last executing test programs: 11m40.250039465s ago: executing program 4 (id=127): ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 11m39.554933677s ago: executing program 4 (id=129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x49, 0x0, "58f0a57b2acd7844503dbda53e49dbbe1d5780225329be44531493386d0314b2350f91c6404fcec90e0ab0c335d2b780da772de206ba8139f981b853ea3ff9119a8abb5e7d709d1d078737c76de57e27"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e21, @loopback}, 0x10) 11m39.304807277s ago: executing program 4 (id=133): openat$autofs(0xffffffffffffff9c, 0x0, 0x40a000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x40400) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0xba, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x67], [0xffffffff], [0x0, 0x3]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r9}) close_range(r0, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x1a803, 0x0) 11m38.25442402s ago: executing program 4 (id=136): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x14008, &(0x7f0000001200)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x8}}, {@noblock_validity}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@data_err_abort}]}, 0xd, 0x5e7, &(0x7f00000012c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) syz_clone(0x922000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_submit(0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000001100), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11m36.035948546s ago: executing program 4 (id=147): openat$autofs(0xffffffffffffff9c, 0x0, 0x40a000, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x40400) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0xba, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x67], [0xffffffff], [0x0, 0x3]}) 11m33.709199772s ago: executing program 4 (id=152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11m30.900180989s ago: executing program 32 (id=152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5m35.093525072s ago: executing program 0 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) 5m33.880346625s ago: executing program 0 (id=973): pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r3, 0x0, 0x0) 5m32.383027839s ago: executing program 0 (id=975): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = io_uring_setup(0x320c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 5m30.023098595s ago: executing program 0 (id=983): r0 = socket$netlink(0x10, 0x3, 0x4) close(r0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000018c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x20000c00}, 0x240000c5) 5m28.519737439s ago: executing program 0 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x83ff, 0x2, 0xb5}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) close_range(r3, 0xffffffffffffffff, 0x0) 5m27.308366012s ago: executing program 0 (id=990): socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$tmpfs(0x0, &(0x7f0000002340)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000000000007020000f8ffffffb703000008000000b704000000040000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x4000600) fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) iopl(0x3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000046bd0000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{0x0, 0x354, 0x80, 0x5, 0x2, 0x3, 0x1, 0x7, 0x7, 0xe, 0x6, 0x1, 0xf83, 0x9, 0x8}}) 5m11.073521315s ago: executing program 33 (id=990): socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$tmpfs(0x0, &(0x7f0000002340)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000000000000007020000f8ffffffb703000008000000b704000000040000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x4000600) fsmount(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) iopl(0x3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000046bd0000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a80)={{0x0, 0x354, 0x80, 0x5, 0x2, 0x3, 0x1, 0x7, 0x7, 0xe, 0x6, 0x1, 0xf83, 0x9, 0x8}}) 9.58326147s ago: executing program 3 (id=2080): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) 9.583032069s ago: executing program 2 (id=2081): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={r1, 0x7}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x7d, &(0x7f0000001080)={r3, 0x7}, &(0x7f00000010c0)=0x8) 7.276813909s ago: executing program 2 (id=2083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 7.11790829s ago: executing program 5 (id=2085): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="9b16b741ab367bddf17b4b4d8b0505bb", 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x4041}}], 0x3, 0xc000) 7.017326651s ago: executing program 2 (id=2087): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001800400030008"], 0x44}}, 0x0) 6.675344544s ago: executing program 2 (id=2089): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r5, 0x4004550c, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1ffffffffffffdc4, &(0x7f00000000c0)=[{0x200000000006, 0x9, 0x0, 0x7ffc1ffb}]}) 5.787284522s ago: executing program 5 (id=2091): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 5.713547422s ago: executing program 5 (id=2092): epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 5.517856574s ago: executing program 3 (id=2093): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000000)={r1, 0x7}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x7d, &(0x7f0000001080)={r3, 0x7}, &(0x7f00000010c0)=0x8) 5.495745103s ago: executing program 5 (id=2094): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 5.420219114s ago: executing program 6 (id=2095): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 5.237763266s ago: executing program 5 (id=2096): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r0}, 0x10) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 5.237241376s ago: executing program 6 (id=2097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) fremovexattr(0xffffffffffffffff, 0x0) 4.983362909s ago: executing program 6 (id=2099): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) 3.989587067s ago: executing program 6 (id=2100): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x80440, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='page_pool_release\x00', r0, 0x0, 0x4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000500000095"], &(0x7f0000000100)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x48}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8e82b840502000b317275"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) r7 = accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000540)={0x0, r4}, 0x10) bind$tipc(r7, &(0x7f0000000280)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSLCKTRMIOS(r9, 0x5457, &(0x7f0000000140)) bind$inet(r8, &(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10) 3.851832758s ago: executing program 3 (id=2101): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="9b16b741ab367bddf17b4b4d8b0505bb", 0x10}, {0x0}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x4041}}], 0x3, 0xc000) 3.849380928s ago: executing program 1 (id=2102): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x1, 0x1}) 3.62557029s ago: executing program 6 (id=2103): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) getrusage(0x0, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() futex(0x0, 0x4, 0xffffffbe, 0x0, 0x0, 0x4000001) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) 2.907756816s ago: executing program 1 (id=2104): epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 2.589505808s ago: executing program 3 (id=2105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/14, 0xe}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {}, 0xfffc}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) 2.527216339s ago: executing program 1 (id=2106): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r4, 0x0) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x2) 1.056336831s ago: executing program 5 (id=2107): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x20000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x1800, r3, 0xa}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r5, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) 739.695724ms ago: executing program 6 (id=2108): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 739.158444ms ago: executing program 1 (id=2109): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 459.367676ms ago: executing program 1 (id=2110): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0xfffe}, 0x90) 367.171727ms ago: executing program 2 (id=2111): timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) socket(0x840000000002, 0x3, 0xff) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 325.207018ms ago: executing program 3 (id=2112): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}], 0x1, 0x400c404) 206.047898ms ago: executing program 1 (id=2113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)) semctl$GETPID(r1, 0x1, 0xb, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2000002a}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r5, 0x4, 0x4, 0x80, 0x7}) 31.30364ms ago: executing program 2 (id=2114): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=2115): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, 0x0, 0x0, 0xc000) kernel console output (not intermixed with test programs): 123][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.794'. [ 415.480594][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 415.602087][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 415.787025][ T7557] ceph: No mds server is up or the cluster is laggy [ 416.284859][ T128] libceph: connect (1)[c::]:6789 error -101 [ 416.291021][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 416.491353][ T7571] netlink: 68 bytes leftover after parsing attributes in process `syz.5.797'. [ 416.720732][ T7573] binder_alloc: 7572: binder_alloc_buf size 8 failed, no address space [ 416.737632][ T7573] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 422.413837][ T7612] loop1: detected capacity change from 0 to 8 [ 423.118836][ T7614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.809'. [ 424.022770][ T7627] 9pnet_fd: Insufficient options for proto=fd [ 424.219055][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 426.585812][ T7646] overlayfs: failed to resolve './file0/../file0': -2 [ 430.340307][ T7665] netlink: 68 bytes leftover after parsing attributes in process `syz.1.821'. [ 430.906252][ T7671] loop2: detected capacity change from 0 to 8 [ 432.919955][ T7682] 9pnet_fd: Insufficient options for proto=fd [ 433.038805][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.826'. [ 433.063810][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 433.090741][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 433.384466][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 433.390670][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 434.467783][ T7682] ceph: No mds server is up or the cluster is laggy [ 434.591083][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 434.597248][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 436.978908][ T7719] loop5: detected capacity change from 0 to 8 [ 439.776302][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.782692][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.167649][ T7758] 9pnet_fd: Insufficient options for proto=fd [ 441.205034][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 441.211101][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 441.287163][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.5.848'. [ 441.495379][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 441.505841][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 442.721983][ T7758] ceph: No mds server is up or the cluster is laggy [ 442.744227][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 442.750286][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 444.652542][ T7790] loop5: detected capacity change from 0 to 8 [ 449.676149][ T7831] 9pnet_fd: Insufficient options for proto=fd [ 449.754077][ T4339] libceph: connect (1)[c::]:6789 error -101 [ 449.760145][ T4339] libceph: mon0 (1)[c::]:6789 connect error [ 449.776166][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.860'. [ 449.904906][ T7834] ceph: No mds server is up or the cluster is laggy [ 450.431500][ T7845] loop2: detected capacity change from 0 to 8 [ 455.501534][ T7859] loop0: detected capacity change from 0 to 32768 [ 455.610659][ T7859] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 455.662146][ T7883] loop3: detected capacity change from 0 to 1024 [ 455.688908][ T7883] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 457.521866][ T4256] ocfs2: Unmounting device (7,0) on (node local) [ 458.050653][ T7894] loop1: detected capacity change from 0 to 8 [ 458.650136][ T7893] SQUASHFS error: Failed to read block 0x4e8: -5 [ 458.657455][ T26] audit: type=1800 audit(1733586302.923:223): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.882" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 462.622533][ T7934] loop5: detected capacity change from 0 to 64 [ 464.325792][ T7949] loop0: detected capacity change from 0 to 8 [ 464.351937][ T7949] SQUASHFS error: Failed to read block 0x4e8: -5 [ 464.360097][ T26] audit: type=1800 audit(1733586308.623:224): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.897" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 464.381958][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.160708][ T7962] loop5: detected capacity change from 0 to 1024 [ 466.202982][ T7962] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.726520][ T7962] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 468.814500][ T26] audit: type=1800 audit(1733586312.983:225): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.904" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 468.866075][ T4905] EXT4-fs (loop5): unmounting filesystem. [ 470.086315][ T26] audit: type=1326 audit(1733586314.143:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7997 comm="syz.3.