last executing test programs: 9.92278162s ago: executing program 1 (id=3412): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b", 0xe}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 9.615945559s ago: executing program 0 (id=3414): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x24, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@generic={0x5, 0x2, 0x7, 0x363, 0x8}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) 9.511210709s ago: executing program 0 (id=3415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000776605a6c7a684f8e9ed2c63f006ee2949d7b6bc045793ce679f6dd6dbac26d9c378ac83397c69a82c2627b576a59cf0d85297c7ddacf2789998e29a61deee1aba942dc1cbb37faa24dcb4746d22cd2bb0ed6711bc1e92d6b2ecab97aa27c2c125b21b41780d1f9a5ce2db3517fdf22f68dfc5f17769b2d41d205ccba1ad5b38", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x80000, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0xffffffffffffffff]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, &(0x7f00000001c0), &(0x7f0000000380)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800600"], 0x44}}, 0x0) 8.567388205s ago: executing program 2 (id=3416): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@cswp={0x58, 0x114, 0x7, {{0x9, 0x8fa}, &(0x7f0000000400)=0x9, 0x0, 0x6, 0x2, 0x7, 0x80, 0x6, 0x7}}], 0x58, 0x4008004}, 0x0) 8.090611453s ago: executing program 0 (id=3418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514", 0x21}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 8.044094442s ago: executing program 2 (id=3419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.28804314s ago: executing program 2 (id=3420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffde, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 6.680354357s ago: executing program 3 (id=3424): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @empty}}, 0xff0b, 0x9}, &(0x7f00000000c0)=0x90) 6.496028636s ago: executing program 3 (id=3425): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x24, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@generic={0x5, 0x2, 0x7, 0x363, 0x8}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) 6.403965186s ago: executing program 1 (id=3426): socket(0xa, 0x40000000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000002, 0x0) keyctl$session_to_parent(0x12) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) 5.955075584s ago: executing program 4 (id=3427): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@quota}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x4000) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r2 = open(&(0x7f0000000080)='./file1\x00', 0x141142, 0x0) write$binfmt_elf64(r2, &(0x7f0000000d80)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x12, 0x4, 0x100000000, 0x2, 0x3e, 0x3, 0x2c7, 0x40, 0x86, 0x9fb, 0xba6, 0x38, 0x1, 0xe, 0xfffd, 0x7}, [{0x3, 0x8, 0x7f, 0x4, 0x4e, 0x8, 0x8, 0x21dd}]}, 0x78) 5.571712363s ago: executing program 4 (id=3428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000776605a6c7a684f8e9ed2c63f006ee2949d7b6bc045793ce679f6dd6dbac26d9c378ac83397c69a82c2627b576a59cf0d85297c7ddacf2789998e29a61deee1aba942dc1cbb37faa24dcb4746d22cd2bb0ed6711bc1e92d6b2ecab97aa27c2c125b21b41780d1f9a5ce2db3517fdf22f68dfc5f17769b2d41d205ccba1ad5b38", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x80000, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0xffffffffffffffff]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, &(0x7f00000001c0), &(0x7f0000000380)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000ffe"], 0x44}}, 0x0) 5.476167662s ago: executing program 1 (id=3429): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xde8c6896c25bb3e}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) 3.533891124s ago: executing program 3 (id=3430): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.435945104s ago: executing program 4 (id=3431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x204001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000240)) syz_io_uring_setup(0xce, &(0x7f0000000300)={0x0, 0x7d75, 0x1000, 0x3, 0x1cb, 0x0, r0}, &(0x7f0000000440), &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f0000000200007c7d99", 0x2e}], 0x1}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SHUTDOWN={0x22, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000480)={{0x2, 0x4e21, @multicast1}, {0x1, @broadcast}, 0x16, {0x2, 0x4e20, @loopback}, 'syzkaller1\x00'}) fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1e3) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 3.376237564s ago: executing program 0 (id=3432): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newtaction={0x177c, 0x30, 0x1, 0x0, 0x0, {}, [{0x1f0, 0x1, [@m_vlan={0x114, 0x4, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x7, 0x20000000, 0x400, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcee}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x905}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5f3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x92, 0x6, "da14baab773108f2d8aeb1ce64894f7f439e6c804aae94837faf6679e7f15554eecdec91a7d40cbfee79b7a432c61eb024509b538ffea73de283913daf8f9006996f8495998ad3dce271befd4d05a8ce6f2d7d414277e618c8f41370c8049ca02f3eddb2621b592199a432d778d68a49ed9bce7a7dac5a3ed15d9dc1fb132537886b10c0af4ab0749db1fac2ef2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0xd8, 0xd, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xc2b, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x7, 0x7, 0x2, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa3, 0x4, 0x8, 0x4, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x6f1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13ec, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x209, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x1, 0x0, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1, 0x5, 0x7, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1c9, 0xfffffffffffffff3, 0x3, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}, {0x608, 0x1, [@m_tunnel_key={0x90, 0x1f, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xe}]}, {0x55, 0x6, "29d1076b0f09e0d26d85fc531a9a38b813ac86654cf5c08164c3abb757c77744da55bf81fe988999c0443a481aacc73027dc967e2c07e25d45953d3b275bc1840a05a73dbb4c36e84d8f70e85570bc35c2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xd4, 0x20, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x86f4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x4, 0xffffffffffffffff, 0x40, 0x800}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4c, 0x6, "aad15f7deea9f7e77e9f75ecf407e2e501a45e7f177aa23169c6d83838811e8e6f3f554e961b31bab48200f134e3761f43f8642fd803a231e17f5163718488b8f29c90e763cbf8b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0x19c, 0x0, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x100}, @TCA_IPT_TARG={0x6b, 0x6, {0xb, 'nat\x00', 0x0, 0x5, "c2f3ffcbef0afb004c06a108a7c65a5a679b62d8e942f6e034487f7e554cb5208468948f08fec39a488f925e5a7b06c1f0b085c46a411c7164e4a60fad57056e8e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x53, 0x6, {0x10, 'raw\x00', 0x0, 0x3, "9b353e23b5582e6691fc3453071623dae852fd6b25ac63552c57157c9b025e22a5786651a07a4f83db"}}]}, {0x7d, 0x6, "588b334ecae2c0de6e86398a4500608f3ccf74efcdb17c8311c018a565f6a13c0012635762477bda352d6afbed81d01f368e49279f8ffad4da3147ab96495a0c8bd2ab6e09e914290a2683dc500ac9d302dc838881d5f2ebafb8fe92f6d050f9ab282832b31b80bc6cefe1211da4c881d48818a468480c76f5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0xb4, 0x6, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x6, 0x1, 0xfffc0000, 0xd3df9aa}}]}, {0x6d, 0x6, "f9b79915eeb0f2a8c47f4c04a9497c4721b0784bac337ccfcd877de9ac925a22600c25ceff66afe33aa8f4173de2282b7d510da882f5842a74f0279902fec7cf94c03c1a5e7f15f8af9176206774af75062baa7ad80a42bb24d53bf4d248cbba2027f2995aab3d9022"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0x148, 0x13, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x10000000, 0x1}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9100}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0xd8, 0x6, "262f531101b05188dceabb5f814d29c7d193d7d1fcb441c284cd9121c5793ef1b59e67ce167e852a1924561958fce3f2d68282c09b23e8d961e27d6273257ae5ef26015fd24c9f2366888eb3351d9010e5b329e002a93e9c3ff078dd5118ad311db78c4c9efcafd794a59e7a01289b81a22e5855a80e976f89fbf492937bc3271c88704364666620d9b8f204aada8b7661ca02a62c35f639c92922981659620bd4048ee40ac111fed537df5b79f3d9a0a74f834757886914863aed7465e958ec32eaada003582e6a082f822386beeb9030719415"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x9c, 0x19, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x80}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}]}, {0x28, 0x6, "85254b0cc9935d996a6226763fa4e3dea6c0164e823f47e8e5d5935c7f99d831952b758d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x6c, 0x10, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x30, 0x6, "fbf7273eb5ffa221b436a8d3551da1a75c7d435ceb1e45ce6111939f13ad55292783314746c4602282955c4e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xf70, 0x1, [@m_pedit={0xf6c, 0x17, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x0, 0x3, 0x10000000, 0x3, 0x96ae}, 0x9, 0x4, [{0x8, 0x3, 0x2, 0xb, 0x200, 0x93}, {0x950c, 0x1, 0x8324, 0x2, 0x7fffffff, 0x10}, {0xe3, 0x9, 0x2, 0x9e0d, 0x8, 0xc}]}, [{0x1, 0x0, 0x2, 0x1, 0x0, 0x7}, {0x5, 0x3, 0x2, 0x7, 0x8, 0x3}, {0x9, 0x0, 0x1, 0x9, 0x3, 0x5}, {0x1, 0x0, 0xfffffffa, 0x8, 0x55757d3a, 0xd}, {0x3, 0xebc1, 0xffffffff, 0x800, 0x0, 0x8}, {0x88b, 0xb, 0x7, 0x7f, 0x8, 0x81}, {0x976, 0x8, 0xc, 0xfffffff8, 0x200, 0x9}, {0x8, 0xcb, 0x2, 0x7, 0x5, 0x3ff}, {0xfa85, 0x0, 0x783, 0x4, 0x0, 0x6}, {0x5, 0x4, 0xb, 0x9, 0x9, 0x2}, {0xd, 0x2d7b, 0x40, 0x401, 0x10, 0xffffffff}, {0xfffffb7a, 0x800, 0x5, 0x550bdde0, 0x10001, 0xfffffe00}, {0x9, 0x1, 0x40, 0x148, 0xbc3c, 0x7f}, {0xffffff0c, 0x1, 0x1, 0x8, 0x5, 0x4}, {0x4, 0x6, 0x9, 0x8384, 0xfffff90d, 0x8}, {0x6, 0x8, 0xfff, 0xc, 0x6, 0x5}, {0x0, 0x645b, 0xa4b, 0x1, 0x10001}, {0x9, 0x41, 0x6, 0x9, 0x4ead, 0x2}, {0xab, 0x1, 0x0, 0xfff, 0x4, 0x1}, {0x8, 0x5, 0x8, 0x0, 0xe, 0x8001}, {0xb, 0x5, 0x73, 0x8001, 0x5, 0x8801}, {0x1, 0x2, 0x5, 0xc, 0xffff1f8a, 0x2}, {0x60d9ddd2, 0x7, 0x80000000, 0x5, 0x32, 0x2}, {0x8, 0x4d, 0xffffffb9, 0x200, 0x4, 0x2}, {0x7ff, 0x1a, 0x3, 0x2a, 0x7, 0x10000}, {0x0, 0x0, 0x200, 0x6cb, 0x6, 0x6}, {0x85fc, 0x9, 0x7, 0x6, 0x401, 0x6}, {0xa1, 0x101, 0x2, 0x2, 0x4, 0x54d4}, {0x11d, 0x8000000, 0x3, 0xff, 0xc, 0xf2}, {0xffffffff, 0x3, 0xf2, 0x8, 0x0, 0x8}, {0x8000, 0x8eb5, 0x3, 0x4, 0x8001, 0xec0}, {0x3, 0x9, 0x5a47ae3f, 0x37, 0x5, 0x9}, {0x4, 0x3, 0x10000, 0x3, 0xee66, 0x8}, {0x5, 0x1, 0x5, 0x20000010, 0x2, 0x7ff}, {0x2, 0x81, 0x6, 0xd4, 0xf9c0, 0xcc85}, {0x9, 0x3, 0x30000000, 0x101, 0xb5, 0x1}, {0x1f, 0x6, 0x4, 0x7, 0x8, 0x9}, {0x10001, 0x7, 0xffffff8a, 0x6, 0xfee6, 0x40}, {0x6, 0x240000, 0xffffffff, 0x660a, 0x7, 0x4}, {0x0, 0x10, 0x1000000, 0x2, 0x4, 0x5}, {0x8, 0x7ff, 0x9, 0x1, 0x4, 0x7}, {0x7, 0x80000000, 0xa, 0xf, 0x49, 0xfffffff8}, {0xfffffff9, 0x3, 0x10000, 0x0, 0xa4, 0xff}, {0xfffff9f0, 0xfffffffe, 0x8001, 0x7, 0x9, 0x1}, {0x3, 0xd, 0x5, 0x5, 0x6, 0x6}, {0x2, 0x6, 0x3, 0x1, 0x5, 0x1}, {0xa0000000, 0x6, 0xfffff000, 0x2, 0x7, 0xcf4}, {0x400, 0x9, 0x6, 0x8, 0xc8000000, 0x6bf}, {0x0, 0x7fffffff, 0x6, 0xfffbffff, 0x0, 0x252}, {0xe1, 0x5, 0x4, 0x9, 0x2, 0x5}, {0x6, 0xfffffffc, 0xb0e, 0x5, 0x1}, {0x6, 0x1000, 0xa, 0x81, 0x5, 0x3}, {0x400, 0x4, 0xbdf, 0x5, 0x7f, 0x10001}, {0x7, 0x7, 0x7, 0x0, 0x57, 0xfff}, {0xff, 0x0, 0x10000, 0x1, 0x1, 0x2}, {0xe655, 0x5, 0x100, 0x1, 0x1, 0xfffffff9}, {0x9, 0x0, 0x101, 0x5d, 0x26da, 0x5}, {0x101, 0x400, 0x102, 0x3, 0x4, 0x7}, {0x7fff, 0x1, 0x1, 0x0, 0x3}, {0x7, 0xfffffff7, 0xf, 0x9, 0x65, 0x5}, {0xc, 0xfffffffa, 0xa14, 0x6, 0x400, 0x4}, {0x5, 0x0, 0x800, 0x1b07, 0x6, 0x1}, {0x59ab, 0x1, 0x8, 0x8, 0x5, 0x3}, {0x101, 0xa, 0x91, 0x9, 0x7ff, 0x4}, {0x5, 0x2, 0xffa, 0xb, 0x4c492f02, 0x6}, {0xffff, 0x6, 0x9, 0x9, 0x8, 0xf70}, {0x3, 0x1463, 0xfffffffa, 0x4, 0xfffffffd, 0xea}, {0x8, 0x2, 0x100009, 0x7ff, 0x1, 0x6a6c0000}, {0x2, 0x1, 0x6, 0x3, 0x16c2, 0x5d4}, {0x10000, 0x3, 0x3, 0x6, 0x8, 0x5}, {0x4, 0x0, 0xffff, 0x388, 0x5a3}, {0xb43, 0x5, 0xe0e, 0x7, 0x4f71}, {0x8000, 0x9, 0x5, 0x7ff, 0x3, 0x3}, {0x4, 0x6, 0x7, 0x6, 0x9, 0xffffffff}, {0x9, 0x1, 0x622f, 0x2, 0x2, 0x4}, {0x3, 0x4, 0x28000000, 0xfffffff3, 0xffffffff}, {0x6, 0x3, 0xf, 0x8, 0xa2, 0xfffffffd}, {0x1, 0x2cd, 0x7, 0x0, 0x4, 0x2}, {0x1000, 0x9, 0xec, 0x9, 0x3, 0xfffffff7}, {0x2, 0x8, 0x8, 0x9, 0x81, 0xfff}, {0x6, 0xd, 0x0, 0x6, 0x10, 0x4535}, {0x6, 0xffffff3c, 0x0, 0x3, 0x9, 0x9}, {0x2, 0x7, 0x1, 0x4, 0x6, 0x4}, {0xf, 0x44, 0x6, 0x7ff, 0xb55, 0x82a8}, {0x3ff, 0x788, 0x100, 0x22, 0x101, 0x8}, {0xfffffff9, 0x0, 0x5, 0xffffff0d, 0xa, 0x8000}, {0x401, 0xfffffff7, 0x2, 0x9, 0xffffff80, 0x2058}, {0x5, 0x7, 0x9, 0x1, 0x6, 0x1}, {0x5, 0x18d, 0x34, 0x4, 0x81, 0x40}, {0xfd, 0x3, 0x2, 0xfffffffd, 0x800, 0xffff}, {0x4a, 0x10001, 0x1, 0x10, 0x5, 0xd2}, {0xc7, 0x0, 0x6, 0xf, 0x7, 0xd03}, {0x4, 0x1, 0xa0be, 0x80000001, 0x0, 0x2}, {0x5, 0x3, 0x8, 0x4, 0x863b, 0xe}, {0x7f, 0x8, 0x9, 0x5, 0x1, 0x9b}, {0x3, 0x7, 0x101, 0x8, 0xee56, 0x800}, {0x6, 0x555a, 0x3a, 0x5, 0x856, 0x7fffffff}, {0x3, 0xe4f, 0x792, 0xc2, 0x3660, 0x8}, {0x7, 0x37, 0x6, 0x8, 0x0, 0x3ff}, {0x5, 0x3ff, 0x9, 0x9, 0x40000, 0x3}, {0x9, 0xd, 0x3, 0x4943, 0x7}, {0x8a3, 0x7a, 0x0, 0x68, 0x3, 0x3ff}, {0xe, 0x3, 0x9, 0x7e480816, 0x6, 0xf}, {0xfffffff8, 0x57, 0x2, 0x6, 0x9, 0x3}, {0xfffffffc, 0x5, 0x5, 0xf, 0x7fff, 0x8}, {0x7, 0x6, 0x101, 0x400, 0xd, 0x8}, {0x3, 0x3, 0x2, 0x7, 0x0, 0x9}, {0x9, 0x7, 0x3, 0x5, 0x7f, 0x7c}, {0x5, 0x40, 0x67, 0x99ad, 0x1, 0x40}, {0xef9, 0x1, 0x9, 0x2, 0x10, 0x6}, {0x122b, 0xd6f, 0x0, 0x6, 0x401, 0x4a}, {0xffffff01, 0x7, 0x6, 0x9, 0x6, 0x3}, {0x5, 0x7, 0xfffffff9, 0x7, 0xed6, 0x3}, {0x6, 0x94, 0x5, 0xb, 0x1, 0xc56}, {0x6, 0x0, 0x9, 0x9, 0x0, 0x7fffffff}, {0x3, 0xf16, 0x1, 0x4, 0x4, 0x6}, {0x5, 0xffffff56, 0xa0, 0xb, 0x101, 0x4}, {0x1, 0x15, 0x34000000, 0x4, 0x6, 0x8}, {0x1, 0xfffffffe, 0x4, 0x1c, 0x1, 0x2}, {0x401, 0x1, 0x2, 0x7, 0x0, 0x2}, {0x9, 0x9, 0x7fffffff, 0x2, 0x5, 0x4}, {0x4, 0x8, 0x8, 0x75, 0xc, 0x2c3}, {0x3, 0x9, 0xffffffff, 0x6, 0x7, 0x400}, {0x66, 0xd, 0x1, 0x5, 0x9, 0x3}, {0x40, 0xb, 0xd79e, 0x8, 0x0, 0x1070}, {0xfff, 0xdb, 0xbaa, 0x8, 0x3ff, 0x7}, {0x7, 0x9c, 0x1ff, 0x1, 0xfffffe00, 0x400}, {0x7, 0x3, 0x0, 0x100, 0x7, 0xff}], [{0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x3}, {0x4}, {0x5}, {0x2}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x4}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x4}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}]}}]}, {0xd6, 0x6, "c047df94f0309735546eacb41fc978c3f5582e286db0b0bea55ef0957292f14ed416052a7c658d363cd8c296906024845aae3e396d30028fe6783500ca90d946c8489e8b8f0fcfe7b0e2c45314c84590a3340f3d461b066d472490bad5697cc3861110bd3b65ded4e7e23d088fd79e0d5639312b2bed0b3b3e20a3f882cf0cc7872486e9496e1498555e59e05857ac2bb908d52fcdd4a8d449f0e4cb89fa02645fa5307299dafcafdb27ee73ad04d0596a19532bc570937f40288eed63d1211c283c5f8f9299c3057b80100bb0f5df5b859e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x177c}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chown(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000002680)) tkill(r5, 0xb) 3.375134264s ago: executing program 1 (id=3433): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7050000080000008500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x4161, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000000)={0x1, 0x1, 0x6, 0xfffffff0, 0xc, 0x6873, 0x200, 0xb45, 0x6, 0x1428, 0x6, 0x2}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.317930323s ago: executing program 2 (id=3434): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 3.228347123s ago: executing program 3 (id=3435): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xf9, 0x0}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) signalfd4(r2, &(0x7f0000000180)={[0x5]}, 0x8, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000014000780080008400000106d080006400000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000540)) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x1b, 0xc0, &(0x7f00000010c0)}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e242a03000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 2.968008062s ago: executing program 4 (id=3436): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @empty}}, 0xff0b, 0x9}, &(0x7f00000000c0)=0x90) 