last executing test programs: 3m12.184596102s ago: executing program 1 (id=245): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) syz_usb_connect$uac2(0x3, 0xcb, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010440621804000010203010902"], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 3m9.905440499s ago: executing program 1 (id=261): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m9.561607456s ago: executing program 1 (id=263): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4091, 0xffb) 3m9.04742357s ago: executing program 1 (id=266): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) 3m8.820859451s ago: executing program 1 (id=267): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484", 0x16d}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000f00)="88a69f5139292fe55d24310330d349370620dd2737877e864a0d6d86ec395b0c41689f2e0742c4d3282f151e6faf27deab0464cdf91d6a7b73cbec929aa85b3d4f5114785c23d6c325efab561ca5f90113281359edb7ccdea124d6ea38a34d046ed5a7fdfc137e465ae8b692cb06ce3d14da5dc3ba35cac41c2fb97fe2618ebdd4", 0x81}, {&(0x7f0000000fc0)="d638", 0x2}, {&(0x7f0000002240)="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", 0x80c}], 0x3}}], 0x2, 0x0) 3m8.448133508s ago: executing program 1 (id=270): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef) 3m8.056765487s ago: executing program 32 (id=270): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef) 5.30188793s ago: executing program 2 (id=1544): r0 = socket$inet6_udp(0xa, 0x2, 0x0) write(r0, 0x0, 0x0) connect$netlink(r0, 0x0, 0x0) syz_clone(0x20b84211, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x1a1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') msgsnd(r1, &(0x7f0000000380)={0x2}, 0x8, 0x800) 4.989588224s ago: executing program 4 (id=1546): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 3.762253092s ago: executing program 2 (id=1551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1f}], 0x0, 0x0, 0x0}) 3.645816378s ago: executing program 3 (id=1552): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x0, 0xfa00, {0xffffffffffffffff, 0xc068}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xc, "2e2af5", "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"}}, 0x110) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x3, 0x204, 0x5, 0x8, 0x1, 0x1ff, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 3.407378009s ago: executing program 4 (id=1553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f00000000c0)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)="df", 0x1}], 0x1}}], 0x1, 0x4008005) 3.158998241s ago: executing program 2 (id=1555): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xaeea) r1 = accept4(r0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xd4a}, 0xfffffffffffffff8, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x1}) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x4}, &(0x7f0000000240)=0x8) 2.646679285s ago: executing program 3 (id=1557): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 2.405198196s ago: executing program 3 (id=1558): r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000300)=""/205, 0xcd}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.360560848s ago: executing program 4 (id=1559): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.32431508s ago: executing program 2 (id=1561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 2.091490611s ago: executing program 4 (id=1563): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000000c0)='./file1\x00', 0x1ea) r5 = inotify_init1(0x80000) inotify_add_watch(r5, &(0x7f0000000100)='./file1\x00', 0x60007f9) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f00000033c0)=ANY=[], 0x107c) 2.041123464s ago: executing program 3 (id=1564): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="5299"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 1.69042195s ago: executing program 4 (id=1566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) iopl(0x3) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) 1.675391921s ago: executing program 0 (id=1567): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000480), &(0x7f00000004c0)=@tcp=r2}, 0x20) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000200)={0x0, 0x186a0}, 0x10) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.526910298s ago: executing program 4 (id=1568): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$session_to_parent(0x12) 1.522732548s ago: executing program 2 (id=1569): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='wwnn=0x2000000044112233,wwpn=0x1000000044112233', 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='fc', 0x2) 1.48466355s ago: executing program 3 (id=1570): recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.342543886s ago: executing program 0 (id=1571): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) close(0x3) 1.112123198s ago: executing program 0 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x3}, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r4) sendmmsg$unix(r3, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e33}, 0x6e, 0x0}}], 0x2, 0x40008004) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd29, 0x7, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0x1c}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4) 830.907221ms ago: executing program 0 (id=1573): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 461.046318ms ago: executing program 0 (id=1574): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0xf0ff1f00000000) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000080) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x22, &(0x7f0000000100), 0x120) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)) 192.275891ms ago: executing program 3 (id=1575): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r3, 0x1) flock(r2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 25.490189ms ago: executing program 2 (id=1576): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x8}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40040, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x16, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}]}}}}}}, 0x0) 0s ago: executing program 0 (id=1577): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@acl}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs$namespace(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) kernel console output (not intermixed with test programs): sim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.488353][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.541412][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.598498][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.615345][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.635380][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.671560][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.704294][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.746765][ T5818] veth0_vlan: entered promiscuous mode [ 314.770068][ T5810] veth0_vlan: entered promiscuous mode [ 314.811707][ T5810] veth1_vlan: entered promiscuous mode [ 314.832241][ T5818] veth1_vlan: entered promiscuous mode [ 314.874384][ T5816] veth0_vlan: entered promiscuous mode [ 314.907254][ T5816] veth1_vlan: entered promiscuous mode [ 314.979564][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 315.008142][ T5810] veth0_macvtap: entered promiscuous mode [ 315.029256][ T5810] veth1_macvtap: entered promiscuous mode [ 315.055598][ T5816] veth0_macvtap: entered promiscuous mode [ 315.109375][ T5818] veth0_macvtap: entered promiscuous mode [ 315.122261][ T5816] veth1_macvtap: entered promiscuous mode [ 315.145855][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.158784][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.173664][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.186623][ T5818] veth1_macvtap: entered promiscuous mode [ 315.221991][ T5810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.235973][ T5810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.249490][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.280002][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.291304][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.302011][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.315234][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.328167][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.357384][ T5810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.367525][ T5810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.381295][ T5810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.391150][ T5810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.430347][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.447252][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.458233][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.473212][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.488902][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.505222][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.517439][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.530851][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.543267][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.555846][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.568540][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.582095][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.615571][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.637938][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.649153][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.668585][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.699343][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.731801][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.743060][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.754587][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.764809][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.775716][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.787949][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.859611][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.870497][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.881568][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.890959][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.916008][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.952698][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.089541][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.112106][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.143249][ T5812] Bluetooth: hci0: command tx timeout [ 316.162930][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.193083][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.225713][ T5812] Bluetooth: hci1: command tx timeout [ 316.302911][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.310794][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.372733][ T5812] Bluetooth: hci3: command tx timeout [ 316.378279][ T51] Bluetooth: hci2: command tx timeout [ 316.430280][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.458239][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.534087][ T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.541979][ T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.570515][ T5875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 316.838652][ T5880] syz.3.4[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 316.871661][ T5880] loop3: detected capacity change from 0 to 512 [ 316.903700][ T5882] syz_tun: entered allmulticast mode [ 316.963906][ T5882] syz_tun: left allmulticast mode [ 317.044007][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 317.244441][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 317.269621][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.280033][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.359152][ T5880] EXT4-fs (loop3): Test dummy encryption mode enabled [ 317.368916][ T5892] loop2: detected capacity change from 0 to 128 [ 