last executing test programs: 8.15823128s ago: executing program 4 (id=1580): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x84040) epoll_create1(0x80000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x20000023896) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}], 0x2, 0x20008000) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) socket$inet6_sctp(0xa, 0x1, 0x84) mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) 6.922151792s ago: executing program 3 (id=1584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140)=0x10, 0x4) 6.830533555s ago: executing program 4 (id=1586): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 5.617454646s ago: executing program 4 (id=1593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x7, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x7, 0x4, 0x10, 0x4], 0x3, [0x2, 0x5, 0x7fff, 0x56, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x3, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xffff}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x4000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x108, 0x7, 0x9, 0x5, 0x6, 0x7fff, 0x40, 0x1, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.485520809s ago: executing program 1 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.418653491s ago: executing program 1 (id=1596): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000004297e2d90a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000010900010073797a30000000000900030073797a320000000054000000060a010400000000000000000100000008000b400000000038000480340001800b000100657874686472000024000280080001400000000c080003400002000008000440000000220500020007000000140000001100010000000000000000000700000a"], 0xc8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xefff, 0x0, [{0x20, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.365593842s ago: executing program 4 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 4.311747409s ago: executing program 4 (id=1598): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='+tcp 2049\n\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f00000000e0)='8\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000100)='./nfs_mnt\x00', &(0x7f0000000140)='nfs4\x00', 0x0, &(0x7f0000000180)='addr=127.0.0.1,port=2049,vers=4.2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/clients/1/info\x00', 0x0, 0x0) read(r2, &(0x7f0000000300), 0x64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/clients/2/info\x00', 0x0, 0x0) read(r3, &(0x7f0000000300), 0x64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/clients/3/info\x00', 0x0, 0x0) read(r4, &(0x7f0000000300), 0x64) 4.170748083s ago: executing program 1 (id=1599): openat$kvm(0x0, 0x0, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0) 3.619147107s ago: executing program 3 (id=1605): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0x1}}, 0x20) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000100), {0x7}, &(0x7f0000000140)=""/201, 0xc9, &(0x7f0000000240)=""/33, &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x3}, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x400, @remote, 0x3}], 0x88) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/dev_snmp6\x00') read(r5, &(0x7f0000002780)=""/12, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') 3.539616179s ago: executing program 0 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000fea000/0x13000)=nil) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x4008010) 3.539216139s ago: executing program 3 (id=1607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.538866989s ago: executing program 2 (id=1608): unshare(0x22020600) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r6, 0x0, 0x0}, 0x20) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0xfffffffffffffd04, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x64ee, 0x41, 0x7e9, 0x401, 0x9aa5, "a0db1b78f933b5947401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, 0x0, 0x0) 3.444644872s ago: executing program 3 (id=1609): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) fanotify_init(0x4000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0xce, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 3.401668543s ago: executing program 2 (id=1619): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf35}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sysfs$2(0x2, 0x7fff, &(0x7f0000000300)=""/239) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 3.339625604s ago: executing program 0 (id=1610): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.255472666s ago: executing program 1 (id=1611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 2.397443979s ago: executing program 0 (id=1612): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0) shmctl$IPC_RMID(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x29) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) pread64(r2, 0x0, 0x0, 0x80) socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) 2.257705412s ago: executing program 2 (id=1613): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x3f00) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0), 0x0, 0x30100, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x58, 0x12) pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000300)="ea8c82f9e77f8604d4a97969c43269745144ea6ca358208309446e4432d65e3088e0144d3735aee4c2c8c1868843bb4a531e2f601de9ea16ab32f828bd708e0ba154299ef44a672f5ba354ce727fd10f28d3ab80746538abf63a3cab900abf1d104966774a02290f9a069ef5205bde800a40c7f3cab43774455f5b92c226c0642242cc09d8556e13466adf3509584f209153be7d3fdc7df6d9c0c29238e63ab8dccd3956bc0991959750cbc4a81f40a5906338d52789fd298a6122d3ba5362b998391e245ecbf3d5d110cf2eef67e1e0e1bb869ac916612c80f60596003cec0d66a7ed09bacec5862ba9b051a3d387ca18a6daf717f671da827b94cb9826af1995e80251c1917518b84f9a9e260ac48e0a08696385040d76f4c18e37eff1b4debaa9b716cf1fb98e76ea432b0f7f893ea800000000000000000000000000000000004495873d84912d9bda0c5fb03f89b680049bbfd04063b434307d268ad74883298a4abcb9050f3262746012e48047c6ea4c1f04cd6a8d0faaf7347ed92723f8d7aa9ebe", 0x185}], 0x1, 0x3815, 0x1) 2.162470204s ago: executing program 3 (id=1614): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.158745795s ago: executing program 2 (id=1615): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x20000) 1.96560931s ago: executing program 0 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0x298, 0x298, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6bc128419cfb67daad5b4809088400ed0000006c00000000000100040500"}}}, {{@ip={@rand_addr=0x64010102, @multicast1, 0xff000000, 0x0, 'sit0\x00', 'veth1_to_hsr\x00', {}, {0xd7fffbe779abf152}, 0x8, 0x1, 0x2}, 0x287, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x2}}, @common=@unspec=@cluster={{0x30}, {0x3, 0x10000, 0x4, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x1, 0x8, [0x35, 0x1d, 0x7, 0x1f, 0x29, 0x0, 0x19, 0x0, 0x14, 0x22, 0x11, 0x2, 0x11, 0x1b, 0x2e, 0x3f], 0x2, 0x9, 0x7fffffffffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000000c0)='cgroup\x00', 0x1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000022c0)='virtiofs\x00', 0x2200890, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.96397283s ago: executing program 1 (id=1617): syz_create_resource$binfmt(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x192509b, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.9352971s ago: executing program 3 (id=1618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(r1, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 1.408951484s ago: executing program 2 (id=1620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x8}, &(0x7f0000000100)=0x8) 937.795416ms ago: executing program 0 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) 937.353496ms ago: executing program 1 (id=1622): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x11e, 0x83, 0x0, &(0x7f0000001100)) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x9c, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "c724", "49f792", 0x886c, "fb36612948e17c571a3967cbed0881b72c57966cb1581e5f5bf9792a8299bd4f4f5383f261b044d0577e8ff67c8098b3bd0fd6c74a07a256c871bf5eee496539da1d14bc701d98d47b635af1206a746ba8dc7c1022f08fa1287cd898609b9898ac87a71900cc2b3107e9460ba947e4a7eb9565632187e3a55bcdb78c98bc311cf43f53713b"}}}}}, 0x0) 12.20742ms ago: executing program 0 (id=1623): syz_emit_ethernet(0x36, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x207, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x48050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000140)='/dev/i2c-#\x00', &(0x7f0000000180), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000100000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000040), &(0x7f00000006c0)}, 0x20) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read$FUSE(r4, 0x0, 0x0) 11.90462ms ago: executing program 2 (id=1624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x405, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = epoll_create(0x752) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000580)=0x1, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1f"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3e8}]}, 0x2c}}, 0x0) 0s ago: executing program 4 (id=1625): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): ystem will be case sensitive! [ 106.914230][ T4740] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.970631][ T4742] tipc: Started in network mode [ 106.989581][ T4742] tipc: Node identity 10101, cluster identity 4711 [ 107.012852][ T4742] tipc: Node number set to 65793 [ 107.030881][ T4743] tipc: Enabled bearer , priority 0 [ 107.283469][ T4746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 108.208789][ T4761] fuse: Bad value for 'fd' [ 108.467693][ T26] kauditd_printk_skb: 1121 callbacks suppressed [ 108.467710][ T26] audit: type=1326 audit(1785967632.177:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7fc00000 [ 108.594498][ T26] audit: type=1326 audit(1785967632.237:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.175" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb53ddb0d9 code=0x7fc00000 [ 109.722385][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 109.917893][ T4790] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 111.327787][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.335819][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.273931][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.370724][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.215002][ T4794] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.224946][ T4794] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.234388][ T4794] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.245077][ T4794] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.414163][ T21] lo speed is unknown, defaulting to 1000 [ 113.428747][ T4807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'. [ 113.478799][ T4794] syz.4.187 (4794) used greatest stack depth: 19984 bytes left [ 114.036646][ T4847] loop4: detected capacity change from 0 to 512 [ 114.095759][ T4847] EXT4-fs (loop4): Ignoring removed bh option [ 114.171940][ T4847] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.204: corrupted in-inode xattr [ 114.248992][ T4847] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.204: couldn't read orphan inode 15 (err -117) [ 114.334934][ T4847] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000002,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 114.390224][ T4847] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.204: Unrecognised inode hash code 4 [ 114.402446][ T4847] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.204: Corrupt directory, running e2fsck is recommended [ 114.506663][ T4864] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 114.564619][ T4868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.210'. [ 114.641690][ T4864] device ip6gretap1 entered promiscuous mode [ 114.648126][ T4864] bond1: (slave ip6gretap1): no link monitoring support [ 114.660732][ T4864] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 114.686148][ T4864] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 114.717550][ T4868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.210'. [ 115.215503][ T4896] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 115.668510][ T4271] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.973575][ T4912] lo speed is unknown, defaulting to 1000 [ 116.023739][ T4913] IPVS: nq: FWM 3 0x00000003 - no destination available [ 116.062816][ T4271] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.129153][ T4271] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 116.137479][ T4271] usb 5-1: can't read configurations, error -71 [ 116.402643][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 116.481848][ T4927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 116.692829][ T4938] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 116.726699][ T4938] sch_tbf: burst 593 is lower than device lo mtu (65550) ! [ 116.871154][ T4942] tipc: Resetting bearer [ 117.032643][ T4951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 117.237487][ T4955] netlink: 'syz.1.244': attribute type 13 has an invalid length. [ 117.287073][ T4955] netlink: 'syz.1.244': attribute type 17 has an invalid length. [ 117.469128][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 117.533535][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 117.665199][ T4955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 117.733043][ T4955] device dummy0 left promiscuous mode [ 117.746896][ T4955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.936875][ T4961] tipc: Failed to remove unknown binding: 66,0,0/0:111070031/111070032 [ 117.976815][ T4964] tipc: Failed to remove unknown binding: 66,0,0/0:111070031/111070032 [ 118.250709][ T4971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.250'. [ 118.372366][ T4974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.251'. [ 118.632500][ T4980] loop4: detected capacity change from 0 to 128 [ 118.795851][ T4977] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 119.200488][ T4991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.222756][ T4546] tipc: Subscription rejected, illegal request [ 119.291518][ T4991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.360680][ T4997] tipc: Started in network mode [ 119.385977][ T4997] tipc: Node identity 7f000001, cluster identity 4711 [ 119.417301][ T4997] tipc: Enabled bearer , priority 10 [ 119.473904][ T4991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.925303][ T5017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 119.957729][ T5019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.266'. [ 119.978192][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 120.388668][ T4271] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 120.412343][ T21] tipc: Node number set to 2130706433 [ 120.538523][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.768542][ T4271] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.904600][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 120.918608][ T4271] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 120.927792][ T4271] usb 3-1: can't read configurations, error -71 [ 120.934566][ T13] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 121.040451][ T5032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 121.095358][ T5032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.128780][ T13] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.164386][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.195831][ T13] usb 5-1: Product: syz [ 121.223244][ T13] usb 5-1: Manufacturer: syz [ 121.250160][ T13] usb 5-1: SerialNumber: syz [ 121.272375][ T5038] TC_ACT_REPEAT abuse ? [ 121.300769][ T13] usb 5-1: config 0 descriptor?? [ 121.319285][ T5024] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.343356][ T5024] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 121.881135][ T13] dm9601: probe of 5-1:0.0 failed with error -71 [ 121.925080][ T13] usb 5-1: USB disconnect, device number 5 [ 123.632378][ T5131] netlink: 'syz.3.291': attribute type 27 has an invalid length. [ 123.793546][ T5131] bond0: (slave bond_slave_0): Releasing backup interface [ 123.851951][ T5124] loop4: detected capacity change from 0 to 40427 [ 123.899295][ T5124] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 123.946428][ T5124] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 124.039291][ T5124] F2FS-fs (loop4): invalid crc value [ 124.099147][ T5124] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.307554][ T5124] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.898771][ T13] TC_ACT_REPEAT abuse ? [ 124.964539][ T5146] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.992087][ T5146] TC_ACT_REPEAT abuse ? [ 125.283611][ T5154] kvm: pic: non byte read [ 125.299254][ T5154] kvm: pic: non byte read [ 125.303894][ T5154] kvm: pic: non byte read [ 125.318725][ T5154] kvm: pic: non byte read [ 125.323439][ T5154] kvm: pic: non byte read [ 125.338905][ T5154] kvm: pic: non byte read [ 125.343698][ T5154] kvm: pic: non byte read [ 125.368661][ T5154] kvm: pic: non byte read [ 125.373413][ T5154] kvm: pic: non byte read [ 125.398847][ T5154] kvm: pic: non byte read [ 125.675648][ T4229] TC_ACT_REPEAT abuse ? [ 125.821309][ T26] audit: type=1326 audit(1785967649.537:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5162 comm="syz.4.302" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f358e45fe57 code=0x0 [ 126.097926][ T5157] device syz_tun left promiscuous mode [ 126.182731][ T26] audit: type=1326 audit(1785967649.897:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.2.304" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7fc00000 [ 126.265185][ T26] audit: type=1326 audit(1785967649.917:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5169 comm="syz.2.304" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feb53ddb0d9 code=0x7fc00000 [ 126.320139][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.327661][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.574926][ T26] audit: type=1804 audit(1785967650.287:1138): pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.305" name="bus" dev="ramfs" ino=36085 res=1 errno=0 [ 126.630820][ T26] audit: type=1804 audit(1785967650.307:1139): pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.305" name="bus" dev="ramfs" ino=36085 res=1 errno=0 [ 127.076028][ T5176] TC_ACT_REPEAT abuse ? [ 127.859039][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.943556][ T5186] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 127.997384][ T5157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.077157][ T5121] Set syz1 is full, maxelem 65536 reached [ 128.595914][ T5157] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.606259][ T5157] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.615295][ T5157] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.624793][ T5157] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.874474][ T5190] netlink: 'syz.1.311': attribute type 4 has an invalid length. [ 128.882788][ T26] audit: type=1326 audit(1785967652.597:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5187 comm="syz.4.310" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 129.464080][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 129.493738][ T5205] netlink: 'syz.3.317': attribute type 28 has an invalid length. [ 129.501839][ T5205] netlink: 'syz.3.317': attribute type 3 has an invalid length. [ 129.509588][ T5205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.317'. [ 129.606395][ T5220] HTB: quantum of class 800B0008 is small. Consider r2q change. [ 129.759647][ T5227] netlink: 'syz.0.325': attribute type 16 has an invalid length. [ 129.770000][ T5227] netlink: 'syz.0.325': attribute type 17 has an invalid length. [ 129.782833][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 129.799538][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 129.842782][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 129.857985][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 129.866673][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 129.877492][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 129.893122][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 129.905433][ T5227] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 129.941948][ T5227] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 130.058838][ C0] TC_ACT_REPEAT abuse ? [ 130.083818][ T5246] 9pnet: p9_errstr2errno: server reported unknown error 00000000,group_id [ 130.195041][ T5251] xt_bpf: check failed: parse error [ 130.318432][ T1111] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 130.630004][ T5104] TC_ACT_REPEAT abuse ? [ 130.679679][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 130.737277][ T1111] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 130.877438][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 131.036863][ T1111] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 131.231055][ T1111] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 131.271020][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.281019][ T1111] usb 5-1: config 0 descriptor?? [ 131.528766][ T1111] hdpvr 5-1:0.0: firmware version 0xc1 dated Te1iYۘFwABoqrN6?O+-NG. [ 131.548883][ T1111] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 131.573307][ T5280] overlayfs: failed to clone upperpath [ 131.677466][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 131.695430][ T5285] bond0: (slave bridge0): Releasing backup interface [ 131.707612][ T5285] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 131.806666][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.817277][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.825642][ T5285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.855527][ T5285] bond0: (slave wlan1): Releasing backup interface [ 131.904076][ T5287] team0: Mode changed to "broadcast" [ 131.934293][ T5290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 132.348695][ T1111] hdpvr 5-1:0.0: Could not setup controls [ 132.362725][ T1111] hdpvr 5-1:0.0: registering videodev failed [ 132.398966][ T1111] hdpvr: probe of 5-1:0.0 failed with error -71 [ 132.419883][ T1111] usb 5-1: USB disconnect, device number 6 [ 135.278389][ T5313] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 135.322486][ T5317] bond2: (slave gretap1): making interface the new active one [ 135.347755][ T5334] mmap: syz.4.365 (5334) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 135.364606][ T5317] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 135.386336][ T5318] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 135.416720][ T5334] cgroup: Setting release_agent not allowed [ 135.436801][ T5332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.364'. [ 135.528660][ T5332] device ip6gre1 entered promiscuous mode [ 135.566487][ T5337] netlink: 'syz.1.364': attribute type 6 has an invalid length. [ 135.599738][ T5337] netlink: 72 bytes leftover after parsing attributes in process `syz.1.364'. [ 135.677561][ T5340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.773168][ T5344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.827290][ T5344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.865512][ T5344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.898734][ T5344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.928759][ T5344] bond2: (slave geneve2): making interface the new active one [ 135.967177][ T5344] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 136.026467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 136.064641][ T5344] syz.0.367 (5344) used greatest stack depth: 18096 bytes left [ 136.378669][ C0] TC_ACT_REPEAT abuse ? [ 136.384171][ T5104] TC_ACT_REPEAT abuse ? [ 137.631427][ T5372] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.375'. [ 137.920943][ T5377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.379'. [ 138.316277][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.327145][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.650936][ T5390] netlink: 'syz.2.383': attribute type 4 has an invalid length. [ 138.732952][ T26] audit: type=1326 audit(1785967662.447:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.2.385" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x0 [ 138.942740][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 139.197111][ T5404] netlink: 'syz.4.389': attribute type 4 has an invalid length. [ 139.205876][ T5404] netlink: 152 bytes leftover after parsing attributes in process `syz.4.389'. [ 139.608431][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 139.633160][ T5415] device bond0 entered promiscuous mode [ 139.653189][ T5415] device batadv0 entered promiscuous mode [ 139.663855][ T5420] fuse: Bad value for 'fd' [ 139.707545][ T5415] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 139.720193][ T5415] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 139.728901][ T5421] netlink: 14 bytes leftover after parsing attributes in process `syz.1.392'. [ 139.825465][ T5421] device bond0 left promiscuous mode [ 139.832208][ T5421] bond0 (unregistering): Released all slaves [ 139.857372][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 140.512154][ T5446] tipc: Failed to remove unknown binding: 66,0,0/4:98822972/98822974 [ 140.521446][ T5446] tipc: Failed to remove unknown binding: 66,0,0/4:98822972/98822973 [ 140.532951][ T5446] tipc: Failed to remove unknown binding: 66,0,0/4:98822972/98822974 [ 140.543117][ T5446] tipc: Failed to remove unknown binding: 66,0,0/4:98822972/98822973 [ 141.537091][ T5472] netlink: 168 bytes leftover after parsing attributes in process `syz.0.412'. [ 141.719765][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 142.107684][ T5490] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.419'. [ 143.059616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 143.144769][ T5499] netlink: 64 bytes leftover after parsing attributes in process `syz.4.420'. [ 143.167346][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 143.190135][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 143.265317][ T26] audit: type=1326 audit(1785967666.977:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff428cb10d9 code=0x0 [ 143.354179][ T26] audit: type=1326 audit(1785967667.067:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.404667][ T26] audit: type=1326 audit(1785967667.097:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.483425][ T26] audit: type=1326 audit(1785967667.097:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.540595][ T26] audit: type=1326 audit(1785967667.097:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.573202][ T26] audit: type=1326 audit(1785967667.097:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.613213][ T26] audit: type=1326 audit(1785967667.097:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.650754][ T26] audit: type=1326 audit(1785967667.097:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.679941][ T26] audit: type=1326 audit(1785967667.097:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff428cb10d9 code=0x7ffc0000 [ 143.739009][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 143.739024][ T26] audit: type=1326 audit(1785967667.457:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.771788][ T26] audit: type=1326 audit(1785967667.487:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.799745][ T26] audit: type=1326 audit(1785967667.487:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.825121][ T26] audit: type=1326 audit(1785967667.507:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.854690][ T26] audit: type=1326 audit(1785967667.517:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.881218][ T26] audit: type=1326 audit(1785967667.537:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.907141][ T26] audit: type=1326 audit(1785967667.567:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.935871][ T26] audit: type=1326 audit(1785967667.567:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 143.960862][ T26] audit: type=1326 audit(1785967667.597:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 144.008693][ T26] audit: type=1326 audit(1785967667.617:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.0.425" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff428c7190e code=0x7ffc0000 [ 144.160991][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 144.238032][ T5536] loop4: detected capacity change from 0 to 512 [ 144.314105][ T5536] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.326553][ T5536] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.350492][ T5544] netlink: 'syz.3.439': attribute type 10 has an invalid length. [ 144.358761][ T5544] device syz_tun entered promiscuous mode [ 144.384107][ T5544] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 144.414544][ T5098] bond0: (slave bond_slave_1): interface is now down [ 