2.176519199s ago: executing program 3 (id=3437): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956", 0x15}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2.155547149s ago: executing program 1 (id=3438): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005200)=[{{&(0x7f0000000380)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/214, 0xd6}], 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/31, 0x1f}, {&(0x7f0000003dc0)=""/110, 0x6e}], 0x3}, 0x7f}, {{&(0x7f00000005c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000002a00)=""/201, 0xc9}, 0xfffffff9}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b00)=""/133, 0x85}, {&(0x7f0000002bc0)=""/175, 0xaf}], 0x2, &(0x7f0000002cc0)=""/33, 0x21}, 0x9b4}, {{&(0x7f0000002d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000005100)=[{&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000005300)=""/249, 0xf9}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/181, 0xb5}, {&(0x7f0000004f40)=""/71, 0x47}, {&(0x7f0000004fc0)=""/230, 0xe6}, {&(0x7f00000050c0)=""/38, 0x26}], 0x7, &(0x7f0000005140)=""/144, 0x90}, 0x3}], 0x5, 0x8100, &(0x7f00000052c0)={0x0, 0x989680}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 2.118694419s ago: executing program 4 (id=3439): socket(0xa, 0x40000000002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x14) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40000002, 0x0) keyctl$session_to_parent(0x12) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) 2.117968888s ago: executing program 2 (id=3440): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x24, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@generic={0x5, 0x2, 0x7, 0x363, 0x8}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) 913.914784ms ago: executing program 2 (id=3441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000776605a6c7a684f8e9ed2c63f006ee2949d7b6bc045793ce679f6dd6dbac26d9c378ac83397c69a82c2627b576a59cf0d85297c7ddacf2789998e29a61deee1aba942dc1cbb37faa24dcb4746d22cd2bb0ed6711bc1e92d6b2ecab97aa27c2c125b21b41780d1f9a5ce2db3517fdf22f68dfc5f17769b2d41d205ccba1ad5b38", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r2, 0x80000, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0xffffffffffffffff]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, &(0x7f00000001c0), &(0x7f0000000380)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000ffe"], 0x44}}, 0x0) 894.312074ms ago: executing program 1 (id=3442): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514", 0x21}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 579.894972ms ago: executing program 4 (id=3443): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xde8c6896c25bb3e}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) 550.561872ms ago: executing program 3 (id=3444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffde, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 135.501371ms ago: executing program 0 (id=3445): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) 0s ago: executing program 0 (id=3446): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x529, &(0x7f00000008c0)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZ5n1h7ofwf79pHf3nXd253nejXf2nY/MBHBuPRcRr0fEXES8EBGLZXtaljjol/x1H95/Zz0vefObf00iKdsiiuoDl8q3zfefKnX39m+ttdutnXK62du+0+zu7V/b2l7bbG22bq+sLL+8+srqS6vXx9LPvF+vfu2PP/zeT7/+6q+++Pbvbvz56nfypL9azh/0a3yKTy8+KB7r+WfxQC0idsYbbGbmyv7UZ50IAAAnko9SPxURnyvG/4sxV4zmCsNDuvnpZwcAAACMQ/baQvwricgAAACAM+u1iFiIJG2U5wIsRJo2Gv1zeD8Tj6XtTrf3hZud3dsb+byIpainN7farevlObVLUU/y6eWi/tH0i0PTKxHxRET8YPFiMd1Y77Q3Zr3zAwAAAM6JS0Pb//9Y7G//AwAAAGfM0qwTAAAAACZu1PZ/MuU8AAAAgMlx/B8AAADOtG+88UZessH9rzfe2tu91Xnr2kare6uxvbveWO/s3GlsdjqbxTX7to9aVj0i2p3OnS9F7N5t9lrdXrO7t39ju7N7u3djy/0DAQAAYFaeePa9D5KIOPjyxaLkLuQPcyPe4FwBODPS07z4D5PLA5i+UT/zJ3BhnHkA01ebdQLA7BzMOgFg1h661EfFoODwyTsP7TP49eRyAgAAxuvKZ6uP/9fK8/mBs+tUx/+BM+VjHP8H/s85/g/nV/1UI4B7E8wEmJXjbvUx8uIdVcf/K88MzrJjlwUAAEzUQlGeTRvlscCFSNNGI+Lx4r/615ObW+3W9Yj4ZET8drH+iXx6uXhn4vaAAAAAAAAAAAAAAAAAAAAAAAAAAHBCWZZEBgAAAJxpEemfkvL+X1cWLy8M7x+4kPxzMcpber394zd/dHet19tZztv/9qC9927Z/uIs9mAAAADAeVQ7cu5gO32wHQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4/Th/XfWB2Wacf/ylYhYqopfi/nieT7qEfHY35OoHXpfEhFzY4h/cC8inqyKn+RpxVKZxXD8NCIuTif+01mWVca/NIb4cJ69l69/Xq/6/qXxXPFc/f2vleXjemj9d+EXh+akD9Z/cyPWf4+fMMZT7/+8OTL+vYinatXrn0H8ZET856sWWPGhfPtb+/v/09hfeGQ/ibhS+fuTPBSr2du+0+zu7V/b2l7bbG22bq+sLL+8+srqS6vXmze32q3ysbKP33/6l/8Zavp31lf0P0bEXzqm/5fzSv1QYzYcpgz2/t37n+5X60OLKOJffb767+/JI+LnfxOfL38H8vlXBvWDfv2wZ372m2cqEyvjb4zo/3H//ldHLXTIC9/87u9P+FIAYAq6e/u31trt1s7EK+9mWTatWCevRHrSFxfDxal+YtOtDEZ3Ewsx/6j0dMqVy49GGqepjGPPFgAA8Kj5aNA/60wAAAAAAAAAAAAAAAAAAADg/OruRTrpy4kNxzyYTVcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI703wAAAP//4wvZIQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000040)='./file1\x00', 0x64941, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pwrite64(r1, &(0x7f0000000740)=' ', 0x1, 0x9) kernel console output (not intermixed with test programs): p2): unmounting filesystem. [ 925.863703][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 925.863720][ T27] audit: type=1326 audit(1734321718.396:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 925.977372][ T27] audit: type=1326 audit(1734321718.446:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 926.050460][T13813] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 926.050460][T13813] program +}[@ not setting count and/or reply_len properly [ 926.082359][ T27] audit: type=1326 audit(1734321718.446:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 926.158357][ T27] audit: type=1326 audit(1734321718.496:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 926.251911][ T27] audit: type=1326 audit(1734321718.496:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 926.276181][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'. [ 927.611270][ T128] libceph: connect (1)[c::]:6789 error -101 [ 927.624235][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 927.775221][T13840] ceph: No mds server is up or the cluster is laggy [ 927.844951][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2692'. [ 927.886687][T13851] device bridge0 entered promiscuous mode [ 927.934234][T13851] device macvtap1 entered promiscuous mode [ 927.968232][T13856] device bridge0 left promiscuous mode [ 927.970683][T13849] loop2: detected capacity change from 0 to 2048 [ 929.247384][T13867] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 929.247384][T13867] program +}[@ not setting count and/or reply_len properly [ 931.395771][ T1276] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.406677][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.414041][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.854679][ T27] audit: type=1326 audit(1734321724.396:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 931.926132][ T27] audit: type=1326 audit(1734321724.416:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.012359][T13907] loop1: detected capacity change from 0 to 512 [ 932.026317][ T27] audit: type=1326 audit(1734321724.416:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.123493][T13907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 932.137518][T13907] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 932.281849][T13914] loop4: detected capacity change from 0 to 256 [ 932.403871][ T27] audit: type=1326 audit(1734321724.416:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.464048][ T27] audit: type=1326 audit(1734321724.416:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.464091][ T27] audit: type=1326 audit(1734321724.416:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.464130][ T27] audit: type=1326 audit(1734321724.416:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.464166][ T27] audit: type=1326 audit(1734321724.416:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.464210][ T27] audit: type=1326 audit(1734321724.456:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.464246][ T27] audit: type=1326 audit(1734321724.456:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.4.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 932.778082][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 933.396097][T13918] infiniband syz1: set active [ 933.460108][T13918] infiniband syz1: added bond_slave_1 [ 933.514293][T13918] rdma_rxe: unable to create cq [ 933.519868][T13918] infiniband syz1: Couldn't create ib_mad CQ [ 933.564382][T13918] infiniband syz1: Couldn't open port 1 [ 933.761355][T13918] RDS/IB: syz1: added [ 933.791994][T13918] smc: adding ib device syz1 with port count 1 [ 933.822507][T13918] smc: ib device syz1 port 1 has pnetid [ 934.068662][T13900] libceph: connect (1)[c::]:6789 error -101 [ 934.120648][T13900] libceph: mon0 (1)[c::]:6789 connect error [ 934.209398][T13939] ceph: No mds server is up or the cluster is laggy [ 934.386842][T13950] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 934.386842][T13950] program +}[@ not setting count and/or reply_len properly [ 935.723691][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 935.733467][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 935.878674][T13981] loop3: detected capacity change from 0 to 2048 [ 936.084261][T13981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 936.291488][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 936.302109][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 936.309160][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 936.314035][T13969] ceph: No mds server is up or the cluster is laggy [ 936.625538][T13993] loop2: detected capacity change from 0 to 512 [ 936.666809][ T5403] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 937.207641][T14007] loop2: detected capacity change from 0 to 256 [ 937.335185][T14007] rdma_rxe: rxe_register_device failed with error -23 [ 937.361637][T14007] rdma_rxe: failed to add bond_slave_1 [ 938.129933][T14017] loop4: detected capacity change from 0 to 2048 [ 938.400330][T14017] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 938.496111][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 940.563938][ T4297] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 940.734064][ T4297] usb 4-1: device descriptor read/64, error -71 [ 941.004789][ T4297] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 941.042161][ T22] libceph: connect (1)[c::]:6789 error -101 [ 941.053207][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 941.119804][ T22] libceph: connect (1)[c::]:6789 error -101 [ 941.135983][T14078] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 941.135983][T14078] program +}[@ not setting count and/or reply_len properly [ 941.139125][T14071] ceph: No mds server is up or the cluster is laggy [ 941.186157][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 941.203960][ T4297] usb 4-1: device descriptor read/64, error -71 [ 941.287995][T14066] ceph: No mds server is up or the cluster is laggy [ 941.334129][ T4297] usb usb4-port1: attempt power cycle [ 941.470091][ T128] libceph: connect (1)[c::]:6789 error -101 [ 941.483957][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 941.763865][ T4297] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 941.816971][ T4297] usb 4-1: device descriptor read/8, error -71 [ 942.104053][ T4297] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 942.154667][ T4297] usb 4-1: device descriptor read/8, error -71 [ 942.369214][ T4297] usb usb4-port1: unable to enumerate USB device [ 942.967455][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 942.967473][ T27] audit: type=1326 audit(1734321735.496:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.009595][ T27] audit: type=1326 audit(1734321735.496:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.045357][ T27] audit: type=1326 audit(1734321735.496:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.076096][ T27] audit: type=1326 audit(1734321735.496:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.121317][ T27] audit: type=1326 audit(1734321735.496:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.210373][ T27] audit: type=1326 audit(1734321735.496:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.347663][ T27] audit: type=1326 audit(1734321735.496:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.375763][T14098] loop4: detected capacity change from 0 to 2048 [ 943.511863][T14098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 943.521106][ T27] audit: type=1326 audit(1734321735.496:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.591464][ T27] audit: type=1326 audit(1734321735.496:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.693511][ T27] audit: type=1326 audit(1734321735.496:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.2.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9ef85d19 code=0x7ffc0000 [ 943.827932][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 944.071356][T14112] loop3: detected capacity change from 0 to 128 [ 944.140495][T14112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 944.222479][T14112] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 944.228820][T14119] loop2: detected capacity change from 0 to 512 [ 944.255340][T14119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 944.365108][T14119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 944.398614][T14119] ext4 filesystem being mounted at /583/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.964840][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 944.989254][T14136] ebtables: ebtables: counters copy to user failed while replacing table [ 945.154188][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 946.698818][T14153] ceph: No mds server is up or the cluster is laggy [ 946.706885][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 946.712916][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 946.982283][ T22] libceph: connect (1)[c::]:6789 error -101 [ 946.988768][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 947.738907][T14170] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 947.738907][T14170] program +}[@ not setting count and/or reply_len properly [ 947.856225][T14174] loop3: detected capacity change from 0 to 512 [ 947.866004][T14174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 948.018952][T14174] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 948.076178][T14174] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.655696][T14185] ebtables: ebtables: counters copy to user failed while replacing table [ 948.946940][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 949.039558][T14201] loop1: detected capacity change from 0 to 128 [ 949.110057][T14201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 949.180321][T14201] ext4 filesystem being mounted at /571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 949.310422][T14201] EXT4-fs warning (device loop1): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 949.477194][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 949.834339][T14212] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 949.834339][T14212] program +}[@ not setting count and/or reply_len properly [ 950.326868][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 950.380419][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 950.700154][T14226] ceph: No mds server is up or the cluster is laggy [ 951.082169][T14235] loop2: detected capacity change from 0 to 2048 [ 951.197198][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 951.197215][ T27] audit: type=1326 audit(1734321743.736:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14237 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 951.450188][ T27] audit: type=1326 audit(1734321743.776:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14237 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 951.580761][T14235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 952.053844][ T27] audit: type=1326 audit(1734321743.776:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14237 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 952.200499][ T4256] EXT4-fs (loop2): unmounting filesystem. [ 952.212734][ T27] audit: type=1326 audit(1734321743.776:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14237 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 952.300625][ T27] audit: type=1326 