1180.018959][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1180.051839][ T2447] kworker/u8:8: attempt to access beyond end of device [ 1180.051839][ T2447] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1180.245186][T17498] loop1: detected capacity change from 0 to 32768 [ 1180.274225][T17498] btrfs: Deprecated parameter 'usebackuproot' [ 1180.286585][T17498] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1180.313617][T17498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (17498) [ 1180.567306][T17498] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1180.585907][T17498] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1180.619031][T17498] BTRFS info (device loop1): using free-space-tree [ 1181.277602][T17515] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1181.569735][T17498] BTRFS info (device loop1): rebuilding free space tree [ 1182.125334][T16176] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1182.208659][T17508] loop2: detected capacity change from 0 to 32768 [ 1182.259621][T17508] BTRFS: device /dev/loop2 (7:2) using temp-fsid 0a97f643-356c-47b1-8cdd-cf69e9715dd8 [ 1182.260700][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1182.288335][T17508] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (17508) [ 1182.409471][T17508] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1182.490539][T17508] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1182.499953][T17508] BTRFS info (device loop2): using free-space-tree [ 1182.561642][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1182.565718][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1182.619602][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1182.677717][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1182.737979][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1182.775005][T17508] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1182.930957][T17508] BTRFS error (device loop2): open_ctree failed [ 1182.937575][T17549] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1183.365238][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.446552][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.470506][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.511907][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.537039][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.544524][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.593751][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.623716][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.651528][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.686092][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.696473][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1183.723729][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.768763][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.792246][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.825277][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.855604][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.882030][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.900604][ T8] usb 1-1: config 0 has no interfaces? [ 1183.929331][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.936756][ T8] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 1183.938638][T17544] loop4: detected capacity change from 0 to 32768 [ 1183.956701][ T8] usb 1-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 1183.970526][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.986553][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1183.998699][ T8] usb 1-1: Product: syz [ 1184.021978][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.028150][ T8] usb 1-1: Manufacturer: syz [ 1184.034501][ T8] usb 1-1: SerialNumber: syz [ 1184.037277][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.048637][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.057876][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.059748][ T8] usb 1-1: config 0 descriptor?? [ 1184.069252][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.083319][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.152812][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.187849][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.204217][T17572] loop3: detected capacity change from 0 to 512 [ 1184.218788][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.247193][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.262983][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.271269][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.297867][ T5195] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1184.340550][T17572] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0 [ 1184.358846][ T5195] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1184.374868][T17572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1184.401680][T17572] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0 [ 1184.453111][T17572] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 1184.563310][ T5195] usb 1-1: USB disconnect, device number 21 [ 1184.672094][T16232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1185.268608][T17584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1186.043252][T17591] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1186.227159][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1186.862308][T17603] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1187.029043][T17589] loop3: detected capacity change from 0 to 40427 [ 1187.073079][T17589] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1187.094465][T17589] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1187.146080][T17589] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1187.478151][T17589] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1187.505300][T17597] loop0: detected capacity change from 0 to 32768 [ 1187.505397][T17589] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1187.550720][T17597] btrfs: Deprecated parameter 'usebackuproot' [ 1187.604404][T17597] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1187.635978][T17597] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (17597) [ 1187.677933][T17597] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1187.751064][T17597] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1187.779611][T17597] BTRFS info (device loop0): using free-space-tree [ 1187.790416][T17589] syz-executor.3: attempt to access beyond end of device [ 1187.790416][T17589] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1187.945482][T17606] loop2: detected capacity change from 0 to 32768 [ 1187.979524][T17606] BTRFS: device /dev/loop2 (7:2) using temp-fsid 7575f124-d566-46d5-a3af-cae4fe353992 [ 1188.005796][T17606] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (17606) [ 1188.064904][T17597] BTRFS info (device loop0): rebuilding free space tree [ 1188.074340][T17606] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1188.141511][T17606] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1188.165531][T17606] BTRFS info (device loop2): using free-space-tree [ 1188.405393][T17606] BTRFS info (device loop2): checking UUID tree [ 1188.505712][T17597] BTRFS warning (device loop0): can't set the free_space_tree feature bit while mounted [ 1188.516077][ T3819] kworker/u8:10: attempt to access beyond end of device [ 1188.516077][ T3819] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1188.755824][ T29] audit: type=1400 audit(1717408569.539:2822): avc: denied { reparent } for pid=17604 comm="syz-executor.2" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1188.887625][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.894049][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.082223][T16130] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1189.235847][T16086] BTRFS info (device loop2): last unmount of filesystem 7575f124-d566-46d5-a3af-cae4fe353992 [ 