317.406409][ T5880] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4: inode has both inline data and extents flags [ 317.445095][ T5892] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.450780][ T5880] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 317.476696][ T5892] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.539464][ T5880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.645777][ T5892] EXT4-fs (loop2): shut down requested (2) [ 317.671006][ T5892] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 317.787168][ T5818] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.212607][ T51] Bluetooth: hci0: command tx timeout [ 318.302930][ T51] Bluetooth: hci1: command tx timeout [ 318.413939][ T5901] device-mapper: table: 248:0: thin-pool: Invalid argument count (-EINVAL) [ 318.440367][ T5901] device-mapper: ioctl: error adding target to table [ 318.454778][ T51] Bluetooth: hci3: command tx timeout [ 318.454789][ T5812] Bluetooth: hci2: command tx timeout [ 318.797225][ T5906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.836051][ T5906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.861476][ T5906] bond0 (unregistering): Released all slaves [ 319.859031][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.086457][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 320.431111][ T5920] team0: Port device team_slave_0 removed [ 321.403389][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 321.623788][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.652643][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 321.682585][ T8] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 321.701614][ T8] usb 3-1: Product: syz [ 321.711612][ T8] usb 3-1: Manufacturer: syz [ 321.722830][ T8] usb 3-1: SerialNumber: syz [ 321.761449][ T8] usb 3-1: config 0 descriptor?? [ 321.791435][ T8] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 321.811270][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 321.856570][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 321.877472][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 321.904094][ T8] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 321.925494][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 321.945642][ T8] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 321.982388][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 322.022011][ T8] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 322.041732][ T5871] Set syz1 is full, maxelem 65536 reached [ 322.055823][ T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 322.103340][ T8] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 322.127664][ T8] usb 3-1: USB disconnect, device number 2 [ 322.416940][ T5953] loop0: detected capacity change from 0 to 128 [ 322.425752][ T5951] macvlan2: entered promiscuous mode [ 322.431096][ T5951] macvlan2: entered allmulticast mode [ 322.443136][ T5951] team0: Device macvlan2 is already an upper device of the team interface [ 322.471302][ T5953] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.494502][ T5953] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.501441][ T8] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 322.563934][ T8] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 322.627906][ T8] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 322.686601][ T5953] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.29: Invalid block bitmap block 164 in block_group 0 [ 322.705307][ T8] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 322.729389][ T8] keyspan 3-1:0.0: device disconnected [ 322.750760][ T5953] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.29: Invalid block bitmap block 164 in block_group 0 [ 322.783227][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 322.803527][ T5953] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.29: Invalid block bitmap block 164 in block_group 0 [ 322.922522][ T5810] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.876004][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.884940][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.668978][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.735470][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.300931][ T5966] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.310287][ T5966] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.319552][ T5966] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.328520][ T5966] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.863108][ T6011] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 326.008032][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 326.320686][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 326.344786][ T6032] EXT4-fs warning (device sda1): ext4_group_extend:1868: can't shrink FS - resize aborted [ 327.790786][ T6073] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 327.960515][ T6071] kvm: vcpu 0: requested 4 ns lapic timer period limited to 200000 ns [ 328.228046][ T6082] netlink: 15051 bytes leftover after parsing attributes in process `syz.2.72'. [ 328.584686][ T6090] IPVS: Scheduler module ip_vs_ not found [ 329.671755][ T6116] loop0: detected capacity change from 0 to 32768 [ 329.686443][ T6116] ======================================================= [ 329.686443][ T6116] WARNING: The mand mount option has been deprecated and [ 329.686443][ T6116] and is ignored by this kernel. Remove the mand [ 329.686443][ T6116] option from the mount to silence this warning. [ 329.686443][ T6116] ======================================================= [ 329.721366][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.756713][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 329.765866][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 329.775485][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 329.801928][ T6116] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.037408][ T6116] XFS (loop0): Ending clean mount [ 330.091421][ T6116] XFS (loop0): Quotacheck needed: Please wait. [ 330.218387][ T6116] XFS (loop0): Quotacheck: Done. [ 330.366703][ T6116] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 330.681781][ T6150] netlink: 15143 bytes leftover after parsing attributes in process `syz.3.96'. [ 331.993265][ T5974] IPVS: starting estimator thread 0... [ 332.102828][ T6159] IPVS: using max 17 ests per chain, 40800 per kthread [ 333.637442][ T6188] loop1: detected capacity change from 0 to 512 [ 333.661107][ T6188] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 333.701503][ T6188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.744026][ T6188] EXT4-fs (loop1): 1 truncate cleaned up [ 333.750962][ T6188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.934173][ T6188] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.110: corrupted xattr entries [ 333.984843][ T6188] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.110: corrupted xattr entries [ 334.197285][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.286649][ T6210] loop2: detected capacity change from 0 to 128 [ 334.321415][ T6210] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 335.239376][ T6227] loop1: detected capacity change from 0 to 512 [ 335.326604][ T6227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.339932][ T6227] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.416837][ T6227] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.125: Invalid block bitmap block 5001287 in block_group 0 [ 335.492696][ T6227] Quota error (device loop1): write_blk: dquota write failed [ 335.500483][ T6227] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 335.523214][ T6227] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 335.543251][ T6227] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.125: Failed to acquire dquot type 1 [ 335.759394][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.916836][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 337.095917][ T6256] loop2: detected capacity change from 0 to 1024 [ 338.789677][ T6295] loop1: detected capacity change from 0 to 2048 [ 338.920654][ T6300] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.581901][ T6307] netlink: 'syz.2.152': attribute type 1 has an invalid length. [ 340.139436][ T6307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.280290][ T6309] bond0: (slave geneve2): making interface the new active one [ 340.338112][ T6309] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 341.196183][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 341.224526][ T6343] 8021q: adding VLAN 0 to HW filter on device team1 [ 341.232233][ T6343] Zero length message leads to an empty skb [ 341.257430][ T6321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.610979][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 341.644376][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 341.834070][ T5972] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 341.864469][ T5972] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.917798][ T6358] loop1: detected capacity change from 0 to 4096 [ 341.933580][ T6358] EXT4-fs: Ignoring removed orlov option [ 341.952165][ T6358] EXT4-fs (loop1): Test dummy encryption mode enabled [ 342.009203][ T6358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.184269][ T6362] fido_id[6362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 342.323389][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.429062][ T6376] loop3: detected capacity change from 0 to 128 [ 342.523094][ T6376] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 342.552350][ T6376] hpfs: filesystem error: improperly stopped [ 342.567256][ T6376] hpfs: You really don't want any checks? You are crazy... [ 342.575824][ T6376] hpfs: hpfs_map_sector(): read error [ 342.582256][ T6376] hpfs: code page support is disabled [ 342.595271][ T6376] hpfs: hpfs_map_4sectors(): unaligned read [ 342.601554][ T6376] hpfs: hpfs_map_4sectors(): unaligned read [ 342.611565][ T6376] hpfs: filesystem error: unable to find root dir [ 342.691547][ T6376] hpfs: hpfs_map_4sectors(): unaligned read [ 342.717690][ T6376] hpfs: hpfs_map_sector(): read error [ 342.732142][ T6376] hpfs: hpfs_map_4sectors(): unaligned read [ 342.764124][ T6376] hpfs: hpfs_map_sector(): read error [ 342.795953][ T6376] hpfs: hpfs_map_4sectors(): unaligned read [ 342.801950][ T6376] hpfs: hpfs_map_sector(): read error [ 342.946199][ T6386] loop1: detected capacity change from 0 to 256 [ 343.053478][ T6386] FAT-fs (loop1): Directory bread(block 64) failed [ 343.060681][ T6386] FAT-fs (loop1): Directory bread(block 65) failed [ 343.068129][ T6386] FAT-fs (loop1): Directory bread(block 66) failed [ 343.074899][ T6386] FAT-fs (loop1): Directory bread(block 67) failed [ 343.081972][ T6386] FAT-fs (loop1): Directory bread(block 68) failed [ 343.088770][ T6386] FAT-fs (loop1): Directory bread(block 69) failed [ 343.096391][ T6386] FAT-fs (loop1): Directory bread(block 70) failed [ 343.103215][ T6386] FAT-fs (loop1): Directory bread(block 71) failed [ 343.110387][ T6386] FAT-fs (loop1): Directory bread(block 72) failed [ 343.117269][ T6386] FAT-fs (loop1): Directory bread(block 73) failed [ 344.194952][ T6395] process 'syz.3.185' launched '/dev/fd/3' with NULL argv: empty string added [ 344.408799][ T6399] netlink: 'syz.1.186': attribute type 39 has an invalid length. [ 344.656634][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 344.926433][ T23] libceph: connect (1)[c::]:6789 error -101 [ 344.954056][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 344.963882][ T6414] ceph: No mds server is up or the cluster is laggy [ 345.594391][ T6426] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 346.236893][ T6447] loop1: detected capacity change from 0 to 512 [ 346.286804][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.386107][ T6447] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.206: bg 0: block 67: padding at end of block bitmap is not set [ 346.410727][ T6455] FAULT_INJECTION: forcing a failure. [ 346.410727][ T6455] name failslab, interval 1, probability 