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca6617fed9 code=0x0 [ 470.123322][ T8003] netlink: 36 bytes leftover after parsing attributes in process `syz.3.912'. [ 471.773860][ T8014] loop2: detected capacity change from 0 to 8 [ 472.758466][ T8012] SQUASHFS error: Failed to read block 0x4e8: -5 [ 472.771899][ T26] audit: type=1800 audit(1733586317.033:227): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.916" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 473.160193][ T8018] 9pnet_fd: Insufficient options for proto=fd [ 473.184469][ T4334] libceph: connect (1)[c::]:6789 error -101 [ 473.211027][ T4334] libceph: mon0 (1)[c::]:6789 connect error [ 473.832332][ T4334] libceph: connect (1)[c::]:6789 error -101 [ 473.838517][ T4334] libceph: mon0 (1)[c::]:6789 connect error [ 473.852315][ T8018] ceph: No mds server is up or the cluster is laggy [ 475.154561][ T8039] 9pnet_fd: Insufficient options for proto=fd [ 475.461068][ T4334] libceph: connect (1)[c::]:6789 error -101 [ 475.467271][ T4334] libceph: mon0 (1)[c::]:6789 connect error [ 475.524743][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.921'. [ 475.648418][ T8038] ceph: No mds server is up or the cluster is laggy [ 476.516768][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 476.522969][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 480.021216][ T8072] 9pnet_fd: Insufficient options for proto=fd [ 480.293762][ T8066] ALSA: mixer_oss: invalid OSS volume '' [ 480.882446][ T8084] overlayfs: failed to resolve './file0/../file0': -2 [ 481.762087][ T8085] loop2: detected capacity change from 0 to 32768 [ 481.776883][ T8085] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.930 (8085) [ 481.803795][ T8085] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 481.815624][ T8085] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 481.824490][ T8085] BTRFS info (device loop2): enabling disk space caching [ 481.831543][ T8085] BTRFS info (device loop2): enabling auto defrag [ 481.838049][ T8085] BTRFS info (device loop2): doing ref verification [ 481.845948][ T8085] BTRFS info (device loop2): use no compression [ 481.852224][ T8085] BTRFS info (device loop2): force clearing of disk cache [ 481.859468][ T8085] BTRFS info (device loop2): disabling disk space caching [ 485.275976][ T8085] BTRFS error (device loop2): open_ctree failed [ 485.297390][ T4242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4242) [ 486.811717][ T8152] 9pnet_fd: Insufficient options for proto=fd [ 487.020985][ T8138] libceph: connect (1)[c::]:6789 error -101 [ 487.075408][ T8138] libceph: mon0 (1)[c::]:6789 connect error [ 487.794148][ T8152] ceph: No mds server is up or the cluster is laggy [ 487.887799][ T8135] libceph: connect (1)[c::]:6789 error -101 [ 488.150743][ T8135] libceph: mon0 (1)[c::]:6789 connect error [ 488.410259][ T8170] loop5: detected capacity change from 0 to 128 [ 488.526339][ T8170] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 488.544489][ T8170] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 488.633393][ T26] audit: type=1800 audit(1733586332.893:228): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.950" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 488.922010][ T4905] EXT4-fs (loop5): unmounting filesystem. [ 493.753199][ T8219] 9pnet_fd: Insufficient options for proto=fd [ 493.789889][ T22] libceph: connect (1)[c::]:6789 error -101 [ 493.799360][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 493.981426][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'. [ 494.084630][ T22] libceph: connect (1)[c::]:6789 error -101 [ 494.092992][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 494.221305][ T8219] ceph: No mds server is up or the cluster is laggy [ 495.500523][ T8236] loop3: detected capacity change from 0 to 1024 [ 495.732274][ T8236] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 499.401178][ T8281] 9pnet_fd: Insufficient options for proto=fd [ 499.428019][ T8138] libceph: connect (1)[c::]:6789 error -101 [ 499.441619][ T8138] libceph: mon0 (1)[c::]:6789 connect error [ 499.684432][ T8281] ceph: No mds server is up or the cluster is laggy [ 500.622421][ T8135] libceph: connect (1)[c::]:6789 error -101 [ 500.630554][ T8135] libceph: mon0 (1)[c::]:6789 connect error [ 501.239048][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.294186][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.109060][ T8304] loop1: detected capacity change from 0 to 1024 [ 502.124179][ T8302] syz.0.990[8302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.124285][ T8302] syz.0.990[8302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.165018][ T8304] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 507.369625][ T8337] loop1: detected capacity change from 0 to 256 [ 507.530905][ T8344] 9pnet_fd: Insufficient options for proto=fd [ 508.617731][ T8337] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 508.717255][ T8135] libceph: connect (1)[c::]:6789 error -101 [ 508.723536][ T8135] libceph: mon0 (1)[c::]:6789 connect error [ 508.931163][ T8335] ceph: No mds server is up or the cluster is laggy [ 509.162463][ T8360] loop1: detected capacity change from 0 to 1024 [ 509.235079][ T8360] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 509.262992][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.271061][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.989131][ T26] audit: type=1326 audit(1733586354.253:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8366 comm="syz.1.1005" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd57ff7fed9 code=0x0 [ 510.010824][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.682578][ T8375] loop1: detected capacity change from 0 to 764 [ 511.857043][ T8302] bond0: (slave batadv0): Releasing backup interface [ 514.344488][ T8399] 9pnet_fd: Insufficient options for proto=fd [ 514.494610][ T32] libceph: connect (1)[c::]:6789 error -101 [ 514.525407][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 514.641302][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1015'. [ 514.713688][ T8399] ceph: No mds server is up or the cluster is laggy [ 515.029934][ T26] audit: type=1326 audit(1733586359.293:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8410 comm="syz.1.1017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd57ff7fed9 code=0x0 [ 515.410735][ T8420] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 516.623445][ T8423] loop3: detected capacity change from 0 to 764 [ 516.904709][ T8302] device bridge_slave_0 left promiscuous mode [ 516.913124][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.322405][ T8439] binder: BINDER_SET_CONTEXT_MGR already set [ 518.345615][ T8439] binder: 8436:8439 ioctl 4018620d 20000040 returned -16 [ 518.404002][ T8302] device bridge_slave_1 left promiscuous mode [ 518.411104][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.528871][ T8302] bond0: (slave bond_slave_0): Releasing backup interface [ 518.681524][ T8302] bond0: (slave bond_slave_1): Releasing backup interface [ 518.870730][ T8302] team0: Port device team_slave_0 removed [ 519.017882][ T8302] team0: Port device team_slave_1 removed [ 519.047820][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.105163][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.155630][ T4251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.167102][ T4251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.177117][ T4251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.187700][ T4251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.192529][ T8302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.203408][ T8449] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 519.212284][ T8449] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.263061][ T8302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.956431][ T8302] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.965699][ T8302] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.974784][ T8302] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.983822][ T8302] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.426732][ T8454] 9pnet_fd: Insufficient options for proto=fd [ 520.471553][ T22] libceph: connect (1)[c::]:6789 error -101 [ 520.477748][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 520.735447][ T22] libceph: connect (1)[c::]:6789 error -101 [ 520.757656][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 520.975778][ T8454] ceph: No mds server is up or the cluster is laggy [ 521.294190][ T8449] Bluetooth: hci5: command 0x0409 tx timeout [ 521.641224][ T26] audit: type=1326 audit(1733586365.793:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8467 comm="syz.5.1033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b4ef7fed9 code=0x0 [ 522.440357][ T8483] loop5: detected capacity change from 0 to 8 [ 522.491551][ T8483] SQUASHFS error: Failed to read block 0x4e8: -5 [ 522.495294][ T8481] binder: BINDER_SET_CONTEXT_MGR already set [ 522.506686][ T26] audit: type=1800 audit(1733586366.773:232): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1037" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 522.567072][ T8481] binder: 8476:8481 ioctl 4018620d 20000040 returned -16 [ 522.610578][ T8448] chnl_net:caif_netlink_parms(): no params data found [ 522.633655][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 522.665206][ T26] audit: type=1326 audit(1733586366.933:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 522.710230][ T26] audit: type=1326 audit(1733586366.953:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8477 comm="syz.1.1035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 523.036473][ T8499] 9pnet_fd: Insufficient options for proto=fd [ 523.096302][ T8356] libceph: connect (1)[c::]:6789 error -101 [ 523.102410][ T8356] libceph: mon0 (1)[c::]:6789 connect error [ 523.384764][ T4265] Bluetooth: hci5: command 0x041b tx timeout [ 523.408225][ T8356] libceph: connect (1)[c::]:6789 error -101 [ 523.439176][ T8356] libceph: mon0 (1)[c::]:6789 connect error [ 523.595831][ T8448] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.707827][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.836080][ T8448] device bridge_slave_0 entered promiscuous mode [ 524.097598][ T8499] ceph: No mds server is up or the cluster is laggy [ 524.155041][ T32] libceph: connect (1)[c::]:6789 error -101 [ 524.161099][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 525.731806][ T8449] Bluetooth: hci5: command 0x040f tx timeout [ 526.007989][ T8525] loop3: detected capacity change from 0 to 512 [ 526.016421][ T8448] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.052336][ T8526] loop2: detected capacity change from 0 to 8 [ 526.058768][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.088093][ T8448] device bridge_slave_1 entered promiscuous mode [ 526.195400][ T8525] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 526.206324][ T8526] SQUASHFS error: Failed to read block 0x4e8: -5 [ 526.233263][ T8525] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 526.239305][ T8448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.268167][ T26] audit: type=1800 audit(1733586370.533:235): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1048" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 526.277947][ T8448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.304511][ T8532] binder: 8530:8532 ioctl c0306201 0 returned -14 [ 526.448394][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 526.555149][ T8448] team0: Port device team_slave_0 added [ 526.574417][ T8448] team0: Port device team_slave_1 added [ 526.615062][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 526.719185][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.764063][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.843121][ T8448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.856329][ T8448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.863527][ T8448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.085348][ T8544] 9pnet_fd: Insufficient options for proto=fd [ 527.211306][ T22] libceph: connect (1)[c::]:6789 error -101 [ 527.228702][ T8448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.242130][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 527.516151][ T22] libceph: connect (1)[c::]:6789 error -101 [ 527.531287][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 527.543557][ T8448] device hsr_slave_0 entered promiscuous mode [ 527.551026][ T8448] device hsr_slave_1 entered promiscuous mode [ 527.558015][ T8448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.566638][ T8448] Cannot create hsr debugfs directory [ 527.646421][ T8544] ceph: No mds server is up or the cluster is laggy [ 527.846193][ T8449] Bluetooth: hci5: command 0x0419 tx timeout [ 527.916432][ T8556] loop2: detected capacity change from 0 to 764 [ 529.002711][ T8568] loop3: detected capacity change from 0 to 8 [ 529.005737][ T8565] binder: 8564:8565 ioctl c0306201 0 returned -14 [ 529.143287][ T8568] SQUASHFS error: Failed to read block 0x4e8: -5 [ 529.198827][ T26] audit: type=1800 audit(1733586373.463:236): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1061" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 529.472887][ T8448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 529.560650][ T8448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 529.787555][ T8589] 9pnet_fd: Insufficient options for proto=fd [ 529.842477][ T32] libceph: connect (1)[c::]:6789 error -101 [ 529.848827][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 529.867633][ T8448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.127308][ T32] libceph: connect (1)[c::]:6789 error -101 [ 530.139075][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 530.471049][ T8589] ceph: No mds server is up or the cluster is laggy [ 531.012521][ T8448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 531.464176][ T26] audit: type=1326 audit(1733586375.723:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 531.490208][ T26] audit: type=1326 audit(1733586375.723:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 531.516911][ T26] audit: type=1326 audit(1733586375.733:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 531.648936][ T26] audit: type=1326 audit(1733586375.733:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 531.814099][ T26] audit: type=1326 audit(1733586375.733:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 531.988251][ T26] audit: type=1326 audit(1733586375.733:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 532.059990][ T8622] binder: 8621:8622 ioctl c0306201 0 returned -14 [ 532.103640][ T26] audit: type=1326 audit(1733586375.733:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 532.160791][ T26] audit: type=1326 audit(1733586375.733:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 532.226486][ T26] audit: type=1326 audit(1733586375.733:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.1.