144.427648][ T5098] bond0: (slave syz_tun): interface is now down [ 144.446913][ T5098] bond0: now running without any active interface! [ 144.770346][ T4189] libceph: connect (1)127.0.0.1:6789 error -101 [ 144.786958][ T4189] libceph: mon0 (1)127.0.0.1:6789 connect error [ 144.797850][ T4189] libceph: connect (1)127.0.0.1:6789 error -101 [ 144.805353][ T4189] libceph: mon0 (1)127.0.0.1:6789 connect error [ 145.555648][ T5556] ceph: No mds server is up or the cluster is laggy [ 145.568555][ T4189] libceph: connect (1)127.0.0.1:6789 error -101 [ 145.575504][ T4189] libceph: mon0 (1)127.0.0.1:6789 connect error [ 145.605026][ T5567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 145.614054][ T5567] device bridge_slave_1 left promiscuous mode [ 145.621078][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.642175][ T5567] device bridge_slave_0 left promiscuous mode [ 145.691981][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.727843][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 146.287320][ T5600] tipc: Failed to remove unknown binding: 66,0,0/4:3544419560/3544419562 [ 146.296542][ T5600] tipc: Failed to remove unknown binding: 66,0,0/4:3544419560/3544419561 [ 146.309270][ T5600] tipc: Failed to remove unknown binding: 66,0,0/4:3544419560/3544419562 [ 146.320790][ T5600] tipc: Failed to remove unknown binding: 66,0,0/4:3544419560/3544419561 [ 146.370119][ T5602] netlink: 156 bytes leftover after parsing attributes in process `syz.2.460'. [ 146.714176][ T5617] VFS: Mount too revealing [ 146.840448][ T5625] netlink: 'syz.0.469': attribute type 11 has an invalid length. [ 147.070039][ T5629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.471'. [ 147.210138][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 147.758534][ T5650] netlink: 168 bytes leftover after parsing attributes in process `syz.0.478'. [ 147.970314][ T5656] overlayfs: failed to clone upperpath [ 148.365792][ T5667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 148.419785][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 148.513124][ T5667] netlink: 'syz.2.486': attribute type 5 has an invalid length. [ 148.539962][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 148.578548][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 149.548243][ T5674] tipc: Resetting bearer [ 152.860765][ T5674] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.869801][ T5674] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.880953][ T5674] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.890236][ T5674] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.026353][ T5674] device ip6gre1 left promiscuous mode [ 153.138634][ T5684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.491'. [ 153.161570][ T5684] device ip6gre1 entered promiscuous mode [ 153.357674][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 153.357690][ T26] audit: type=1804 audit(1785967677.067:1265): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.500" name="bus" dev="ramfs" ino=37214 res=1 errno=0 [ 153.439490][ T26] audit: type=1804 audit(1785967677.077:1266): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.500" name="bus" dev="ramfs" ino=37214 res=1 errno=0 [ 153.706583][ T5726] netlink: 'syz.0.503': attribute type 4 has an invalid length. [ 153.771711][ T5726] netlink: 'syz.0.503': attribute type 4 has an invalid length. [ 154.102066][ T1108] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 154.845549][ T5734] syz.1.505 sent an empty control message without MSG_MORE. [ 154.868947][ T1108] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 154.877412][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.923098][ T1108] usb 5-1: config 0 has no interfaces? [ 154.941734][ T1108] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 154.948392][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 154.988495][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.026716][ T1108] usb 5-1: config 0 descriptor?? [ 155.072814][ T26] audit: type=1326 audit(1785967678.787:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.134298][ T26] audit: type=1326 audit(1785967678.817:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.264785][ T26] audit: type=1326 audit(1785967678.817:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.418816][ T26] audit: type=1326 audit(1785967678.817:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.450437][ T26] audit: type=1326 audit(1785967678.817:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.538830][ T1108] usb 5-1: string descriptor 0 read error: -71 [ 155.578877][ T1108] usb 5-1: USB disconnect, device number 7 [ 155.600004][ T26] audit: type=1326 audit(1785967678.817:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.696444][ T26] audit: type=1326 audit(1785967678.817:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.782384][ T26] audit: type=1326 audit(1785967678.817:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5737 comm="syz.1.507" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x7ffc0000 [ 155.824939][ T5750] lo speed is unknown, defaulting to 1000 [ 155.844812][ T5751] IPVS: nq: FWM 3 0x00000003 - no destination available [ 157.286227][ T5778] loop4: detected capacity change from 0 to 1024 [ 157.449197][ T5778] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 157.456868][ T5778] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.564201][ T5778] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 158.766269][ T5805] 9pnet: p9_errstr2errno: server reported unknown error 'I$۷= [ 160.385242][ T5830] netlink: 'syz.2.539': attribute type 27 has an invalid length. [ 160.438335][ T5830] netlink: 'syz.2.539': attribute type 4 has an invalid length. [ 160.446043][ T5830] netlink: 144 bytes leftover after parsing attributes in process `syz.2.539'. [ 160.554449][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 160.554464][ T26] audit: type=1326 audit(1785967684.267:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.3.540" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x0 [ 161.142488][ T5841] Illegal XDP return value 4294967274, expect packet loss! [ 161.223169][ T5844] bond2: option mode: unable to set because the bond device has slaves [ 161.262678][ T5844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.309207][ T5844] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 161.472755][ T5823] ODEBUG: Out of memory. ODEBUG disabled [ 161.714487][ T5855] netlink: 'syz.3.549': attribute type 49 has an invalid length. [ 161.918410][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.984553][ T5855] device ip6gretap0 entered promiscuous mode [ 162.358506][ T5873] netlink: 3 bytes leftover after parsing attributes in process `syz.0.554'. [ 162.387897][ T5873] 0X: renamed from caif0 [ 162.408709][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.474765][ T5873] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 162.518739][ T1108] usb 5-1: config 254 has an invalid interface number: 213 but max is 0 [ 162.533998][ T1108] usb 5-1: config 254 has no interface number 0 [ 162.558451][ T1108] usb 5-1: config 254 interface 213 has no altsetting 0 [ 162.698066][ T5884] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 162.727251][ T5884] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.556'. [ 162.768709][ T1108] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9c.8d [ 162.797689][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.847021][ T1108] usb 5-1: Product: syz [ 162.867298][ T1108] usb 5-1: Manufacturer: syz [ 162.879530][ T1108] usb 5-1: SerialNumber: syz [ 162.916703][ T5890] netlink: 'syz.0.557': attribute type 13 has an invalid length. [ 162.958853][ T5890] netlink: 'syz.0.557': attribute type 17 has an invalid length. [ 163.192848][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.218021][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.249722][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.264565][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.290488][ T5890] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 163.341397][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.548'. [ 163.442439][ T1108] usb_ehset_test: probe of 5-1:254.213 failed with error -32 [ 163.478871][ T1108] usb 5-1: USB disconnect, device number 8 [ 163.704043][ T5919] batman_adv: batadv0: Adding interface: dummy0 [ 163.726950][ T5919] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.783369][ T5919] batman_adv: batadv0: Interface activated: dummy0 [ 163.830764][ T5921] batadv0: mtu less than device minimum [ 163.838867][ T5921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.852523][ T5921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.865838][ T5921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.878616][ T5921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.891454][ T5921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.904549][ T5921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 163.917878][ T5921] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 164.321808][ T1108] libceph: connect (1)127.0.0.1:6789 error -101 [ 164.328243][ T1108] libceph: mon0 (1)127.0.0.1:6789 connect error [ 164.447265][ T5926] ceph: No mds server is up or the cluster is laggy [ 165.212144][ T5957] bond0: (slave macvlan2): Opening slave failed [ 165.704188][ T1108] kernel write not supported for file [eventfd] (pid: 1108 comm: kworker/1:2) [ 165.884219][ T5985] loop4: detected capacity change from 0 to 512 [ 165.951837][ T5985] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 165.951837][ T5985] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 165.951837][ T5985] [ 166.022620][ T5985] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 166.051889][ T5985] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 166.092895][ T5985] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 166.111512][ T5985] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e042a02c, mo2=0000] [ 166.129997][ T5985] EXT4-fs (loop4): failed to initialize system zone (-117) [ 166.148738][ T5985] EXT4-fs (loop4): mount failed [ 166.407142][ T6004] bond1: option mode: unable to set because the bond device has slaves [ 166.427792][ T6004] bond1: (slave macvlan2): Error -22 calling dev_set_mtu [ 169.480843][ T26] audit: type=1326 audit(1785967693.197:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.1.616" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ea054a0d9 code=0x0 [ 169.557666][ T6068] lo speed is unknown, defaulting to 1000 [ 169.844732][ T1111] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.972847][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.618'. [ 170.491622][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 170.528545][ T1111] usb 5-1: Using ep0 maxpacket: 8 [ 170.689798][ T1111] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.808533][ T1111] usb 5-1: config 15 has an invalid interface number: 234 but max is 0 [ 170.821580][ T1111] usb 5-1: config 15 has no interface number 0 [ 170.832409][ T1111] usb 5-1: config 15 interface 234 has no altsetting 0 [ 174.028421][ T1111] usb 5-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=20.aa [ 174.037960][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.088655][ T1111] usb 5-1: can't set config #15, error -71 [ 174.124120][ T1111] usb 5-1: USB disconnect, device number 9 [ 174.569189][ T6149] netlink: 'syz.1.640': attribute type 11 has an invalid length. [ 174.865258][ T6160] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 175.046279][ T6160] device bond1 entered promiscuous mode [ 175.052653][ T6160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.136578][ T6170] bond1: (slave bridge2): making interface the new active one [ 175.148689][ T6170] device bridge2 entered promiscuous mode [ 175.179230][ T6170] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 175.218479][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 176.709576][ T6202] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 176.840604][ T6202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.854417][ T6203] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 177.642413][ T6203] EXT4-fs (loop4): unable to read superblock [ 177.740319][ T6205] bond2: (slave veth3): Enslaving as an active interface with a down link [ 177.839273][ T6220] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.859108][ T6216] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 177.914551][ T6210] bond2: (slave veth5): Enslaving as an active interface with a down link [ 179.866989][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 180.601290][ T6290] sch_fq: defrate 53322 ignored. [ 181.936438][ T6314] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.690'. [ 182.157164][ T6316] netlink: 14 bytes leftover after parsing attributes in process `syz.3.691'. [ 183.755323][ T6333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.697'. [ 183.952481][ T6343] device gretap1 entered promiscuous mode [ 184.527978][ T6359] netlink: 10 bytes leftover after parsing attributes in process `syz.1.703'. [ 184.670768][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'. [ 185.284464][ T6391] netlink: 'syz.1.718': attribute type 7 has an invalid length. [ 185.324740][ T6391] netlink: 'syz.1.718': attribute type 7 has an invalid length. [ 185.419786][ T6347] loop4: detected capacity change from 0 to 32768 [ 185.541499][ T6347] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.698 (6347) [ 185.771077][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/95.tmp-b7:4' failed: Read-only file system [ 185.785044][ T6347] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 185.826731][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:4' failed: Read-only file system [ 185.874221][ T6347] BTRFS info (device loop4): force clearing of disk cache [ 185.957309][ T6347] BTRFS info (device loop4): enabling auto defrag [ 186.021869][ T6347] BTRFS info (device loop4): max_inline at 0 [ 186.113349][ T6347] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 186.238307][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 186.258307][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 186.268304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 186.288347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 186.298313][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 186.336768][ T6347] BTRFS error (device loop4): open_ctree failed: -22 [ 187.592148][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/95.tmp-b7:4' failed: Read-only file system [ 187.624635][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/95.tmp-b7:4' failed: Read-only file system [ 187.665252][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/95.tmp-b7:4' failed: Read-only file system [ 187.933121][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 188.107697][ T26] audit: type=1326 audit(1785967711.817:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6450 comm="syz.4.740" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x0 [ 188.108409][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 188.245424][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 188.283628][ T6464] IPVS: Unknown mcast interface: bridge0 [ 188.381884][ T6464] device macvtap1 entered promiscuous mode [ 188.494993][ T6466] device macvtap2 entered promiscuous mode [ 189.331897][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 189.346424][ T6477] capability: warning: `syz.2.748' uses deprecated v2 capabilities in a way that may be insecure [ 189.352219][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 190.701299][ T6499] tipc: Enabled bearer , priority 10 [ 190.773052][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 191.820412][ T4237] tipc: Node number set to 3385062277 [ 191.883353][ T6519] netlink: 'syz.0.763': attribute type 1 has an invalid length. [ 191.932600][ T6519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.014907][ T6519] bond3: (slave geneve3): making interface the new active one [ 192.051995][ T6519] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 192.104141][ T5100] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 192.484217][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 192.636219][ T6549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.773'. [ 193.159256][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 193.501657][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 193.628738][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 194.543483][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 194.727566][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 194.837715][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 195.101955][ T6588] net_ratelimit: 12 callbacks suppressed [ 195.101979][ T6588] Set syz1 is full, maxelem 0 reached [ 195.269622][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 195.838006][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 196.722552][ T6619] xt_CT: No such helper "netbios-ns" [ 196.787243][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 197.172930][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 198.266821][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 198.415006][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.620799][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 199.362696][ T6655] batman_adv: batadv0: Interface deactivated: dummy0 [ 199.404338][ T6655] batman_adv: batadv0: Removing interface: dummy0 [ 199.419861][ T6655] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 199.434619][ T6655] bond0: (slave bond_slave_0): Releasing backup interface [ 199.445974][ T6655] bond0: (slave bond_slave_1): Releasing backup interface [ 199.472183][ T6655] team0: Port device team_slave_0 removed [ 199.482804][ T6655] team0: Port device team_slave_1 removed [ 199.490034][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.497789][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.511640][ T6655] bond2: (slave geneve2): Releasing active interface [ 199.534984][ T6655] bond2: (slave geneve2): the permanent HWaddr of slave - 9e:c4:6e:4c:d8:22 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 199.596259][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 199.637858][ T6655] bond2: (slave macvlan2): making interface the new active one [ 199.684992][ T6655] bond2: (slave macvlan2): Releasing active interface [ 199.724929][ T6655] bond3: (slave geneve3): Releasing active interface [ 199.744839][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.759275][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.775068][ T6655] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.784356][ T6655] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.803578][ T6655] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.814928][ T6655] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.865377][ T6664] team0: Mode changed to "roundrobin" [ 199.913320][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 200.491905][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.508855][ T6673] bridge0: mtu less than device minimum [ 200.515411][ T6673] device bridge_slave_1 left promiscuous mode [ 200.531382][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.566428][ T6673] bridge0: mtu less than device minimum [ 200.594967][ T6673] bond0: (slave bond_slave_0): Releasing backup interface [ 200.624706][ T6673] bond0: (slave bond_slave_1): Releasing backup interface [ 200.675375][ T6673] team0: Port device team_slave_0 removed [ 200.694278][ T6673] team0: Port device team_slave_1 removed [ 200.720138][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.743039][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.782688][ T6673] device vlan2 left promiscuous mode [ 200.800497][ T6673] device bridge_slave_0 left promiscuous mode [ 200.821113][ T6673] bridge0: port 3(vlan2) entered disabled state [ 200.845868][ T6673] bond1: (slave ip6gretap1): Releasing active interface [ 200.875037][ T6673] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 200.926229][ T6684] capability: warning: `syz.1.816' uses 32-bit capabilities (legacy support in use) [ 200.930821][ T6674] team0: Port device xfrm0 added [ 201.017944][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/96.tmp-b7:4' failed: Read-only file system [ 201.117046][ T26] audit: type=1800 audit(1785967724.827:1322): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.813" name="bus" dev="ramfs" ino=40153 res=0 errno=0 [ 201.150562][ T6690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'. [ 201.198988][ T6692] netlink: 14 bytes leftover after parsing attributes in process `syz.2.820'. [ 201.216303][ T6688] loop4: detected capacity change from 0 to 8192 [ 201.395268][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/97.tmp-b7:4' failed: Read-only file system [ 201.419610][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:4' failed: Read-only file system [ 201.856056][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 201.893793][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 202.039717][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 202.178027][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 202.375383][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 202.419657][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/97.tmp-b7:4' failed: Read-only file system [ 202.519754][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/97.tmp-b7:4' failed: Read-only file system [ 202.738665][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 202.868103][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 202.932914][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 203.075244][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 203.132528][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.170793][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.184982][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.236585][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 203.468606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 203.864416][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 204.039490][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 204.303193][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 204.444517][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 204.553634][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 204.743422][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 204.987788][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 204.996965][ T6787] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 205.006287][ T6787] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 206.259209][ T6789] lo speed is unknown, defaulting to 1000 [ 206.985794][ T6813] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 207.042756][ T6813] netlink: 'syz.2.867': attribute type 4 has an invalid length. [ 207.085920][ T6813] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.867'. [ 207.139176][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 207.366327][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 207.442698][ T6831] netlink: 3 bytes leftover after parsing attributes in process `syz.2.874'. [ 207.468902][ T6831] 0X: renamed from caif0 [ 207.495277][ T6831] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 208.632330][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 209.403697][ T6800] Set syz1 is full, maxelem 65536 reached [ 209.695261][ T6848] device syz_tun left promiscuous mode [ 209.706187][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.706763][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.917218][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 210.292627][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 211.554217][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 211.804065][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.854939][ T6848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.851939][ T6848] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.867039][ T6848] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.876586][ T6848] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.891903][ T6848] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.038333][ T6848] device ip6gretap1 left promiscuous mode [ 213.305033][ T6848] device gretap1 left promiscuous mode [ 213.446304][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 213.477473][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.485994][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.494037][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.503281][ T6856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.519486][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 213.575252][ T6911] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 213.596601][ T6892] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 213.614444][ T6892] netlink: 'syz.4.888': attribute type 4 has an invalid length. [ 213.625334][ T6892] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.888'. [ 213.638557][ T6895] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 213.647024][ T6895] netlink: 'syz.4.888': attribute type 4 has an invalid length. [ 213.663363][ T6895] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.888'. [ 213.712200][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 213.723508][ T6911] netlink: 'syz.0.893': attribute type 10 has an invalid length. [ 213.870717][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 214.091912][ T6932] sctp: [Deprecated]: syz.0.901 (pid 6932) Use of int in max_burst socket option. [ 214.091912][ T6932] Use struct sctp_assoc_value instead [ 214.800893][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 214.827853][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.906'. [ 214.867308][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 214.890899][ T6949] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 214.977359][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 216.227649][ T6974] MPTCP: kernel_bind error, err=-99 [ 216.545376][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 216.670331][ T6991] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 216.683750][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 216.804175][ T6997] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.813661][ T6997] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.822589][ T6997] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.858547][ T6997] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 216.906020][ T6997] bond3: (slave geneve2): making interface the new active one [ 216.942135][ T6997] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 217.008663][ T6997] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 217.139422][ T6991] bond3 (unregistering): (slave geneve2): Releasing active interface [ 217.153241][ T6991] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.166573][ T6991] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.176422][ T6991] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.185640][ T6991] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.881837][ T6991] bond3 (unregistering): Released all slaves [ 218.195892][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 218.224770][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.930'. [ 218.329969][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 218.475814][ T26] audit: type=1326 audit(1785967742.187:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.563575][ T26] audit: type=1326 audit(1785967742.217:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.598623][ T26] audit: type=1326 audit(1785967742.217:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.637236][ T26] audit: type=1326 audit(1785967742.217:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.675789][ T26] audit: type=1326 audit(1785967742.217:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.715533][ T26] audit: type=1326 audit(1785967742.217:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.760362][ T26] audit: type=1326 audit(1785967742.217:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.786208][ T26] audit: type=1326 audit(1785967742.217:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.810665][ T26] audit: type=1326 audit(1785967742.217:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.835091][ T26] audit: type=1326 audit(1785967742.217:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7028 comm="syz.4.933" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358e4660d9 code=0x7fc00000 [ 218.879210][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 219.971762][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 220.668421][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.942'. [ 221.572008][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 221.575814][ T7064] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 221.681348][ T7064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.700619][ T7064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.709725][ T7064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.718874][ T7064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 221.730395][ T7064] bond2: (slave geneve2): making interface the new active one [ 221.739535][ T7064] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 221.761065][ T7072] bond2 (unregistering): (slave geneve2): Releasing active interface [ 221.806020][ T7072] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.815654][ T7072] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.825842][ T7072] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.836376][ T7072] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.859866][ T7072] bond2 (unregistering): Released all slaves [ 221.879506][ T7075] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 221.901310][ T7075] netlink: 'syz.3.952': attribute type 4 has an invalid length. [ 221.939780][ T5747] udevd[5747]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 221.952437][ T7075] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.952'. [ 222.044239][ T7089] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 222.083168][ T7089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.116156][ T7089] bond2: (slave veth3): Enslaving as an active interface with a down link [ 222.148449][ T7089] bond2: (slave veth5): Enslaving as an active interface with a down link [ 222.238434][ T5692] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 222.488526][ T5692] usb 5-1: Using ep0 maxpacket: 32 [ 222.620106][ T5692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.642824][ T5692] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.854683][ T5692] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 222.874676][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.916692][ T5692] usb 5-1: Product: syz [ 222.927196][ T5692] usb 5-1: Manufacturer: syz [ 222.932654][ T5692] usb 5-1: SerialNumber: syz [ 222.976221][ T5692] usb 5-1: config 0 descriptor?? [ 223.562434][ T7103] tipc: Resetting bearer [ 223.763773][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.771414][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.197067][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.369847][ T7103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.066990][ T7103] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.076380][ T7103] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.085705][ T7103] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.094934][ T7103] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.246299][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'. [ 228.268899][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.309297][ T7105] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.317994][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.327227][ T7105] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.337071][ T7105] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 228.355045][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 228.495038][ T7129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.977'. [ 228.516295][ T4232] usb 5-1: USB disconnect, device number 10 [ 228.582913][ T7132] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 228.592501][ T7134] udevd[7134]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 228.663434][ T7141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.676235][ T7141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.714571][ T7141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.739976][ T7141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.759362][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 228.778809][ T7141] bond4: (slave geneve4): making interface the new active one [ 228.787272][ T7141] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 228.824290][ T7150] netlink: 'syz.4.970': attribute type 11 has an invalid length. [ 228.847157][ T7144] bond4 (unregistering): (slave geneve4): Releasing active interface [ 228.876798][ T7144] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.887407][ T7144] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.903700][ T7144] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.913420][ T7144] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 228.943333][ T7144] bond4 (unregistering): Released all slaves [ 229.064407][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 229.130255][ T7157] blk_update_request: I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 229.199364][ T7162] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 229.219671][ T7157] EXT4-fs (loop8): unable to read superblock [ 229.484797][ T7162] device bond4 entered promiscuous mode [ 229.525862][ T7162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.598165][ T7162] bond4: (slave bridge0): making interface the new active one [ 229.606376][ T7162] device bridge0 entered promiscuous mode [ 229.614201][ T7162] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 229.623776][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 229.660905][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 231.393613][ T7183] xt_CT: No such helper "netbios-ns" [ 231.449670][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 232.171361][ T7213] lo speed is unknown, defaulting to 1000 [ 232.201261][ T7213] lo speed is unknown, defaulting to 1000 [ 232.220416][ T7213] lo speed is unknown, defaulting to 1000 [ 232.480727][ T7221] netlink: 'syz.1.1006': attribute type 10 has an invalid length. [ 232.518216][ T7221] team0: Port device dummy0 added [ 232.530980][ T6908] lo speed is unknown, defaulting to 1000 [ 232.541789][ T7213] infiniband sz1: set active [ 232.557099][ T7213] infiniband sz1: added lo [ 232.560681][ T7221] netlink: 'syz.1.1006': attribute type 10 has an invalid length. [ 232.594355][ T7221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.684076][ T7213] RDS/IB: sz1: added [ 232.690576][ T7213] smc: adding ib device sz1 with port count 1 [ 232.697063][ T7213] smc: ib device sz1 port 1 has pnetid [ 232.726139][ T7134] udevd[7134]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 232.737780][ T7221] team0: Failed to send options change via netlink (err -105) [ 232.753013][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 232.764801][ T7221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 232.777260][ T7221] team0: Port device dummy0 removed [ 232.783326][ T7108] lo speed is unknown, defaulting to 1000 [ 232.793024][ T7213] lo speed is unknown, defaulting to 1000 [ 232.967071][ T7228] netlink: 'syz.4.1008': attribute type 10 has an invalid length. [ 233.004443][ T7228] team0: Device dummy0 is of different type [ 233.068553][ T7213] lo speed is unknown, defaulting to 1000 [ 233.072515][ T7230] netlink: 'syz.4.1008': attribute type 10 has an invalid length. [ 233.095922][ T7230] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 234.013552][ T7234] xt_CT: No such helper "netbios-ns" [ 234.084968][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 234.156510][ T7239] loop4: detected capacity change from 0 to 128 [ 234.182088][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 234.240935][ T7213] lo speed is unknown, defaulting to 1000 [ 234.296590][ T7244] attempt to access beyond end of device [ 234.296590][ T7244] loop4: rw=2049, want=577, limit=128 [ 234.400202][ T7239] attempt to access beyond end of device [ 234.400202][ T7239] loop4: rw=524288, want=369, limit=128 [ 234.422975][ T7213] lo speed is unknown, defaulting to 1000 [ 234.438923][ T7239] attempt to access beyond end of device [ 234.438923][ T7239] loop4: rw=0, want=153, limit=128 [ 234.472286][ T7244] attempt to access beyond end of device [ 234.472286][ T7244] loop4: rw=0, want=151, limit=128 [ 234.501828][ T7239] attempt to access beyond end of device [ 234.501828][ T7239] loop4: rw=0, want=146, limit=128 [ 234.516478][ T7239] Buffer I/O error on dev loop4, logical block 145, async page read [ 234.525471][ T7239] attempt to access beyond end of device [ 234.525471][ T7239] loop4: rw=0, want=147, limit=128 [ 234.536808][ T7239] Buffer I/O error on dev loop4, logical block 146, async page read [ 234.546961][ T7239] attempt to access beyond end of device [ 234.546961][ T7239] loop4: rw=0, want=148, limit=128 [ 234.563884][ T7239] Buffer I/O error on dev loop4, logical block 147, async page read [ 234.572767][ T7239] attempt to access beyond end of device [ 234.572767][ T7239] loop4: rw=0, want=149, limit=128 [ 234.584299][ T7239] Buffer I/O error on dev loop4, logical block 148, async page read [ 234.592794][ T7239] attempt to access beyond end of device [ 234.592794][ T7239] loop4: rw=0, want=150, limit=128 [ 234.604211][ T7239] Buffer I/O error on dev loop4, logical block 149, async page read [ 234.616928][ T7239] attempt to access beyond end of device [ 234.616928][ T7239] loop4: rw=0, want=151, limit=128 [ 234.628496][ T7239] Buffer I/O error on dev loop4, logical block 150, async page read [ 234.637013][ T7239] Buffer I/O error on dev loop4, logical block 151, async page read [ 234.648035][ T7239] Buffer I/O error on dev loop4, logical block 152, async page read [ 234.658118][ T7244] Buffer I/O error on dev loop4, logical block 145, async page read [ 234.674651][ T7244] Buffer I/O error on dev loop4, logical block 146, async page read [ 234.748773][ T7213] lo speed is unknown, defaulting to 1000 [ 235.174924][ T7254] rdma_rxe: rxe_register_device failed with error -23 [ 235.211453][ T7254] rdma_rxe: failed to add lo [ 235.222712][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 235.256296][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 235.321958][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/100.tmp-b7:4' failed: Read-only file system [ 235.361846][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 235.397474][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 235.425849][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 235.520096][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.543392][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 235.573054][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 235.586329][ T7267] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 235.595472][ T7267] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 238.312351][ T7284] xt_CT: No such helper "netbios-ns" [ 238.332858][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/100.tmp-b7:4' failed: Read-only file system [ 238.403098][ T7291] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1030'. [ 238.482153][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/100.tmp-b7:4' failed: Read-only file system [ 238.534092][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 238.534109][ T26] audit: type=1326 audit(1785967762.247:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7fc00000 [ 238.574147][ T26] audit: type=1326 audit(1785967762.247:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6e32e930d9 code=0x7fc00000 [ 238.895797][ T7306] rdma_rxe: rxe_register_device failed with error -23 [ 238.908086][ T7306] rdma_rxe: failed to add lo [ 239.084275][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/100.tmp-b7:4' failed: Read-only file system [ 239.368767][ T26] audit: type=1326 audit(1785967762.997:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7fc00000 [ 239.623563][ T26] audit: type=1326 audit(1785967762.997:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6e32e930d9 code=0x7fc00000 [ 240.148064][ T26] audit: type=1326 audit(1785967762.997:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7fc00000 [ 240.195160][ T26] audit: type=1326 audit(1785967762.997:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7295 comm="syz.3.1020" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7fc00000 [ 240.253118][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 240.371993][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 242.235464][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/100.tmp-b7:4' failed: Read-only file system [ 242.510078][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/100.tmp-b7:4' failed: Read-only file system [ 242.778735][ T7372] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1059'. [ 243.291902][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 243.349117][ T7385] netlink: 'syz.2.1051': attribute type 5 has an invalid length. [ 243.397815][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1051'. [ 243.415186][ T7385] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 243.424051][ T7385] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 243.432751][ T7385] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 243.452609][ T7385] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 243.470787][ T7385] device geneve2 entered promiscuous mode [ 243.478740][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 243.488118][ T7389] netlink: 'syz.2.1051': attribute type 15 has an invalid length. [ 243.523411][ T7389] device vxlan0 entered promiscuous mode [ 243.534816][ T7392] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 243.682950][ T7399] loop4: detected capacity change from 0 to 512 [ 243.692739][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/100.tmp-b7:4' failed: Read-only file system [ 243.717600][ T7399] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 243.731599][ T7399] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.778144][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/101.tmp-b7:4' failed: Read-only file system [ 243.792876][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 244.047927][ T7411] tipc: Enabled bearer , priority 10 [ 244.059395][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/101.tmp-b7:4' failed: Read-only file system [ 244.107567][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/101.tmp-b7:4' failed: Read-only file system [ 244.173518][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 244.821221][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 245.884899][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 245.968498][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 246.157174][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 246.181534][ T7444] netlink: 'syz.4.1076': attribute type 5 has an invalid length. [ 246.190289][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 246.206252][ T7444] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 246.278883][ T7444] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 246.348383][ T7444] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 246.383202][ T7444] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 246.423376][ T7444] device geneve2 entered promiscuous mode [ 246.500001][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1076'. [ 246.542176][ T7451] netlink: 'syz.4.1076': attribute type 15 has an invalid length. [ 246.583321][ T7451] device vxlan0 entered promiscuous mode [ 247.942058][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 248.124002][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 248.164565][ T7477] bridge_slave_0: Caught tx_queue_len zero misconfig [ 249.615501][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 249.656211][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 249.748443][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 252.296417][ T7502] loop4: detected capacity change from 0 to 32768 [ 252.535931][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 252.587773][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 252.695958][ T7542] loop4: detected capacity change from 0 to 1024 [ 252.798600][ T7542] EXT4-fs (loop4): Ignoring removed bh option [ 252.870259][ T7542] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback. [ 252.924477][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 252.961135][ T7542] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 252.994999][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 253.155143][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 253.206150][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/103.tmp-b7:4' failed: Read-only file system [ 253.271573][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/105.tmp-b7:4' failed: Read-only file system [ 253.332190][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/105.tmp-b7:4' failed: Read-only file system [ 253.385088][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/105.tmp-b7:4' failed: Read-only file system [ 253.452469][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/105.tmp-b7:4' failed: Read-only file system [ 254.342069][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/106.tmp-b7:4' failed: Read-only file system [ 254.685205][ T7574] cgroup: Need name or subsystem set [ 256.051583][ T7591] loop4: detected capacity change from 0 to 128 [ 256.163280][ T7591] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 256.266153][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/106.tmp-b7:4' failed: Read-only file system [ 256.436208][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/107.tmp-b7:4' failed: Read-only file system [ 256.801656][ T7576] lo speed is unknown, defaulting to 1000 [ 256.855951][ T7576] lo speed is unknown, defaulting to 1000 [ 256.884755][ T7574] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1119'. [ 256.904610][ T7574] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 256.997620][ T7574] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 257.062641][ T26] audit: type=1800 audit(1785967780.777:1377): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1125" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 257.128668][ T7574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.682594][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 258.943579][ T7652] bridge_slave_0: Caught tx_queue_len zero misconfig [ 259.118214][ T7656] cgroup: Need name or subsystem set [ 259.174926][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 259.237008][ T7656] lo speed is unknown, defaulting to 1000 [ 259.278955][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 259.287015][ T7656] lo speed is unknown, defaulting to 1000 [ 259.373328][ T7661] bond0: (slave dummy0): Releasing backup interface [ 259.514992][ T7661] team0: Port device xfrm0 removed [ 259.554602][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 259.577139][ T7662] team0: Mode changed to "roundrobin" [ 259.615575][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 260.425945][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 260.484620][ T7656] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1145'. [ 260.505235][ T7656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.570016][ T7677] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 260.603547][ T7677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 260.620944][ T7677] device bridge_slave_0 left promiscuous mode [ 260.627213][ T7677] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.670547][ T7677] device bridge_slave_1 left promiscuous mode [ 260.688574][ T7677] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.711008][ T7677] bond0: (slave bond_slave_0): Releasing backup interface [ 260.730351][ T7677] bond0: (slave bond_slave_1): Releasing backup interface [ 260.755236][ T7677] team0: Port device team_slave_0 removed [ 260.782151][ T7677] team0: Port device team_slave_1 removed [ 260.788703][ T7677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.796735][ T7677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.811648][ T7677] bond2: (slave gretap1): Releasing active interface [ 260.827836][ T7681] syzkaller0: Caught tx_queue_len zero misconfig [ 261.258747][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.265121][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.102568][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 263.769199][ T7713] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1162'. [ 263.794926][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1162'. [ 264.028869][ T7717] cgroup: Need name or subsystem set [ 264.079404][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 264.250232][ T7717] lo speed is unknown, defaulting to 1000 [ 264.257547][ T7717] lo speed is unknown, defaulting to 1000 [ 264.431285][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 265.409854][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 266.556729][ T7135] udevd[7135]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 267.111273][ T7750] bond1: (slave bridge2): Releasing backup interface [ 267.118042][ T7750] device bridge2 left promiscuous mode [ 270.389862][ T7750] bond2: (slave veth3): Releasing active interface [ 270.454905][ T7750] bond2: (slave veth3): the permanent HWaddr of slave - ea:f4:ef:86:54:19 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 270.635442][ T7750] bond2: (slave veth5): Releasing active interface [ 271.028168][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1175'. [ 271.190514][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 271.378648][ T7769] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1179'. [ 271.536731][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/108.tmp-b7:4' failed: Read-only file system [ 271.572521][ T7774] xt_CT: No such helper "syz1" [ 271.648151][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 271.670412][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.688858][ T7787] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 271.711632][ T7787] bond4: (slave bridge0): Releasing backup interface [ 271.728360][ T7787] device bridge0 left promiscuous mode [ 272.958068][ T7785] loop4: detected capacity change from 0 to 32768 [ 272.982853][ T7796] sctp: [Deprecated]: syz.2.1190 (pid 7796) Use of int in max_burst socket option. [ 272.982853][ T7796] Use struct sctp_assoc_value instead [ 273.068478][ T7785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1186 (7785) [ 273.128926][ T7798] netlink: 'syz.2.1191': attribute type 10 has an invalid length. [ 273.140398][ T7785] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 273.153369][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 273.168605][ T7785] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 273.188472][ T7785] BTRFS info (device loop4): trying to use backup root at mount time [ 273.248516][ T7785] BTRFS info (device loop4): setting nodatasum [ 273.254852][ T7785] BTRFS info (device loop4): enabling ssd optimizations [ 273.285130][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/109.tmp-b7:4' failed: Read-only file system [ 273.295657][ T7785] BTRFS info (device loop4): using spread ssd allocation scheme [ 273.328332][ T7785] BTRFS info (device loop4): turning on flush-on-commit [ 273.338654][ T7785] BTRFS info (device loop4): force zlib compression, level 3 [ 273.346134][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 273.360543][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 273.388544][ T7785] BTRFS info (device loop4): using free space tree [ 273.410855][ T7785] BTRFS info (device loop4): has skinny extents [ 273.698450][ T7828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1196'. [ 273.707473][ T7828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1196'. [ 273.747777][ T7828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1196'. [ 273.988994][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/109.tmp-b7:4' failed: Read-only file system [ 274.025223][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system [ 274.252295][ T7857] bridge0: port 1(vlan4) entered blocking state [ 274.266522][ T7857] bridge0: port 1(vlan4) entered disabled state [ 274.416516][ T7862] overlayfs: failed to clone upperpath [ 274.450396][ T7862] overlayfs: failed to clone upperpath [ 275.920300][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/109.tmp-b7:4' failed: Read-only file system [ 276.407405][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/109.tmp-b7:4' failed: Read-only file system [ 276.596537][ T7885] lo: Caught tx_queue_len zero misconfig [ 277.586395][ T7898] bridge0: port 1(vlan2) entered blocking state [ 277.593345][ T7898] bridge0: port 1(vlan2) entered disabled state [ 277.600808][ T7898] device vlan2 entered promiscuous mode [ 277.606550][ T7898] device bridge_slave_0 entered promiscuous mode [ 277.667822][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 277.761914][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 277.865228][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 277.955975][ T7908] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 279.034165][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 279.274789][ T7931] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.031753][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 280.957844][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 280.976524][ T7951] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1230'. [ 281.028784][ T7948] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 281.236296][ T7961] overlayfs: failed to clone upperpath [ 281.275432][ T7961] overlayfs: failed to clone upperpath [ 281.440289][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 281.575144][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 281.612177][ T7972] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 281.703766][ T7982] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1243'. [ 281.936480][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 282.008069][ T7994] tipc: Disabling bearer [ 282.068034][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/110.tmp-b7:4' failed: Read-only file system [ 282.187566][ T7997] loop4: detected capacity change from 0 to 1024 [ 282.296663][ T7997] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.317306][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/111.tmp-b7:4' failed: Read-only file system [ 282.362777][ T7997] IPv6: sit1: Disabled Multicast RS [ 282.376938][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 282.408988][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/111.tmp-b7:4' failed: Read-only file system [ 282.421480][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 282.529720][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/111.tmp-b7:4' failed: Read-only file system [ 283.120346][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/111.tmp-b7:4' failed: Read-only file system [ 283.579026][ T8030] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1257'. [ 283.637791][ T8033] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 283.754668][ T8039] tipc: Disabling bearer [ 286.670244][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/112.tmp-b7:4' failed: Read-only file system [ 286.792346][ T8088] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1276'. [ 286.832440][ T8090] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 286.947227][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/112.tmp-b7:4' failed: Read-only file system [ 287.967493][ T8103] tipc: Resetting bearer [ 288.039937][ T8103] tipc: Disabling bearer [ 289.042355][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/112.tmp-b7:4' failed: Read-only file system [ 289.094700][ T8120] bond0: (slave macvlan2): Opening slave failed [ 289.107615][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 289.251348][ T8132] netlink: 'syz.1.1283': attribute type 10 has an invalid length. [ 290.144304][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/112.tmp-b7:4' failed: Read-only file system [ 290.244879][ T8140] loop4: detected capacity change from 0 to 2048 [ 290.513669][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system [ 290.526340][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-label/sy\x03.tmp-b7:4' failed: Read-only file system [ 290.537602][ T8140] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 291.417987][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system [ 291.430571][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-label/sy\x03.tmp-b7:4' failed: Read-only file system [ 292.512543][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system [ 292.593674][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/113.tmp-b7:4' failed: Read-only file system [ 292.771040][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 293.949138][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 294.008777][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 294.091981][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1307'. [ 294.216480][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 294.347489][ T8203] loop9: detected capacity change from 0 to 7 [ 294.521774][ T8203] Dev loop9: unable to read RDB block 7 [ 294.902520][ T8203] loop9: unable to read partition table [ 294.908688][ T8203] loop9: partition table beyond EOD, truncated [ 294.923449][ T8203] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 294.946307][ T7763] udevd[7763]: symlink '../../loop9' '/dev/disk/by-diskseq/115.tmp-b7:9' failed: Read-only file system [ 295.177317][ T3558] Dev loop9: unable to read RDB block 7 [ 295.191666][ T3558] loop9: unable to read partition table [ 295.204954][ T3558] loop9: partition table beyond EOD, truncated [ 295.423718][ T7763] udevd[7763]: symlink '../../loop9' '/dev/disk/by-diskseq/115.tmp-b7:9' failed: Read-only file system [ 295.445106][ T7764] udevd[7764]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 295.494379][ T7763] udevd[7763]: symlink '../../loop9' '/dev/disk/by-diskseq/115.tmp-b7:9' failed: Read-only file system [ 295.559422][ T7763] udevd[7763]: symlink '../../loop9' '/dev/disk/by-diskseq/116.tmp-b7:9' failed: Read-only file system [ 295.695921][ T8229] device macsec1 entered promiscuous mode [ 295.708637][ T8229] device virt_wifi0 entered promiscuous mode [ 295.923000][ T8247] device bridge4 entered promiscuous mode [ 296.219723][ T8254] ceph: No mds server is up or the cluster is laggy [ 296.868139][ T1111] libceph: connect (1)[c::]:6789 error -101 [ 296.874432][ T1111] libceph: mon0 (1)[c::]:6789 connect error [ 297.034112][ T8263] device syzkaller0 entered promiscuous mode [ 297.534842][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 297.848874][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 297.874683][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 298.026263][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 298.048572][ T8279] xt_ipcomp: unknown flags 1D [ 299.517358][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 299.623895][ T7763] udevd[7763]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 299.637082][ T8303] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1674533814/1674533816 [ 299.652456][ T8300] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1711601337/1711601338 [ 299.752544][ T8300] tipc: Failed to remove unknown binding: 66,0,0/2130706433:1711601337/1711601338 [ 299.999378][ T8314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1351'. [ 300.041101][ T8316] cgroup: No subsys list or none specified [ 300.239261][ T8314] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1351'. [ 300.442878][ T8314] tipc: Invalid UDP bearer configuration [ 300.442924][ T8314] tipc: Enabling of bearer rejected, failed to enable media [ 300.460681][ T8321] netlink: 'syz.0.1353': attribute type 3 has an invalid length. [ 300.468699][ T8321] netlink: 'syz.0.1353': attribute type 3 has an invalid length. [ 300.855092][ T8335] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 300.887804][ T8324] xt_CT: No such helper "netbios-ns" [ 301.315773][ T8337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.349657][ T8337] bond3: (slave bond4): making interface the new active one [ 301.399250][ T8337] bond3: (slave bond4): Enslaving as an active interface with an up link [ 302.443847][ T8372] netlink: 'syz.1.1367': attribute type 40 has an invalid length. [ 303.436469][ T8383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1371'. [ 303.488878][ T8387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1371'. [ 303.515400][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 304.144187][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 304.384144][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 304.676172][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 304.737305][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1383'. [ 305.031321][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 306.259944][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 306.360276][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 306.544001][ T8464] tipc: Started in network mode [ 306.551530][ T8464] tipc: Node identity 080211000001, cluster identity 4711 [ 306.572541][ T8464] tipc: Enabled bearer , priority 0 [ 306.698754][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 306.931609][ T8455] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1391'. [ 307.117699][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 308.270608][ T1111] tipc: Node number set to 134418688 [ 308.623867][ T8492] netlink: 'syz.3.1404': attribute type 21 has an invalid length. [ 308.669714][ T8492] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1404'. [ 308.884854][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 308.983343][ T8504] loop4: detected capacity change from 0 to 2048 [ 309.176446][ T8512] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.019996][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/117.tmp-b7:4' failed: Read-only file system [ 310.129948][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:4' failed: Read-only file system [ 310.354615][ T8533] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 310.432329][ T26] audit: type=1326 audit(1785967834.147:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8518 comm="syz.3.1412" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e32e930d9 code=0x0 [ 310.765731][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/117.tmp-b7:4' failed: Read-only file system [ 310.787041][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/117.tmp-b7:4' failed: Read-only file system [ 310.814399][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 310.901811][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 311.026018][ T26] audit: type=1326 audit(1785967834.737:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.071852][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 311.088681][ T26] audit: type=1326 audit(1785967834.797:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.120673][ T26] audit: type=1326 audit(1785967834.827:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.145925][ T26] audit: type=1326 audit(1785967834.827:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.204386][ T26] audit: type=1326 audit(1785967834.827:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.259630][ T26] audit: type=1326 audit(1785967834.827:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.284856][ T26] audit: type=1326 audit(1785967834.827:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.338429][ T26] audit: type=1326 audit(1785967834.827:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.408750][ T26] audit: type=1326 audit(1785967834.827:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8548 comm="syz.2.1419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53ddb0d9 code=0x7ffc0000 [ 311.444280][ T8562] infiniband sz1: set active [ 311.453316][ T8562] bond0: (slave syz_tun): Releasing backup interface [ 311.482526][ T8562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.525322][ T8562] device bridge_slave_0 left promiscuous mode [ 311.564818][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.581145][ T5692] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 311.643924][ T8562] device bridge_slave_1 left promiscuous mode [ 311.651844][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.662492][ T8562] bond0: (slave bond_slave_1): Releasing backup interface [ 312.169473][ T5692] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.598648][ T5692] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.613163][ T8562] team0: Port device team_slave_0 removed [ 312.632238][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.640698][ T8562] team0: Port device team_slave_1 removed [ 312.646987][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.666402][ T5692] usb 5-1: SerialNumber: syz [ 312.720335][ T8562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.740023][ T8562] bond1: (slave ip6gretap1): Releasing backup interface [ 312.762135][ T8562] bond2: (slave veth3): Releasing active interface [ 312.794080][ T8562] bond2: (slave veth3): the permanent HWaddr of slave - 76:d3:43:2a:42:16 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 312.821173][ T8562] bond2: (slave veth5): Releasing active interface [ 312.832236][ T1111] lo speed is unknown, defaulting to 1000 [ 313.052624][ T8601] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 314.221759][ T5692] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 314.450834][ T1111] usb 5-1: USB disconnect, device number 11 [ 314.457820][ T1111] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 314.580291][ T8628] lo speed is unknown, defaulting to 1000 [ 314.599141][ T8628] lo speed is unknown, defaulting to 1000 [ 316.036527][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 316.079698][ T8648] rdma_rxe: ignoring netdev event = 23 for lo [ 316.119129][ T8648] rdma_rxe: lo changed mtu to 9472 [ 316.172196][ T8648] infiniband sz1: set active [ 316.190943][ T8648] infiniband sz1: set active [ 316.260561][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 316.294067][ T5692] lo speed is unknown, defaulting to 1000 [ 316.300380][ T4232] lo speed is unknown, defaulting to 1000 [ 316.407110][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/118.tmp-b7:4' failed: Read-only file system [ 317.701619][ T8663] loop4: detected capacity change from 0 to 256 [ 317.739671][ T6907] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.830202][ T8663] FAT-fs (loop4): Directory bread(block 64) failed [ 317.833279][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/119.tmp-b7:4' failed: Read-only file system [ 317.870867][ T8663] FAT-fs (loop4): Directory bread(block 65) failed [ 317.902865][ T8663] FAT-fs (loop4): Directory bread(block 66) failed [ 317.922326][ T8683] ipt_CLUSTERIP: Please specify destination IP [ 317.928827][ T8663] FAT-fs (loop4): Directory bread(block 67) failed [ 317.929034][ T8663] FAT-fs (loop4): Directory bread(block 68) failed [ 317.951740][ T8663] FAT-fs (loop4): Directory bread(block 69) failed [ 317.987996][ T8663] FAT-fs (loop4): Directory bread(block 70) failed [ 318.005275][ T8663] FAT-fs (loop4): Directory bread(block 71) failed [ 318.030697][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/119.tmp-b7:4' failed: Read-only file system [ 318.036163][ T8663] FAT-fs (loop4): Directory bread(block 72) failed [ 318.068535][ T8663] FAT-fs (loop4): Directory bread(block 73) failed [ 318.190812][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/119.tmp-b7:4' failed: Read-only file system [ 318.428364][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 318.428386][ T26] audit: type=1326 audit(1785967842.127:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.3.1462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 319.005201][ T26] audit: type=1326 audit(1785967842.127:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.3.1462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 319.441494][ T26] audit: type=1326 audit(1785967842.127:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.3.1462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 319.466804][ T26] audit: type=1326 audit(1785967842.127:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.3.1462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 319.509981][ T26] audit: type=1326 audit(1785967842.127:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.3.1462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 319.607981][ T26] audit: type=1326 audit(1785967842.127:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.3.1462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 319.732151][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/119.tmp-b7:4' failed: Read-only file system [ 319.856280][ T26] audit: type=1326 audit(1785967842.127:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8704 comm="syz.3.1462" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 319.904688][ T8732] loop4: detected capacity change from 0 to 164 [ 319.932976][ T8732] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 320.024546][ T8734] xt_CONNSECMARK: invalid mode: 0 [ 320.764624][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/119.tmp-b7:4' failed: Read-only file system [ 320.829345][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-label/CDROM.tmp-b7:4' failed: Read-only file system [ 320.880410][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:4' failed: Read-only file system [ 321.068812][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/121.tmp-b7:4' failed: Read-only file system [ 321.130062][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/121.tmp-b7:4' failed: Read-only file system [ 321.210792][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/121.tmp-b7:4' failed: Read-only file system [ 321.470940][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/122.tmp-b7:4' failed: Read-only file system [ 321.486371][ T8768] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 321.651484][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/122.tmp-b7:4' failed: Read-only file system [ 322.218393][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.506762][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/122.tmp-b7:4' failed: Read-only file system [ 322.592521][ T8784] loop4: detected capacity change from 0 to 1024 [ 322.621291][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.627700][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.675143][ T8784] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 322.736403][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-diskseq/123.tmp-b7:4' failed: Read-only file system [ 322.802446][ T8386] udevd[8386]: symlink '../../loop4' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:4' failed: Read-only file system [ 322.856174][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1489'. [ 322.908259][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 322.918263][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 322.928250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 324.449869][ T8812] overlayfs: bad mount option "redirect_dir=off:/" [ 324.739376][ T8825] rdma_rxe: rxe_register_device failed with error -23 [ 324.825078][ T8825] rdma_rxe: failed to add ipvlan1 [ 325.606540][ T6907] Bluetooth: hci0: command 0x0c3a tx timeout [ 325.689610][ T8838] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 326.758585][ T8838] bond3: (slave veth7): Enslaving as an active interface with a down link [ 327.603717][ T26] audit: type=1326 audit(1785967851.307:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 327.668447][ T26] audit: type=1326 audit(1785967851.317:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 327.669043][ T5692] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.786199][ T26] audit: type=1326 audit(1785967851.317:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 