1191.057033][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.064527][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.099609][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.122624][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.156145][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.173696][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.223051][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.231586][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.259582][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.274375][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.282508][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1191.306401][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.316304][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.335523][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.343884][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.351815][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.370593][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.404138][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.423108][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.444700][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.464607][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.494208][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.506976][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.521769][ T8] usb 3-1: config 0 has no interfaces? [ 1191.528810][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.549569][ T8] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 1191.562299][ T8] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 1191.571525][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.590179][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.602639][ T8] usb 3-1: Product: syz [ 1191.611041][ T8] usb 3-1: Manufacturer: syz [ 1191.622792][ T8] usb 3-1: SerialNumber: syz [ 1191.630062][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.649930][ T8] usb 3-1: config 0 descriptor?? [ 1191.667460][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.711116][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.742560][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.779278][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.827310][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.871829][ T5160] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1191.881974][ T8] usb 3-1: can't set config #0, error -71 [ 1191.911222][ T8] usb 3-1: USB disconnect, device number 16 [ 1191.928262][ T5160] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1192.883972][ T29] audit: type=1400 audit(1717408573.679:2823): avc: denied { mounton } for pid=17681 comm="syz-executor.0" path="/root/syzkaller-testdir3027320261/syzkaller.VlQlN8/89/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1193.560695][T17692] loop1: detected capacity change from 0 to 2048 [ 1193.636452][T17692] hpfs: filesystem error: improperly stopped; already mounted read-only [ 1193.647329][T17692] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1193.657719][T17692] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1194.990597][T17701] loop0: detected capacity change from 0 to 2048 [ 1195.126310][T17701] hpfs: filesystem error: improperly stopped; already mounted read-only [ 1195.135116][T17701] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1195.143598][T17701] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1195.907015][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1196.724476][ T29] audit: type=1326 audit(1717408577.479:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1197.312985][ T29] audit: type=1326 audit(1717408577.479:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1197.456851][ T29] audit: type=1326 audit(1717408577.509:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1197.505029][ T29] audit: type=1326 audit(1717408577.509:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1197.566923][ T29] audit: type=1326 audit(1717408577.509:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17712 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1198.017109][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.039899][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.065452][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.076463][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.094578][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.118710][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.137043][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.163243][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.173934][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.187963][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.196889][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.211254][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.226621][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.235565][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.244281][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.274346][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.296805][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.304292][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.327151][T15260] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1198.378753][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.386336][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.409083][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.417780][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.432920][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.442876][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.498212][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.522972][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.543172][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.568719][T15260] usb 2-1: config 0 has no interfaces? [ 1198.577562][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.614306][T15260] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 1198.629555][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.638733][T15260] usb 2-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 1198.671882][T15260] usb 2-1: Product: syz [ 1198.676240][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.692239][T15260] usb 2-1: Manufacturer: syz [ 1198.705974][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.715772][T15260] usb 2-1: SerialNumber: syz [ 1198.721351][T17730] loop2: detected capacity change from 0 to 4096 [ 1198.740462][ T8] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1198.752308][T15260] usb 2-1: config 0 descriptor?? [ 1198.830576][T17730] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1198.859920][ T8] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1198.907696][T17730] NILFS (loop2): trying rollback from an earlier position [ 1199.576664][T17734] loop0: detected capacity change from 0 to 2048 [ 1199.808916][T17734] hpfs: filesystem error: improperly stopped; already mounted read-only [ 1199.819110][T17734] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1199.829710][T17734] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1200.028829][T17730] NILFS (loop2): recovery complete [ 1200.063562][T17739] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1200.282963][ T5074] usb 2-1: USB disconnect, device number 17 [ 1200.321176][ T29] audit: type=1400 audit(1717408581.139:2829): avc: denied { remount } for pid=17728 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1201.377804][T17746] loop4: detected capacity change from 0 to 2047 [ 1201.463976][T17746] hpfs: filesystem error: improperly stopped; already mounted read-only [ 1201.474122][T17746] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1201.484796][T17746] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1206.025988][T17762] loop2: detected capacity change from 0 to 32768 [ 1206.043008][T17772] loop3: detected capacity change from 0 to 2048 [ 1206.125333][T17772] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1206.227233][T17762] find_entry called with index = 0 [ 1206.268795][T17762] find_entry called with index = 0 [ 1206.372073][T17762] find_entry called with index >= next_index [ 1206.402553][T17762] find_entry called with index >= next_index [ 1206.432933][T17762] find_entry called with index >= next_index [ 1206.468930][T17762] find_entry called with index >= next_index [ 1206.499695][T17762] find_entry called with index >= next_index [ 1208.013588][T17770] loop4: detected capacity change from 0 to 32768 [ 1208.063739][T17770] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (17770) [ 1208.095092][T17770] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1208.105955][T17770] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1208.125484][T17770] BTRFS info (device loop4): using free-space-tree [ 