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 532.285735][ T8626] loop3: detected capacity change from 0 to 8 [ 532.410746][ T8626] SQUASHFS error: Failed to read block 0x4e8: -5 [ 532.582253][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.676679][ T4879] device hsr_slave_0 left promiscuous mode [ 532.699508][ T4879] device hsr_slave_1 left promiscuous mode [ 533.074144][ T8643] 9pnet_fd: Insufficient options for proto=fd [ 536.562027][ T8669] 9pnet_fd: Insufficient options for proto=fd [ 536.569924][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1083'. [ 537.088902][ T8685] 9pnet_fd: Insufficient options for proto=fd [ 538.872084][ T4879] bond0 (unregistering): Released all slaves [ 539.003059][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.019447][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.224175][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 539.233331][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 539.272863][ T8448] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.308468][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 539.338655][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 539.362174][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.370683][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.431176][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 539.472009][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 539.488208][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 539.734706][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.741924][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.244477][ T8702] 9pnet_fd: Insufficient options for proto=fd [ 540.794088][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'. [ 541.714077][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.771366][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.844452][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.300259][ T8720] 9pnet_fd: Insufficient options for proto=fd [ 542.336617][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.618562][ T8726] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 542.827372][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.941256][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.224515][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.257592][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.370000][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.488545][ T8448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.551308][ T8448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.729776][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.755235][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 545.254875][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.518519][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.681437][ T8448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.268552][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 546.273576][ T26] audit: type=1326 audit(1733586390.523:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.2.1111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1f417fed9 code=0x0 [ 546.307245][ T8775] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1111'. [ 546.774326][ T8774] 9pnet_fd: Insufficient options for proto=fd [ 547.260912][ T32] libceph: connect (1)[c::]:6789 error -101 [ 547.379617][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 547.600078][ T8774] ceph: No mds server is up or the cluster is laggy [ 547.644401][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 547.650470][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 548.093301][ T8803] loop1: detected capacity change from 0 to 1024 [ 548.160802][ T8803] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 549.049737][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.074726][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.178129][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.430424][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.814080][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.973909][ T4540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 550.015277][ T8448] device veth0_vlan entered promiscuous mode [ 550.065279][ T8448] device veth1_vlan entered promiscuous mode [ 550.088439][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 550.219686][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.235284][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.245285][ T8448] device veth0_macvtap entered promiscuous mode [ 550.270471][ T8448] device veth1_macvtap entered promiscuous mode [ 550.513453][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.553980][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.593365][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.705958][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.954101][ T8833] Cannot find set identified by id 0 to match [ 550.985887][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.282214][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.307401][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.321700][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.403769][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.489217][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 551.517698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.544609][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.584776][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.611015][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.647218][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.696874][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.738136][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.816393][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.831987][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.842194][ T8448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.853971][ T8448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.868664][ T8448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.879646][ T8448] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.969722][ T8448] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.053106][ T8448] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.162131][ T8448] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.276249][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 552.294675][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 552.304660][ T8847] loop3: detected capacity change from 0 to 764 [ 552.429483][ T8849] 9pnet_fd: Insufficient options for proto=fd [ 552.566479][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.590475][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.677048][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 552.685026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 552.695305][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 552.722492][ T8853] loop5: detected capacity change from 0 to 1024 [ 552.785891][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.827593][ T8853] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 552.850480][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.908963][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 552.954426][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 552.960584][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 553.604476][ T32] libceph: connect (1)[c::]:6789 error -101 [ 553.610549][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 553.651196][ T8849] ceph: No mds server is up or the cluster is laggy [ 554.384336][ T8877] loop5: detected capacity change from 0 to 512 [ 554.446498][ T8877] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 554.595164][ T8877] EXT4-fs (loop5): 1 truncate cleaned up [ 554.656088][ T8877] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 555.625951][ T4905] EXT4-fs (loop5): unmounting filesystem. [ 558.424263][ T26] audit: type=1326 audit(1733586402.663:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 558.525989][ T26] audit: type=1326 audit(1733586402.663:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 558.564008][ T26] audit: type=1326 audit(1733586402.663:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 558.824328][ T26] audit: type=1326 audit(1733586402.663:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 558.897105][ T26] audit: type=1326 audit(1733586402.663:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 558.919516][ T26] audit: type=1326 audit(1733586402.663:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 558.941901][ T26] audit: type=1326 audit(1733586402.663:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 558.964527][ T26] audit: type=1326 audit(1733586402.663:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 559.506248][ T26] audit: type=1326 audit(1733586402.663:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 559.799282][ T8921] loop6: detected capacity change from 0 to 1024 [ 559.856850][ T26] audit: type=1326 audit(1733586402.663:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8888 comm="syz.2.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 559.920294][ T8921] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2) [ 559.932787][ T8924] loop5: detected capacity change from 0 to 512 [ 560.471812][ T8924] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1144: casefold flag without casefold feature [ 560.563890][ T8924] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1144: couldn't read orphan inode 15 (err -117) [ 560.707527][ T8924] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 561.558184][ T4905] EXT4-fs (loop5): unmounting filesystem. [ 561.906471][ T8955] loop6: detected capacity change from 0 to 128 [ 562.111191][ T8959] loop1: detected capacity change from 0 to 128 [ 562.123008][ T8959] EXT4-fs: Ignoring removed nobh option [ 562.181776][ T8961] netlink: 'syz.5.1152': attribute type 10 has an invalid length. [ 562.251862][ T8959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 562.282063][ T8961] device geneve0 entered promiscuous mode [ 562.329308][ T8959] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.353482][ T8961] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 562.436389][ T8959] EXT4-fs error (device loop1): __ext4_remount:6449: comm syz.1.1154: Abort forced by user [ 562.550877][ T8959] EXT4-fs (loop1): Remounting filesystem read-only [ 562.623870][ T8959] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 562.657544][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.661150][ T8973] loop5: detected capacity change from 0 to 1024 [ 562.663956][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.696262][ T8973] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 563.641380][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 563.651234][ T4242] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 563.688368][ T8981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 564.068513][ T8988] loop2: detected capacity change from 0 to 512 [ 564.344069][ T8988] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 565.008198][ T8988] EXT4-fs (loop2): orphan cleanup on readonly fs [ 565.157558][ T8981] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 565.158019][ T8988] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 565.339487][ T8988] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #11: comm syz.2.1158: corrupted inode contents [ 565.432022][ T8988] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #11: comm syz.2.1158: mark_inode_dirty error [ 565.577688][ T8988] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1158: invalid indirect mapped block 1 (level 1) [ 565.641968][ T8988] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #11: comm syz.2.1158: corrupted inode contents [ 565.725244][ T8988] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 565.791938][ T8988] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #11: comm syz.2.1158: corrupted inode contents [ 565.883948][ C0] hrtimer: interrupt took 55047 ns [ 565.895949][ T8988] EXT4-fs error (device loop2): ext4_truncate:4311: inode #11: comm syz.2.1158: mark_inode_dirty error [ 565.980870][ T8988] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 566.100197][ T8988] EXT4-fs (loop2): 1 truncate cleaned up [ 566.115456][ T8988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 566.309186][ T9021] loop1: detected capacity change from 0 to 1024 [ 566.368763][ T9020] 9pnet: p9_errstr2errno: server reported unknown error i·@¥AiÐ [ 566.449209][ T9021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 566.510058][ T9021] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.639360][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 566.691412][ T9021] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1167: bg 0: block 393: padding at end of block bitmap is not set [ 567.158033][ T9021] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 567.262355][ T9021] EXT4-fs (loop1): This should not happen!! Data will be lost [ 567.262355][ T9021] [ 567.375273][ T9021] EXT4-fs (loop1): Total free blocks count 0 [ 567.381331][ T9021] EXT4-fs (loop1): Free/Dirty block details [ 567.398862][ T9021] EXT4-fs (loop1): free_blocks=0 [ 567.410138][ T9021] EXT4-fs (loop1): dirty_blocks=16 [ 567.440539][ T9021] EXT4-fs (loop1): Block reservation details [ 567.460979][ T9021] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 567.581921][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 568.162105][ T9043] raw_sendmsg: syz.5.1172 forgot to set AF_INET. Fix it! [ 568.503195][ T9042] netlink: '+}[@': attribute type 10 has an invalid length. [ 568.619535][ T9042] batman_adv: batadv0: Adding interface: team0 [ 568.667659][ T9042] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.699155][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 568.699171][ T26] audit: type=1326 audit(1733586412.963:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 568.836432][ T26] audit: type=1326 audit(1733586413.013:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 568.880379][ T9042] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 568.949834][ T26] audit: type=1326 audit(1733586413.013:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 568.972278][ T26] audit: type=1326 audit(1733586413.023:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 568.994829][ T26] audit: type=1326 audit(1733586413.023:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 569.017222][ T26] audit: type=1326 audit(1733586413.023:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 569.039671][ T26] audit: type=1326 audit(1733586413.023:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 569.094144][ T26] audit: type=1326 audit(1733586413.023:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 569.226218][ T26] audit: type=1326 audit(1733586413.023:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1b4ef7e747 code=0x7ffc0000 [ 569.283812][ T26] audit: type=1326 audit(1733586413.023:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9050 comm="syz.5.