0, space 0, times 1 [ 346.425702][ T6455] CPU: 1 PID: 6455 Comm: syz.3.208 Not tainted syzkaller #0 [ 346.433054][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.443172][ T6455] Call Trace: [ 346.446489][ T6455] [ 346.447214][ T6447] EXT4-fs (loop1): Remounting filesystem read-only [ 346.449439][ T6455] dump_stack_lvl+0x18c/0x250 [ 346.460700][ T6455] ? show_regs_print_info+0x20/0x20 [ 346.465965][ T6455] ? load_image+0x420/0x420 [ 346.470525][ T6455] ? __might_sleep+0xe0/0xe0 [ 346.475169][ T6455] ? __lock_acquire+0x7d80/0x7d80 [ 346.480250][ T6455] should_fail_ex+0x394/0x4c0 [ 346.485020][ T6455] should_failslab+0x9/0x20 [ 346.489583][ T6455] slab_pre_alloc_hook+0x59/0x300 [ 346.494675][ T6455] kmem_cache_alloc+0x5a/0x2c0 [ 346.499495][ T6455] ? __kernfs_new_node+0xe5/0x7f0 [ 346.504587][ T6455] __kernfs_new_node+0xe5/0x7f0 [ 346.509506][ T6455] ? kernfs_new_node+0x260/0x260 [ 346.514512][ T6455] ? up_write+0x1be/0x410 [ 346.518895][ T6455] kernfs_new_node+0x14c/0x260 [ 346.523726][ T6455] __kernfs_create_file+0x4b/0x2e0 [ 346.528891][ T6455] sysfs_add_file_mode_ns+0x237/0x2f0 [ 346.534318][ T6455] internal_create_group+0x431/0xd10 [ 346.539635][ T6455] ? kernfs_add_one+0x149/0x6b0 [ 346.544531][ T6455] ? down_read_killable+0x340/0x340 [ 346.549754][ T6455] ? sysfs_create_group+0x20/0x20 [ 346.554833][ T6455] ? up_write+0x1be/0x410 [ 346.559187][ T6455] sysfs_create_groups+0x59/0x120 [ 346.564241][ T6455] device_add_attrs+0x1b2/0x830 [ 346.569125][ T6455] ? device_add_class_symlinks+0x240/0x240 [ 346.574964][ T6455] ? kobject_put+0x41a/0x450 [ 346.579590][ T6455] ? device_add_class_symlinks+0x21f/0x240 [ 346.585435][ T6455] device_add+0x51a/0xc40 [ 346.589822][ T6455] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 346.595308][ T6455] wakeup_source_register+0x163/0x240 [ 346.600705][ T6455] ep_insert+0xeb2/0x1990 [ 346.605076][ T6455] ? ep_loop_check+0x1b0/0x1b0 [ 346.609875][ T6455] ? __lock_acquire+0x7d80/0x7d80 [ 346.614943][ T6455] do_epoll_ctl+0x8bc/0xf40 [ 346.619490][ T6455] __x64_sys_epoll_ctl+0x166/0x1b0 [ 346.624640][ T6455] ? ep_modify+0xa80/0xa80 [ 346.629106][ T6455] ? lockdep_hardirqs_on+0x98/0x150 [ 346.634327][ T6455] do_syscall_64+0x55/0xb0 [ 346.638768][ T6455] ? clear_bhb_loop+0x40/0x90 [ 346.643475][ T6455] ? clear_bhb_loop+0x40/0x90 [ 346.648184][ T6455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.654122][ T6455] RIP: 0033:0x7fa9a119e159 [ 346.658627][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.678287][ T6455] RSP: 002b:00007fa9a20dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 346.686728][ T6455] RAX: ffffffffffffffda RBX: 00007fa9a1425fa0 RCX: 00007fa9a119e159 [ 346.694735][ T6455] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 346.702749][ T6455] RBP: 00007fa9a123506b R08: 0000000000000000 R09: 0000000000000000 [ 346.710750][ T6455] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 346.718745][ T6455] R13: 00007fa9a1426038 R14: 00007fa9a1425fa0 R15: 00007ffc877d9808 [ 346.726761][ T6455] [ 346.924165][ T5813] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.089487][ T6467] gretap0: entered promiscuous mode [ 347.131654][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 347.210145][ T6470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.368299][ T6475] FAULT_INJECTION: forcing a failure. [ 347.368299][ T6475] name failslab, interval 1, probability 0, space 0, times 0 [ 347.382404][ T6475] CPU: 0 PID: 6475 Comm: syz.2.215 Not tainted syzkaller #0 [ 347.389762][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.399836][ T6475] Call Trace: [ 347.403151][ T6475] [ 347.406122][ T6475] dump_stack_lvl+0x18c/0x250 [ 347.410844][ T6475] ? show_regs_print_info+0x20/0x20 [ 347.416067][ T6475] ? load_image+0x420/0x420 [ 347.420590][ T6475] ? __might_sleep+0xe0/0xe0 [ 347.425219][ T6475] ? __lock_acquire+0x7d80/0x7d80 [ 347.430299][ T6475] should_fail_ex+0x394/0x4c0 [ 347.435031][ T6475] should_failslab+0x9/0x20 [ 347.439625][ T6475] slab_pre_alloc_hook+0x59/0x300 [ 347.444719][ T6475] ? trace_contention_end+0x39/0xe0 [ 347.449971][ T6475] kmem_cache_alloc_node+0x5e/0x310 [ 347.455230][ T6475] ? __alloc_skb+0x103/0x2c0 [ 347.459879][ T6475] __alloc_skb+0x103/0x2c0 [ 347.464360][ T6475] inet_netconf_notify_devconf+0x173/0x230 [ 347.470224][ T6475] mrtsock_destruct+0x1a1/0x240 [ 347.475098][ T6475] ? ip_mroute_setsockopt+0x1040/0x1040 [ 347.480676][ T6475] ip_ra_control+0x486/0x530 [ 347.485336][ T6475] raw_close+0x19/0x30 [ 347.489455][ T6475] inet_release+0x13d/0x180 [ 347.494022][ T6475] sock_close+0xa7/0x210 [ 347.498320][ T6475] ? sock_mmap+0xa0/0xa0 [ 347.502624][ T6475] __fput+0x221/0x940 [ 347.506676][ T6475] __se_sys_close+0x15c/0x1e0 [ 347.511440][ T6475] do_syscall_64+0x55/0xb0 [ 347.515892][ T6475] ? clear_bhb_loop+0x40/0x90 [ 347.520589][ T6475] ? clear_bhb_loop+0x40/0x90 [ 347.525292][ T6475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.531221][ T6475] RIP: 0033:0x7fba1a99e159 [ 347.535724][ T6475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.555385][ T6475] RSP: 002b:00007fba1b7cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 347.563860][ T6475] RAX: ffffffffffffffda RBX: 00007fba1ac25fa0 RCX: 00007fba1a99e159 [ 347.571871][ T6475] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.579892][ T6475] RBP: 00007fba1aa3506b R08: 0000000000000000 R09: 0000000000000000 [ 347.587896][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.595913][ T6475] R13: 00007fba1ac26038 R14: 00007fba1ac25fa0 R15: 00007ffe07bf30e8 [ 347.603958][ T6475] [ 348.084196][ T6489] syz_tun: entered allmulticast mode [ 348.362768][ T6477] mmap: syz.1.217 (6477) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 349.560755][ T28] audit: type=1326 audit(1789730621.032:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 349.611993][ T28] audit: type=1326 audit(1789730621.032:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 349.698352][ T28] audit: type=1326 audit(1789730621.032:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 349.749597][ T6529] loop3: detected capacity change from 0 to 128 [ 349.759368][ T28] audit: type=1326 audit(1789730621.032:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 349.857586][ T28] audit: type=1326 audit(1789730621.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 349.896653][ T6531] syz.3.237: attempt to access beyond end of device [ 349.896653][ T6531] loop3: rw=2049, sector=145, nr_sectors = 112 limit=128 [ 349.910855][ T28] audit: type=1326 audit(1789730621.032:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 350.001507][ T28] audit: type=1326 audit(1789730621.032:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 350.038327][ T28] audit: type=1326 audit(1789730621.032:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 350.110007][ T28] audit: type=1326 audit(1789730621.032:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 350.175291][ T28] audit: type=1326 audit(1789730621.032:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.3.227" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7fc00000 [ 350.201777][ T6529] syz.3.237: attempt to access beyond end of device [ 350.201777][ T6529] loop3: rw=524288, sector=153, nr_sectors = 104 limit=128 [ 350.234650][ T6529] syz.3.237: attempt to access beyond end of device [ 350.234650][ T6529] loop3: rw=0, sector=153, nr_sectors = 8 limit=128 [ 350.414972][ T11] kworker/u4:0: attempt to access beyond end of device [ 350.414972][ T11] loop3: rw=1, sector=145, nr_sectors = 6 limit=128 [ 350.852958][ T5812] Bluetooth: hci0: command tx timeout [ 350.881443][ T6547] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 351.102625][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 351.293244][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 351.298659][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 351.310362][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.320973][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.334565][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.344917][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.353771][ T23] usb 4-1: Product: syz [ 351.358092][ T23] usb 4-1: Manufacturer: syz [ 351.362803][ T23] usb 4-1: SerialNumber: syz [ 351.381764][ T5971] IPVS: starting estimator thread 0... [ 351.475823][ T6557] IPVS: using max 18 ests per chain, 43200 per kthread [ 351.483018][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 351.495328][ T787] usb 2-1: config 0 has no interfaces? [ 351.505254][ T787] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 351.516892][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.525367][ T787] usb 2-1: Product: syz [ 351.529696][ T787] usb 2-1: Manufacturer: syz [ 351.534464][ T787] usb 2-1: SerialNumber: syz [ 351.547788][ T787] usb 2-1: config 0 descriptor?? [ 351.597162][ T23] usb 4-1: 0:2 : does not exist [ 351.627169][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 351.750798][ T23] usb 4-1: USB disconnect, device number 2 [ 351.820480][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.286456][ T6572] ip_tables: iptables: counters copy to user failed while replacing table [ 352.313457][ T6572] tipc: Started in network mode [ 352.318912][ T6572] tipc: Node identity ac1414aa, cluster identity 4711 [ 352.327414][ T6572] tipc: New replicast peer: 172.20.20.187 [ 352.337112][ T6572] tipc: Enabled bearer , priority 10 [ 352.682942][ T5848] usb 2-1: USB disconnect, device number 2 [ 353.455010][ T6594] trusted_key: syz.1.261 sent an empty control message without MSG_MORE. [ 353.466211][ T5974] tipc: Node number set to 2886997162 [ 353.656473][ T6597] loop1: detected capacity change from 0 to 128 [ 353.684543][ T6597] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.701768][ T6597] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.749188][ T6597] syz.1.263 (pid 6597) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 353.999109][ T6597] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 354.111865][ T5813] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.128455][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 354.137778][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.359164][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.855524][ T982] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.030073][ T982] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.178895][ T982] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.340274][ T982] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.964317][ T6643] loop2: detected capacity change from 0 to 512 [ 356.018265][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.028466][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.039588][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.049541][ T6643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.086437][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.106386][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 356.113977][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.145673][ T6643] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.511867][ T6658] EXT4-fs (loop2): shut down requested (2) [ 356.688279][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.004983][ T6670] loop3: detected capacity change from 0 to 4096 [ 357.042982][ T6670] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.082729][ T6670] EXT4-fs: Ignoring removed orlov option [ 357.107306][ T6670] EXT4-fs (loop3): Test dummy encryption mode enabled [ 357.155817][ T6670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.590598][ T6670] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 357.920851][ T6670] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 358.011443][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 358.050552][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.215020][ T51] Bluetooth: hci1: command tx timeout [ 358.327909][ T6703] loop3: detected capacity change from 0 to 512 [ 358.372858][ T6703] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 358.435365][ T6703] EXT4-fs (loop3): 1 truncate