audit(1734321743.786:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14237 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 952.706695][T14261] netlink: 'syz.3.2819': attribute type 153 has an invalid length. [ 952.786079][ T22] libceph: connect (1)[c::]:6789 error -101 [ 953.038552][ T27] audit: type=1326 audit(1734321745.576:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14267 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 953.133308][ T27] audit: type=1326 audit(1734321745.606:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14267 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 953.329105][ T27] audit: type=1326 audit(1734321745.606:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14267 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 953.399928][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 953.418496][ T27] audit: type=1326 audit(1734321745.606:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14267 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 953.463863][ T27] audit: type=1326 audit(1734321745.616:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14267 comm="syz.3.2820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f208f385d19 code=0x7ffc0000 [ 953.524007][T14255] ceph: No mds server is up or the cluster is laggy [ 953.673359][T14276] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 953.673359][T14276] program +}[@ not setting count and/or reply_len properly [ 953.694223][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 953.700274][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 954.164159][T14283] loop3: detected capacity change from 0 to 2048 [ 954.301360][T14283] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 955.104804][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 955.787494][T14305] loop1: detected capacity change from 0 to 512 [ 955.804480][T14305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 955.909804][T14305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 955.965025][T14305] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.147673][T14313] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 956.307193][T14313] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 956.323307][T14315] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 956.323307][T14315] program +}[@ not setting count and/or reply_len properly [ 956.613569][T14316] ebtables: ebtables: counters copy to user failed while replacing table [ 956.843574][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 957.179234][T14333] loop1: detected capacity change from 0 to 2048 [ 957.237024][T14333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 957.481481][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 957.880015][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 957.880033][ T27] audit: type=1326 audit(1734321750.416:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 957.963926][ T27] audit: type=1326 audit(1734321750.416:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.043314][ T27] audit: type=1326 audit(1734321750.466:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.113583][ T27] audit: type=1326 audit(1734321750.466:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.196310][ T27] audit: type=1326 audit(1734321750.466:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.259780][ T27] audit: type=1326 audit(1734321750.466:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.303306][ T27] audit: type=1326 audit(1734321750.466:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.364926][ T27] audit: type=1326 audit(1734321750.466:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.377280][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 958.449977][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 958.466037][ T27] audit: type=1326 audit(1734321750.466:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.549709][ T27] audit: type=1326 audit(1734321750.466:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14342 comm="syz.1.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b85d19 code=0x7ffc0000 [ 958.620570][T14346] ceph: No mds server is up or the cluster is laggy [ 959.806881][T14365] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 959.806881][T14365] program +}[@ not setting count and/or reply_len properly [ 959.850468][T14367] loop4: detected capacity change from 0 to 512 [ 959.934525][T14367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 960.071104][T14367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 960.114040][T14367] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.564628][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2856'. [ 960.722962][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 960.762832][T14386] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 961.404532][T14401] loop4: detected capacity change from 0 to 512 [ 961.412208][T14401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 961.467400][T14401] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 961.475641][T14401] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 961.509042][T14401] EXT4-fs (loop4): 1 truncate cleaned up [ 961.549297][T14401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 961.776528][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 962.178773][T14405] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 962.178773][T14405] program +}[@ not setting count and/or reply_len properly [ 962.612717][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 962.714829][T14413] loop4: detected capacity change from 0 to 128 [ 963.188435][T14418] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 963.202250][T14418] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 963.213250][T14418] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 963.239620][T14418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 963.252985][T14418] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 963.262052][T14418] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 963.405813][ T4415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.558099][ T6532] kworker/u4:27: attempt to access beyond end of device [ 963.558099][ T6532] loop4: rw=1, sector=145, nr_sectors = 320 limit=128 [ 963.601454][ T4415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.757014][ T4415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.929499][ T4415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.179677][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 964.179696][ T27] audit: type=1326 audit(1734321756.706:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 964.331717][ T27] audit: type=1326 audit(1734321756.706:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 964.493458][ T27] audit: type=1326 audit(1734321756.766:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 964.692184][ T27] audit: type=1326 audit(1734321756.766:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 964.716960][ T27] audit: type=1326 audit(1734321756.766:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 964.761301][T14439] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 964.761301][T14439] program +}[@ not setting count and/or reply_len properly [ 964.914170][ T27] audit: type=1326 audit(1734321756.786:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 964.980788][ T27] audit: type=1326 audit(1734321756.786:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 965.033958][ T27] audit: type=1326 audit(1734321756.786:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 965.151517][ T27] audit: type=1326 audit(1734321756.806:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 965.219067][ T27] audit: type=1326 audit(1734321756.806:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14434 comm="syz.4.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb252585d19 code=0x7ffc0000 [ 965.304082][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 965.307899][T14417] chnl_net:caif_netlink_parms(): no params data found [ 965.330504][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 966.367583][T14489] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 966.367583][T14489] program +}[@ not setting count and/or reply_len properly [ 966.571313][T14417] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.579012][T14417] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.615586][T14417] device bridge_slave_0 entered promiscuous mode [ 966.737406][T14417] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.752756][T14417] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.782068][T14502] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.2895' sets config #-1 [ 966.789310][T14501] loop3: detected capacity change from 0 to 1024 [ 966.799911][T14417] device bridge_slave_1 entered promiscuous mode [ 966.915163][T14501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 967.020759][T14417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.130466][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 967.130741][T14417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.394188][T14418] Bluetooth: hci1: command 0x041b tx timeout [ 967.481364][T14524] loop3: detected capacity change from 0 to 512 [ 967.517828][T14524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 967.580858][T14417] team0: Port device team_slave_0 added [ 967.638249][T14524] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 967.666985][T14417] team0: Port device team_slave_1 added [ 967.703176][T14524] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.882805][T14530] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 967.882805][T14530] program syz.0.2904 not setting count and/or reply_len properly [ 968.064063][T14417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.081265][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.158513][T14417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.414310][T14417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.430635][T14417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.531162][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 968.583419][T14417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.856807][T14417] device hsr_slave_0 entered promiscuous mode [ 968.882274][T14417] device hsr_slave_1 entered promiscuous mode [ 968.910266][T14417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.939337][T14417] Cannot create hsr debugfs directory [ 968.994840][ T4415] device hsr_slave_0 left promiscuous mode [ 969.016822][ T4415] device hsr_slave_1 left promiscuous mode [ 969.053397][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.072461][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.097731][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.119835][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.154108][ T4415] device bridge_slave_1 left promiscuous mode [ 969.162385][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.204545][ T4415] device bridge_slave_0 left promiscuous mode [ 969.210869][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.359640][ T4415] device veth1_macvtap left promiscuous mode [ 969.373454][ T4415] device veth0_macvtap left promiscuous mode [ 969.464121][T14418] Bluetooth: hci1: command 0x040f tx timeout [ 970.343024][T14579] loop3: detected capacity change from 0 to 512 [ 970.394010][T14579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 970.480701][T14579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 970.499458][T14579] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.192612][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 971.380330][ T4415] team0 (unregistering): Port device team_slave_1 removed [ 971.423407][ T4415] team0 (unregistering): Port device team_slave_0 removed [ 971.544153][T14418] Bluetooth: hci1: command 0x0419 tx timeout [ 973.131386][T14615] loop4: detected capacity change from 0 to 512 [ 973.259337][T14615] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 973.448050][T14615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 973.483996][T14615] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 973.537727][ T26] libceph: connect (1)[c::]:6789 error -101 [ 973.548698][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 974.974221][T14617] ceph: No mds server is up or the cluster is laggy [ 974.982781][ T26] libceph: connect (1)[c::]:6789 error -101 [ 974.990410][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 975.371674][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 975.393216][T14417] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 975.443353][T14417] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 975.514642][T14417] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 975.573262][T14417] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 975.624871][T14643] loop1: detected capacity change from 0 to 2048 [ 975.705676][T14643] Alternate GPT is invalid, using primary GPT. [ 975.745532][T14643] loop1: p2 p3 p7 [ 975.807175][T14643] usb usb4: usbfs: process 14643 (syz.1.2937) did not claim interface 0 before use [ 975.854655][T14643] usb usb4: usbfs: process 14643 (syz.1.2937) did not claim interface 0 before use [ 975.934647][T14417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.983897][T14417] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.002489][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 976.060182][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 976.091343][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 976.135098][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 976.154660][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.162885][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.186509][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 976.233514][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 976.242622][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 976.261519][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.268719][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.283299][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 976.324428][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 976.341580][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 976.392073][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 976.420832][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 976.452480][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 976.499384][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 976.523307][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 976.551091][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 976.721649][T14417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.734036][T14417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 976.782091][T14660] device syzkaller0 entered promiscuous mode [ 976.804041][ T14] libceph: connect (1)[c::]:6789 error -101 [ 976.810602][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 976.830802][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 976.838136][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 976.863012][T14669] loop3: detected capacity change from 0 to 512 [ 976.879968][T14669] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 976.916359][T14669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 976.925683][T14669] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.104448][ T4296] libceph: connect (1)[c::]:6789 error -101 [ 977.124039][ T4296] libceph: mon0 (1)[c::]:6789 connect error [ 977.345192][T14664] ceph: No mds server is up or the cluster is laggy [ 978.309818][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 979.255555][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'. [ 979.344996][T14692] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 979.602885][T14697] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 979.602885][T14697] program +}[@ not setting count and/or reply_len properly [ 979.988659][ T7] libceph: connect (1)[c::]:6789 error -101 [ 979.996108][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 980.269568][ T7] libceph: connect (1)[c::]:6789 error -101 [ 980.275945][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 980.532529][T14700] ceph: No mds server is up or the cluster is laggy [ 980.582329][T14708] loop4: detected capacity change from 0 to 512 [ 980.617399][T14708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 980.777556][T14708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 980.823066][T14708] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.994731][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 981.018263][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 981.090216][T14417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.129854][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 981.173288][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 982.084942][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 982.106617][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 982.129761][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 982.164671][T14417] device veth0_vlan entered promiscuous mode [ 982.172555][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 982.220206][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 982.259789][T14417] device veth1_vlan entered promiscuous mode [ 982.554707][T14748] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 982.554707][T14748] program +}[@ not setting count and/or reply_len properly [ 982.901165][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 982.950365][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 983.079937][T14754] device syzkaller0 entered promiscuous mode [ 983.093624][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 983.093641][ T27] audit: type=1326 audit(1734321775.626:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff311585d19 code=0x7ffc0000 [ 983.126950][T14417] device veth0_macvtap entered promiscuous mode [ 983.154115][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 983.176755][ T27] audit: type=1326 audit(1734321775.676:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff311585d19 code=0x7ffc0000 [ 983.208258][ T27] audit: type=1326 audit(1734321775.676:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.0.