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1b4ef8167a code=0x7ffc0000 [ 569.537021][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1179'. [ 572.781202][ T9093] syz.6.1186[9093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 572.781312][ T9093] syz.6.1186[9093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.722353][ T9101] loop6: detected capacity change from 0 to 512 [ 573.765438][ T9101] ext4: Unknown parameter 'noacl' [ 573.831884][ T4242] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 575.267849][ T9097] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 577.288025][ T9141] loop2: detected capacity change from 0 to 764 [ 577.562189][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 577.699455][ T4371] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 578.023969][ T4371] usb 2-1: device descriptor read/64, error -71 [ 578.314442][ T4371] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 578.534239][ T4371] usb 2-1: device descriptor read/64, error -71 [ 578.669021][ T4371] usb usb2-port1: attempt power cycle [ 579.094051][ T4371] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 579.159792][ T4371] usb 2-1: device descriptor read/8, error -71 [ 580.354179][ T4371] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 580.473753][ T4371] usb 2-1: device descriptor read/8, error -71 [ 580.733451][ T4371] usb usb2-port1: unable to enumerate USB device [ 580.921332][ T9192] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1214'. [ 580.934022][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 580.934045][ T26] audit: type=1326 audit(1733586425.173:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.1.1214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd57ff7fed9 code=0x0 [ 580.963858][ T9185] kernel profiling enabled (shift: 9) [ 581.643620][ T26] audit: type=1326 audit(1733586425.903:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 581.720560][ T9197] loop3: detected capacity change from 0 to 512 [ 581.777848][ T26] audit: type=1326 audit(1733586425.933:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 581.801104][ T26] audit: type=1326 audit(1733586425.933:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 581.825621][ T26] audit: type=1326 audit(1733586425.933:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 581.851489][ T9197] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 581.929341][ T9197] EXT4-fs (loop3): 1 truncate cleaned up [ 581.944243][ T9197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 581.958441][ T26] audit: type=1326 audit(1733586425.933:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 582.065853][ T26] audit: type=1326 audit(1733586425.943:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 582.176357][ T9206] loop1: detected capacity change from 0 to 764 [ 582.201047][ T26] audit: type=1326 audit(1733586425.943:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 582.266531][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 582.276183][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 582.331107][ T26] audit: type=1326 audit(1733586425.943:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 582.574067][ T26] audit: type=1326 audit(1733586425.943:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.3.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 583.295325][ T9227] loop2: detected capacity change from 0 to 128 [ 583.751199][ T9241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1227'. [ 583.865777][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.884759][ T9244] device batadv_slave_0 entered promiscuous mode [ 584.386924][ T9260] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 585.188471][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 585.191175][ T9265] loop2: detected capacity change from 0 to 128 [ 585.446017][ T9265] syz.2.1232: attempt to access beyond end of device [ 585.446017][ T9265] loop2: rw=2049, sector=145, nr_sectors = 168 limit=128 [ 586.453998][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 586.454017][ T26] audit: type=1326 audit(1733586430.303:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 586.645477][ T26] audit: type=1326 audit(1733586430.303:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.2.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 587.750747][ T9308] loop6: detected capacity change from 0 to 8 [ 587.765842][ T9309] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 587.997960][ T9304] SQUASHFS error: Failed to read block 0x4e8: -5 [ 588.296308][ T26] audit: type=1800 audit(1733586432.273:387): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1244" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 588.543045][ T26] audit: type=1326 audit(1733586432.803:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9313 comm="syz.3.1248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca6617fed9 code=0x0 [ 588.627021][ T9318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1248'. [ 589.028790][ T9332] usb usb4: usbfs: process 9332 (syz.2.1254) did not claim interface 0 before use [ 589.084084][ T26] audit: type=1326 audit(1733586433.343:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 589.124180][ T26] audit: type=1326 audit(1733586433.343:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 589.195340][ T26] audit: type=1326 audit(1733586433.343:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 589.265718][ T26] audit: type=1326 audit(1733586433.343:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 589.319178][ T26] audit: type=1326 audit(1733586433.343:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 589.398326][ T26] audit: type=1326 audit(1733586433.343:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9331 comm="syz.2.1254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 589.752510][ T9349] binder: 9348:9349 ioctl 4018620d 0 returned -22 [ 591.207898][ T9367] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 592.124460][ T9377] x_tables: duplicate underflow at hook 2 [ 592.358169][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 592.358185][ T26] audit: type=1326 audit(1733586436.623:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.2.1266" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1f417fed9 code=0x0 [ 592.428634][ T9386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1266'. [ 592.669190][ T9395] loop6: detected capacity change from 0 to 1024 [ 592.720058][ T9395] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2) [ 592.766963][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 595.642273][ T9440] loop5: detected capacity change from 0 to 1024 [ 595.662170][ T9440] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 596.514342][ T26] audit: type=1326 audit(1733586440.783:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9450 comm="syz.1.1283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd57ff7fed9 code=0x0 [ 596.568268][ T9452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1283'. [ 598.912431][ T9472] loop2: detected capacity change from 0 to 512 [ 599.030527][ T9472] EXT4-fs: Mount option(s) incompatible with ext2 [ 599.085071][ T9474] loop1: detected capacity change from 0 to 128 [ 599.235124][ T9477] syz.1.1290: attempt to access beyond end of device [ 599.235124][ T9477] loop1: rw=2049, sector=145, nr_sectors = 488 limit=128 [ 599.281245][ T9474] +}[@: attempt to access beyond end of device [ 599.281245][ T9474] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 599.301981][ T9474] +}[@: attempt to access beyond end of device [ 599.301981][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.346014][ T9474] +}[@: attempt to access beyond end of device [ 599.346014][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.369957][ T9474] +}[@: attempt to access beyond end of device [ 599.369957][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.405992][ T9474] +}[@: attempt to access beyond end of device [ 599.405992][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.504565][ T9474] +}[@: attempt to access beyond end of device [ 599.504565][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.549061][ T9474] +}[@: attempt to access beyond end of device [ 599.549061][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.607110][ T9474] +}[@: attempt to access beyond end of device [ 599.607110][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.620697][ T9474] +}[@: attempt to access beyond end of device [ 599.620697][ T9474] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 599.862087][ T9488] loop1: detected capacity change from 0 to 1024 [ 599.891168][ T9488] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 601.725863][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 601.890197][ T26] audit: type=1326 audit(1733586446.153:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 602.034425][ T26] audit: type=1326 audit(1733586446.183:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 602.724113][ T26] audit: type=1326 audit(1733586446.183:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 602.765019][ T26] audit: type=1326 audit(1733586446.183:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 602.885073][ T26] audit: type=1326 audit(1733586446.183:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 602.985833][ T9518] device veth0_to_team entered promiscuous mode [ 602.995102][ T26] audit: type=1326 audit(1733586446.183:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 603.068594][ T26] audit: type=1326 audit(1733586446.183:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 603.131486][ T9518] lo speed is unknown, defaulting to 1000 [ 603.151545][ T9518] lo speed is unknown, defaulting to 1000 [ 603.169625][ T26] audit: type=1326 audit(1733586446.183:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 603.199751][ T9527] loop3: detected capacity change from 0 to 1024 [ 603.214835][ T9518] lo speed is unknown, defaulting to 1000 [ 603.266870][ T26] audit: type=1326 audit(1733586446.183:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.3.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 603.289187][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.405056][ T9527] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 603.443118][ T9527] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1306: Failed to acquire dquot type 0 [ 603.530767][ T9527] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 603.613268][ T9527] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.1306: corrupted inode contents [ 603.697652][ T9527] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #13: comm syz.3.1306: mark_inode_dirty error [ 603.729302][ T4296] lo speed is unknown, defaulting to 1000 [ 603.734199][ T9518] infiniband syz2: set active [ 603.750500][ T9527] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.1306: corrupted inode contents [ 603.777883][ T9518] infiniband syz2: added lo [ 603.802252][ T9527] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #13: comm syz.3.1306: mark_inode_dirty error [ 603.864448][ T9527] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.1306: corrupted inode contents [ 603.945460][ T9518] RDS/IB: syz2: added [ 603.950570][ T9518] smc: adding ib device syz2 with port count 1 [ 603.957722][ T9527] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 603.988124][ T9518] smc: ib device syz2 port 1 has pnetid [ 603.998272][ T14] lo speed is unknown, defaulting to 1000 [ 604.001710][ T9527] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #13: comm syz.3.1306: corrupted inode contents [ 604.009598][ T9518] lo speed is unknown, defaulting to 1000 [ 604.079925][ T9527] EXT4-fs error (device loop3): ext4_truncate:4311: inode #13: comm syz.3.1306: mark_inode_dirty error [ 604.122215][ T9527] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 604.201405][ T9527] EXT4-fs (loop3): 1 truncate cleaned up [ 604.232446][ T9527] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 604.349457][ T9527] device bond1 entered promiscuous mode [ 604.360267][ T9527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.460021][ T9562] loop6: detected capacity change from 0 to 256 [ 605.529534][ T9562] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 605.540451][ T9562] FAT-fs (loop6): Filesystem has been set read-only [ 605.569539][ T9562] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 605.817392][ T9527] bond1 (unregistering): Released all slaves [ 605.856665][ T9518] lo speed is unknown, defaulting to 1000 [ 605.863833][ T9558] device hsr_slave_0 left promiscuous mode [ 605.895824][ T9558] device hsr_slave_1 left promiscuous mode [ 606.016217][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 606.294140][ T9518] lo speed is unknown, defaulting to 1000 [ 606.361099][ T9581] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1316'. [ 606.682566][ T9592] syz.5.1317[9592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.682673][ T9592] syz.5.1317[9592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.704598][ T9586] 9pnet: Could not find request transport: f [ 607.607400][ T9518] lo speed is unknown, defaulting to 1000 [ 607.923730][ T9518] lo speed is unknown, defaulting to 1000 [ 607.958468][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1323'. [ 607.977861][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 608.021312][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 608.021327][ T26] audit: type=1326 audit(1733586452.283:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.075245][ T9616] netlink: 'syz.6.1324': attribute type 39 has an invalid length. [ 608.095055][ T26] audit: type=1326 audit(1733586452.283:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.180550][ T26] audit: type=1326 audit(1733586452.283:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.202919][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.216313][ T26] audit: type=1326 audit(1733586452.283:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.238571][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.245024][ T26] audit: type=1326 audit(1733586452.283:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.274190][ T26] audit: type=1326 audit(1733586452.323:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.364412][ T26] audit: type=1326 audit(1733586452.323:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.386677][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.437222][ T26] audit: type=1326 audit(1733586452.323:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.549626][ T26] audit: type=1326 audit(1733586452.323:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.571932][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.782338][ T26] audit: type=1326 audit(1733586452.323:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9615 comm="syz.6.