cleaned up [ 358.463559][ T6703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.551474][ T982] hsr_slave_0: left promiscuous mode [ 358.558224][ T982] hsr_slave_1: left promiscuous mode [ 358.593959][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.604559][ T982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.644840][ T982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.670060][ T6703] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 358.693220][ T982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.707439][ T6703] EXT4-fs (loop3): Remounting filesystem read-only [ 358.715837][ T982] bridge_slave_1: left allmulticast mode [ 358.732902][ T982] bridge_slave_1: left promiscuous mode [ 358.741310][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.773414][ T982] bridge_slave_0: left allmulticast mode [ 358.780458][ T982] bridge_slave_0: left promiscuous mode [ 358.791299][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.952045][ T982] veth1_macvtap: left promiscuous mode [ 358.964138][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.984512][ T982] veth0_macvtap: left promiscuous mode [ 358.990246][ T982] veth1_vlan: left promiscuous mode [ 359.032633][ T982] veth0_vlan: left promiscuous mode [ 359.595828][ T6721] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 360.293309][ T51] Bluetooth: hci1: command tx timeout [ 361.400794][ T982] team0 (unregistering): Port device team_slave_1 removed [ 361.671743][ T982] team0 (unregistering): Port device team_slave_0 removed [ 361.786000][ T982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.933053][ T982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.149647][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 362.149662][ T28] audit: type=1326 audit(1789730633.622:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.0.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7fc00000 [ 362.231144][ T28] audit: type=1326 audit(1789730633.692:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.0.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fda4c39e159 code=0x7fc00000 [ 362.282524][ T28] audit: type=1326 audit(1789730633.692:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6752 comm="syz.0.308" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7fc00000 [ 362.373239][ T5812] Bluetooth: hci1: command tx timeout [ 362.731575][ T982] bond0 (unregistering): Released all slaves [ 363.077817][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.085469][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.092859][ T6644] bridge_slave_0: entered allmulticast mode [ 363.100367][ T6644] bridge_slave_0: entered promiscuous mode [ 363.132178][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.149996][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.177308][ T6644] bridge_slave_1: entered allmulticast mode [ 363.192413][ T6644] bridge_slave_1: entered promiscuous mode [ 363.250370][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.336425][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.440818][ T6644] team0: Port device team_slave_0 added [ 364.608522][ T51] Bluetooth: hci1: command tx timeout [ 364.665666][ T6644] team0: Port device team_slave_1 added [ 365.739403][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.819090][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.220040][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.607182][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.825472][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.054245][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.113457][ T6644] hsr_slave_0: entered promiscuous mode [ 367.120508][ T6644] hsr_slave_1: entered promiscuous mode [ 367.521130][ T6793] loop2: detected capacity change from 0 to 128 [ 367.697919][ T6644] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.765134][ T6799] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 367.830776][ T6644] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.897401][ T6644] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.982134][ T6644] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.341847][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.390219][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.398785][ T6811] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 368.450909][ T6811] team0: Port device netdevsim0 added [ 368.480599][ T6813] netlink: 'syz.0.323': attribute type 10 has an invalid length. [ 368.553308][ T6813] team0: Failed to send options change via netlink (err -105) [ 368.576452][ T6813] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 368.594614][ T6813] team0: Port device netdevsim0 removed [ 368.614866][ T6813] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 368.638155][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.645485][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.728390][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.735632][ T6612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.926863][ T6644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.460792][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.019596][ T6644] veth0_vlan: entered promiscuous mode [ 370.048167][ T6644] veth1_vlan: entered promiscuous mode [ 370.089481][ T6644] veth0_macvtap: entered promiscuous mode [ 370.102172][ T6644] veth1_macvtap: entered promiscuous mode [ 370.160254][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.170949][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.181479][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.193209][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.204954][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.217063][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.228852][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.255368][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.284570][ T6644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.293814][ T6644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.303401][ T6644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.312239][ T6644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.537606][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.582623][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.618176][ T6854] loop3: detected capacity change from 0 to 512 [ 370.642163][ T6854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.716891][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.749655][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.791251][ T6854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.832083][ T6854] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.316410][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.100773][ T6900] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 372.654695][ T6914] loop3: detected capacity change from 0 to 128 [ 372.730031][ T6914] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.755651][ T6914] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.987684][ T6914] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 373.117130][ T5816] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.393527][ T6936] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 373.726120][ T6912] loop4: detected capacity change from 0 to 32768 [ 373.741029][ T6945] netlink: 'syz.3.352': attribute type 1 has an invalid length. [ 373.780288][ T6912] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.343 (6912) [ 373.862838][ T6912] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 373.882949][ T6912] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 373.892866][ T6912] BTRFS info (device loop4): using free space tree [ 374.005590][ T6945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.046049][ T6912] BTRFS info (device loop4): enabling ssd optimizations [ 374.072671][ T6912] BTRFS info (device loop4): auto enabling async discard [ 374.217834][ T6949] bond1: (slave veth3): Enslaving as an active interface with a down link [ 374.363241][ T6953] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 374.430268][ T6953] bond1: (slave batadv1): making interface the new active one [ 374.484502][ T6953] batadv1: entered promiscuous mode [ 374.505227][ T6953] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 374.947676][ T6644] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 375.256772][ T6987] loop4: detected capacity change from 0 to 512 [ 375.275652][ T6987] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 375.342337][ T6987] EXT4-fs (loop4): 1 truncate cleaned up [ 375.365618][ T6987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.550380][ T6987] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 375.584087][ T6987] EXT4-fs (loop4): Remounting filesystem read-only [ 375.820631][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.427529][ T7012] FAULT_INJECTION: forcing a failure. [ 376.427529][ T7012] name failslab, interval 1, probability 0, space 0, times 0 [ 376.459909][ T7012] CPU: 0 PID: 7012 Comm: syz.3.363 Not tainted syzkaller #0 [ 376.467292][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.477393][ T7012] Call Trace: [ 376.480720][ T7012] [ 376.483716][ T7012] dump_stack_lvl+0x18c/0x250 [ 376.488473][ T7012] ? show_regs_print_info+0x20/0x20 [ 376.493731][ T7012] ? load_image+0x420/0x420 [ 376.498332][ T7012] ? __might_sleep+0xe0/0xe0 [ 376.502982][ T7012] ? __lock_acquire+0x7d80/0x7d80 [ 376.508068][ T7012] should_fail_ex+0x394/0x4c0 [ 376.512815][ T7012] should_failslab+0x9/0x20 [ 376.517382][ T7012] slab_pre_alloc_hook+0x59/0x300 [ 376.522485][ T7012] ? smb3_fs_context_fullpath+0xa9/0x2d0 [ 376.528175][ T7012] ? smb3_fs_context_fullpath+0xa9/0x2d0 [ 376.533858][ T7012] __kmem_cache_alloc_node+0x53/0x250 [ 376.539311][ T7012] ? smb3_fs_context_fullpath+0xa9/0x2d0 [ 376.544996][ T7012] __kmalloc+0xa7/0x240 [ 376.549208][ T7012] ? kstrdup+0x65/0x80 [ 376.553335][ T7012] smb3_fs_context_fullpath+0xa9/0x2d0 [ 376.558853][ T7012] ? smb3_fs_context_parse_param+0x5095/0x7970 [ 376.565076][ T7012] smb3_fs_context_parse_param+0x50a2/0x7970 [ 376.571113][ T7012] ? __se_sys_fsconfig+0x6de/0x850 [ 376.576283][ T7012] ? __lock_acquire+0x7d80/0x7d80 [ 376.581360][ T7012] ? smb3_fs_context_free+0x60/0x60 [ 376.586607][ T7012] ? __virt_addr_valid+0x10c/0x380 [ 376.591771][ T7012] ? __might_fault+0xaa/0x120 [ 376.596498][ T7012] ? security_fs_context_parse_param+0xb5/0xe0 [ 376.602743][ T7012] vfs_parse_fs_param+0x1a0/0x420 [ 376.607832][ T7012] __se_sys_fsconfig+0x70a/0x850 [ 376.612832][ T7012] ? __x64_sys_fsconfig+0xc0/0xc0 [ 376.617931][ T7012] ? lockdep_hardirqs_on+0x98/0x150 [ 376.623179][ T7012] ? __x64_sys_fsconfig+0x20/0xc0 [ 376.628289][ T7012] do_syscall_64+0x55/0xb0 [ 376.632771][ T7012] ? clear_bhb_loop+0x40/0x90 [ 376.637506][ T7012] ? clear_bhb_loop+0x40/0x90 [ 376.642240][ T7012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.648191][ T7012] RIP: 0033:0x7fa9a119e159 [ 376.652665][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.672320][ T7012] RSP: 002b:00007fa9a20dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 376.680803][ T7012] RAX: ffffffffffffffda RBX: 00007fa9a1425fa0 RCX: 00007fa9a119e159 [ 376.688842][ T7012] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000005 [ 376.696949][ T7012] RBP: 00007fa9a123506b R08: 0000000000000000 R09: 0000000000000000 [ 376.704973][ T7012] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 376.712985][ T7012] R13: 00007fa9a1426038 R14: 00007fa9a1425fa0 R15: 00007ffc877d9808 [ 376.721025][ T7012] [ 376.807363][ T7012] CIFS: VFS: OOM when copying UNC string [ 377.817236][ T7041] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 377.931402][ T7041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.940605][ T7023] loop3: detected capacity change from 0 to 32768 [ 377.978524][ T7023] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.365 (7023) [ 378.121054][ T7023] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 378.186441][ T7023] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 378.213615][ T7044] bond1: (slave