327.842824][ T26] audit: type=1326 audit(1785967851.317:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 327.940456][ T26] audit: type=1326 audit(1785967851.317:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 328.002209][ T26] audit: type=1326 audit(1785967851.317:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 328.060917][ T26] audit: type=1326 audit(1785967851.317:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 328.268497][ T26] audit: type=1326 audit(1785967851.317:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 328.300040][ T26] audit: type=1326 audit(1785967851.317:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 328.339959][ T8911] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 328.362509][ T26] audit: type=1326 audit(1785967851.317:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.3.1517" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e32e930d9 code=0x7ffc0000 [ 328.393769][ T8911] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 328.864519][ T8914] netlink: 'syz.0.1524': attribute type 10 has an invalid length. [ 329.362215][ T8914] bond0: (slave wlan1): refused to change device type [ 329.658649][ T8923] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 329.678351][ T8923] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 329.687625][ T8923] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 329.703173][ T8923] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 329.834554][ T8931] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.844678][ T8931] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.853656][ T8931] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.862696][ T8931] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.878102][ T7888] Bluetooth: hci0: command 0x0c24 tx timeout [ 329.897298][ T8924] lo speed is unknown, defaulting to 1000 [ 329.921272][ T8924] lo speed is unknown, defaulting to 1000 [ 331.578382][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.604647][ T8969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 332.635804][ T8969] bond4: (slave macvlan2): Enslaving as a backup interface with a down link [ 332.668104][ T8969] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 332.753579][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 333.417290][ T8983] netlink: 'syz.4.1549': attribute type 10 has an invalid length. [ 333.515215][ T8983] wlan1: mtu less than device minimum [ 333.560296][ T8983] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 333.879060][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 335.298737][ T9010] xt_hashlimit: size too large, truncated to 1048576 [ 335.309303][ T9005] xt_hashlimit: size too large, truncated to 1048576 [ 335.357210][ T9005] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 335.409740][ T9010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.085308][ T9083] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 341.191462][ T9079] lo speed is unknown, defaulting to 1000 [ 341.228097][ T9079] lo speed is unknown, defaulting to 1000 [ 341.287853][ T9092] netlink: 'syz.1.1585': attribute type 1 has an invalid length. [ 341.365611][ T9095] device bond3 entered promiscuous mode [ 341.432346][ T9095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.571047][ T9092] device bridge5 entered promiscuous mode [ 341.588704][ T5100] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 341.609514][ T9092] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 341.625608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 341.680773][ T9095] device bridge6 entered promiscuous mode [ 341.694261][ T9095] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 341.760389][ T9] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 342.343055][ T9111] device ip6_vti0 entered promiscuous mode [ 342.367645][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 344.143528][ T9141] tipc: Failed to remove unknown binding: 66,1,1/134418688:986599296/986599298 [ 344.301828][ T9145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1603'. [ 344.366749][ T9145] bond2: (slave macvlan3): Releasing backup interface [ 344.425850][ T9145] bond0 (unregistering): Released all slaves [ 344.918976][ T9167] tipc: Resetting bearer [ 345.879083][ T9182] tipc: Enabling of bearer rejected, failed to enable media [ 346.504327][ T9196] No source specified [ 347.068848][ T9133] svc: failed to register nfsdv3 RPC service (errno 512). [ 347.086923][ T9133] svc: failed to register nfsaclv3 RPC service (errno 512). [ 347.173900][ T9199] sctp: [Deprecated]: syz.2.1620 (pid 9199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.173900][ T9199] Use struct sctp_sack_info instead [ 347.237815][ T9199] sctp: [Deprecated]: syz.2.1620 (pid 9199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.237815][ T9199] Use struct sctp_sack_info instead [ 348.157574][ T4188] ================================================================== [ 348.166352][ T4188] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0 [ 348.174342][ T4188] Write of size 4 at addr ffff88807c89f050 by task syz-executor/4188 [ 348.182542][ T4188] [ 348.185099][ T4188] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 348.192861][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.203096][ T4188] Call Trace: [ 348.206488][ T4188] [ 348.209583][ T4188] dump_stack_lvl+0x188/0x250 [ 348.214463][ T4188] ? show_regs_print_info+0x20/0x20 [ 348.219727][ T4188] ? load_image+0x410/0x410 [ 348.224342][ T4188] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 348.230109][ T4188] ? rcu_lock_release+0x5/0x20 [ 348.235042][ T4188] print_address_description+0x60/0x2d0 [ 348.240769][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 348.246397][ T4188] kasan_report+0xdf/0x130 [ 348.250965][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 348.256387][ T4188] kasan_check_range+0x235/0x290 [ 348.261384][ T4188] nfsd_shutdown_threads+0x89/0x1a0 [ 348.266661][ T4188] nfsd_umount+0x3e/0xc0 [ 348.270999][ T4188] deactivate_locked_super+0x93/0xf0 [ 348.276531][ T4188] cleanup_mnt+0x426/0x4d0 [ 348.281174][ T4188] task_work_run+0x125/0x1a0 [ 348.285971][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 348.292052][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 348.297647][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 348.303362][ T4188] do_syscall_64+0x58/0xa0 [ 348.307942][ T4188] ? clear_bhb_loop+0x30/0x80 [ 348.312757][ T4188] ? clear_bhb_loop+0x30/0x80 [ 348.317532][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.323489][ T4188] RIP: 0033:0x7f358e467317 [ 348.328095][ T4188] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 348.348195][ T4188] RSP: 002b:00007ffcd9be7ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 348.356778][ T4188] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f358e467317 [ 348.364797][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd9be7fa0 [ 348.372822][ T4188] RBP: 00007ffcd9be7fa0 R08: 00007ffcd9be8fa0 R09: 00000000ffffffff [ 348.380863][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd9be9030 [ 348.388898][ T4188] R13: 00007f358e4fc474 R14: 000000000005427c R15: 00007ffcd9be9070 [ 348.397200][ T4188] [ 348.400390][ T4188] [ 348.402758][ T4188] Allocated by task 9133: [ 348.407198][ T4188] __kasan_kmalloc+0xaf/0xe0 [ 348.411823][ T4188] __svc_create+0x60/0x9d0 [ 348.416353][ T4188] svc_create_pooled+0x62f/0x810 [ 348.421317][ T4188] nfsd_create_serv+0x2f9/0x700 [ 348.426284][ T4188] nfsd_svc+0x132/0x9e0 [ 348.430466][ T4188] write_threads+0x2ea/0x350 [ 348.435086][ T4188] nfsctl_transaction_write+0x105/0x150 [ 348.440867][ T4188] vfs_write+0x304/0xd70 [ 348.445159][ T4188] ksys_write+0x153/0x260 [ 348.449511][ T4188] do_syscall_64+0x4c/0xa0 [ 348.453965][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.460142][ T4188] [ 348.462496][ T4188] Freed by task 9133: [ 348.466514][ T4188] kasan_set_track+0x4b/0x70 [ 348.471358][ T4188] kasan_set_free_info+0x1f/0x40 [ 348.476466][ T4188] ____kasan_slab_free+0xd5/0x110 [ 348.481552][ T4188] slab_free_freelist_hook+0xec/0x170 [ 348.486996][ T4188] kfree+0xef/0x2a0 [ 348.490848][ T4188] nfsd_svc+0x7cf/0x9e0 [ 348.495042][ T4188] write_threads+0x2ea/0x350 [ 348.499851][ T4188] nfsctl_transaction_write+0x105/0x150 [ 348.505422][ T4188] vfs_write+0x304/0xd70 [ 348.509688][ T4188] ksys_write+0x153/0x260 [ 348.514049][ T4188] do_syscall_64+0x4c/0xa0 [ 348.518493][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.524589][ T4188] [ 348.527026][ T4188] The buggy address belongs to the object at ffff88807c89f000 [ 348.527026][ T4188] which belongs to the cache kmalloc-512 of size 512 [ 348.541164][ T4188] The buggy address is located 80 bytes inside of [ 348.541164][ T4188] 512-byte region [ffff88807c89f000, ffff88807c89f200) [ 348.554398][ T4188] The buggy address belongs to the page: [ 348.560063][ T4188] page:ffffea0001f22700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c89c [ 348.570301][ T4188] head:ffffea0001f22700 order:2 compound_mapcount:0 compound_pincount:0 [ 348.578741][ T4188] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 348.587143][ T4188] raw: 00fff00000010200 ffffea0000918600 0000000500000005 ffff888016c41c80 [ 348.595779][ T4188] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 348.604393][ T4188] page dumped because: kasan: bad access detected [ 348.610846][ T4188] page_owner tracks the page as allocated [ 348.618368][ T4188] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4192, ts 76587181911, free_ts 35223518438 [ 348.637728][ T4188] get_page_from_freelist+0x24f6/0x2670 [ 348.643396][ T4188] __alloc_pages+0x1ee/0x480 [ 348.648036][ T4188] new_slab+0xc0/0x4b0 [ 348.652249][ T4188] ___slab_alloc+0x807/0xdd0 [ 348.656870][ T4188] __kmalloc_node_track_caller+0x13d/0x3a0 [ 348.662789][ T4188] __alloc_skb+0x22c/0x750 [ 348.667596][ T4188] alloc_uevent_skb+0x7d/0x230 [ 348.672513][ T4188] kobject_uevent_net_broadcast+0x17e/0x530 [ 348.678430][ T4188] kobject_uevent_env+0x550/0x890 [ 348.683543][ T4188] netdev_queue_update_kobjects+0x1d7/0x3e0 [ 348.689574][ T4188] netdev_register_kobject+0x273/0x320 [ 348.695061][ T4188] register_netdevice+0x10e8/0x1720 [ 348.700305][ T4188] register_netdev+0x37/0x50 [ 348.705068][ T4188] sit_init_net+0x1f6/0x4c0 [ 348.709837][ T4188] ops_init+0x360/0x5f0 [ 348.714137][ T4188] setup_net+0x39e/0xa10 [ 348.718410][ T4188] page last free stack trace: [ 348.723460][ T4188] free_unref_page_prepare+0x637/0x6c0 [ 348.729274][ T4188] free_unref_page+0x8f/0x2a0 [ 348.734081][ T4188] __unfreeze_partials+0x188/0x1e0 [ 348.739223][ T4188] put_cpu_partial+0x12d/0x190 [ 348.744029][ T4188] qlist_free_all+0x35/0x90 [ 348.748628][ T4188] kasan_quarantine_reduce+0x150/0x160 [ 348.754114][ T4188] __kasan_slab_alloc+0x2f/0xc0 [ 348.758990][ T4188] slab_post_alloc_hook+0x4c/0x380 [ 348.764143][ T4188] kmem_cache_alloc_node+0x184/0x2c0 [ 348.769452][ T4188] __alloc_skb+0xf4/0x750 [ 348.773812][ T4188] netlink_sendmsg+0x654/0xbe0 [ 348.778679][ T4188] ____sys_sendmsg+0x5be/0x8f0 [ 348.783571][ T4188] ___sys_sendmsg+0x236/0x2e0 [ 348.788328][ T4188] __se_sys_sendmsg+0x1b7/0x2a0 [ 348.793248][ T4188] do_syscall_64+0x4c/0xa0 [ 348.797699][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.803617][ T4188] [ 348.805978][ T4188] Memory state around the buggy address: [ 348.811797][ T4188] ffff88807c89ef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 348.819879][ T4188] ffff88807c89ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 348.827982][ T4188] >ffff88807c89f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.836077][ T4188] ^ [ 348.842773][ T4188] ffff88807c89f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.850878][ T4188] ffff88807c89f100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.858941][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.866532][ T4188] ================================================================== [ 348.874615][ T4188] Disabling lock debugging due to kernel taint [ 348.882400][ T9213] nftables ruleset with unbound chain [ 349.002065][ T4188] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 349.009346][ T4188] CPU: 1 PID: 4188 Comm: syz-executor Tainted: G B syzkaller #0 [ 349.019963][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.030290][ T4188] Call Trace: [ 349.033615][ T4188] [ 349.036747][ T4188] dump_stack_lvl+0x188/0x250 [ 349.041559][ T4188] ? show_regs_print_info+0x20/0x20 [ 349.046792][ T4188] ? load_image+0x410/0x410 [ 349.051334][ T4188] panic+0x2f8/0x850 [ 349.055308][ T4188] ? bpf_jit_dump+0xd0/0xd0 [ 349.059836][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 349.065406][ T4188] ? check_panic_on_warn+0x6c/0xa0 [ 349.070622][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 349.076017][ T4188] check_panic_on_warn+0x80/0xa0 [ 349.080991][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 349.086390][ T4188] end_report+0x6d/0xf0 [ 349.090577][ T4188] kasan_report+0x102/0x130 [ 349.095103][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 349.100519][ T4188] kasan_check_range+0x235/0x290 [ 349.105489][ T4188] nfsd_shutdown_threads+0x89/0x1a0 [ 349.110802][ T4188] nfsd_umount+0x3e/0xc0 [ 349.115074][ T4188] deactivate_locked_super+0x93/0xf0 [ 349.120383][ T4188] cleanup_mnt+0x426/0x4d0 [ 349.124826][ T4188] task_work_run+0x125/0x1a0 [ 349.129462][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 349.134873][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 349.140450][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 349.145935][ T4188] do_syscall_64+0x58/0xa0 [ 349.150384][ T4188] ? clear_bhb_loop+0x30/0x80 [ 349.155100][ T4188] ? clear_bhb_loop+0x30/0x80 [ 349.159820][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.165742][ T4188] RIP: 0033:0x7f358e467317 [ 349.170242][ T4188] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 349.189874][ T4188] RSP: 002b:00007ffcd9be7ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 349.198320][ T4188] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f358e467317 [ 349.206313][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd9be7fa0 [ 349.214401][ T4188] RBP: 00007ffcd9be7fa0 R08: 00007ffcd9be8fa0 R09: 00000000ffffffff [ 349.222393][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd9be9030 [ 349.230475][ T4188] R13: 00007f358e4fc474 R14: 000000000005427c R15: 00007ffcd9be9070 [ 349.238477][ T4188] [ 349.241776][ T4188] Kernel Offset: disabled [ 349.246125][ T4188] Rebooting in 86400 seconds..