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 608.804760][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.989222][ T9704] loop5: detected capacity change from 0 to 8192 [ 612.049354][ T9704] loop5: p2 p3 p4 [ 612.054333][ T9704] loop5: p2 start 14935 is beyond EOD, truncated [ 612.069074][ T9704] loop5: p3 size 196608 extends beyond EOD, truncated [ 612.101352][ T9704] loop5: p4 start 4026530307 is beyond EOD, truncated [ 613.620305][ T9747] loop3: detected capacity change from 0 to 512 [ 613.699161][ T9747] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 613.714321][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 613.741305][ T9747] System zones: 0-2, 18-18, 34-34 [ 613.799553][ T9747] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1362: bg 0: block 248: padding at end of block bitmap is not set [ 613.850160][ T9747] __quota_error: 63 callbacks suppressed [ 613.850181][ T9747] Quota error (device loop3): write_blk: dquota write failed [ 613.909508][ T9747] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 613.959648][ T9747] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.1362: Failed to acquire dquot type 1 [ 613.962137][ T9766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1365'. [ 613.989147][ T9747] EXT4-fs (loop3): 1 truncate cleaned up [ 613.995300][ T9747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 614.004453][ T9747] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.040058][ T9768] loop6: detected capacity change from 0 to 1024 [ 614.098187][ T9768] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2) [ 614.197920][ T6561] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 614.198325][ T4242] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 614.624882][ T6561] EXT4-fs error (device loop3): ext4_release_dquot:6824: comm kworker/u4:23: Failed to release dquot type 1 [ 614.904298][ T9747] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 615.888582][ T9790] syz.2.1373[9790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 615.888692][ T9790] syz.2.1373[9790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.056594][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1374'. [ 616.126632][ T9797] loop1: detected capacity change from 0 to 2048 [ 616.194981][ T9797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 616.332766][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 616.599646][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1377'. [ 616.634248][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 617.423659][ T9857] sd 0:0:1:0: device reset [ 617.443283][ T9857] tmpfs: Unknown parameter '/dev/sg#' [ 617.455501][ T9859] loop2: detected capacity change from 0 to 128 [ 617.501905][ T9859] syz.2.1380: attempt to access beyond end of device [ 617.501905][ T9859] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 617.671484][ T9861] loop1: detected capacity change from 0 to 1024 [ 617.689298][ T9861] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 617.794961][ T4242] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 618.914083][ T26] audit: type=1107 audit(1733586463.153:534): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 619.620448][ T9882] 9pnet_fd: Insufficient options for proto=fd [ 619.750604][ T9879] netlink: 'syz.3.1383': attribute type 1 has an invalid length. [ 619.828960][ T9885] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1389'. [ 620.070928][ T9879] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1383'. [ 620.874985][ T9903] loop6: detected capacity change from 0 to 1024 [ 620.914613][ T9903] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2) [ 620.950152][ T9906] loop1: detected capacity change from 0 to 8 [ 620.987787][ T4242] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 621.834336][ T9915] usb usb4: usbfs: process 9915 (syz.6.1397) did not claim interface 0 before use [ 622.380103][ T26] audit: type=1326 audit(1733586466.643:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 622.402473][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.588000][ T9916] 9pnet: Could not find request transport: f0xffffffffffffffff [ 622.642148][ T26] audit: type=1326 audit(1733586466.753:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 622.682936][ T26] audit: type=1326 audit(1733586466.753:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 622.777232][ T26] audit: type=1326 audit(1733586466.753:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 622.851825][ T26] audit: type=1326 audit(1733586466.753:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 622.967410][ T9929] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.976890][ T9929] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.985807][ T9929] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.994663][ T9929] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.004681][ T26] audit: type=1326 audit(1733586466.753:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 623.072524][ T26] audit: type=1326 audit(1733586466.753:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 623.095305][ T9929] device vxlan0 entered promiscuous mode [ 623.188114][ T9929] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.197312][ T9929] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.206318][ T9929] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.215330][ T9929] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.290768][ T9927] 9pnet_fd: Insufficient options for proto=fd [ 623.298807][ T26] audit: type=1326 audit(1733586466.753:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 623.320990][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.334596][ T26] audit: type=1326 audit(1733586466.753:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 623.410052][ T9937] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1402'. [ 623.420942][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 623.444109][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 623.719342][ T9927] ceph: No mds server is up or the cluster is laggy [ 623.727275][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 623.733305][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 623.851274][ T9945] loop1: detected capacity change from 0 to 1024 [ 623.913434][ T9947] loop3: detected capacity change from 0 to 2048 [ 623.931554][ T9945] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 624.009292][ T9947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 624.055891][ T9947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 624.140685][ T9955] loop6: detected capacity change from 0 to 1024 [ 624.155810][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.202432][ T9955] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 624.253614][ T9959] loop2: detected capacity change from 0 to 8 [ 624.300007][ T9955] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 624.373533][ T9957] overlayfs: missing 'lowerdir' [ 624.431331][ T9955] JBD2: no valid journal superblock found [ 624.454640][ T9955] EXT4-fs (loop6): error loading journal [ 624.485066][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 624.934215][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 624.934233][ T26] audit: type=1326 audit(1733586469.143:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.084680][ T26] audit: type=1326 audit(1733586469.143:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.106945][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.381144][ T26] audit: type=1326 audit(1733586469.143:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.403579][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.453265][ T26] audit: type=1326 audit(1733586469.143:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.476622][ T26] audit: type=1326 audit(1733586469.143:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.584054][ T26] audit: type=1326 audit(1733586469.143:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.659887][ T26] audit: type=1326 audit(1733586469.143:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.762090][ T26] audit: type=1326 audit(1733586469.143:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.841165][ T26] audit: type=1326 audit(1733586469.143:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 625.952521][ T26] audit: type=1326 audit(1733586469.143:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.1.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd57ff7fed9 code=0x7ffc0000 [ 626.310762][ T9986] loop1: detected capacity change from 0 to 1024 [ 626.391107][ T9986] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 626.845706][ T9993] loop6: detected capacity change from 0 to 8 [ 626.972050][ T9993] overlayfs: missing 'lowerdir' [ 629.721159][T10012] lo speed is unknown, defaulting to 1000 [ 630.774745][T10018] loop5: detected capacity change from 0 to 1024 [ 630.802488][T10018] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 632.693547][T10031] loop3: detected capacity change from 0 to 1024 [ 632.758564][T10031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f002c01c, mo2=0002] [ 632.776988][T10031] System zones: 0-1, 3-36 [ 632.798815][T10031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 632.834338][T10031] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 633.037358][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 634.581677][T10059] loop6: detected capacity change from 0 to 1024 [ 634.607379][T10059] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2) [ 635.493526][ T4242] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 636.942369][T10077] netlink: 'syz.2.1456': attribute type 39 has an invalid length. [ 638.054991][T10093] syz.5.1460[10093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 638.055100][T10093] syz.5.1460[10093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.174315][T10100] hub 1-0:1.0: USB hub found [ 639.275227][T10100] hub 1-0:1.0: 1 port detected [ 639.349721][T10104] loop1: detected capacity change from 0 to 1024 [ 639.449709][T10104] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 640.066825][T10113] loop2: detected capacity change from 0 to 2048 [ 640.215896][T10113] Alternate GPT is invalid, using primary GPT. [ 640.287361][T10113] loop2: p2 p3 p7 [ 641.212614][ T4240] udevd[4240]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 641.218219][ T4242] udevd[4242]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 641.228034][ T4342] udevd[4342]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 641.539511][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 641.829841][T10140] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1478' sets config #1 [ 642.921691][T10159] loop6: detected capacity change from 0 to 16 [ 642.944347][T10159] erofs: (device loop6): mounted with root inode @ nid 36. [ 643.371529][T10165] syz.6.1484: attempt to access beyond end of device [ 643.371529][T10165] loop6: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 643.385805][T10165] syz.6.1484: attempt to access beyond end of device [ 643.385805][T10165] loop6: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 643.405838][T10165] syz.6.1484: attempt to access beyond end of device [ 643.405838][T10165] loop6: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 643.420146][T10165] syz.6.1484: attempt to access beyond end of device [ 643.420146][T10165] loop6: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 644.111597][T10171] usb usb8: usbfs: process 10171 (syz.1.1486) did not claim interface 0 before use [ 644.774348][T10178] ALSA: mixer_oss: invalid OSS volume '' [ 645.035720][T10179] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1489' sets config #1 [ 646.621665][T10210] loop3: detected capacity change from 0 to 8 [ 646.693190][T10211] ALSA: mixer_oss: invalid OSS volume '' [ 646.767426][T10210] overlayfs: missing 'lowerdir' [ 647.822285][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1508'. [ 649.812373][T10251] syz.5.1514[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.812482][T10251] syz.5.1514[10251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.834618][T10250] loop6: detected capacity change from 0 to 8 [ 649.976065][T10250] overlayfs: missing 'lowerdir' [ 650.233014][T10257] ALSA: mixer_oss: invalid OSS volume '' [ 651.806402][T10282] loop5: detected capacity change from 0 to 8 [ 651.876505][T10282] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 651.959611][T10282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 652.468278][T10291] ALSA: mixer_oss: invalid OSS volume '' [ 658.738434][T10361] 9pnet_fd: Insufficient options for proto=fd [ 658.851815][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 658.867163][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1551'. [ 658.869432][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 659.730948][T10361] ceph: No mds server is up or the cluster is laggy [ 661.921838][T10384] ALSA: mixer_oss: invalid OSS volume '' [ 663.380880][T10398] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1561' sets config #1 [ 665.012076][T10422] loop1: detected capacity change from 0 to 1024 [ 665.140661][T10422] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 669.911499][T10467] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1583'. [ 671.517993][T10487] loop6: detected capacity change from 0 to 8 [ 671.982796][T10497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1595'. [ 674.450640][T10523] loop3: detected capacity change from 0 to 1024 [ 674.480835][T10523] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 675.349590][T10530] loop6: detected capacity change from 0 to 8 [ 676.370187][T10538] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1608'. [ 677.430000][T10554] loop6: detected capacity change from 0 to 8 [ 677.450270][T10554] SQUASHFS