veth3): Enslaving as an active interface with a down link [ 378.242955][ T7023] BTRFS info (device loop3): using free space tree [ 378.431188][ T7041] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 378.441004][ T7041] bond1: (slave batadv1): making interface the new active one [ 378.450832][ T7041] batadv1: entered promiscuous mode [ 378.456954][ T7041] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 378.505555][ T7023] BTRFS info (device loop3): enabling ssd optimizations [ 378.528425][ T7023] BTRFS info (device loop3): auto enabling async discard [ 378.698654][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.705441][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.975098][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 379.049636][ T5816] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 379.214305][ T7072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.310558][ T7084] EXT4-fs warning (device sda1): ext4_group_extend:1868: can't shrink FS - resize aborted [ 381.266625][ T7107] netlink: 'syz.0.383': attribute type 39 has an invalid length. [ 381.846414][ T7095] loop3: detected capacity change from 0 to 40427 [ 381.872941][ T7095] F2FS-fs (loop3): invalid crc value [ 381.899700][ T7095] F2FS-fs (loop3): Found nat_bits in checkpoint [ 382.104537][ T7095] F2FS-fs (loop3): Start checkpoint disabled! [ 382.183232][ T7095] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 382.520415][ T7095] syz.3.379: attempt to access beyond end of device [ 382.520415][ T7095] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 382.602167][ T7095] syz.3.379: attempt to access beyond end of device [ 382.602167][ T7095] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.855823][ T982] kworker/u4:5: attempt to access beyond end of device [ 382.855823][ T982] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 382.890453][ T982] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 382.906506][ T982] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 384.193478][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 384.270299][ T7152] overlayfs: failed to clone upperpath [ 384.469997][ T7154] loop4: detected capacity change from 0 to 1024 [ 386.142172][ T982] batadv1: left promiscuous mode [ 386.388095][ T7168] loop4: detected capacity change from 0 to 40427 [ 386.422115][ T7168] F2FS-fs (loop4): invalid crc value [ 386.435107][ T7168] F2FS-fs (loop4): Found nat_bits in checkpoint [ 386.644141][ T7168] F2FS-fs (loop4): Start checkpoint disabled! [ 386.672612][ T7168] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 386.909902][ T7168] syz.4.402: attempt to access beyond end of device [ 386.909902][ T7168] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 386.994205][ T7168] syz.4.402: attempt to access beyond end of device [ 386.994205][ T7168] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 387.339037][ T982] kworker/u4:5: attempt to access beyond end of device [ 387.339037][ T982] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 387.376836][ T982] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 387.390487][ T982] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 389.212190][ T7145] Set syz1 is full, maxelem 65536 reached [ 389.526598][ T7212] loop4: detected capacity change from 0 to 256 [ 391.239071][ T7212] FAT-fs (loop4): Directory bread(block 64) failed [ 391.245778][ T7212] FAT-fs (loop4): Directory bread(block 65) failed [ 391.253841][ T7212] FAT-fs (loop4): Directory bread(block 66) failed [ 391.260509][ T7212] FAT-fs (loop4): Directory bread(block 67) failed [ 391.267529][ T7212] FAT-fs (loop4): Directory bread(block 68) failed [ 391.274327][ T7212] FAT-fs (loop4): Directory bread(block 69) failed [ 391.281939][ T7212] FAT-fs (loop4): Directory bread(block 70) failed [ 391.288523][ T7212] FAT-fs (loop4): Directory bread(block 71) failed [ 391.295264][ T7212] FAT-fs (loop4): Directory bread(block 72) failed [ 391.301796][ T7212] FAT-fs (loop4): Directory bread(block 73) failed [ 391.384502][ T33] batadv1: left promiscuous mode [ 391.790321][ T7219] loop3: detected capacity change from 0 to 1024 [ 392.995688][ T7222] loop4: detected capacity change from 0 to 32768 [ 393.176777][ T7222] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 393.409383][ T7222] XFS (loop4): Ending clean mount [ 393.596672][ T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 [ 393.617856][ T23] XFS (loop4): Unmount and run xfs_repair [ 393.652525][ T23] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 393.659977][ T23] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 393.726460][ T23] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 393.763044][ T23] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 393.785529][ T7258] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 393.792681][ T23] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 393.801678][ T23] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 393.821538][ T23] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.842535][ T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.871227][ T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 393.892304][ T7222] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74 [ 393.953503][ T7222] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 394.029632][ T7222] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 394.275021][ T6644] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 395.647661][ T7291] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 395.693723][ T7291] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 396.937291][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 396.975474][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.024284][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.042814][ T5848] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 397.114634][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.231443][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.275130][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.308784][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.332942][ T5848] usb 5-1: not running at top speed; connect to a high speed hub [ 397.341287][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.366210][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.373031][ T5848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.393003][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 397.402111][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.418848][ T7321] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 397.493126][ T5848] usb 5-1: Found UVC 1.00 device (046d:0825) [ 397.500234][ T5848] usb 5-1: No streaming interface found for terminal 2. [ 397.755998][ T5973] usb 5-1: USB disconnect, device number 2 [ 398.588725][ T7347] loop4: detected capacity change from 0 to 1024 [ 398.827451][ T51] Bluetooth: hci1: unexpected cc 0x200b length: 2 > 1 [ 399.382054][ T982] hfsplus: b-tree write err: -5, ino 25 [ 399.403136][ T982] hfsplus: b-tree write err: -5, ino 4 [ 399.423140][ T982] hfsplus: b-tree write err: -5, ino 2 [ 400.137542][ T7379] loop4: detected capacity change from 0 to 64 [ 400.250699][ T7208] Set syz1 is full, maxelem 65536 reached [ 400.303366][ T51] Bluetooth: Fragment is too long (len 53, expected 9) [ 401.341913][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 402.763551][ T7460] overlayfs: failed to clone upperpath [ 403.141405][ T7468] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 403.189408][ T7468] batman_adv: batadv0: Adding interface: gretap1 [ 403.196166][ T7468] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.224183][ T7468] batman_adv: batadv0: Interface activated: gretap1 [ 404.257079][ T7509] capability: warning: `syz.3.483' uses deprecated v2 capabilities in a way that may be insecure [ 404.789701][ T7520] sctp: [Deprecated]: syz.3.488 (pid 7520) Use of int in max_burst socket option deprecated. [ 404.789701][ T7520] Use struct sctp_assoc_value instead [ 405.370281][ T7544] tipc: Started in network mode [ 405.375540][ T7544] tipc: Node identity 1001001, cluster identity 4711 [ 405.382269][ T7544] tipc: Node number set to 16781313 [ 405.394913][ T7544] tipc: Enabled bearer , priority 0 [ 405.630369][ T28] audit: type=1326 audit(1789730677.102:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 405.704995][ T28] audit: type=1326 audit(1789730677.102:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 405.778167][ T28] audit: type=1326 audit(1789730677.122:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 405.859811][ T28] audit: type=1326 audit(1789730677.122:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 405.912566][ T28] audit: type=1326 audit(1789730677.122:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 405.962671][ T28] audit: type=1326 audit(1789730677.122:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 406.071900][ T28] audit: type=1326 audit(1789730677.132:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 406.126401][ T28] audit: type=1326 audit(1789730677.132:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 406.196845][ T28] audit: type=1326 audit(1789730677.132:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 406.272997][ T28] audit: type=1326 audit(1789730677.132:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7549 comm="syz.3.501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 406.906580][ T7586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 406.994617][ T7588] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.517'. [ 407.060159][ T7590] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 407.163015][ T7590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.265542][ T7596] bond2: entered allmulticast mode [ 407.320751][ T7592] syz_tun: entered allmulticast mode [ 407.337871][ T7592] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 407.625454][ T7605] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 408.126188][ T7620] fuse: Bad value for 'fd' [ 409.709510][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 410.019639][ T7659] overlayfs: failed to clone upperpath [ 410.044484][ T7659] overlayfs: failed to clone upperpath [ 410.278446][ T7672] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.553'. [ 410.807208][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 410.832998][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 411.079698][ T7701] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 411.111585][ T7701] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 411.154062][ T7707] netlink: 'syz.4.565': attribute type 1 has an invalid length. [ 411.361202][ T7712] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 411.405886][ T7712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.449995][ T7712] tipc: Resetting bearer [ 411.472732][ T7712] tipc: Resetting bearer [ 411.492998][ T7712] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 411.514521][ T7715] bond1: entered allmulticast mode [ 411.761666][ T7726] fuse: Bad value for 'fd' [ 414.005676][ T7796] FAULT_INJECTION: forcing a failure. [ 414.005676][ T7796] name failslab, interval 1, probability 0, space 0, times 0 [ 414.040517][ T7796] CPU: 1 PID: 7796 Comm: syz.3.592 Not tainted syzkaller #0 [ 414.047909][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.058020][ T7796] Call Trace: [ 414.061348][ T7796] [ 414.064343][ T7796] dump_stack_lvl+0x18c/0x250 [ 414.069131][ T7796] ? show_regs_print_info+0x20/0x20 [ 414.074398][ T7796] ? load_image+0x420/0x420 [ 414.078974][ T7796] ? __might_sleep+0xe0/0xe0 [ 414.083627][ T7796] ? __lock_acquire+0x7d80/0x7d80 [ 414.088718][ T7796] should_fail_ex+0x394/0x4c0 [ 414.093490][ T7796] should_failslab+0x9/0x20 [ 414.098057][ T7796] slab_pre_alloc_hook+0x59/0x300 [ 414.103165][ T7796] ? __rwlock_init+0x150/0x150 [ 414.107982][ T7796] ? key_user_lookup+0x1bc/0x450 [ 414.112980][ T7796] kmem_cache_alloc+0x5a/0x2c0 [ 414.117839][ T7796] ? key_alloc+0x306/0x1030 [ 414.122408][ T7796] key_alloc+0x306/0x1030 [ 414.126823][ T7796] request_key_and_link+0x7dd/0x1450 [ 414.132170][ T7796] ? request_key_and_link+0x2b2/0x1450 [ 414.137688][ T7796] ? complete_request_key+0xa0/0xa0 [ 414.142946][ T7796] ? __might_sleep+0xe0/0xe0 [ 414.147600][ T7796] ? restrict_link_reject+0x10/0x10 [ 414.152869][ T7796] ? keyring_search_rcu+0x280/0x280 [ 414.158132][ T7796] ? __might_fault+0xaa/0x120 [ 414.162856][ T7796] ? down_read+0x1ac/0x2e0 [ 414.167319][ T7796] __se_sys_request_key+0x297/0x350 [ 414.172596][ T7796] ? __x64_sys_request_key+0xb0/0xb0 [ 414.177956][ T7796] ? lockdep_hardirqs_on+0x98/0x150 [ 414.183206][ T7796] do_syscall_64+0x55/0xb0 [ 414.187666][ T7796] ? clear_bhb_loop+0x40/0x90 [ 414.192390][ T7796] ? clear_bhb_loop+0x40/0x90 [ 414.197117][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.203073][ T7796] RIP: 0033:0x7fa9a119e159 [ 414.207540][ T7796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.227179][ T7796] RSP: 002b:00007fa9a20dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 414.235623][ T7796] RAX: ffffffffffffffda RBX: 00007fa9a1425fa0 RCX: 00007fa9a119e159 [ 414.243623][ T7796] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 414.251615][ T7796] RBP: 00007fa9a123506b R08: 0000000000000000 R09: 0000000000000000 [ 414.259610][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.267596][ T7796] R13: 00007fa9a1426038 R14: 00007fa9a1425fa0 R15: 00007ffc877d9808 [ 414.275599][ T7796] [ 414.773475][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 415.880509][ T7863] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 416.025451][ T7870] loop4: detected capacity change from 0 to 512 [ 416.135488][ T7870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.149720][ T7870] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.406895][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.836423][ T7904] loop3: detected capacity change from 0 to 128 [ 416.894868][ T7904] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.916142][ T7904] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 417.150697][ T5816] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.729347][ T7931] CIFS: Attempting to mount //127.0.0.1/share [ 417.805172][ T7934] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 417.986516][ T7931] CIFS: VFS: cifs_mount failed w/return code = -112 [ 418.694596][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 419.440584][ T7975] loop3: detected capacity change from 0 to 1024 [ 419.452197][ T7975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.529740][ T7975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.632898][ T7984] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #2: block 16: comm syz.3.648: lblock 0 mapped to illegal pblock 16 (length 1) [ 419.764410][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.157207][ T7991] macvlan2: entered promiscuous mode [ 422.162687][ T7991] macvlan2: entered allmulticast mode [ 422.168531][ T7991] dummy0: entered promiscuous mode [ 422.175158][ T7991] dummy0: entered allmulticast mode [ 422.189786][ T7991] team0: Port device macvlan2 added [ 422.646762][ T8024] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 422.725058][ T8034] CIFS: Attempting to mount //127.0.0.1/share [ 423.555701][ T8034] CIFS: VFS: Error connecting to socket. Aborting operation. [ 423.567605][ T8034] CIFS: VFS: cifs_mount failed w/return code = -4 [ 423.647649][ T8059] loop4: detected capacity change from 0 to 128 [ 423.691142][ T8059] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.720572][ T8059] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 423.884449][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 423.951800][ T6644] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.056251][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 424.065870][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 424.075042][ T51] Bluetooth: hci0: hardware error 0x00 [ 424.546339][ T8089] loop4: detected capacity change from 0 to 128 [ 424.607982][ T8089] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 424.674707][ T8089] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 424.867225][ T6644] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.135074][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 426.438952][ T8128] macvlan2: entered promiscuous mode [ 426.462636][ T8128] macvlan2: entered allmulticast mode [ 426.473256][ T8128] dummy0: entered promiscuous mode [ 426.478967][ T8128] dummy0: entered allmulticast mode [ 426.525466][ T8128] team0: Port device macvlan2 added [ 429.155981][ T8187] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.724'. [ 429.194704][ T8189] macvlan2: entered promiscuous mode [ 429.200088][ T8189] macvlan2: entered allmulticast mode [ 429.206510][ T8187] netlink: zone id is out of range [ 429.219776][ T8187] netlink: zone id is out of range [ 429.225651][ T8189] dummy0: entered promiscuous mode [ 429.231381][ T8189] dummy0: entered allmulticast mode [ 429.238284][ T8187] netlink: zone id is out of range [ 429.250040][ T8187] netlink: zone id is out of range [ 429.261325][ T8187] netlink: zone id is out of range [ 429.280611][ T8187] netlink: zone id is out of range [ 429.289321][ T8189] team0: Port device macvlan2 added [ 429.294993][ T8187] netlink: zone id is out of range [ 429.300908][ T8187] netlink: zone id is out of range [ 429.313748][ T8187] netlink: zone id is out of range [ 429.322532][ T8187] netlink: zone id is out of range [ 431.418753][ T8244] netlink: 'syz.4.750': attribute type 11 has an invalid length. [ 431.693350][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.744'. [ 432.136321][ T8259] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.747'. [ 432.366803][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 432.858395][ T8274] fuse: Bad value for 'fd' [ 433.013619][ T5973] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 433.209977][ T5973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 433.245432][ T5973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.279811][ T5973] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 433.302523][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 433.331295][ T5973] usb 4-1: Product: syz [ 433.335871][ T5973] usb 4-1: Manufacturer: syz [ 433.359920][ T5973] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 433.878652][ T8293] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.769'. [ 434.380213][ T8304] tipc: Failed to remove unknown binding: 66,0,0/16781313:1617315400/1617315402 [ 434.390218][ T8304] tipc: Failed to remove unknown binding: 66,0,0/16781313:1617315400/1617315401 [ 434.714319][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 435.180775][ T5973] mos7840: probe of ttyUSB0 failed with error -71 [ 435.209582][ T5973] usb 4-1: USB disconnect, device number 3 [ 435.268486][ T5973] mos7840 4-1:1.0: device disconnected [ 435.441290][ T8322] loop4: detected capacity change from 0 to 32768 [ 435.922606][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 436.362715][ T8337] loop4: detected capacity change from 0 to 1024 [ 436.445353][ T8337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 436.486390][ T8337] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.675438][ T8337] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 436.733699][ T8337] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #15: comm syz.4.776: mark_inode_dirty error [ 436.758471][ T8337] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 436.779889][ T8337] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #15: comm syz.4.776: mark_inode_dirty error [ 436.819504][ T8337] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 436.850983][ T8337] EXT4-fs (loop4): This should not happen!! Data will be lost [ 436.850983][ T8337] [ 436.938212][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 437.092858][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 437.103250][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 437.496894][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 438.259976][ T5975] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 438.295714][ T5975] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.034459][ T8407] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1877616679/1877616681 [ 439.069555][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 439.073281][ T8407] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1877616679/1877616680 [ 439.523282][ T8424] net_ratelimit: 115 callbacks suppressed [ 439.523301][ T8424] ip_tables: iptables: counters copy to user failed while replacing table [ 440.142359][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.149111][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.013102][ T5848] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 441.222524][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 441.267047][ T5848] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 441.290011][ T5848] usb 4-1: config 0 has no interface number 0 [ 441.311602][ T5848] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 441.347339][ T5848] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 441.372519][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.380580][ T5848] usb 4-1: Product: syz [ 441.409586][ T5848] usb 4-1: Manufacturer: syz [ 441.442780][ T5848] usb 4-1: SerialNumber: syz [ 441.464329][ T5848] usb 4-1: config 0 descriptor?? [ 441.473177][ T8439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 441.754445][ T8439] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 442.610936][ T8472] netlink: 136 bytes leftover after parsing attributes in process `syz.0.826'. [ 442.956935][ T8479] kvm: kvm [8478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 442.966069][ T8479] kvm: kvm [8478]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 443.398049][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.834'. [ 443.442687][ T5848] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 443.469081][ T5848] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 443.504836][ T5848] asix: probe of 4-1:0.188 failed with error -71 [ 443.520959][ T5848] usb 4-1: USB disconnect, device number 4 [ 445.629579][ T8583] overlayfs: failed to clone upperpath [ 445.670280][ T8583] overlayfs: failed to clone upperpath [ 445.774533][ T8588] overlayfs: failed to clone upperpath [ 445.782597][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 445.782611][ T28] audit: type=1326 audit(1789730717.252:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 445.852199][ T28] audit: type=1326 audit(1789730717.252:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 445.905031][ T28] audit: type=1326 audit(1789730717.252:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 445.962986][ T28] audit: type=1326 audit(1789730717.292:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 445.987570][ T5867] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 446.006861][ T28] audit: type=1326 audit(1789730717.292:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 446.058234][ T28] audit: type=1326 audit(1789730717.302:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 446.094147][ T8596] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 446.115285][ T28] audit: type=1326 audit(1789730717.302:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 446.167950][ T28] audit: type=1326 audit(1789730717.302:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 446.225269][ T5867] usb 4-1: not running at top speed; connect to a high speed hub [ 446.237030][ T28] audit: type=1326 audit(1789730717.302:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 446.272578][ T5867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.283008][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 446.292089][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.310748][ T28] audit: type=1326 audit(1789730717.302:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 446.350543][ T5867] usb 4-1: Found UVC 1.00 device (046d:0825) [ 446.367680][ T5867] usb 4-1: No streaming interface found for terminal 2. [ 446.596111][ T5975] usb 4-1: USB disconnect, device