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff311585d19 code=0x7ffc0000 [ 983.234937][ T27] audit: type=1326 audit(1734321775.676:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14758 comm="syz.0.2969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff311585d19 code=0x0 [ 983.906901][ T7] libceph: connect (1)[c::]:6789 error -101 [ 983.914072][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 984.042018][T14764] ceph: No mds server is up or the cluster is laggy [ 984.427271][ T26] libceph: connect (1)[c::]:6789 error -101 [ 984.439410][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 984.530819][T14771] ceph: No mds server is up or the cluster is laggy [ 985.008702][T14777] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.2972'. [ 985.892096][T14417] device veth1_macvtap entered promiscuous mode [ 986.067418][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.113948][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.166319][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.220055][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.256894][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.320084][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.344364][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 986.389575][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.427376][T14417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.454263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 986.494427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 986.517115][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.538001][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.558961][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.603300][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.644080][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.694829][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.745634][T14417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 986.860108][T14417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 986.955669][T14417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.031599][T14417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.084029][T14417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.123890][T14417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.144057][T14417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.308753][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 987.347723][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 987.622705][ T4813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.643705][ T4813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.712319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 987.740816][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.786852][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.849352][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 988.244491][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 988.250548][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 988.409166][T14837] ceph: No mds server is up or the cluster is laggy [ 988.519930][T14845] device syzkaller0 entered promiscuous mode [ 988.544280][ T22] libceph: connect (1)[c::]:6789 error -101 [ 988.551106][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 989.312338][T14418] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 989.342191][T14418] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 989.386201][T14418] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 989.406532][T14418] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 989.416616][T14418] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 989.436894][T14418] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 991.465940][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 991.719629][T14868] tipc: Enabling of bearer rejected, failed to enable media [ 991.760642][T14869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2993'. [ 991.972929][T14876] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 991.972929][T14876] program +}[@ not setting count and/or reply_len properly [ 992.142325][T14884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2997'. [ 992.681969][T14853] chnl_net:caif_netlink_parms(): no params data found [ 992.825904][ T1276] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 992.835187][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.841501][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.088824][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.121888][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.159735][T14853] device bridge_slave_0 entered promiscuous mode [ 993.192664][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.219924][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.248801][T14853] device bridge_slave_1 entered promiscuous mode [ 993.274792][ T26] libceph: connect (1)[c::]:6789 error -101 [ 993.284429][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 993.378655][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.434195][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.474594][T14915] ceph: No mds server is up or the cluster is laggy [ 993.543942][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 993.674597][T14853] team0: Port device team_slave_0 added [ 993.728178][T14853] team0: Port device team_slave_1 added [ 993.736202][ T128] libceph: connect (1)[c::]:6789 error -101 [ 993.743235][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 993.912977][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.956980][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.110373][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.301224][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.332012][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.404222][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.526243][T14933] device syzkaller0 entered promiscuous mode [ 995.538562][T14946] loop4: detected capacity change from 0 to 1024 [ 995.547543][T14946] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 995.556331][T14946] EXT4-fs (loop4): write access will be enabled during recovery [ 995.565110][T14946] JBD2: no valid journal superblock found [ 995.589103][T14946] EXT4-fs (loop4): error loading journal [ 995.639541][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 995.895075][T14948] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 995.895075][T14948] program +}[@ not setting count and/or reply_len properly [ 997.704048][ T4264] Bluetooth: hci0: command 0x0419 tx timeout [ 998.284402][T14853] device hsr_slave_0 entered promiscuous mode [ 998.304266][T14853] device hsr_slave_1 entered promiscuous mode [ 998.403135][T14958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3012'. [ 999.461940][T14853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.713960][T14853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.906716][T14853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.013715][T14980] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1000.013715][T14980] program +}[@ not setting count and/or reply_len properly [ 1000.096530][T14853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.370769][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 1000.396037][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 1000.418464][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 1000.431523][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 1000.440433][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.448496][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.456406][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.464218][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.472027][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.479925][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.488129][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.495964][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.504015][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.511805][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.533284][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.535128][T14853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1000.552253][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.564547][T14981] ceph: No mds server is up or the cluster is laggy [ 1000.571297][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.595752][ T7] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1000.617677][T14853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1000.638894][ T7] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 1000.652833][T14853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1000.691873][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1000.700813][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1000.755996][T14853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1000.989225][T14853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.053898][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1001.072218][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1001.099930][T14853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.134911][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1001.162131][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1001.184731][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.191929][ T6520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.221711][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1001.256238][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1001.281034][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1001.317784][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.325013][ T6520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.393828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1001.425288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1001.455248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1001.494193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1001.545237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1001.564802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1001.581259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1001.673403][T14993] device syzkaller0 entered promiscuous mode [ 1001.692727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1001.710104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1001.762063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1001.771069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1001.820575][T14853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1001.882283][T15002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3025'. [ 1003.862395][T15020] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1003.862395][T15020] program +}[@ not setting count and/or reply_len properly [ 1006.561230][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1006.590232][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1006.739855][T14853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.820417][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1006.862603][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1006.951396][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1006.970275][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1007.005327][T14853] device veth0_vlan entered promiscuous mode [ 1007.019622][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1007.048561][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1007.100280][T14853] device veth1_vlan entered promiscuous mode [ 1007.200097][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1007.220320][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1007.255672][T14853] device veth0_macvtap entered promiscuous mode [ 1007.296875][T14853] device veth1_macvtap entered promiscuous mode [ 1007.400082][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.441454][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.481113][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.496706][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.534096][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.545565][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.555753][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.566588][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.576750][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1007.587696][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.600345][T14853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.617714][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.628629][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.636884][ T14] libceph: connect (1)[c::]:6789 error -101 [ 1007.638752][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.657183][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.659236][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 1007.667288][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.683596][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.693592][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.732749][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.764973][T15046] ceph: No mds server is up or the cluster is laggy [ 1007.791121][T14853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.830865][T14853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.886561][T14853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.908502][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1007.942724][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1007.969599][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1007.984813][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1008.004476][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1008.022267][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1008.048243][T14853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.064198][T14853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.084542][T14853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.103238][T14853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.296243][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.321746][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.352584][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1008.413692][ T6520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.431355][ T6520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.459636][ T6525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1008.726422][T15061] loop3: detected capacity change from 0 to 512 [ 1008.744447][T15061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1008.835066][ T27] audit: type=1326 audit(1734321801.376:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1008.862342][T15063] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1008.895911][ T27] audit: type=1326 audit(1734321801.376:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1008.904067][T15063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.969127][T15063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.993094][T15063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.012179][T15063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.087242][T15061] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1009.129205][ T27] audit: type=1326 audit(1734321801.376:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1009.146978][T15061] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.152033][ T27] audit: type=1326 audit(1734321801.376:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1009.298938][T15071] Process accounting resumed [ 1009.376679][T15071] loop4: detected capacity change from 0 to 512 [ 1009.419156][T15071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1009.561940][ T27] audit: type=1326 audit(1734321801.376:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1009.567295][T15071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1009.584513][ T27] audit: type=1326 audit(1734321801.376:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafbf3847cf code=0x7ffc0000 [ 1009.618550][T15071] ext4 filesystem being mounted at /595/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.623168][ T27] audit: type=1326 audit(1734321801.376:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1009.665004][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1009.779180][ T27] audit: type=1326 audit(1734321801.376:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1009.813706][ T27] audit: type=1326 audit(1734321801.376:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1009.883938][ T27] audit: type=1326 audit(1734321801.376:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.2.