error: Failed to read block 0x4e8: -5 [ 677.457901][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 677.458559][ T26] audit: type=1800 audit(1733586521.723:580): pid=10554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1609" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 678.666909][T10565] loop3: detected capacity change from 0 to 8 [ 679.622490][T10580] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1623'. [ 681.289602][T10592] loop1: detected capacity change from 0 to 8 [ 682.471949][T10616] loop5: detected capacity change from 0 to 128 [ 683.409918][T10616] syz.5.1635: attempt to access beyond end of device [ 683.409918][T10616] loop5: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 684.002074][T10630] 9pnet_fd: Insufficient options for proto=fd [ 685.439862][T10638] loop5: detected capacity change from 0 to 8 [ 685.538687][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.025180][T10668] 9pnet_fd: Insufficient options for proto=fd [ 688.256891][T10673] loop5: detected capacity change from 0 to 8 [ 688.659134][T10671] SQUASHFS error: Failed to read block 0x4e8: -5 [ 688.669828][ T26] audit: type=1800 audit(1733586532.933:581): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1647" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 689.618583][T10679] loop2: detected capacity change from 0 to 1024 [ 689.680839][T10679] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 690.116865][T10687] ALSA: mixer_oss: invalid OSS volume '' [ 692.504737][T10709] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 694.511152][T10732] loop3: detected capacity change from 0 to 8 [ 694.701048][T10732] SQUASHFS error: Failed to read block 0x4e8: -5 [ 694.719701][ T26] audit: type=1800 audit(1733586538.983:582): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1664" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 694.971577][T10736] loop5: detected capacity change from 0 to 1024 [ 695.034220][T10736] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 696.473598][T10746] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 699.390512][T10775] loop1: detected capacity change from 0 to 1024 [ 699.459455][T10775] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 700.801538][T10788] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 702.255916][T10803] loop3: detected capacity change from 0 to 16 [ 702.301765][T10803] erofs: (device loop3): mounted with root inode @ nid 36. [ 702.742155][T10808] syz.3.1691: attempt to access beyond end of device [ 702.742155][T10808] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 702.757217][T10808] syz.3.1691: attempt to access beyond end of device [ 702.757217][T10808] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 702.794962][T10808] syz.3.1691: attempt to access beyond end of device [ 702.794962][T10808] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 702.810091][T10808] syz.3.1691: attempt to access beyond end of device [ 702.810091][T10808] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 704.867800][T10821] loop5: detected capacity change from 0 to 1024 [ 704.931610][T10821] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 705.019577][ T4242] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 705.087961][T10822] loop6: detected capacity change from 0 to 8 [ 705.347044][T10822] SQUASHFS error: Failed to read block 0x4e8: -5 [ 705.394143][ T26] audit: type=1800 audit(1733586549.653:583): pid=10822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1692" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 709.803022][T10871] loop1: detected capacity change from 0 to 1024 [ 709.855581][T10871] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 712.966477][T10903] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1721'. [ 713.294579][T10911] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 714.580649][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1725'. [ 718.984555][T10960] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 720.468534][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1739'. [ 723.695031][T10999] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 730.808766][T11040] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 735.802111][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1773'. [ 743.009000][T11146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1791'. [ 746.976779][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.852114][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1805'. [ 748.932429][T11200] loop2: detected capacity change from 0 to 8 [ 749.204625][T11200] SQUASHFS error: Failed to read block 0x4e8: -5 [ 749.294230][ T26] audit: type=1800 audit(1733586593.563:584): pid=11200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1803" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 753.162538][T11244] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1816'. [ 754.496802][T11262] loop6: detected capacity change from 0 to 16 [ 754.550128][T11262] erofs: (device loop6): mounted with root inode @ nid 36. [ 755.545310][T11272] syz.6.1822: attempt to access beyond end of device [ 755.545310][T11272] loop6: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 755.559482][T11272] syz.6.1822: attempt to access beyond end of device [ 755.559482][T11272] loop6: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 755.579465][T11272] syz.6.1822: attempt to access beyond end of device [ 755.579465][T11272] loop6: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 755.593597][T11272] syz.6.1822: attempt to access beyond end of device [ 755.593597][T11272] loop6: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 758.208378][T11292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1829'. [ 758.284432][T11294] ALSA: mixer_oss: invalid OSS volume '' [ 760.382101][T11311] loop5: detected capacity change from 0 to 8 [ 760.447280][T11315] loop6: detected capacity change from 0 to 16 [ 760.573109][T11315] erofs: (device loop6): mounted with root inode @ nid 36. [ 760.823299][T11311] SQUASHFS error: Failed to read block 0x4e8: -5 [ 762.005199][T11323] syz.6.1836: attempt to access beyond end of device [ 762.005199][T11323] loop6: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 762.019438][T11323] syz.6.1836: attempt to access beyond end of device [ 762.019438][T11323] loop6: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 762.085140][T11323] syz.6.1836: attempt to access beyond end of device [ 762.085140][T11323] loop6: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 762.098994][T11323] syz.6.1836: attempt to access beyond end of device [ 762.098994][T11323] loop6: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 762.599718][ T26] audit: type=1800 audit(1733586606.863:585): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1830" name="file1" dev="overlay" ino=5 res=0 errno=0 [ 763.455883][T11339] ALSA: mixer_oss: invalid OSS volume '' [ 764.329090][T11345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1844'. [ 765.699958][T11361] bridge0: port 3(vlan2) entered blocking state [ 765.747419][T11361] bridge0: port 3(vlan2) entered disabled state [ 765.759015][T11363] loop3: detected capacity change from 0 to 16 [ 765.993915][T11363] erofs: (device loop3): mounted with root inode @ nid 36. [ 767.448111][T11369] syz.3.1851: attempt to access beyond end of device [ 767.448111][T11369] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 767.462040][T11369] syz.3.1851: attempt to access beyond end of device [ 767.462040][T11369] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 767.476116][T11363] syz.3.1851: attempt to access beyond end of device [ 767.476116][T11363] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 767.490279][T11363] syz.3.1851: attempt to access beyond end of device [ 767.490279][T11363] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 767.963215][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1857'. [ 770.294269][T11402] ALSA: mixer_oss: invalid OSS volume '' [ 770.820956][T11405] loop3: detected capacity change from 0 to 512 [ 770.980566][T11405] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1864: casefold flag without casefold feature [ 771.009199][T11412] loop5: detected capacity change from 0 to 512 [ 771.061853][T11412] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 771.073973][T11412] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 771.084117][T11412] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1865: Corrupt directory, running e2fsck is recommended [ 771.102837][T11412] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 771.111210][T11412] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.1865: corrupted in-inode xattr [ 771.124556][T11412] EXT4-fs (loop5): Remounting filesystem read-only [ 771.131143][T11412] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1865: couldn't read orphan inode 15 (err -117) [ 771.143915][T11412] EXT4-fs (loop5): Remounting filesystem read-only [ 771.150462][T11412] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 771.194230][T11405] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1864: couldn't read orphan inode 15 (err -117) [ 771.307680][T11405] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 771.360372][T11412] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.508478][T11412] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.762809][T11412] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.015631][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 772.619618][T11423] loop3: detected capacity change from 0 to 16 [ 772.643785][T11423] erofs: (device loop3): mounted with root inode @ nid 36. [ 772.712144][T11412] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.842966][T11412] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.857881][T11412] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.874023][T11412] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.888241][T11412] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.140973][T11433] syz.3.1867: attempt to access beyond end of device [ 773.140973][T11433] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 773.155198][T11433] syz.3.1867: attempt to access beyond end of device [ 773.155198][T11433] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 773.172476][T11433] syz.3.1867: attempt to access beyond end of device [ 773.172476][T11433] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 773.186549][T11433] syz.3.1867: attempt to access beyond end of device [ 773.186549][T11433] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 774.006098][ T4905] EXT4-fs (loop5): unmounting filesystem. [ 777.134621][T11457] lo speed is unknown, defaulting to 1000 [ 777.724399][T11467] No such timeout policy "syz0" [ 777.782639][T11468] ALSA: mixer_oss: invalid OSS volume '' [ 779.302721][T11475] 9pnet_fd: Insufficient options for proto=fd [ 779.345512][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 779.351551][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 779.411984][T11486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1883'. [ 779.769439][T11475] ceph: No mds server is up or the cluster is laggy [ 780.139152][ T4371] libceph: connect (1)[c::]:6789 error -101 [ 780.145251][ T4371] libceph: mon0 (1)[c::]:6789 connect error [ 780.398448][T11492] loop3: detected capacity change from 0 to 1024 [ 780.514997][T11492] EXT4-fs: Ignoring removed orlov option [ 780.520701][T11492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 780.921083][T11492] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 781.977806][T11509] loop5: detected capacity change from 0 to 16 [ 782.016528][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1887'. [ 782.041200][T11509] erofs: (device loop5): mounted with root inode @ nid 36. [ 782.342834][T11516] syz.5.1891: attempt to access beyond end of device [ 782.342834][T11516] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 782.357021][T11516] syz.5.1891: attempt to access beyond end of device [ 782.357021][T11516] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 782.371786][T11516] syz.5.1891: attempt to access beyond end of device [ 782.371786][T11516] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 782.385642][T11516] syz.5.1891: attempt to access beyond end of device [ 782.385642][T11516] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 782.448885][ T4248] EXT4-fs (loop3): unmounting filesystem. [ 783.554133][T11528] loop5: detected capacity change from 0 to 1024 [ 783.693433][T11528] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 783.914546][T11534] loop2: detected capacity change from 0 to 8 [ 786.460810][T11511] overlayfs: failed to resolve './file0/../file0': -2 [ 788.323281][T11561] loop5: detected capacity change from 0 to 16 [ 788.374543][T11561] erofs: (device loop5): mounted with root inode @ nid 36. [ 788.553274][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1909'. [ 788.672597][T11566] syz.5.1908: attempt to access beyond end of device [ 788.672597][T11566] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 788.686516][T11566] syz.5.1908: attempt to access beyond end of device [ 788.686516][T11566] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 788.701281][T11566] syz.5.1908: attempt to access beyond end of device [ 788.701281][T11566] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 788.715395][T11566] syz.5.1908: attempt to access beyond end of device [ 788.715395][T11566] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 790.298282][T11577] 9pnet_fd: Insufficient options for proto=fd [ 790.345965][T11580] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 790.512794][T11590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1903'. [ 791.848209][T11607] sd 0:0:1:0: device reset [ 792.533696][ T26] audit: type=1326 audit(1733586636.793:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11614 comm="syz.2.1924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x0 [ 792.543881][T11622] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 792.555592][ C0] vkms_vblank_simulate: vblank timer overrun [ 793.409626][T11628] sg_write: process 1336 (syz.3.1928) changed security contexts after opening file descriptor, this is not allowed. [ 793.494898][T11631] program syz.3.1928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.706215][T11636] loop1: detected capacity change from 0 to 764 [ 793.732676][T11636] Symlink component flag not implemented [ 793.784315][T11636] Symlink component flag not implemented (101) [ 795.118574][ T26] audit: type=1326 audit(1733586639.383:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.140933][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.215101][ T26] audit: type=1326 audit(1733586639.383:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.306742][T11668] 9pnet_fd: Insufficient options for proto=fd [ 795.323445][ T26] audit: type=1326 audit(1733586639.423:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.371040][T11671] loop3: detected capacity change from 0 to 128 [ 795.395977][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 795.402136][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 795.405967][T11671] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 795.431253][ T26] audit: type=1326 audit(1733586639.423:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.453668][ C0] vkms_vblank_simulate: vblank timer overrun [ 795.470255][ T26] audit: type=1326 audit(1733586639.423:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.506845][T11671] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 795.539400][ T26] audit: type=1326 audit(1733586639.423:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.617830][ T26] audit: type=1326 audit(1733586639.423:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.646441][ T26] audit: type=1326 audit(1733586639.423:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.681756][T11681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1936'. [ 795.858357][ T26] audit: type=1326 audit(1733586639.423:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.6.