1208.218743][T17770] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1208.220408][T17770] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1208.305376][T17770] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1208.317055][T17770] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1208.333325][T17770] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1208.347392][T17770] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1208.350163][T17783] loop3: detected capacity change from 0 to 4096 [ 1208.444641][T17770] BTRFS error (device loop4): open_ctree failed [ 1208.512594][T17783] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1208.539819][T17783] NILFS (loop3): trying rollback from an earlier position [ 1208.624577][T17783] NILFS (loop3): recovery complete [ 1208.645997][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.658767][T17797] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1208.663630][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.684502][T17798] loop0: detected capacity change from 0 to 256 [ 1208.692755][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.711984][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.720742][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.730701][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.743443][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.752287][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.762475][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.770803][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.826016][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.860103][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.870633][T17798] FAT-fs (loop0): Directory bread(block 64) failed [ 1208.879417][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.894609][T17798] FAT-fs (loop0): Directory bread(block 65) failed [ 1208.894743][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.923381][T17798] FAT-fs (loop0): Directory bread(block 66) failed [ 1208.955298][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.962931][ T4567] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1208.971039][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1208.974341][T17798] FAT-fs (loop0): Directory bread(block 67) failed [ 1208.983713][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.005181][T17798] FAT-fs (loop0): Directory bread(block 68) failed [ 1209.025052][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.033055][T17798] FAT-fs (loop0): Directory bread(block 69) failed [ 1209.034382][T17798] FAT-fs (loop0): Directory bread(block 70) failed [ 1209.057058][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.078159][T17798] FAT-fs (loop0): Directory bread(block 71) failed [ 1209.098241][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.117048][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.125567][T17798] FAT-fs (loop0): Directory bread(block 72) failed [ 1209.152920][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.161315][T17798] FAT-fs (loop0): Directory bread(block 73) failed [ 1209.167702][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.175393][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.199679][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.257260][ T4567] usb 2-1: config 0 has no interfaces? [ 1209.287340][ T4567] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 1209.296658][ T4567] usb 2-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 1209.306088][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.342921][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.359751][ T4567] usb 2-1: Product: syz [ 1209.364117][ T4567] usb 2-1: Manufacturer: syz [ 1209.393496][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.401897][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.417038][ T4567] usb 2-1: SerialNumber: syz [ 1209.439984][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.449255][ T4567] usb 2-1: config 0 descriptor?? [ 1209.463766][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.475524][ T5074] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1209.502703][ T5074] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1210.901157][ T5195] usb 2-1: USB disconnect, device number 18 [ 1211.440824][ T8736] Bluetooth: hci3: command 0x0406 tx timeout [ 1211.668442][ T29] audit: type=1326 audit(1717408592.398:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1212.261255][ T29] audit: type=1326 audit(1717408592.398:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1212.367836][ T29] audit: type=1326 audit(1717408592.408:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1212.440832][ T29] audit: type=1326 audit(1717408592.408:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1212.478870][ T29] audit: type=1326 audit(1717408592.408:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17813 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1212.711598][T17821] loop4: detected capacity change from 0 to 8192 [ 1213.119234][T17828] loop1: detected capacity change from 0 to 2048 [ 1213.174314][T17828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1213.375339][T17812] loop3: detected capacity change from 0 to 32768 [ 1213.665507][T17812] find_entry called with index = 0 [ 1213.719535][T17812] find_entry called with index = 0 [ 1213.744251][T17832] find_entry called with index >= next_index [ 1213.770937][T17832] find_entry called with index >= next_index [ 1214.078608][T17832] find_entry called with index >= next_index [ 1214.392371][T17832] find_entry called with index >= next_index [ 1214.421011][T17832] find_entry called with index >= next_index [ 1215.211938][T16232] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=50, index = 1 [ 1215.211938][T16232] [ 1215.288612][T16232] ERROR: (device loop3): remounting filesystem as read-only [ 1215.311842][T16232] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=50, index = 5 [ 1215.311842][T16232] [ 1215.357021][T16232] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=50, index = 6 [ 1215.357021][T16232] [ 1215.371807][T17823] loop2: detected capacity change from 0 to 32768 [ 1216.391581][T17830] loop4: detected capacity change from 0 to 32768 [ 1216.448123][T17830] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (17830) [ 1216.469723][T17837] loop0: detected capacity change from 0 to 4096 [ 1216.573830][T17830] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1216.574411][T17837] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1216.641609][T17830] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1216.651268][T17837] NILFS (loop0): trying rollback from an earlier position [ 1216.679554][T17830] BTRFS info (device loop4): using free-space-tree [ 1216.715192][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1216.752401][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1216.781583][T17837] NILFS (loop0): recovery complete [ 1216.798158][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1216.806092][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1216.868197][T17846] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1216.884465][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1217.018803][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1217.104676][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1217.185257][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1217.253409][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1217.341914][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1217.382084][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1217.416763][T17830] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1217.475435][T17830] BTRFS error (device loop4): open_ctree failed [ 1217.493418][T17835] loop1: detected capacity change from 0 to 32768 [ 1218.398581][ T29] audit: type=1326 audit(1717408599.118:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1218.972925][ T29] audit: type=1326 audit(1717408599.118:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1219.093696][T17835] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 1219.131568][ T29] audit: type=1326 audit(1717408599.148:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1219.176439][T17835] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 1219.185107][ T29] audit: type=1326 audit(1717408599.148:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1219.210444][T17835] bcachefs (loop1): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 1219.223316][T17835] bcachefs (loop1): bch2_fs_recovery(): error EINTR [ 1219.238139][ T29] audit: type=1326 audit(1717408599.148:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17864 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1219.272679][T17835] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 1219.281223][T17835] bcachefs (loop1): shutting down [ 1219.368726][T17835] bcachefs (loop1): shutdown complete [ 1222.230577][ T5124] Bluetooth: hci0: command 0x0406 tx timeout [ 1222.278358][ T29] audit: type=1326 audit(1717408600.918:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1222.705516][ T29] audit: type=1326 audit(1717408600.918:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1222.985898][ T29] audit: type=1326 audit(1717408600.918:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1223.074295][ T29] audit: type=1326 audit(1717408600.918:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1223.125038][ T29] audit: type=1326 audit(1717408600.918:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17872 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c2e7cee9 code=0x7ffc0000 [ 1223.811035][T17895] loop4: detected capacity change from 0 to 2048 [ 1224.397365][ T29] audit: type=1326 audit(1717408605.158:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c67cee9 code=0x7ffc0000 [ 1224.807230][T17899] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1224.865367][ T29] audit: type=1326 audit(1717408605.158:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c67cee9 code=0x7ffc0000 [ 1225.003132][ T29] audit: type=1326 audit(1717408605.198:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd05c67cee9 code=0x7ffc0000 [ 1225.028853][ T29] audit: type=1326 audit(1717408605.198:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c67cee9 code=0x7ffc0000 [ 1225.072005][ T29] audit: type=1326 audit(1717408605.198:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17890 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd05c67cee9 code=0x7ffc0000 [ 1225.243696][T17902] loop2: detected capacity change from 0 to 256 [ 1225.399500][T17902] FAT-fs (loop2): Directory bread(block 64) failed [ 1225.414129][T17902] FAT-fs (loop2): Directory bread(block 65) failed [ 1225.423191][T17902] FAT-fs (loop2): Directory bread(block 66) failed [ 1225.430428][T17902] FAT-fs (loop2): Directory bread(block 67) failed [ 1225.437487][T17902] FAT-fs (loop2): Directory bread(block 68) failed [ 1225.444706][T17902] FAT-fs (loop2): Directory bread(block 69) failed [ 1225.452458][T17902] FAT-fs (loop2): Directory bread(block 70) failed [ 1225.460288][T17902] FAT-fs (loop2): Directory bread(block 71) failed [ 1225.467780][T17902] FAT-fs (loop2): Directory bread(block 72) failed [ 1225.474802][T17902] FAT-fs (loop2): Directory bread(block 73) failed [ 1225.808465][T17906] loop3: detected capacity change from 0 to 4096 [ 1225.870887][T17906] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1225.903354][T17906] NILFS (loop3): trying rollback from an earlier position [ 1225.956155][T17906] NILFS (loop3): recovery complete [ 1225.969825][T17912] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1226.945903][T17905] loop1: detected capacity change from 0 to 32768 [ 1227.011150][T17905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (17905) [ 1227.102461][T17905] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1227.130249][T17905] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1227.157638][T17905] BTRFS info (device loop1): using free-space-tree [ 1227.258065][T17911] loop4: detected capacity change from 0 to 32768 [ 1227.304630][T17911] BTRFS: device /dev/loop4 (7:4) using temp-fsid 6964c872-4321-4fbd-8a6c-bd9b1096c0fb [ 1227.316183][T17911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (17911) [ 1227.360319][T17911] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1227.381330][T17911] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1227.390859][T17911] BTRFS info (device loop4): using free-space-tree [ 1227.686155][ T29] audit: type=1400 audit(1717408608.498:2850): avc: denied { ioctl } for pid=17903 comm="syz-executor.1" path="socket:[75467]" dev="sockfs" ino=75467 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1227.940851][T17905] BTRFS error (device loop1): target device is invalid! [ 1227.950488][T17911] BTRFS error (device loop4): target device is invalid! [ 1228.223979][T16176] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1228.270385][T16540] BTRFS info (device loop4): last unmount of filesystem 6964c872-4321-4fbd-8a6c-bd9b1096c0fb [ 1228.665308][T17962] loop0: detected capacity change from 0 to 4096 [ 1228.711183][T17962] ntfs3: Bad value for 'gid' [ 1229.152023][T17962] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1229.194963][T17962] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1229.595688][T17958] loop2: detected capacity change from 0 to 32768 [ 1229.842601][T17973] loop4: detected capacity change from 0 to 2048 [ 1230.378628][ T29] audit: type=1326 audit(1717408611.148:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17966 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1230.975065][T17980] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1231.007992][ T29] audit: type=1326 audit(1717408611.148:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17966 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1231.124682][ T29] audit: type=1326 audit(1717408611.178:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17966 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1231.208397][ T29] audit: type=1326 audit(1717408611.178:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17966 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1231.216702][T17958] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 1231.252826][ T29] audit: type=1326 audit(1717408611.188:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17966 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1231.297771][T17958] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 1231.329345][T17958] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 1231.342192][T17958] bcachefs (loop2): bch2_fs_recovery(): error EINTR [ 1231.356852][T17958] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 1231.379737][T17958] bcachefs (loop2): shutting down [ 1231.421361][T17958] bcachefs (loop2): shutdown complete [ 1232.012521][T17991] loop4: detected capacity change from 0 to 128 [ 1232.202936][T17993] loop3: detected capacity change from 0 to 2048 [ 1232.411878][T17998] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1232.542769][ T29] audit: type=1400 audit(1717408613.358:2856): avc: denied { link } for pid=17984 comm="syz-executor.3" name="file0" dev="loop3" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1232.944729][T17998] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1232.985684][T17998] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1233.043843][T17998] Remounting filesystem read-only [ 1233.051275][ T11] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 1233.060680][ T11] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 1233.084232][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.097335][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.106670][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.116554][ T11] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 1233.143094][ T11] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 1233.153924][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.164367][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.180596][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.196539][ T11] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1233.208910][ T11] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1233.218300][ T11] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1233.229479][ T11] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1233.240002][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.264589][ T11] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 1233.281931][ T11] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 1233.290736][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.306351][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.322477][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.334345][T16232] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1233.356499][T16232] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 