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafbf385d19 code=0x7ffc0000 [ 1010.042876][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 1010.064909][ T4260] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1010.082794][ T4260] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1010.091388][ T4260] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1010.112276][T15081] loop3: detected capacity change from 0 to 256 [ 1010.126410][ T4260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1010.134342][ T4260] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1010.141672][ T4260] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1010.253515][T15081] FAT-fs (loop3): Directory bread(block 64) failed [ 1010.467273][ T6525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.480348][T15081] FAT-fs (loop3): Directory bread(block 65) failed [ 1010.487597][T15081] FAT-fs (loop3): Directory bread(block 66) failed [ 1010.494280][T15081] FAT-fs (loop3): Directory bread(block 67) failed [ 1010.501176][T15081] FAT-fs (loop3): Directory bread(block 68) failed [ 1010.507904][T15081] FAT-fs (loop3): Directory bread(block 69) failed [ 1010.514679][T15081] FAT-fs (loop3): Directory bread(block 70) failed [ 1010.521876][T15081] FAT-fs (loop3): Directory bread(block 71) failed [ 1010.528569][T15081] FAT-fs (loop3): Directory bread(block 72) failed [ 1010.536893][T15081] FAT-fs (loop3): Directory bread(block 73) failed [ 1010.709337][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1010.718644][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1010.722203][T15081] syz.3.3045: attempt to access beyond end of device [ 1010.722203][T15081] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 1010.798999][ T6525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.811784][T15081] syz.3.3045: attempt to access beyond end of device [ 1010.811784][T15081] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 1010.952373][ T6525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.994537][ T128] libceph: connect (1)[c::]:6789 error -101 [ 1011.001733][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 1011.049330][ T6525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.050809][T15102] loop3: detected capacity change from 0 to 512 [ 1011.067707][T15102] ext4: Unknown parameter 'smackfsroot' [ 1011.114704][ T5403] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1011.128480][T15089] ceph: No mds server is up or the cluster is laggy [ 1011.225414][T15102] loop3: detected capacity change from 0 to 512 [ 1011.254875][T15078] chnl_net:caif_netlink_parms(): no params data found [ 1011.532489][T15102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1011.609923][T15102] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.111214][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1012.194495][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 1012.245629][T15078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.293319][T15078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.361945][T15078] device bridge_slave_0 entered promiscuous mode [ 1012.559745][T15078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.574027][T15078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.614303][T15078] device bridge_slave_1 entered promiscuous mode [ 1012.888072][T15078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.307166][T15078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.652903][T15078] team0: Port device team_slave_0 added [ 1013.863303][T15159] device syzkaller0 entered promiscuous mode [ 1013.876987][T15078] team0: Port device team_slave_1 added [ 1014.069231][ T128] libceph: connect (1)[c::]:6789 error -101 [ 1014.078722][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 1014.150865][T15163] ceph: No mds server is up or the cluster is laggy [ 1014.270344][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 1015.199920][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1015.208329][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1015.489453][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1015.495831][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1015.635381][T15172] ceph: No mds server is up or the cluster is laggy [ 1016.350236][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 1017.781891][T15078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.798622][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.859598][T15078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.901519][T15078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.956383][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.043906][T15078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.292178][T15192] loop3: detected capacity change from 0 to 512 [ 1018.345640][T15192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1018.416697][T15078] device hsr_slave_0 entered promiscuous mode [ 1018.614555][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 1018.645723][T15078] device hsr_slave_1 entered promiscuous mode [ 1018.655759][T15192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1018.684310][T15192] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.704112][T15078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.723356][T15078] Cannot create hsr debugfs directory [ 1019.525850][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1020.664980][ T6525] device hsr_slave_0 left promiscuous mode [ 1020.675824][ T6525] device hsr_slave_1 left promiscuous mode [ 1020.692572][ T6525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.702043][ T6525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.722987][ T6525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.742501][ T6525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.750869][ T6525] device bridge_slave_1 left promiscuous mode [ 1020.763958][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.785770][ T6525] device bridge_slave_0 left promiscuous mode [ 1020.792128][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.993099][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1021.001675][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1021.108927][ T6525] device veth1_macvtap left promiscuous mode [ 1021.154062][ T6525] device veth0_macvtap left promiscuous mode [ 1021.247886][T15233] ceph: No mds server is up or the cluster is laggy [ 1021.264256][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 1021.271009][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 1021.407687][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1021.434260][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1021.725479][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1021.747545][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1021.868617][T15243] ceph: No mds server is up or the cluster is laggy [ 1023.318417][ T6525] team0 (unregistering): Port device team_slave_1 removed [ 1023.371364][ T6525] team0 (unregistering): Port device team_slave_0 removed [ 1023.420004][ T6525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.466951][ T6525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1024.048865][ T6525] bond0 (unregistering): Released all slaves [ 1025.228547][T15078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1025.239222][T15078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1025.250694][T15078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1025.267003][T15078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1025.275065][T15278] loop3: detected capacity change from 0 to 512 [ 1025.284575][T15278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1025.620474][T15278] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1025.630284][T15078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.655321][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1025.663162][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.719946][T15278] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.792180][T15078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1025.869843][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1025.889757][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1025.917192][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.924426][ T6534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.973584][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1026.012689][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1026.042536][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1026.083160][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.090380][ T6520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.142868][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1026.161772][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1026.192076][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1026.193624][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1026.233198][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1026.266373][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1026.329145][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1026.359872][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1026.404948][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1026.472362][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1026.544859][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1026.580512][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1026.626018][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1027.245647][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1027.251867][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1027.294779][T15316] ceph: No mds server is up or the cluster is laggy [ 1027.428691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1027.437568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1027.461006][T15078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.521167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1027.533159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1027.577334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1027.596193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1027.665506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1027.709428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.720439][T15078] device veth0_vlan entered promiscuous mode [ 1027.751921][T15078] device veth1_vlan entered promiscuous mode [ 1027.793337][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.814745][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.823323][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.883969][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.928735][T15078] device veth0_macvtap entered promiscuous mode [ 1027.965706][T15078] device veth1_macvtap entered promiscuous mode [ 1028.037977][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.100617][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.142317][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.188824][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.240301][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.321767][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1028.369316][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1028.775719][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1029.161106][T15078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1029.204203][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1029.231023][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1029.268260][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1029.428212][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1029.926382][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1029.967750][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1030.116321][T15350] ceph: No mds server is up or the cluster is laggy [ 1030.214205][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.264081][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.280357][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.296902][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.311194][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.328077][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.343114][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.381973][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.420385][T15078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.443923][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1030.469737][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1030.848516][ T128] libceph: connect (1)[c::]:6789 error -101 [ 1030.856431][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 1030.977095][T15078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.987405][T15078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.041488][T15078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.050976][T15078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.571026][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.602602][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.707293][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1031.740162][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.760202][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.812677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1032.518835][T15403] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1032.518835][T15403] program +}[@ not setting count and/or reply_len properly [ 1033.766702][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1033.869368][T15414] ceph: No mds server is up or the cluster is laggy [ 1033.914700][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1034.243441][T15419] device syzkaller0 entered promiscuous mode [ 1034.425673][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1034.431741][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1034.463567][T15424] ceph: No mds server is up or the cluster is laggy [ 1035.907582][T15439] loop1: detected capacity change from 0 