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 795.885978][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 795.912996][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 796.485750][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'. [ 796.500664][T11686] device vlan2 entered promiscuous mode [ 796.506455][T11686] device gretap0 entered promiscuous mode [ 796.526851][T11686] device gretap0 left promiscuous mode [ 796.534526][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 796.540561][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 796.589604][T11668] ceph: No mds server is up or the cluster is laggy [ 796.859850][T11695] netlink: 'syz.6.1953': attribute type 1 has an invalid length. [ 796.880086][T11697] loop5: detected capacity change from 0 to 512 [ 796.952550][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1955'. [ 797.024249][T11697] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 797.073472][T11697] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 797.575849][T11715] syz.1.1960[11715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.575955][T11715] syz.1.1960[11715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.806607][T11722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1962'. [ 797.980366][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 797.980382][ T26] audit: type=1326 audit(1733586642.243:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.144030][ T26] audit: type=1326 audit(1733586642.313:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.225012][T11735] loop2: detected capacity change from 0 to 164 [ 798.248618][T11735] Unable to read rock-ridge attributes [ 798.262069][ T26] audit: type=1326 audit(1733586642.313:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.290794][T11735] Unable to read rock-ridge attributes [ 798.334296][ T26] audit: type=1326 audit(1733586642.313:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.401256][ T26] audit: type=1326 audit(1733586642.313:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.425726][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1969'. [ 798.493409][ T26] audit: type=1326 audit(1733586642.313:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.545010][ T26] audit: type=1326 audit(1733586642.313:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.637940][ T26] audit: type=1326 audit(1733586642.323:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.710165][ T26] audit: type=1326 audit(1733586642.333:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 798.733140][ T26] audit: type=1800 audit(1733586642.703:626): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1954" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 799.187040][T11748] netlink: 'syz.2.1972': attribute type 3 has an invalid length. [ 799.585523][ T4905] EXT4-fs (loop5): unmounting filesystem. [ 799.814554][T11756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1976'. [ 799.980038][T11761] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 800.461381][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 800.641117][T11781] loop2: detected capacity change from 0 to 2048 [ 800.755147][T11781] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 801.972305][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 802.018922][T11796] gretap0: default FDB implementation only supports local addresses [ 802.157085][T11800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1990'. [ 802.159919][T11798] loop5: detected capacity change from 0 to 1024 [ 802.208291][T11798] EXT4-fs (loop5): invalid first ino: 0 [ 802.279213][ T4242] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 802.632269][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 803.588159][T11834] capability: warning: `syz.5.2004' uses 32-bit capabilities (legacy support in use) [ 803.748743][T11833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2003'. [ 804.393488][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 804.393505][ T26] audit: type=1326 audit(1733586648.653:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.503955][ T26] audit: type=1326 audit(1733586648.703:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.588613][ T26] audit: type=1326 audit(1733586648.703:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.646828][ T26] audit: type=1326 audit(1733586648.703:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.675265][T11853] loop6: detected capacity change from 0 to 8192 [ 804.711928][ T26] audit: type=1326 audit(1733586648.713:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.775697][ T26] audit: type=1326 audit(1733586648.713:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.850252][ T26] audit: type=1326 audit(1733586648.713:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.872844][ T26] audit: type=1326 audit(1733586648.713:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 804.921454][T11864] loop1: detected capacity change from 0 to 2048 [ 805.284572][T11864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 805.591800][ T26] audit: type=1326 audit(1733586648.713:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 805.734230][ T26] audit: type=1326 audit(1733586648.713:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11852 comm="syz.6.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc61357ff13 code=0x7ffc0000 [ 805.761348][T11874] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 806.003132][T11879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2020'. [ 806.031130][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 806.286336][T11883] loop1: detected capacity change from 0 to 128 [ 806.293513][T11883] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 806.340657][T11889] loop2: detected capacity change from 0 to 16 [ 806.355280][T11889] erofs: (device loop2): mounted with root inode @ nid 36. [ 806.377797][T11883] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 806.717048][T11893] syz.2.2024: attempt to access beyond end of device [ 806.717048][T11893] loop2: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 806.730994][T11893] syz.2.2024: attempt to access beyond end of device [ 806.730994][T11893] loop2: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 806.746012][T11893] syz.2.2024: attempt to access beyond end of device [ 806.746012][T11893] loop2: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 806.761275][T11893] syz.2.2024: attempt to access beyond end of device [ 806.761275][T11893] loop2: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 807.526219][T11895] loop5: detected capacity change from 0 to 8192 [ 808.416569][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.281842][T11921] loop6: detected capacity change from 0 to 128 [ 809.314301][T11921] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 809.350387][T11926] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2034'. [ 809.364993][T11921] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 809.503365][T11928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.586515][T11934] loop5: detected capacity change from 0 to 16 [ 809.638772][T11934] erofs: (device loop5): mounted with root inode @ nid 36. [ 809.929121][T11934] syz.5.2040: attempt to access beyond end of device [ 809.929121][T11934] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 809.943240][T11934] syz.5.2040: attempt to access beyond end of device [ 809.943240][T11934] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 809.958121][T11934] syz.5.2040: attempt to access beyond end of device [ 809.958121][T11934] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 809.971994][T11934] syz.5.2040: attempt to access beyond end of device [ 809.971994][T11934] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 810.728277][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 810.728294][ T26] audit: type=1326 audit(1733586654.993:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 810.810144][T11928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.885180][T11942] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 811.163665][ T26] audit: type=1326 audit(1733586655.033:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 811.289507][ T26] audit: type=1326 audit(1733586655.033:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 811.357678][ T26] audit: type=1326 audit(1733586655.033:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 811.431795][ T26] audit: type=1326 audit(1733586655.033:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 811.468694][ T26] audit: type=1326 audit(1733586655.033:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 811.491052][ C1] vkms_vblank_simulate: vblank timer overrun [ 811.507110][ T26] audit: type=1326 audit(1733586655.093:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6617fed9 code=0x7ffc0000 [ 811.546368][ T26] audit: type=1326 audit(1733586655.413:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.6.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 811.552050][T11928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.608031][ T26] audit: type=1326 audit(1733586655.483:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.6.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 811.656010][ T26] audit: type=1326 audit(1733586655.483:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.6.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 811.764663][T11928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.640985][T11963] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2050'. [ 812.766120][T11967] loop5: detected capacity change from 0 to 16 [ 812.773615][T11967] erofs: (device loop5): mounted with root inode @ nid 36. [ 812.863388][T11966] loop6: detected capacity change from 0 to 128 [ 812.911918][T11966] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 812.992476][T11928] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.009761][T11967] syz.5.2051: attempt to access beyond end of device [ 813.009761][T11967] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 813.023673][T11967] syz.5.2051: attempt to access beyond end of device [ 813.023673][T11967] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 813.025117][T11966] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 813.047573][T11967] syz.5.2051: attempt to access beyond end of device [ 813.047573][T11967] loop5: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 813.061538][T11967] syz.5.2051: attempt to access beyond end of device [ 813.061538][T11967] loop5: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 813.130746][T11928] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.221010][T11928] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.252450][T11928] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.602025][T11996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2062'. [ 814.770802][T12003] loop3: detected capacity change from 0 to 16 [ 814.797856][T12003] erofs: (device loop3): mounted with root inode @ nid 36. [ 815.128217][T12003] syz.3.2065: attempt to access beyond end of device [ 815.128217][T12003] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 815.142199][T12003] syz.3.2065: attempt to access beyond end of device [ 815.142199][T12003] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 815.156922][T12003] syz.3.2065: attempt to access beyond end of device [ 815.156922][T12003] loop3: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 815.170832][T12003] syz.3.2065: attempt to access beyond end of device [ 815.170832][T12003] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 815.188367][T12010] 9pnet_fd: Insufficient options for proto=fd [ 815.512065][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2066'. [ 817.045759][T12025] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.114570][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 819.114586][ T26] audit: type=1326 audit(1733586663.383:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 819.258780][ T26] audit: type=1326 audit(1733586663.433:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 819.433860][ T26] audit: type=1326 audit(1733586663.433:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 819.536612][ T26] audit: type=1326 audit(1733586663.433:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 819.619634][ T26] audit: type=1326 audit(1733586663.433:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 819.713930][ T26] audit: type=1326 audit(1733586663.443:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 819.852024][T12047] loop1: detected capacity change from 0 to 4096 [ 819.970556][ T26] audit: type=1326 audit(1733586663.443:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 819.993586][ T26] audit: type=1326 audit(1733586663.443:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 820.124435][T12058] 9pnet_fd: Insufficient options for proto=fd [ 820.346806][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2079'. [ 821.274713][ T26] audit: type=1326 audit(1733586663.443:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 821.399656][ T32] libceph: connect (1)[c::]:6789 error -101 [ 821.431734][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 821.523207][T12047] ext4: Unknown parameter 'rootcontext' [ 821.799268][ T26] audit: type=1326 audit(1733586663.443:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12037 comm="syz.2.2074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1f417fed9 code=0x7ffc0000 [ 821.825580][T12058] ceph: No mds server is up or the cluster is laggy [ 821.837081][ T4242] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 821.855074][ T8356] libceph: connect (1)[c::]:6789 error -101 [ 821.864213][ T8356] libceph: mon0 (1)[c::]:6789 connect error [ 823.560263][T12083] loop1: detected capacity change from 0 to 512 [ 823.675437][T12083] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.2090: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 823.778299][T12083] EXT4-fs error (device loop1): ext4_quota_enable:6995: comm syz.1.2090: Bad quota inode: 3, type: 0 [ 823.833789][T12083] EXT4-fs warning (device loop1): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 823.859809][T12083] EXT4-fs (loop1): mount failed [ 823.961005][T12101] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 824.128788][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 824.128804][ T26] audit: type=1326 audit(1733586668.393:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 824.164038][ T26] audit: type=1326 audit(1733586668.423:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 824.190381][ T26] audit: type=1326 audit(1733586668.423:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.6.