1233.385191][T16232] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.417704][T16232] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1233.438462][T16232] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 1233.470060][T16232] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 1233.542655][ T29] audit: type=1400 audit(1717408614.358:2857): avc: denied { shutdown } for pid=18001 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1234.565639][T18000] loop1: detected capacity change from 0 to 32768 [ 1234.617244][T18000] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (18000) [ 1234.667091][T18000] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1234.696047][T18000] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1234.735487][T18000] BTRFS info (device loop1): using free-space-tree [ 1235.022297][T18005] loop4: detected capacity change from 0 to 32768 [ 1235.093651][T18005] BTRFS: device /dev/loop4 (7:4) using temp-fsid dd61bc7f-0552-41d0-90ea-9cf0f75b54aa [ 1235.138886][T18005] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (18005) [ 1235.233827][T18005] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1235.263130][T18005] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1235.299171][T18005] BTRFS info (device loop4): using free-space-tree [ 1235.400059][T18000] BTRFS error (device loop1): target device is invalid! [ 1235.670087][T18010] loop2: detected capacity change from 0 to 32768 [ 1235.772453][T18010] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1235.804539][T16176] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1235.938888][T18005] BTRFS error (device loop4): target device is invalid! [ 1236.081772][T18010] XFS (loop2): Ending clean mount [ 1236.351733][T16086] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1236.382144][T16540] BTRFS info (device loop4): last unmount of filesystem dd61bc7f-0552-41d0-90ea-9cf0f75b54aa [ 1237.032251][T18067] Bluetooth: MGMT ver 1.22 [ 1238.605009][T18066] loop3: detected capacity change from 0 to 32768 [ 1238.766910][T18066] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1238.927366][T18097] loop2: detected capacity change from 0 to 128 [ 1239.097472][T18066] XFS (loop3): Ending clean mount [ 1239.137123][T18066] XFS (loop3): Quotacheck needed: Please wait. [ 1239.332071][T18066] XFS (loop3): Quotacheck: Done. [ 1239.757856][T16232] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1239.989555][T18082] loop0: detected capacity change from 0 to 32768 [ 1240.105601][T18082] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1240.318944][T18082] XFS (loop0): Ending clean mount [ 1240.418648][T18082] XFS (loop0): Quotacheck needed: Please wait. [ 1240.665293][T18082] XFS (loop0): Quotacheck: Done. [ 1240.851859][T18099] loop4: detected capacity change from 0 to 32768 [ 1240.908126][T18099] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (18099) [ 1240.945630][T18099] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1240.961572][T18099] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1240.974152][T18099] BTRFS info (device loop4): using free-space-tree [ 1241.010111][T16130] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1241.423204][T18099] BTRFS error (device loop4): target device is invalid! [ 1241.751236][T16540] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1242.306323][T18105] loop2: detected capacity change from 0 to 32768 [ 1242.452022][T18105] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1242.635103][T18105] XFS (loop2): Ending clean mount [ 1242.852539][T18158] loop3: detected capacity change from 0 to 128 [ 1242.925926][T16086] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1243.796294][T18168] loop1: detected capacity change from 0 to 512 [ 1243.848128][ T29] audit: type=1400 audit(1717408624.658:2858): avc: denied { execute } for pid=18170 comm="syz-executor.4" path="/dev/dsp" dev="devtmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1243.915487][T18168] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1244.096583][T18168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 1244.359058][T18168] Quota error (device loop1): write_blk: dquota write failed [ 1244.396619][T18168] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1244.453328][T18168] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz-executor.1: Failed to acquire dquot type 1 [ 1244.513294][T18168] EXT4-fs (loop1): 1 truncate cleaned up [ 1244.545878][T18168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.570328][ T3819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.583107][T18168] ext4 filesystem being mounted at /root/syzkaller-testdir2965445747/syzkaller.pmrHNJ/116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1244.661870][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1244.677382][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1244.708332][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1244.727484][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1244.736580][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1244.752618][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1244.969369][ T3819] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.267972][ T3819] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.307220][T16176] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.333530][ T3831] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 1245.372495][ T3831] EXT4-fs error (device loop1): ext4_release_dquot:6881: comm kworker/u8:11: Failed to release dquot type 1 [ 1245.415444][T18185] Bluetooth: MGMT ver 1.22 [ 1245.481482][ T3819] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.855261][ T3819] bridge_slave_1: left allmulticast mode [ 1245.861705][ T3819] bridge_slave_1: left promiscuous mode [ 1245.872295][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.603995][T18194] loop1: detected capacity change from 0 to 2048 [ 1246.701270][T18194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.721220][T18194] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz-executor.1: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1246.768186][T18194] EXT4-fs (loop1): Remounting filesystem read-only [ 1246.857588][ T5124] Bluetooth: hci3: command tx timeout [ 1247.087602][T16176] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.231854][ T3819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.262008][ T3819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.279656][ T3819] bond0 (unregistering): Released all slaves [ 1247.632026][ T4567] kernel read not supported for file syzkaller-testdir2397476138/syzkaller.AuqXvj/83/file0 (pid: 4567 comm: kworker/1:3) [ 1247.928242][ T9962] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1247.965169][T18180] chnl_net:caif_netlink_parms(): no params data found [ 1248.128981][ T9962] usb 2-1: Using ep0 maxpacket: 16 [ 1248.138656][ T9962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.159178][ T9962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1248.182045][ T9962] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1248.206572][ T9962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1248.216713][ T9962] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1248.245146][ T9962] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1248.274524][ T9962] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1248.312740][ T9962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1248.356722][T18213] loop2: detected capacity change from 0 to 512 [ 1248.370396][ T9962] usb 2-1: SerialNumber: syz [ 1248.397343][T18213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1248.413280][ T9962] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1248.432084][ T9962] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 1248.474251][T18213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 1248.494086][ T3819] hsr_slave_0: left promiscuous mode [ 1248.499285][T18213] Quota error (device loop2): write_blk: dquota write failed [ 1248.507465][T18213] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1248.518933][T18213] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1 [ 1248.544494][ T3819] hsr_slave_1: left promiscuous mode [ 1248.553235][T18213] EXT4-fs (loop2): 1 truncate cleaned up [ 