to 512 [ 1035.950479][T15439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1036.017988][T15439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1036.036051][T15439] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.211306][T15078] EXT4-fs (loop1): unmounting filesystem. [ 1036.482198][T15447] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1036.482198][T15447] program +}[@ not setting count and/or reply_len properly [ 1036.779508][ T4260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1036.791297][ T4260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1036.801503][ T4260] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1036.810197][ T4260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1036.821158][ T4260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1036.828966][ T4260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1037.896597][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1037.910696][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1038.237119][T15464] ceph: No mds server is up or the cluster is laggy [ 1038.247816][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1038.269171][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1038.912617][ T4264] Bluetooth: hci4: command 0x0409 tx timeout [ 1040.989297][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 1041.783408][ T5288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.096101][ T5288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.989448][ T5288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.038966][T15449] chnl_net:caif_netlink_parms(): no params data found [ 1043.063851][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 1043.326656][ T5288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.583618][T15449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.613692][T15449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.653105][T15449] device bridge_slave_0 entered promiscuous mode [ 1043.760248][T15449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.804411][T15449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.841361][T15449] device bridge_slave_1 entered promiscuous mode [ 1044.037625][T15449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1044.082186][T15449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.106082][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1044.112222][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1044.226217][T15514] ceph: No mds server is up or the cluster is laggy [ 1044.514808][T15449] team0: Port device team_slave_0 added [ 1044.523361][T15449] team0: Port device team_slave_1 added [ 1044.533964][T15524] loop1: detected capacity change from 0 to 512 [ 1044.584360][T15524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1044.701360][T15524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1044.733713][T15524] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.960614][T15078] EXT4-fs (loop1): unmounting filesystem. [ 1045.144022][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 1045.229956][T15449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.233146][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 1045.362786][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.432010][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 1045.439439][T15449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.496740][T15449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.504510][T15449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.690339][T15539] ceph: No mds server is up or the cluster is laggy [ 1045.708133][T15449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.785452][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1045.798854][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1046.570516][T15449] device hsr_slave_0 entered promiscuous mode [ 1046.596155][T15449] device hsr_slave_1 entered promiscuous mode [ 1046.626810][T15449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.812542][T15449] Cannot create hsr debugfs directory [ 1047.832642][T15579] loop1: detected capacity change from 0 to 512 [ 1047.881173][T15579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1048.108655][T15579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1048.194003][T15579] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1048.425612][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1048.431810][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1048.665897][T15078] EXT4-fs (loop1): unmounting filesystem. [ 1048.744653][T12833] libceph: connect (1)[c::]:6789 error -101 [ 1048.750757][T12833] libceph: mon0 (1)[c::]:6789 connect error [ 1049.053914][T15595] ceph: No mds server is up or the cluster is laggy [ 1049.089705][ T5288] device hsr_slave_0 left promiscuous mode [ 1050.021783][ T5288] device hsr_slave_1 left promiscuous mode [ 1050.062105][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1050.080706][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1050.121385][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1050.153851][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.163631][ T5288] device bridge_slave_1 left promiscuous mode [ 1050.185323][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.194195][ T5288] device bridge_slave_0 left promiscuous mode [ 1050.200428][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.256382][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1050.282877][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1050.318341][ T5288] device veth1_macvtap left promiscuous mode [ 1050.334982][ T5288] device veth0_macvtap left promiscuous mode [ 1050.410658][T15616] ceph: No mds server is up or the cluster is laggy [ 1050.564259][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1050.571799][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1052.474793][ T5288] team0 (unregistering): Port device team_slave_1 removed [ 1052.532228][ T5288] team0 (unregistering): Port device team_slave_0 removed [ 1052.575979][ T5288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.621374][ T5288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.940050][T15643] loop4: detected capacity change from 0 to 512 [ 1052.950140][T15643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1053.002078][T15643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1053.012252][T15643] ext4 filesystem being mounted at /624/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.195821][ T5288] bond0 (unregistering): Released all slaves [ 1053.991785][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 1054.265594][ T1276] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.275119][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.281564][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.294415][T12833] libceph: connect (1)[c::]:6789 error -101 [ 1054.335592][T12833] libceph: mon0 (1)[c::]:6789 connect error [ 1054.472147][T15449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1054.512817][T15449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1054.634268][T13900] libceph: connect (1)[c::]:6789 error -101 [ 1054.640318][T13900] libceph: mon0 (1)[c::]:6789 connect error [ 1054.651746][T15449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1054.674917][T15654] ceph: No mds server is up or the cluster is laggy [ 1054.706807][T15449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1055.113980][T15449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.167187][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1055.318336][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1055.423697][T15449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.453342][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1055.476022][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1055.510305][T15475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.517513][T15475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.550459][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1055.578632][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1055.614851][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1055.662620][T15475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.669995][T15475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.735799][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1055.752531][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1055.766286][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1055.824533][T15475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1055.957131][T15665] ceph: No mds server is up or the cluster is laggy [ 1056.062319][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1056.081561][T13900] libceph: connect (1)[c::]:6789 error -101 [ 1056.125972][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1056.457276][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1056.821235][T13900] libceph: mon0 (1)[c::]:6789 connect error [ 1056.824904][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1056.864591][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1056.873308][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1056.890571][ T6520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1057.129345][T15702] device syzkaller0 entered promiscuous mode [ 1057.209932][T15709] loop2: detected capacity change from 0 to 512 [ 1057.212495][T15449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1057.252184][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1057.271387][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1057.275828][T15709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1057.429662][T15709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1057.452015][T15709] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.113012][T14417] EXT4-fs (loop2): unmounting filesystem. [ 1058.791325][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1058.822045][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1059.127591][T15723] ceph: No mds server is up or the cluster is laggy [ 1062.953373][T15758] loop3: detected capacity change from 0 to 512 [ 1063.025039][T15758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1063.196927][T15758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1063.225247][T15758] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.569127][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1063.894177][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1063.902931][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1063.968650][T15449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.095754][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1064.140217][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1064.871553][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1064.911078][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1064.955639][T15449] device veth0_vlan entered promiscuous mode [ 1064.969125][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1065.006462][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1065.021041][T15449] device veth1_vlan entered promiscuous mode [ 1065.052792][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1065.063172][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1065.075331][T15449] device veth0_macvtap entered promiscuous mode [ 1065.207432][T15449] device veth1_macvtap entered promiscuous mode [ 1065.295031][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.363708][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.399620][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.515371][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.641540][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.963808][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1065.992381][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.108027][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1066.208611][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1066.397645][T15769] ceph: No mds server is up or the cluster is laggy [ 1066.405227][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.430672][T15449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.566383][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1066.581937][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1066.592804][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1066.659287][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1066.693971][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.723937][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.841037][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.888299][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1066.920173][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1066.973833][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.016715][T15449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1067.070159][T15449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.151987][T15449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.193073][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1067.254887][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1067.567684][T15834] loop4: detected capacity change from 0 to 512 [ 1067.640055][T15834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1067.784981][T15834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1067.796869][T15449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.814041][T15834] ext4 filesystem being mounted at /632/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.845320][T15449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.854544][T15449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.868000][T15449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.036368][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 1068.163524][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.211558][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.320879][T15611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1068.341840][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.384021][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.411204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1068.546321][T15849] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1068.546321][T15849] program +}[@ not setting count and/or reply_len properly [ 1069.148837][T13900] libceph: connect (1)[c::]:6789 error -101 [ 1069.158417][T13900] libceph: mon0 (1)[c::]:6789 connect error [ 1069.271465][T15857] ceph: No mds server is up or the cluster is laggy [ 1071.104126][ T4264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1071.123260][ T4264] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1071.138904][ T4264] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1071.149228][ T4264] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1071.158469][ T4264] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1071.165950][ T4264] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1071.197683][T15874] device syzkaller0 entered promiscuous mode [ 1071.344506][T12833] libceph: connect (1)[c::]:6789 error -101 [ 1071.350568][T12833] libceph: mon0 (1)[c::]:6789 connect error [ 1071.467440][T15885] loop3: detected capacity change from 0 to 512 [ 1071.536339][T15885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1071.616499][T15885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1071.626213][T12833] libceph: connect (1)[c::]:6789 error -101 [ 1071.640278][T12833] libceph: mon0 (1)[c::]:6789 connect error [ 1071.664997][T15885] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.092616][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1072.193103][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1072.214243][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1072.239222][T15879] ceph: No mds server is up or the cluster is laggy [ 1073.151198][T15904] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1073.151198][T15904] program +}[@ not setting count and/or reply_len properly [ 1073.228539][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 1075.305209][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 1076.300188][ T4813] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.753339][ T4813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.995736][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1077.022477][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1077.304589][T15926] ceph: No mds server is up or the cluster is laggy [ 1077.384021][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 1077.421360][T15931] loop3: detected capacity change from 0 to 512 [ 1077.465966][T15931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1077.595328][ T4813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.641485][T15931] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1077.710458][T15931] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.761752][ T4813] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.017847][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1078.753396][T15873] chnl_net:caif_netlink_parms(): no params data found [ 1079.079450][T15962] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1079.079450][T15962] program +}[@ not setting count and/or reply_len properly [ 1079.194208][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1079.304276][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1079.377832][T15965] ceph: No mds server is up or the cluster is laggy [ 1079.432984][T15873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.447211][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.464882][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 1079.494719][T15873] device bridge_slave_0 entered promiscuous mode [ 1079.534558][T15873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.543565][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.615555][T15873] device bridge_slave_1 entered promiscuous mode [ 1079.921801][T15873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.052126][T15873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.262291][T15982] device syzkaller0 entered promiscuous mode [ 1081.815807][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1081.830523][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1082.160771][T16002] ceph: No mds server is up or the cluster is laggy [ 1082.174365][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1082.183952][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1083.518414][T16024] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1083.518414][T16024] program +}[@ not setting count and/or reply_len properly [ 1084.592599][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1084.610790][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1084.718643][T16031] ceph: No mds server is up or the cluster is laggy [ 1086.951241][T15873] team0: Port device team_slave_0 added [ 1087.013207][T15873] team0: Port device team_slave_1 added [ 1087.073074][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.331195][T15873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.352462][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.484608][T15873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.567309][T15873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.608930][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.764796][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1087.824787][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1088.251438][T16052] ceph: No mds server is up or the cluster is laggy [ 1088.270774][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1088.312632][T15873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.359614][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1088.370560][T16057] loop3: detected capacity change from 0 to 512 [ 1088.515236][T16057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1088.622847][T16057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1088.651848][T16057] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1088.970906][T16067] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1088.970906][T16067] program +}[@ not setting count and/or reply_len properly [ 1089.112769][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1089.141261][T16049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1089.260355][T15873] device hsr_slave_0 entered promiscuous mode [ 1089.280627][T15873] device hsr_slave_1 entered promiscuous mode [ 1089.346159][T15873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1089.369542][T15873] Cannot create hsr debugfs directory [ 1090.173427][ T4813] device hsr_slave_0 left promiscuous mode [ 1090.253997][ T4813] device hsr_slave_1 left promiscuous mode [ 1090.266121][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.273694][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.302272][ T4813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.324129][ T4813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.341041][ T4813] device bridge_slave_1 left promiscuous mode [ 1090.368103][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.417585][ T4813] device bridge_slave_0 left promiscuous mode [ 1090.434618][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.524290][ T4813] device veth1_macvtap left promiscuous mode [ 1090.540215][ T4813] device veth0_macvtap left promiscuous mode [ 1090.735795][ T4813] infiniband syz1: set down [ 1091.025097][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 1091.031292][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 1091.043087][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 1091.067096][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 1091.146309][T16107] ceph: No mds server is up or the cluster is laggy [ 1092.275228][ T4813] team0 (unregistering): Port device team_slave_1 removed [ 1092.376669][ T4813] team0 (unregistering): Port device team_slave_0 removed [ 1092.494872][ T4813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.535187][T15255] smc: removing ib device syz1 [ 1092.632285][ T4813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.474396][ T4813] bond0 (unregistering): Released all slaves [ 1094.865635][T16128] ceph: No mds server is up or the cluster is laggy [ 1094.913989][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1094.920071][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1094.929036][T16124] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1094.929036][T16124] program +}[@ not setting count and/or reply_len properly [ 1095.927564][T16145] loop3: detected capacity change from 0 to 512 [ 1095.972972][T16145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1096.176996][T16145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1096.193965][T16145] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.383150][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1096.457790][T16137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3271'. [ 1097.084587][T16160] device syzkaller0 entered promiscuous mode [ 1097.735093][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1097.741222][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1097.749451][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1097.773944][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1097.846265][T16181] ceph: No mds server is up or the cluster is laggy [ 1099.523552][ T4297] libceph: connect (1)[c::]:6789 error -101 [ 1099.552126][ T4297] libceph: mon0 (1)[c::]:6789 connect error [ 1099.782407][T16195] ceph: No mds server is up or the cluster is laggy [ 1101.158948][T16205] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1101.158948][T16205] program +}[@ not setting count and/or reply_len properly [ 1101.452626][T16207] loop3: detected capacity change from 0 to 512 [ 1101.460632][T16207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1101.497070][T16207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1101.506420][T16207] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.622970][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1102.137411][T15873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1102.212654][T15873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1102.255310][T15873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1102.336629][T15873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1102.721707][T15873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.790710][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1102.806223][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1102.845062][T15873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.884340][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1102.915007][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1102.970532][T15340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.977773][T15340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.059948][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1103.099198][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1103.133049][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1103.166839][T15340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.174062][T15340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.204286][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1103.248286][T16213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1103.257534][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1103.328061][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1103.432668][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1103.488907][T15340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1103.577900][T15873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1103.619497][T15873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1103.734183][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1103.749867][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1103.818868][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1104.096461][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1104.139778][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.160398][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1104.387412][T16247] ceph: No mds server is up or the cluster is laggy [ 1104.450019][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.524610][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1104.694726][ T4813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1104.865790][T16257] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1104.865790][T16257] program +}[@ not setting count and/or reply_len properly [ 1105.113983][ T128] libceph: connect (1)[c::]:6789 error -101 [ 1105.123382][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 1105.219222][ T128] libceph: connect (1)[c::]:6789 error -101 [ 1105.227537][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 1105.239749][T16270] loop1: detected capacity change from 0 to 512 [ 1105.296111][T16270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1105.322064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.341257][T16264] ceph: No mds server is up or the cluster is laggy [ 1105.345400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.499026][T15873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.506608][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1105.512658][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1105.543699][T16270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1105.552793][T16270] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1105.762556][T16286] device syzkaller0 entered promiscuous mode [ 1105.777820][T15078] EXT4-fs (loop1): unmounting filesystem. [ 1108.550804][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1108.570956][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1108.771809][T16311] ceph: No mds server is up or the cluster is laggy [ 1110.291468][T16306] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1110.652003][T16328] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1110.652003][T16328] program +}[@ not setting count and/or reply_len properly [ 1110.892531][T16335] loop3: detected capacity change from 0 to 512 [ 1110.915189][T16335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1110.981418][T16335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1110.991504][T16335] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.097391][T16249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1111.117630][T16249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1111.188696][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1111.198129][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1111.230549][T15873] device veth0_vlan entered promiscuous mode [ 1111.247377][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1111.258030][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1111.283642][T15873] device veth1_vlan entered promiscuous mode [ 1111.305763][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1111.354206][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1111.363675][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1111.386965][T15873] device veth0_macvtap entered promiscuous mode [ 1111.405126][T15873] device veth1_macvtap entered promiscuous mode [ 1111.448038][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.473884][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.494588][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.530598][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.578203][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.613951][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.640073][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.652660][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1111.677679][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1111.713251][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.776632][T15873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.823120][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.847214][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1111.855605][T16351] ceph: No mds server is up or the cluster is laggy [ 1111.871606][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.978296][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.018981][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.077753][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.099369][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1112.112122][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1112.138858][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.193964][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.249895][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.335704][T15873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.347686][T15873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.356606][T15873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.321559][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 1113.324423][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1113.352649][T15873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.371492][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1113.396096][T15873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.404472][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1113.405049][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1113.430830][T16370] ceph: No mds server is up or the cluster is laggy [ 1113.439729][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1113.456425][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1113.501235][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1113.520450][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1113.561512][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1113.654967][T15255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1114.542405][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.611919][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.640359][T15255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.684240][T16381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3315'. [ 1114.698092][T15255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.818561][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1114.833975][T15703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.246208][T16408] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1115.246208][T16408] program syz.3.3319 not setting count and/or reply_len properly [ 1115.844477][ T1276] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1115.853796][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.860221][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.225684][T16432] ceph: No mds server is up or the cluster is laggy [ 1117.231377][T16436] loop4: detected capacity change from 0 to 512 [ 1117.270570][T16436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1117.332656][T16436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1117.349553][T16436] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.380880][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1117.390553][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1118.245773][T15873] EXT4-fs (loop4): unmounting filesystem. [ 1118.274262][T16451] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3328'. [ 1118.432263][T16462] device syzkaller0 entered promiscuous mode [ 1118.613125][T16467] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1118.613125][T16467] program syz.0.3334 not setting count and/or reply_len properly [ 1121.283385][ T7616] libceph: connect (1)[c::]:6789 error -101 [ 1121.328529][ T7616] libceph: mon0 (1)[c::]:6789 connect error [ 1121.587072][T16489] ceph: No mds server is up or the cluster is laggy [ 1121.885943][ T7616] libceph: connect (1)[c::]:6789 error -101 [ 1121.892029][ T7616] libceph: mon0 (1)[c::]:6789 connect error [ 1122.031935][T16495] ceph: No mds server is up or the cluster is laggy [ 1124.218355][T16508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3345'. [ 1124.331638][T16513] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1124.331638][T16513] program syz.4.3347 not setting count and/or reply_len properly [ 1126.255811][T16546] loop1: detected capacity change from 0 to 512 [ 1126.266621][T16546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1126.670126][T16546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1126.680641][T16546] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.652915][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3358'. [ 1127.797296][T15078] EXT4-fs (loop1): unmounting filesystem. [ 1128.226276][T16561] device syzkaller0 entered promiscuous mode [ 1128.414377][T16566] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1128.414377][T16566] program +}[@ not setting count and/or reply_len properly [ 1128.524215][ T22] libceph: connect (1)[c::]:6789 error -101 [ 1128.530379][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 1128.622248][T16537] ceph: No mds server is up or the cluster is laggy [ 1128.858380][ T4294] libceph: connect (1)[c::]:6789 error -101 [ 1128.864570][ T4294] libceph: mon0 (1)[c::]:6789 connect error [ 1130.627808][T16595] loop3: detected capacity change from 0 to 512 [ 1130.782050][T16595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1131.363538][T16595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1131.382188][T16595] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.716214][T14853] EXT4-fs (loop3): unmounting filesystem. [ 1133.248274][T16598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3373'. [ 1133.384311][ T4260] Bluetooth: hci3: command 0x0406 tx timeout [ 1133.694096][T16619] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1133.694096][T16619] program +}[@ not setting count and/or reply_len properly [ 1135.629782][T16645] loop4: detected capacity change from 0 to 512 [ 1135.650239][T16645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1135.860871][T16645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1135.915648][T16645] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.647839][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1136.918891][T15873] EXT4-fs (loop4): unmounting filesystem. [ 1136.931272][T16662] device syzkaller0 entered promiscuous mode [ 1136.949217][ T26] libceph: connect (1)[c::]:6789 error -101 [ 1136.955456][ T26] libceph: mon0 (1)[c::]:6789 connect error [ 1137.051646][T16636] ceph: No mds server is up or the cluster is laggy [ 1137.551761][T16673] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1137.551761][T16673] program +}[@ not setting count and/or reply_len properly [ 1142.156558][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'. [ 1143.212393][T16726] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1143.212393][T16726] program +}[@ not setting count and/or reply_len properly [ 1143.433603][T13900] libceph: connect (1)[c::]:6789 error -101 [ 1143.448618][T13900] libceph: mon0 (1)[c::]:6789 connect error [ 1143.635208][T16713] ceph: No mds server is up or the cluster is laggy [ 1143.758758][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1143.785351][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1143.827120][T16738] loop2: detected capacity change from 0 to 512 [ 1143.887560][T16738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1143.964420][T16738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1144.002239][T16738] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1144.640656][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1144.759029][ T7] libceph: connect (1)[c::]:6789 error -101 [ 1144.784081][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 1144.882384][T16747] ceph: No mds server is up or the cluster is laggy [ 1144.892582][T14417] EXT4-fs (loop2): unmounting filesystem. [ 1145.120695][T16752] atomic_op ffff88805b048998 conn xmit_atomic 0000000000000000 [ 1146.301906][T16760] device syzkaller0 entered promiscuous mode [ 1146.390048][T16767] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1146.390048][T16767] program +}[@ not setting count and/or reply_len properly [ 1147.044755][T16776] loop1: detected capacity change from 0 to 512 [ 1147.060939][T16776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1147.109710][T16776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1147.131780][T16776] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.486798][T16782] loop4: detected capacity change from 0 to 512 [ 1147.504277][T16782] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1147.518504][T16782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1147.573204][T16782] EXT4-fs (loop4): 1 truncate cleaned up [ 1147.578960][T16782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1147.653836][T16782] loop4: detected capacity change from 512 to 64 [ 1147.803067][T15873] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 1147.831002][T15873] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 1147.855711][T15873] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1723: inode #15: comm syz-executor: unable to update i_inline_off [ 1147.873297][T15873] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1147.899842][T15873] EXT4-fs (loop4): unmounting filesystem. [ 1147.953688][T15078] EXT4-fs (loop1): unmounting filesystem. [ 1149.807538][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3428'. [ 1150.124411][T16795] netlink: 'syz.4.3431': attribute type 10 has an invalid length. [ 1150.224530][T16795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.233130][T16795] bond0: (slave team0): Enslaving as an active interface with an up link [ 1150.356730][T16803] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 1150.356730][T16803] program +}[@ not setting count and/or reply_len properly [ 1151.391967][T16810] loop4: detected capacity change from 0 to 512 [ 1151.637021][T16810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1152.051625][T16810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1152.101574][T12726] libceph: connect (1)[c::]:6789 error -101 [ 1152.127759][T12726] libceph: mon0 (1)[c::]:6789 connect error [ 1152.440658][T16823] ceph: No mds server is up or the cluster is laggy [ 1152.506556][T16810] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.740633][T16832] device syzkaller0 entered promiscuous mode [ 1153.177961][T15873] EXT4-fs (loop4): unmounting filesystem. [ 1153.518119][T16842] [ 1153.520502][T16842] ====================================================== [ 1153.527542][T16842] WARNING: possible circular locking dependency detected [ 1153.534572][T16842] 6.1.120-syzkaller-00773-g52f863f820fd #0 Tainted: G W [ 1153.542894][T16842] ------------------------------------------------------ [ 1153.549912][T16842] syz.0.3446/16842 is trying to acquire lock: [ 1153.555974][T16842] ffff88807a7e97d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 1153.565667][T16842] [ 1153.565667][T16842] but task is already holding lock: [ 1153.573064][T16842] ffff8880790adaf0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 1153.583959][T16842] [ 1153.583959][T16842] which lock already depends on the new lock. [ 1153.583959][T16842] [ 1153.594366][T16842] [ 1153.594366][T16842] the existing dependency chain (in reverse order) is: [ 1153.603413][T16842] [ 1153.603413][T16842] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 1153.612150][T16842] lock_acquire+0x1f8/0x5a0 [ 1153.617210][T16842] down_write+0x36/0x60 [ 1153.621958][T16842] process_measurement+0x446/0x21b0 [ 1153.627688][T16842] ima_file_mmap+0x121/0x1c0 [ 1153.632801][T16842] __se_sys_remap_file_pages+0x67a/0x8b0 [ 1153.638954][T16842] do_syscall_64+0x3b/0xb0 [ 1153.643917][T16842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.650340][T16842] [ 1153.650340][T16842] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1153.657902][T16842] validate_chain+0x1661/0x5950 [ 1153.663273][T16842] __lock_acquire+0x125b/0x1f80 [ 1153.668656][T16842] lock_acquire+0x1f8/0x5a0 [ 1153.673687][T16842] down_read_killable+0xc6/0xd10 [ 1153.679149][T16842] mmap_read_lock_killable+0x1d/0x60 [ 1153.685047][T16842] lock_mm_and_find_vma+0x2a7/0x2e0 [ 1153.690771][T16842] exc_page_fault+0x169/0x620 [ 1153.695969][T16842] asm_exc_page_fault+0x22/0x30 [ 1153.701362][T16842] fault_in_readable+0x1c8/0x340 [ 1153.706819][T16842] fault_in_iov_iter_readable+0xdb/0x270 [ 1153.712982][T16842] generic_perform_write+0x207/0x5e0 [ 1153.718850][T16842] __generic_file_write_iter+0x176/0x400 [ 1153.725004][T16842] generic_file_write_iter+0xab/0x310 [ 1153.730922][T16842] vfs_write+0x857/0xbc0 [ 1153.735695][T16842] __x64_sys_pwrite64+0x1a6/0x230 [ 1153.741247][T16842] do_syscall_64+0x3b/0xb0 [ 1153.746195][T16842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.752619][T16842] [ 1153.752619][T16842] other info that might help us debug this: [ 1153.752619][T16842] [ 1153.762862][T16842] Possible unsafe locking scenario: [ 1153.762862][T16842] [ 1153.770307][T16842] CPU0 CPU1 [ 1153.775666][T16842] ---- ---- [ 1153.781023][T16842] lock(&sb->s_type->i_mutex_key#12); [ 1153.786492][T16842] lock(&mm->mmap_lock); [ 1153.793344][T16842] lock(&sb->s_type->i_mutex_key#12); [ 1153.801342][T16842] lock(&mm->mmap_lock); [ 1153.805674][T16842] [ 1153.805674][T16842] *** DEADLOCK *** [ 1153.805674][T16842] [ 1153.813811][T16842] 2 locks held by syz.0.3446/16842: [ 1153.819002][T16842] #0: ffff8880745d0460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0 [ 1153.827918][T16842] #1: ffff8880790adaf0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x310 [ 1153.839245][T16842] [ 1153.839245][T16842] stack backtrace: [ 1153.845139][T16842] CPU: 1 PID: 16842 Comm: syz.0.3446 Tainted: G W 6.1.120-syzkaller-00773-g52f863f820fd #0 [ 1153.856503][T16842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1153.866556][T16842] Call Trace: [ 1153.869835][T16842] [ 1153.872766][T16842] dump_stack_lvl+0x1e3/0x2cb [ 1153.877459][T16842] ? nf_tcp_handle_invalid+0x642/0x642 [ 1153.882934][T16842] ? print_circular_bug+0x12b/0x1a0 [ 1153.888137][T16842] check_noncircular+0x2fa/0x3b0 [ 1153.893073][T16842] ? mark_lock+0x9a/0x340 [ 1153.897413][T16842] ? add_chain_block+0x850/0x850 [ 1153.902369][T16842] ? lockdep_lock+0x11f/0x2a0 [ 1153.907087][T16842] ? reacquire_held_locks+0x660/0x660 [ 1153.912461][T16842] ? _find_first_zero_bit+0xd0/0x100 [ 1153.917760][T16842] validate_chain+0x1661/0x5950 [ 1153.922614][T16842] ? reacquire_held_locks+0x660/0x660 [ 1153.928003][T16842] ? reacquire_held_locks+0x660/0x660 [ 1153.933380][T16842] ? mark_lock+0x9a/0x340 [ 1153.937719][T16842] ? reacquire_held_locks+0x660/0x660 [ 1153.943090][T16842] ? mark_lock+0x9a/0x340 [ 1153.947433][T16842] ? reacquire_held_locks+0x660/0x660 [ 1153.952804][T16842] ? __lock_acquire+0x125b/0x1f80 [ 1153.957840][T16842] ? mark_lock+0x9a/0x340 [ 1153.962182][T16842] __lock_acquire+0x125b/0x1f80 [ 1153.967052][T16842] lock_acquire+0x1f8/0x5a0 [ 1153.971569][T16842] ? mmap_read_lock_killable+0x1d/0x60 [ 1153.977060][T16842] ? read_lock_is_recursive+0x10/0x10 [ 1153.982457][T16842] ? __might_sleep+0xb0/0xb0 [ 1153.987055][T16842] down_read_killable+0xc6/0xd10 [ 1153.991996][T16842] ? mmap_read_lock_killable+0x1d/0x60 [ 1153.997464][T16842] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1154.003479][T16842] ? cmp_ex_search+0x70/0x90 [ 1154.008070][T16842] ? mmap_read_lock_killable+0x1d/0x60 [ 1154.013538][T16842] ? bsearch+0x8e/0xb0 [ 1154.017616][T16842] ? down_read_interruptible+0xc40/0xc40 [ 1154.023252][T16842] ? search_extable+0xaf/0xf0 [ 1154.027932][T16842] ? trim_init_extable+0x3c0/0x3c0 [ 1154.033048][T16842] ? fault_in_readable+0x1c8/0x340 [ 1154.038160][T16842] ? __init_rwsem+0x160/0x160 [ 1154.042846][T16842] ? print_irqtrace_events+0x210/0x210 [ 1154.048496][T16842] mmap_read_lock_killable+0x1d/0x60 [ 1154.053790][T16842] lock_mm_and_find_vma+0x2a7/0x2e0 [ 1154.058996][T16842] exc_page_fault+0x169/0x620 [ 1154.063681][T16842] asm_exc_page_fault+0x22/0x30 [ 1154.068557][T16842] RIP: 0010:fault_in_readable+0x1c8/0x340 [ 1154.074637][T16842] Code: 24 08 4c 8d b0 ff 0f 00 00 48 89 c3 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 70 e8 d2 b1 bf ff 4c 39 f3 74 73 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 1154.094253][T16842] RSP: 0018:ffffc90003dc7a00 EFLAGS: 00050287 [ 1154.100325][T16842] RAX: ffffffff81caea9e RBX: 0000000020233000 RCX: 0000000000080000 [ 1154.108300][T16842] RDX: ffffc900040e9000 RSI: 00000000000389ab RDI: 00000000000389ac [ 1154.116278][T16842] RBP: ffffc90003dc7ab8 R08: ffffffff81caea36 R09: ffffffff844210c5 [ 1154.124253][T16842] R10: 0000000000000002 R11: ffff888030fb5940 R12: 0000000000001000 [ 1154.132222][T16842] R13: dffffc0000000000 R14: 0000000020234000 R15: 1ffff920007b8f48 [ 1154.140198][T16842] ? fault_in_iov_iter_readable+0x45/0x270 [ 1154.146011][T16842] ? fault_in_readable+0x156/0x340 [ 1154.151121][T16842] ? fault_in_readable+0x1be/0x340 [ 1154.156255][T16842] ? fault_in_safe_writeable+0x250/0x250 [ 1154.161909][T16842] ? inode_to_bdi+0x65/0xd0 [ 1154.166435][T16842] fault_in_iov_iter_readable+0xdb/0x270 [ 1154.172085][T16842] generic_perform_write+0x207/0x5e0 [ 1154.177384][T16842] ? generic_file_direct_write+0x460/0x460 [ 1154.183193][T16842] ? __file_remove_privs+0x640/0x640 [ 1154.188492][T16842] ? generic_write_checks+0x138/0x1c0 [ 1154.193871][T16842] ? clear_nonspinnable+0x60/0x60 [ 1154.198905][T16842] __generic_file_write_iter+0x176/0x400 [ 1154.204556][T16842] generic_file_write_iter+0xab/0x310 [ 1154.209935][T16842] vfs_write+0x857/0xbc0 [ 1154.214191][T16842] ? file_end_write+0x250/0x250 [ 1154.219063][T16842] ? __fget_files+0x28/0x4a0 [ 1154.223679][T16842] ? __fget_files+0x435/0x4a0 [ 1154.228380][T16842] ? __fdget+0x182/0x210 [ 1154.232653][T16842] __x64_sys_pwrite64+0x1a6/0x230 [ 1154.237712][T16842] ? ksys_pwrite64+0x1d0/0x1d0 [ 1154.242491][T16842] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1154.248478][T16842] ? lockdep_hardirqs_on+0x94/0x130 [ 1154.253703][T16842] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1154.259706][T16842] do_syscall_64+0x3b/0xb0 [ 1154.264147][T16842] ? clear_bhb_loop+0x45/0xa0 [ 1154.268849][T16842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1154.274770][T16842] RIP: 0033:0x7f1116b85d19 [ 1154.279201][T16842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.298993][T16842] RSP: 002b:00007f1117983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1154.307507][T16842] RAX: ffffffffffffffda RBX: 00007f1116d75fa0 RCX: 00007f1116b85d19 [ 1154.315485][T16842] RDX: 00000000200000c1 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1154.323556][T16842] RBP: 00007f1116c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 1154.331568][T16842] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.339572][T16842] R13: 0000000000000000 R14: 00007f1116d75fa0 R15: 00007ffe541eff28 [ 1154.347564][T16842] [ 1156.282398][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'.