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61357fed9 code=0x7ffc0000 [ 824.654326][T12111] 9pnet_fd: Insufficient options for proto=fd [ 824.792925][T12115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2098'. [ 824.867697][ T4298] libceph: connect (1)[c::]:6789 error -101 [ 824.952401][ T4298] libceph: mon0 (1)[c::]:6789 connect error [ 825.173597][T12112] ceph: No mds server is up or the cluster is laggy [ 825.460611][T12117] smc: net device bond0 applied user defined pnetid SYZ0 [ 828.581339][ T26] audit: type=1326 audit(1733586672.843:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 828.624546][T12142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2109'. [ 828.651772][T12141] loop5: detected capacity change from 0 to 512 [ 828.669977][ T26] audit: type=1326 audit(1733586672.883:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 828.794136][T12141] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 828.833022][T12141] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 828.853877][ T26] audit: type=1326 audit(1733586672.883:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 828.973884][ T26] audit: type=1326 audit(1733586672.883:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.060464][ T26] audit: type=1326 audit(1733586672.883:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.098267][T12151] capability: warning: `syz.3.2112' uses deprecated v2 capabilities in a way that may be insecure [ 829.154238][ T26] audit: type=1326 audit(1733586672.893:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.221072][ T26] audit: type=1326 audit(1733586672.893:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.277006][T12154] loop1: detected capacity change from 0 to 512 [ 829.293175][ T26] audit: type=1326 audit(1733586672.893:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.358283][ T26] audit: type=1326 audit(1733586672.893:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.359473][T12154] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 829.381868][ T26] audit: type=1326 audit(1733586672.903:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.413647][ T26] audit: type=1326 audit(1733586672.903:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.436559][ T26] audit: type=1326 audit(1733586672.903:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.459079][ T26] audit: type=1326 audit(1733586672.903:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.481577][ T26] audit: type=1326 audit(1733586672.903:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.505088][ T26] audit: type=1326 audit(1733586672.903:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f1b4ef7fed9 code=0x7ffc0000 [ 829.530833][T12154] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 830.824427][T12154] ------------[ cut here ]------------ [ 830.829926][T12154] Looking for class "&ei->i_data_sem" with key init_once.__key.786, but found a different class "&ei->i_data_sem" with the same key [ 830.843587][T12154] WARNING: CPU: 1 PID: 12154 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 830.853599][T12154] Modules linked in: [ 830.857522][T12154] CPU: 1 PID: 12154 Comm: syz.1.2113 Not tainted 6.1.119-syzkaller #0 [ 830.865696][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 830.875766][T12154] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 830.881511][T12154] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 830.901137][T12154] RSP: 0018:ffffc900054b7410 EFLAGS: 00010046 [ 830.907217][T12154] RAX: 89a7357f347a6e00 RBX: ffffffff90c707e0 RCX: 0000000000080000 [ 830.915202][T12154] RDX: ffffc900059c9000 RSI: 0000000000005e72 RDI: 0000000000005e73 [ 830.923185][T12154] RBP: ffffc900054b7510 R08: ffffffff8152b88e R09: ffffed10171e4f1c [ 830.931169][T12154] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 830.939152][T12154] R13: 1ffff92000a96e90 R14: ffff8880711f2aa8 R15: ffffffff974dff41 [ 830.947145][T12154] FS: 00007fd580e2a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 830.956095][T12154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 830.962699][T12154] CR2: 000000110c2de10f CR3: 00000000619b0000 CR4: 00000000003506e0 [ 830.970693][T12154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 830.978684][T12154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 830.986679][T12154] Call Trace: [ 830.989970][T12154] [ 830.992915][T12154] ? __warn+0x15a/0x520 [ 830.997101][T12154] ? look_up_lock_class+0xc2/0x140 [ 831.002240][T12154] ? report_bug+0x2af/0x500 [ 831.006797][T12154] ? look_up_lock_class+0xc2/0x140 [ 831.011932][T12154] ? handle_bug+0x3d/0x70 [ 831.016288][T12154] ? exc_invalid_op+0x16/0x40 [ 831.020990][T12154] ? asm_exc_invalid_op+0x16/0x20 [ 831.026134][T12154] ? __warn_printk+0x28e/0x350 [ 831.030925][T12154] ? look_up_lock_class+0xc2/0x140 [ 831.036064][T12154] register_lock_class+0x100/0x990 [ 831.041231][T12154] ? is_dynamic_key+0x260/0x260 [ 831.046121][T12154] ? mark_lock+0x9a/0x340 [ 831.050492][T12154] __lock_acquire+0xd3/0x1f80 [ 831.055230][T12154] lock_acquire+0x1f8/0x5a0 [ 831.059767][T12154] ? ext4_move_extents+0x3a0/0xe10 [ 831.064907][T12154] ? read_lock_is_recursive+0x10/0x10 [ 831.070306][T12154] ? __might_sleep+0xb0/0xb0 [ 831.074920][T12154] ? rwsem_write_trylock+0x166/0x210 [ 831.080225][T12154] ? inode_owner_or_capable+0x210/0x210 [ 831.085797][T12154] ? clear_nonspinnable+0x60/0x60 [ 831.090855][T12154] down_write_nested+0x39/0x60 [ 831.095649][T12154] ? ext4_move_extents+0x3a0/0xe10 [ 831.100790][T12154] ext4_move_extents+0x3a0/0xe10 [ 831.105762][T12154] ? rcu_read_lock_any_held+0xb3/0x160 [ 831.111313][T12154] ? ext4_double_up_write_data_sem+0x30/0x30 [ 831.117329][T12154] ext4_ioctl+0x3a8d/0x5f60 [ 831.121864][T12154] ? kasan_set_track+0x4b/0x70 [ 831.126662][T12154] ? security_file_ioctl+0x6d/0xa0 [ 831.131796][T12154] ? __se_sys_ioctl+0x47/0x160 [ 831.136577][T12154] ? do_syscall_64+0x3b/0xb0 [ 831.141209][T12154] ? ext4_fileattr_set+0x1770/0x1770 [ 831.146554][T12154] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 831.151432][T12154] ? __x64_compat_sys_ioctl+0x80/0x80 [ 831.156828][T12154] ? __lock_acquire+0x1f80/0x1f80 [ 831.161887][T12154] ? lockdep_hardirqs_on+0x94/0x130 [ 831.167115][T12154] ? __kmem_cache_free+0x25c/0x3c0 [ 831.172255][T12154] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 831.177927][T12154] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 831.183595][T12154] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 831.189263][T12154] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 831.194767][T12154] ? __fget_files+0x28/0x4a0 [ 831.199387][T12154] ? __fget_files+0x28/0x4a0 [ 831.204004][T12154] ? __fget_files+0x435/0x4a0 [ 831.208712][T12154] ? __fget_files+0x28/0x4a0 [ 831.213335][T12154] ? bpf_lsm_file_ioctl+0x5/0x10 [ 831.218299][T12154] ? security_file_ioctl+0x7d/0xa0 [ 831.223435][T12154] ? ext4_fileattr_set+0x1770/0x1770 [ 831.228765][T12154] __se_sys_ioctl+0xf1/0x160 [ 831.233381][T12154] do_syscall_64+0x3b/0xb0 [ 831.237833][T12154] ? clear_bhb_loop+0x45/0xa0 [ 831.242548][T12154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.248469][T12154] RIP: 0033:0x7fd57ff7fed9 [ 831.252916][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.272551][T12154] RSP: 002b:00007fd580e2a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.281004][T12154] RAX: ffffffffffffffda RBX: 00007fd580145fa0 RCX: 00007fd57ff7fed9 [ 831.289009][T12154] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 000000000000000c [ 831.297011][T12154] RBP: 00007fd57fff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 831.305009][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.313008][T12154] R13: 0000000000000000 R14: 00007fd580145fa0 R15: 00007ffee6c89fe8 [ 831.321020][T12154] [ 831.324063][T12154] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 831.331373][T12154] CPU: 1 PID: 12154 Comm: syz.1.2113 Not tainted 6.1.119-syzkaller #0 [ 831.339557][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 831.349638][T12154] Call Trace: [ 831.352936][T12154] [ 831.355881][T12154] dump_stack_lvl+0x1e3/0x2cb [ 831.358841][T12169] loop6: detected capacity change from 0 to 1024 [ 831.366921][T12154] ? nf_tcp_handle_invalid+0x642/0x642 [ 831.372439][T12154] ? panic+0x764/0x764 [ 831.376546][T12154] ? vscnprintf+0x59/0x80 [ 831.380902][T12154] panic+0x318/0x764 [ 831.381474][T12169] EXT4-fs: Ignoring removed orlov option [ 831.390450][T12154] ? __warn+0x169/0x520 [ 831.394639][T12154] ? memcpy_page_flushcache+0xfc/0xfc [ 831.400056][T12154] __warn+0x348/0x520 [ 831.404061][T12154] ? look_up_lock_class+0xc2/0x140 [ 831.409191][T12154] report_bug+0x2af/0x500 [ 831.413560][T12154] ? look_up_lock_class+0xc2/0x140 [ 831.418716][T12154] handle_bug+0x3d/0x70 [ 831.422877][T12169] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 831.431758][T12154] exc_invalid_op+0x16/0x40 [ 831.436300][T12154] asm_exc_invalid_op+0x16/0x20 [ 831.441194][T12154] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 831.446948][T12154] Code: 8b 16 48 c7 c0 20 c1 db 90 48 39 c2 74 46 f6 05 f0 cb d4 03 01 75 3d c6 05 e7 cb d4 03 01 48 c7 c7 60 22 0c 8b e8 1e de a0 f6 <0f> 0b eb 26 e8 45 33 8f f9 48 c7 c7 a0 21 0c 8b 89 de e8 d7 f3 fd [ 831.466576][T12154] RSP: 0018:ffffc900054b7410 EFLAGS: 00010046 [ 831.472666][T12154] RAX: 89a7357f347a6e00 RBX: ffffffff90c707e0 RCX: 0000000000080000 [ 831.480701][T12154] RDX: ffffc900059c9000 RSI: 0000000000005e72 RDI: 0000000000005e73 [ 831.488711][T12154] RBP: ffffc900054b7510 R08: ffffffff8152b88e R09: ffffed10171e4f1c [ 831.496731][T12154] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 831.504734][T12154] R13: 1ffff92000a96e90 R14: ffff8880711f2aa8 R15: ffffffff974dff41 [ 831.512747][T12154] ? __warn_printk+0x28e/0x350 [ 831.517557][T12154] register_lock_class+0x100/0x990 [ 831.522721][T12154] ? is_dynamic_key+0x260/0x260 [ 831.527608][T12154] ? mark_lock+0x9a/0x340 [ 831.531973][T12154] __lock_acquire+0xd3/0x1f80 [ 831.536687][T12154] lock_acquire+0x1f8/0x5a0 [ 831.541223][T12154] ? ext4_move_extents+0x3a0/0xe10 [ 831.546357][T12154] ? read_lock_is_recursive+0x10/0x10 [ 831.551784][T12154] ? __might_sleep+0xb0/0xb0 [ 831.556385][T12154] ? rwsem_write_trylock+0x166/0x210 [ 831.561701][T12154] ? inode_owner_or_capable+0x210/0x210 [ 831.567290][T12154] ? clear_nonspinnable+0x60/0x60 [ 831.572357][T12154] down_write_nested+0x39/0x60 [ 831.577172][T12154] ? ext4_move_extents+0x3a0/0xe10 [ 831.582300][T12154] ext4_move_extents+0x3a0/0xe10 [ 831.587269][T12154] ? rcu_read_lock_any_held+0xb3/0x160 [ 831.592783][T12154] ? ext4_double_up_write_data_sem+0x30/0x30 [ 831.598802][T12154] ext4_ioctl+0x3a8d/0x5f60 [ 831.603361][T12154] ? kasan_set_track+0x4b/0x70 [ 831.608163][T12154] ? security_file_ioctl+0x6d/0xa0 [ 831.613298][T12154] ? __se_sys_ioctl+0x47/0x160 [ 831.618085][T12154] ? do_syscall_64+0x3b/0xb0 [ 831.622711][T12154] ? ext4_fileattr_set+0x1770/0x1770 [ 831.628049][T12154] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 831.632933][T12154] ? __x64_compat_sys_ioctl+0x80/0x80 [ 831.638345][T12154] ? __lock_acquire+0x1f80/0x1f80 [ 831.643397][T12154] ? lockdep_hardirqs_on+0x94/0x130 [ 831.648635][T12154] ? __kmem_cache_free+0x25c/0x3c0 [ 831.653790][T12154] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 831.659466][T12154] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 831.665140][T12154] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 831.670816][T12154] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 831.676322][T12154] ? __fget_files+0x28/0x4a0 [ 831.680942][T12154] ? __fget_files+0x28/0x4a0 [ 831.685555][T12154] ? __fget_files+0x435/0x4a0 [ 831.690254][T12154] ? __fget_files+0x28/0x4a0 [ 831.694873][T12154] ? bpf_lsm_file_ioctl+0x5/0x10 [ 831.699870][T12154] ? security_file_ioctl+0x7d/0xa0 [ 831.705004][T12154] ? ext4_fileattr_set+0x1770/0x1770 [ 831.710324][T12154] __se_sys_ioctl+0xf1/0x160 [ 831.714933][T12154] do_syscall_64+0x3b/0xb0 [ 831.719383][T12154] ? clear_bhb_loop+0x45/0xa0 [ 831.724099][T12154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.730026][T12154] RIP: 0033:0x7fd57ff7fed9 [ 831.734460][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.754086][T12154] RSP: 002b:00007fd580e2a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.762523][T12154] RAX: ffffffffffffffda RBX: 00007fd580145fa0 RCX: 00007fd57ff7fed9 [ 831.770607][T12154] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 000000000000000c [ 831.778609][T12154] RBP: 00007fd57fff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 831.786623][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.794617][T12154] R13: 0000000000000000 R14: 00007fd580145fa0 R15: 00007ffee6c89fe8 [ 831.802628][T12154] [ 831.806032][T12154] Kernel Offset: disabled [ 831.810360][T12154] Rebooting in 86400 seconds..