1248.561467][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.563839][T18213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.594757][T18213] ext4 filesystem being mounted at /root/syzkaller-testdir3774343547/syzkaller.usoceh/114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1248.645976][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.671922][ T3819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.707443][ T3819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.820736][ T3819] veth1_macvtap: left promiscuous mode [ 1248.828786][ T3819] veth0_macvtap: left promiscuous mode [ 1248.839180][ T3819] veth1_vlan: left promiscuous mode [ 1248.846224][ T3819] veth0_vlan: left promiscuous mode [ 1248.928172][ T5124] Bluetooth: hci3: command tx timeout [ 1249.082142][ T4567] usb 2-1: USB disconnect, device number 19 [ 1250.293738][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.791732][ T3819] team0 (unregistering): Port device team_slave_1 removed [ 1250.933407][ T3819] team0 (unregistering): Port device team_slave_0 removed [ 1251.011100][ T5124] Bluetooth: hci3: command tx timeout [ 1252.754431][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.778240][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.786465][T18180] bridge_slave_0: entered allmulticast mode [ 1252.826444][T18180] bridge_slave_0: entered promiscuous mode [ 1252.844281][T16086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.871808][ T1091] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 1252.874477][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.883311][ T1091] EXT4-fs error (device loop2): ext4_release_dquot:6881: comm kworker/u8:6: Failed to release dquot type 1 [ 1252.900552][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.900873][T18180] bridge_slave_1: entered allmulticast mode [ 1252.947336][T18180] bridge_slave_1: entered promiscuous mode [ 1253.101013][ T5124] Bluetooth: hci3: command tx timeout [ 1253.114581][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.130291][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.331984][T18180] team0: Port device team_slave_0 added [ 1253.371942][T18180] team0: Port device team_slave_1 added [ 1253.557324][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.592296][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.684242][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.702381][ T29] audit: type=1326 audit(1717408634.517:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f481587cee9 code=0x0 [ 1253.722149][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.780528][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.814900][ T29] audit: type=1326 audit(1717408634.627:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18248 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f481587cee9 code=0x0 [ 1253.844963][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.194953][ T29] audit: type=1400 audit(1717408635.007:2861): avc: denied { execute } for pid=18253 comm="syz-executor.1" path="/root/syzkaller-testdir2965445747/syzkaller.pmrHNJ/123/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1254.316759][T18180] hsr_slave_0: entered promiscuous mode [ 1254.342400][T18180] hsr_slave_1: entered promiscuous mode [ 1254.384298][T18180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1254.403445][T18180] Cannot create hsr debugfs directory [ 1254.958731][ T4567] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1255.060076][T18261] loop4: detected capacity change from 0 to 256 [ 1255.107170][T18261] exfat: Deprecated parameter 'utf8' [ 1255.138675][T18261] exfat: Deprecated parameter 'utf8' [ 1255.144315][T18261] exfat: Deprecated parameter 'utf8' [ 1255.198929][ T4567] usb 2-1: Using ep0 maxpacket: 16 [ 1255.202865][T18261] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1255.239934][ T4567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.275905][T18250] loop2: detected capacity change from 0 to 32768 [ 1255.290353][ T4567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1255.318263][ T4567] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1255.348955][T18250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (18250) [ 1255.358364][ T4567] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1255.386794][ T4567] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1255.401253][T18250] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1255.405775][ T4567] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1255.421130][T18250] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 1255.455210][ T4567] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.463839][T18250] BTRFS info (device loop2): using free-space-tree [ 1255.473536][ T4567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1255.482242][ T4567] usb 2-1: SerialNumber: syz [ 1255.510079][ T4567] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1255.520224][ T4567] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 1255.894037][T18180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1255.927459][T18180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1255.970625][T18180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1255.999112][T16086] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1256.029961][ T4567] usb 2-1: USB disconnect, device number 20 [ 1256.039579][T18180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1256.041225][T18280] loop4: detected capacity change from 0 to 1764 [ 1256.157904][T18280] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1256.174415][T18280] ISOFS: unable to read i-node block [ 1256.193486][T18280] isofs_fill_super: get root inode failed [ 1256.673848][T18280] loop4: detected capacity change from 0 to 4096 [ 1256.775263][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.909212][T18284] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1256.935884][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.959402][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.966743][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.010687][ T4567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.017961][ T4567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.074243][T18280] NILFS (loop4): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0 [ 1257.128487][T18280] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=3) [ 1257.174557][T18280] Remounting filesystem read-only [ 1257.544917][T18292] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1257.707949][T18180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.054206][T18180] veth0_vlan: entered promiscuous mode [ 1259.241433][T18180] veth1_vlan: entered promiscuous mode [ 1259.371781][T18180] veth0_macvtap: entered promiscuous mode [ 1259.404868][T18180] veth1_macvtap: entered promiscuous mode [ 1259.417419][T18306] loop2: detected capacity change from 0 to 256 [ 1259.454991][T18306] exfat: Deprecated parameter 'utf8' [ 1259.460519][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.462559][T18306] exfat: Deprecated parameter 'utf8' [ 1259.481933][T18306] exfat: Deprecated parameter 'utf8' [ 1259.493833][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.513341][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.534490][T18306] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1259.555004][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.571721][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.598330][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.620665][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.659112][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.679201][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.711009][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.735481][T18180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.790108][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.831608][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.848931][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.874150][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.898894][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.919342][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.929693][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.949860][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.962526][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.994696][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.025117][T18180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.093936][T18180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.133559][T18180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.148245][T18180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.157045][T18180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.187726][T18313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.608482][ T9962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.647195][ T9962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.840712][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.865020][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.129644][T18322] loop0: detected capacity change from 0 to 2048 [ 1261.209178][T18322] EXT4-fs error (device loop0): __ext4_fill_super:5447: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 1261.244635][T18322] EXT4-fs (loop0): get root inode failed [ 1261.307776][T18322] EXT4-fs (loop0): mount failed [ 1261.774570][T18330] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1262.006746][ T29] audit: type=1326 audit(1717408642.817:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18331 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb18ae7cee9 code=0x0 [ 1262.122424][ T29] audit: type=1326 audit(1717408642.937:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18331 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb18ae7cee9 code=0x0 [ 1262.139575][T18338] loop0: detected capacity change from 0 to 256 [ 1262.202156][T18338] exfat: Deprecated parameter 'utf8' [ 1262.207616][T18338] exfat: Deprecated parameter 'utf8' [ 1262.216572][T18338] exfat: Deprecated parameter 'utf8' [ 1262.268278][ T29] audit: type=1326 audit(1717408643.077:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1262.271507][T18342] Bluetooth: MGMT ver 1.22 [ 1262.332166][T18338] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 1262.361057][ T29] audit: type=1326 audit(1717408643.107:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1262.436012][ T29] audit: type=1326 audit(1717408643.127:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1262.522675][ T29] audit: type=1326 audit(1717408643.127:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1262.573860][ T29] audit: type=1326 audit(1717408643.127:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1262.610539][ T29] audit: type=1326 audit(1717408643.147:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1262.642142][ T29] audit: type=1326 audit(1717408643.197:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1ce7cee9 code=0x7ffc0000 [ 1262.679368][ T29] audit: type=1326 audit(1717408643.217:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18340 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f1ce7a667 code=0x7ffc0000 [ 1262.872393][T18347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1263.961423][T18363] loop2: detected capacity change from 0 to 2048 [ 1264.014787][T18363] EXT4-fs error (device loop2): __ext4_fill_super:5447: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 1264.075911][T18366] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1264.120650][T18363] EXT4-fs (loop2): get root inode failed [ 1264.130351][T18363] EXT4-fs (loop2): mount failed [ 1265.023436][T18379] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1266.025029][T18405] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1268.678143][T18445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1268.802923][T18443] loop0: detected capacity change from 0 to 2048 [ 1268.892142][T18443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1269.262997][T16130] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1269.273340][T18455] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1269.540342][T18458] loop2: detected capacity change from 0 to 764 [ 1269.562859][T18458] iso9660: Unknown parameter 'hide–sbsector' [ 1269.975184][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1270.593136][ T5195] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1270.818533][ T5195] usb 3-1: Using ep0 maxpacket: 32 [ 1270.832184][ T5195] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1270.848313][ T5195] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1270.871546][ T5195] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1270.890037][ T5195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1270.908726][ T5195] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1270.925456][ T5195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1270.936382][ T5195] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1270.957229][ T5195] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1270.985762][ T5195] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1270.997984][ T5195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.020674][ T5195] usb 3-1: config 0 descriptor?? [ 1271.566920][ T5195] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1271.594554][ T5195] usb 3-1: USB disconnect, device number 17 [ 1271.612696][ T5195] usblp0: removed [ 1274.267053][T18487] loop2: detected capacity change from 0 to 2048 [ 1274.307575][T18487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1274.626394][T16086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.402954][T18494] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1276.504820][T18502] loop2: detected capacity change from 0 to 764 [ 1276.525700][T18502] iso9660: Unknown parameter 'hide–sbsector' [ 1277.013864][T18506] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 1277.590249][T18510] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1301.393198][ T8736] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1301.407469][ T8736] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1301.431210][ T8736] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1301.451732][ T8736] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1301.475463][T17365] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1301.486187][T17329] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1301.498241][T17365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1301.518687][T17329] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1301.533476][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1301.547364][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1301.557556][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1301.566570][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1301.750120][ T8736] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1301.774847][ T8736] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1301.799229][ T8736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1301.816988][ T8736] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1301.841409][ T8736] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1301.850136][ T8736] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1301.943773][ T5124] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1301.967155][ T5124] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1301.990854][ T5124] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1302.023503][ T5124] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1302.038122][ T5124] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1302.050398][ T5124] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1303.570043][ T5124] Bluetooth: hci5: command tx timeout [ 1303.659892][ T5124] Bluetooth: hci6: command tx timeout [ 1303.985428][ T5124] Bluetooth: hci7: command tx timeout [ 1304.129548][ T5124] Bluetooth: hci8: command tx timeout [ 1305.649302][ T5124] Bluetooth: hci5: command tx timeout [ 1305.729888][ T5124] Bluetooth: hci6: command tx timeout [ 1306.050026][ T5124] Bluetooth: hci7: command tx timeout [ 1306.210041][ T5124] Bluetooth: hci8: command tx timeout [ 1307.738497][ T5124] Bluetooth: hci5: command tx timeout [ 1307.809364][ T5124] Bluetooth: hci6: command tx timeout [ 1308.140031][ T5124] Bluetooth: hci7: command tx timeout [ 1308.289393][ T5124] Bluetooth: hci8: command tx timeout [ 1308.399906][ T8736] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1308.423373][ T8736] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1308.453615][ T8736] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1308.470421][ T8736] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1308.480263][ T8736] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1308.489102][ T8736] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1309.810152][ T5124] Bluetooth: hci5: command tx timeout [ 1309.889436][ T5124] Bluetooth: hci6: command tx timeout [ 1310.210108][ T5124] Bluetooth: hci7: command tx timeout [ 1310.369696][ T5124] Bluetooth: hci8: command tx timeout [ 1310.625849][ T5124] Bluetooth: hci9: command tx timeout [ 1311.741277][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.699546][ T5124] Bluetooth: hci9: command tx timeout [ 1314.777061][ T5124] Bluetooth: hci9: command tx timeout [ 1316.856206][ T5124] Bluetooth: hci9: command tx timeout [ 1367.435281][ T8736] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1367.475105][ T8736] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1367.493728][ T8736] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1367.516522][T17365] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1367.539159][ T5116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1367.541394][T18536] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1367.551546][ T5116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1367.565764][ T5116] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1367.570855][T18536] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1367.574349][ T5116] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1367.585892][T18536] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1367.595677][ T5116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1367.603125][T17365] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1367.619220][ T8736] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1367.619456][T17365] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1367.638431][ T8736] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1367.639249][T17365] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1367.655512][ T8736] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1367.700315][T17365] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1367.721389][T17329] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1367.734680][T17329] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1367.758082][T17329] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1367.770386][T17329] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1367.784524][T17329] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1369.731069][ T5116] Bluetooth: hci11: command tx timeout [ 1369.811395][ T5116] Bluetooth: hci12: command tx timeout [ 1369.822777][ T8736] Bluetooth: hci10: command tx timeout [ 1369.891873][ T5116] Bluetooth: hci13: command tx timeout [ 1370.133309][ T5116] Bluetooth: hci3: command 0x0406 tx timeout [ 1371.813673][T17329] Bluetooth: hci11: command tx timeout [ 1371.891671][ T5116] Bluetooth: hci10: command tx timeout [ 1371.898708][T17329] Bluetooth: hci12: command tx timeout [ 1371.971288][T17329] Bluetooth: hci13: command tx timeout [ 1373.177860][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.516470][ T5116] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1373.532527][ T5116] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1373.542331][ T5116] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1373.557206][ T5116] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1373.575511][ T5116] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1373.584207][ T5116] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1373.890784][T17329] Bluetooth: hci11: command tx timeout [ 1373.973339][T17329] Bluetooth: hci12: command tx timeout [ 1373.975146][ T5116] Bluetooth: hci10: command tx timeout [ 1374.051367][ T5116] Bluetooth: hci13: command tx timeout [ 1375.651471][ T5116] Bluetooth: hci14: command tx timeout [ 1375.971649][ T5116] Bluetooth: hci11: command tx timeout [ 1376.054070][ T5116] Bluetooth: hci10: command tx timeout [ 1376.059663][ T5116] Bluetooth: hci12: command tx timeout [ 1376.131337][ T5116] Bluetooth: hci13: command tx timeout [ 1377.733239][ T5116] Bluetooth: hci14: command tx timeout [ 1379.812893][ T5116] Bluetooth: hci14: command tx timeout [ 1381.893037][ T5116] Bluetooth: hci14: command tx timeout [ 1417.332263][ T30] INFO: task syz-executor.1:18467 blocked for more than 143 seconds. [ 1417.340423][ T30] Not tainted 6.10.0-rc2-syzkaller #0 [ 1417.357553][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1417.372204][ T30] task:syz-executor.1 state:D stack:28480 pid:18467 tgid:18466 ppid:16176 flags:0x00004006 2024/06/03 09:59:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1417.451833][ T30] Call Trace: [ 1417.455201][ T30] [ 1417.458368][ T30] __schedule+0xf15/0x5d00 [ 1417.491693][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1417.499313][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1417.511702][ T30] ? __pfx___schedule+0x10/0x10 [ 1417.520754][ T30] ? schedule+0x298/0x350 [ 1417.552153][ T30] ? __pfx_lock_release+0x10/0x10 [ 1417.557316][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1417.581997][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1417.587676][ T30] schedule+0xe7/0x350 [ 1417.601696][ T30] schedule_preempt_disabled+0x13/0x30 [ 1417.607293][ T30] __mutex_lock+0x5b8/0x9c0 [ 1417.628627][ T30] ? devinet_ioctl+0x26e/0x1f10 [ 1417.641694][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1417.646822][ T30] ? __pfx_lock_release+0x10/0x10 [ 1417.661686][ T30] ? cap_capable+0x1cf/0x240 [ 1417.666515][ T30] ? security_capable+0x98/0xd0 [ 1417.671427][ T30] ? devinet_ioctl+0x26e/0x1f10 [ 1417.692232][ T30] devinet_ioctl+0x26e/0x1f10 [ 1417.697015][ T30] ? __might_fault+0xe3/0x190 [ 1417.711695][ T30] ? __pfx_devinet_ioctl+0x10/0x10 [ 1417.717000][ T30] ? _copy_from_user+0x5d/0xf0 [ 1417.731772][ T30] inet_ioctl+0x3aa/0x3f0 [ 1417.741708][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 1417.747207][ T30] ? find_held_lock+0x2d/0x110 [ 1417.782530][ T30] ? tomoyo_path_number_perm+0x292/0x590 [ 1417.788371][ T30] ? __pfx_lock_release+0x10/0x10 [ 1417.811864][ T30] packet_ioctl+0xb3/0x280 [ 1417.816407][ T30] sock_do_ioctl+0x116/0x280 [ 1417.821111][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1417.841944][ T30] ? ioctl_has_perm.constprop.0.isra.0+0x2f9/0x470 [ 1417.848575][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1417.871778][ T30] sock_ioctl+0x22e/0x6c0 [ 1417.876519][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1417.905695][ T30] ? selinux_file_ioctl+0x180/0x270 [ 1417.911008][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 1417.931781][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 1417.936785][ T30] __x64_sys_ioctl+0x193/0x220 [ 1417.941612][ T30] do_syscall_64+0xcd/0x250 [ 1417.956781][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.972707][ T30] RIP: 0033:0x7f9f1ce7cee9 [ 1417.977310][ T30] RSP: 002b:00007f9f1dc230c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1418.031767][ T30] RAX: ffffffffffffffda RBX: 00007f9f1cfb3fa0 RCX: 00007f9f1ce7cee9 [ 1418.040602][ T30] RDX: 0000000020000180 RSI: 0000000000008914 RDI: 0000000000000005 [ 1418.081750][ T30] RBP: 00007f9f1cec947f R08: 0000000000000000 R09: 0000000000000000 [ 1418.111609][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1418.120371][ T30] R13: 000000000000000b R14: 00007f9f1cfb3fa0 R15: 00007fff7dcfe598 [ 1418.151784][ T30] [ 1418.155002][ T30] INFO: task syz-executor.0:18478 blocked for more than 144 seconds. [ 1418.181728][ T30] Not tainted 6.10.0-rc2-syzkaller #0 [ 1418.187709][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1418.216311][ T30] task:syz-executor.0 state:D stack:28240 pid:18478 tgid:18477 ppid:16130 flags:0x00000006 [ 1418.243808][ T30] Call Trace: [ 1418.247178][ T30] [ 1418.250156][ T30] __schedule+0xf15/0x5d00 [ 1418.261718][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1418.267017][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1418.272391][ T30] ? __pfx___schedule+0x10/0x10 [ 1418.277317][ T30] ? schedule+0x298/0x350 [ 1418.285951][ T30] ? __pfx_lock_release+0x10/0x10 [ 1418.291067][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 1418.296083][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1418.301618][ T30] schedule+0xe7/0x350 [ 1418.305933][ T30] schedule_preempt_disabled+0x13/0x30 [ 1418.316316][ T30] __mutex_lock+0x5b8/0x9c0 [ 1418.320918][ T30] ? rtnetlink_rcv_msg+0x372/0xe60 [ 1418.342590][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1418.347744][ T30] ? rtnetlink_rcv_msg+0x35a/0xe60 [ 1418.356670][ T30] ? rtnetlink_rcv_msg+0x372/0xe60 [