number 5 [ 447.316704][ T8613] tipc: Started in network mode [ 447.321675][ T8613] tipc: Node identity ea5f380ab02d, cluster identity 4711 [ 447.353336][ T8613] tipc: Enabled bearer , priority 0 [ 447.469299][ T8613] syzkaller0: entered promiscuous mode [ 447.480587][ T8613] syzkaller0: entered allmulticast mode [ 447.500720][ T8613] tipc: Resetting bearer [ 447.599069][ T8612] tipc: Resetting bearer [ 448.831341][ T8641] capability: warning: `syz.0.881' uses 32-bit capabilities (legacy support in use) [ 449.856614][ T8661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 451.068033][ T8612] tipc: Disabling bearer [ 451.078384][ T5848] tipc: Node number set to 1517434890 [ 451.287093][ T8676] overlayfs: failed to clone upperpath [ 451.397253][ T8679] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 451.420403][ T8679] batman_adv: batadv0: Adding interface: gretap1 [ 451.438452][ T8679] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.475704][ T8679] batman_adv: batadv0: Interface activated: gretap1 [ 451.484382][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 451.835265][ T8694] loop3: detected capacity change from 0 to 1024 [ 451.989798][ T8694] Bluetooth: MGMT ver 1.22 [ 452.568790][ T8724] loop3: detected capacity change from 0 to 128 [ 452.619849][ T8724] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.644021][ T8724] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 452.704193][ T5816] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 453.392272][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 453.392287][ T28] audit: type=1326 audit(1789730724.862:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.468004][ T28] audit: type=1326 audit(1789730724.862:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.505608][ T28] audit: type=1326 audit(1789730724.922:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.537673][ T28] audit: type=1326 audit(1789730724.922:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.574049][ T28] audit: type=1326 audit(1789730724.932:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.612847][ T28] audit: type=1326 audit(1789730724.972:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.644212][ T28] audit: type=1326 audit(1789730724.982:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.681483][ T28] audit: type=1326 audit(1789730724.982:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.716698][ T28] audit: type=1326 audit(1789730725.012:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.747866][ T28] audit: type=1326 audit(1789730725.012:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.4.921" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 453.899840][ T8756] sctp: [Deprecated]: syz.4.924 (pid 8756) Use of int in max_burst socket option deprecated. [ 453.899840][ T8756] Use struct sctp_assoc_value instead [ 454.724805][ T8777] netlink: 136 bytes leftover after parsing attributes in process `syz.2.934'. [ 454.834160][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 455.008835][ T8791] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 455.062617][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 455.074071][ T787] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 455.092686][ T787] usb 4-1: config 1 has no interface number 0 [ 455.104481][ T787] usb 4-1: config 1 interface 3 has no altsetting 0 [ 455.123664][ T787] usb 4-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=c6.a7 [ 455.133216][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.141349][ T787] usb 4-1: Product: syz [ 455.145896][ T787] usb 4-1: Manufacturer: syz [ 455.150687][ T787] usb 4-1: SerialNumber: syz [ 455.433333][ T787] ftdi_sio 4-1:1.3: FTDI USB Serial Device converter detected [ 455.459445][ T787] ftdi_sio ttyUSB0: unknown device type: 0xc6a7 [ 455.473968][ T787] usb 4-1: USB disconnect, device number 6 [ 455.488158][ T787] ftdi_sio 4-1:1.3: device disconnected [ 455.732068][ T8801] tipc: Started in network mode [ 455.738453][ T8801] tipc: Node identity 1001001, cluster identity 4711 [ 455.757163][ T8801] tipc: Node number set to 16781313 [ 455.772325][ T8801] tipc: Enabled bearer , priority 0 [ 455.917383][ T8806] tipc: Enabled bearer , priority 0 [ 455.951000][ T8807] netlink: 136 bytes leftover after parsing attributes in process `syz.4.946'. [ 456.340769][ T8818] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.405205][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 456.649533][ T8831] tipc: Enabled bearer , priority 0 [ 456.926874][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 457.448659][ T8861] sctp: [Deprecated]: syz.2.971 (pid 8861) Use of int in max_burst socket option deprecated. [ 457.448659][ T8861] Use struct sctp_assoc_value instead [ 458.973506][ T8888] 9pnet_fd: Insufficient options for proto=fd [ 459.493527][ T8907] overlayfs: failed to clone upperpath [ 459.781651][ T8902] tipc: Resetting bearer [ 459.928030][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.935705][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.566066][ T8902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.392509][ T5750] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 461.448933][ T8902] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.458558][ T8902] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.469203][ T8902] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.478381][ T8902] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.500885][ T8902] bond1: left allmulticast mode [ 461.519831][ T8902] dummy0: left allmulticast mode [ 461.525340][ T8902] macvlan2: left promiscuous mode [ 461.530410][ T8902] macvlan2: left allmulticast mode [ 461.544778][ T8902] batman_adv: batadv0: Interface deactivated: gretap1 [ 461.571172][ T8914] bond2: (slave syz_tun): Releasing backup interface [ 461.579660][ T5750] usb 4-1: Using ep0 maxpacket: 16 [ 461.593263][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.613131][ T8914] syz_tun: left allmulticast mode [ 461.618246][ T8914] tipc: Resetting bearer [ 461.627997][ T5750] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.651706][ T8914] tipc: Resetting bearer [ 461.659050][ T5750] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.671434][ T8914] bridge_slave_0: left allmulticast mode [ 461.677688][ T8914] bridge_slave_0: left promiscuous mode [ 461.683545][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.692033][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.702312][ T5750] usb 4-1: config 0 descriptor?? [ 461.728925][ T8914] bridge_slave_1: left allmulticast mode [ 461.742114][ T8914] bridge_slave_1: left promiscuous mode [ 461.758055][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.769261][ T8914] bond0: (slave bond_slave_0): Releasing backup interface [ 461.787422][ T8914] bond0: (slave bond_slave_1): Releasing backup interface [ 461.801699][ T8914] team0: Port device team_slave_1 removed [ 461.808252][ T8914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.823061][ T8914] bond0: (slave netdevsim0): Releasing backup interface [ 461.852028][ T8914] bond1: (slave veth3): Releasing active interface [ 461.860537][ T8914] bond1: (slave veth3): the permanent HWaddr of slave - fe:cf:2f:ee:42:47 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 461.880705][ T8914] batadv1: entered promiscuous mode [ 461.900815][ T8914] bond1: (slave batadv1): Releasing active interface [ 461.908165][ T8914] batadv1: left promiscuous mode [ 461.938342][ T5750] usbhid 4-1:0.0: can't add hid device: -71 [ 461.952752][ T5750] usbhid: probe of 4-1:0.0 failed with error -71 [ 461.969930][ T5750] usb 4-1: USB disconnect, device number 7 [ 462.641093][ T8952] overlayfs: failed to clone upperpath [ 462.741194][ T8956] netlink: 'syz.3.1001': attribute type 1 has an invalid length. [ 462.994884][ T8956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.009504][ T8956] bond2: (slave bond3): making interface the new active one [ 463.019501][ T8956] bond2: (slave bond3): Enslaving as an active interface with an up link [ 463.032715][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 463.043978][ T8963] bond2: entered promiscuous mode [ 463.066207][ T8963] bond3: entered promiscuous mode [ 463.086321][ T8963] bond2: entered allmulticast mode [ 463.102142][ T8963] bond3: entered allmulticast mode [ 463.117914][ T8963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.142657][ T8965] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 463.250806][ T8965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.269336][ T8967] netlink: 'syz.0.1004': attribute type 2 has an invalid length. [ 463.354355][ T8968] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 463.391673][ T8972] netlink: 'syz.4.1003': attribute type 10 has an invalid length. [ 463.415422][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1003'. [ 463.932790][ T8993] ip_tables: iptables: counters copy to user failed while replacing table [ 465.050137][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1016'. [ 465.584865][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 465.584880][ T28] audit: type=1326 audit(1789730737.062:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.629077][ T28] audit: type=1326 audit(1789730737.062:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.660526][ T28] audit: type=1326 audit(1789730737.092:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.708998][ T28] audit: type=1326 audit(1789730737.092:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.740507][ T28] audit: type=1326 audit(1789730737.092:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.772523][ T28] audit: type=1326 audit(1789730737.092:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.802347][ T28] audit: type=1326 audit(1789730737.092:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.834823][ T28] audit: type=1326 audit(1789730737.092:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.865721][ T28] audit: type=1326 audit(1789730737.092:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 465.899610][ T28] audit: type=1326 audit(1789730737.092:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.3.1022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 467.823741][ T9065] netlink: 'syz.3.1038': attribute type 10 has an invalid length. [ 467.864825][ T9065] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.887881][ T9065] bond0: (slave team0): Enslaving as an active interface with an up link [ 468.710467][ T9074] loop3: detected capacity change from 0 to 8192 [ 468.733468][ T9074] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.361869][ T9111] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: 1 [ 470.373610][ T9111] ref_ctr increment failed for inode: 0x5bd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ba52600 [ 470.450274][ T9110] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -834, delta: -1 [ 470.476291][ T9110] ref_ctr decrement failed for inode: 0x5bd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802ba52600 [ 471.249491][ T9136] fuse: Bad value for 'fd' [ 471.495631][ T9131] tipc: Resetting bearer [ 471.646867][ T9131] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.654653][ T9131] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.764069][ T9131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.856199][ T9131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.014302][ T9131] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.032522][ T9131] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.041588][ T9131] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.062524][ T9131] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.430704][ T9167] overlayfs: failed to clone upperpath [ 474.684960][ T9131] dummy0: left allmulticast mode [ 474.831895][ T9160] erspan1: entered promiscuous mode [ 474.864377][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1074'. [ 475.114837][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 475.114853][ T28] audit: type=1326 audit(1789730746.592:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.183000][ T28] audit: type=1326 audit(1789730746.592:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.249778][ T28] audit: type=1326 audit(1789730746.592:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.329976][ T28] audit: type=1326 audit(1789730746.592:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.426548][ T28] audit: type=1326 audit(1789730746.592:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.511035][ T28] audit: type=1326 audit(1789730746.592:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.593711][ T28] audit: type=1326 audit(1789730746.592:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.672685][ T28] audit: type=1326 audit(1789730746.602:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.696812][ T28] audit: type=1326 audit(1789730746.602:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 475.721880][ T28] audit: type=1326 audit(1789730746.602:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.0.1082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x7ffc0000 [ 476.051759][ T9203] netlink: 'syz.2.1088': attribute type 11 has an invalid length. [ 476.391441][ T9208] bond2: left allmulticast mode [ 476.473171][ T5848] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 476.567022][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 476.592709][ T9221] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 476.627592][ T9221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.663827][ T9223] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 476.682674][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 476.696873][ T5848] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 476.708547][ T5848] usb 4-1: config 0 has no interface number 0 [ 476.725055][ T5848] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 476.734774][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.743271][ T5848] usb 4-1: Product: syz [ 476.751337][ T5848] usb 4-1: Manufacturer: syz [ 476.756518][ T5848] usb 4-1: SerialNumber: syz [ 476.764286][ T5848] usb 4-1: config 0 descriptor?? [ 476.773303][ T5848] smsc95xx v2.0.0 [ 476.877768][ T9221] netlink: 'syz.2.1093': attribute type 10 has an invalid length. [ 476.892437][ T9221] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1093'. [ 476.901539][ T9221] dummy0: left promiscuous mode [ 476.913788][ T9221] dummy0: entered promiscuous mode [ 477.321961][ T9237] bond2: (slave veth7): Enslaving as an active interface with a down link [ 477.364948][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 477.377964][ T9237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.587107][ T9257] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 478.612652][ T5848] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 478.693139][ T5848] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 478.701741][ T9257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 478.710441][ T5848] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 478.744209][ T5848] usb 4-1: USB disconnect, device number 8 [ 478.780931][ T9262] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 479.044061][ T9257] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 479.055247][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1106'. [ 479.078922][ T9257] dummy0: left promiscuous mode [ 479.091620][ T9257] dummy0: entered promiscuous mode [ 479.291266][ T9279] tipc: Failed to remove unknown binding: 66,0,0/16781313:1364061349/1364061350 [ 479.303155][ T9279] tipc: Failed to remove unknown binding: 66,0,0/16781313:1364061349/1364061350 [ 479.321790][ T9279] tipc: Failed to remove unknown binding: 66,0,0/16781313:1364061349/1364061350 [ 481.719629][ T9345] dummy0: left promiscuous mode [ 481.792553][ T9345] macvlan2: left promiscuous mode [ 481.797707][ T9345] macvlan2: left allmulticast mode [ 481.809963][ T9345] bond2: left promiscuous mode [ 481.816248][ T9345] bond3: left promiscuous mode [ 481.821263][ T9345] bond2: left allmulticast mode [ 481.835803][ T9345] bond3: left allmulticast mode [ 481.939934][ T9347] 9pnet_fd: Insufficient options for proto=fd [ 482.727116][ T9370] overlayfs: failed to clone upperpath [ 483.006990][ T9380] loop3: detected capacity change from 0 to 1024 [ 483.172793][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 483.211180][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 483.211194][ T28] audit: type=1326 audit(1789730754.682:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9383 comm="syz.0.1146" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda4c39e159 code=0x0 [ 484.196522][ T9403] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1152'. [ 484.536536][ T9416] overlayfs: failed to clone upperpath [ 486.618400][ T9461] loop3: detected capacity change from 0 to 128 [ 486.666412][ T9461] netlink: 'syz.3.1175': attribute type 29 has an invalid length. [ 488.503152][ T9487] loop3: detected capacity change from 0 to 40427 [ 488.528083][ T9487] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 488.561943][ T9487] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 488.595786][ T9487] F2FS-fs (loop3): invalid crc value [ 488.614118][ T9487] F2FS-fs (loop3): Found nat_bits in checkpoint [ 488.742412][ T9487] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 488.759758][ T9487] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 493.013017][ T9602] lo: entered promiscuous mode [ 493.098062][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 493.307816][ T9597] lo: left promiscuous mode [ 494.685565][ T9640] warning: `syz.3.1237' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 494.910910][ T9643] netlink: 'syz.2.1239': attribute type 2 has an invalid length. [ 494.940904][ T9643] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1239'. [ 495.473363][ T9659] netlink: 'syz.2.1246': attribute type 4 has an invalid length. [ 495.513244][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 495.535223][ T9659] netlink: 'syz.2.1246': attribute type 4 has an invalid length. [ 495.749685][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1247'. [ 496.351343][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 496.360523][ T9678] bond0: option arp_all_targets: invalid value (8) [ 496.524466][ T9684] futex_wake_op: syz.2.1256 tries to shift op by 144; fix this program [ 496.543066][ T9684] futex_wake_op: syz.2.1256 tries to shift op by 144; fix this program [ 496.869734][ T9690] TC_ACT_REPEAT abuse ? [ 497.010416][ T9697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1262'. [ 497.758830][ T9715] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 497.799765][ T9715] overlayfs: failed to set xattr on upper [ 497.809271][ T9721] overlayfs: failed to clone upperpath [ 497.829940][ T9715] overlayfs: ...falling back to redirect_dir=nofollow. [ 497.870019][ T9715] overlayfs: ...falling back to index=off. [ 497.909849][ T9715] overlayfs: ...falling back to uuid=null. [ 498.535753][ T9726] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1274'. [ 499.392232][ T9731] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 499.452354][ T9731] netlink: 'syz.2.1278': attribute type 4 has an invalid length. [ 499.606221][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 499.851955][ T9744] netlink: 'syz.2.1282': attribute type 39 has an invalid length. [ 500.413806][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 501.008354][ T5750] libceph: connect (1)[c::]:6789 error -101 [ 501.032672][ T5750] libceph: mon0 (1)[c::]:6789 connect error [ 501.100050][ T9766] ceph: No mds server is up or the cluster is laggy [ 501.466804][ T9781] loop3: detected capacity change from 0 to 2048 [ 501.509061][ T9781] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 501.552705][ T9781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.578468][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.584952][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.547586][ T28] audit: type=1326 audit(502.502:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 502.609560][ T28] audit: type=1326 audit(502.502:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 502.682445][ T28] audit: type=1326 audit(502.502:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 502.753826][ T28] audit: type=1326 audit(502.502:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 502.812546][ T28] audit: type=1326 audit(502.502:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 502.881040][ T28] audit: type=1326 audit(502.512:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 502.943953][ T28] audit: type=1326 audit(502.512:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 503.008608][ T28] audit: type=1326 audit(502.512:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 503.079203][ T28] audit: type=1326 audit(502.512:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 503.141852][ T28] audit: type=1326 audit(502.512:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9798 comm="syz.4.1303" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 503.340017][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1310'. [ 503.711258][ T9823] binder: 9822:9823 ioctl c0306201 200000000080 returned -14 [ 504.044373][ T9828] bond5: entered allmulticast mode [ 504.066528][ T9828] ip6gretap1: entered promiscuous mode [ 504.072220][ T9828] bond5: (slave ip6gretap1): no link monitoring support [ 504.081258][ T9828] bond5: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 504.103624][ T9828] ip6gretap1: entered allmulticast mode [ 504.109686][ T9828] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 504.693797][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 504.815366][ T9855] syz.2.1322[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.819055][ T9855] syz.2.1322[9855] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.241374][ T9884] fuse: Bad value for 'fd' [ 507.767230][ T9913] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 507.939215][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 507.978684][ T9902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 508.017764][ T9902] erspan0: entered promiscuous mode [ 508.035252][ T9902] gretap0: entered promiscuous mode [ 508.102652][ T9918] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.111150][ T9918] bond6: (slave bond7): making interface the new active one [ 508.119115][ T9918] bond6: (slave bond7): Enslaving as an active interface with an up link [ 508.127796][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 508.157585][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1342'. [ 508.291492][ T9921] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 508.345477][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 508.390312][ T9913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 508.961359][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 509.822596][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 511.227205][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 511.227221][ T28] audit: type=1326 audit(511.182:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.354221][ T28] audit: type=1326 audit(511.182:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.442456][ T28] audit: type=1326 audit(511.182:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.527409][ T28] audit: type=1326 audit(511.222:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.600731][ T28] audit: type=1326 audit(511.222:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.686945][ T28] audit: type=1326 audit(511.222:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.772121][ T28] audit: type=1326 audit(511.222:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.847631][ T28] audit: type=1326 audit(511.222:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 511.955746][ T28] audit: type=1326 audit(511.232:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 512.047882][ T28] audit: type=1326 audit(511.232:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10004 comm="syz.4.1372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ea39e159 code=0x7ffc0000 [ 512.151594][T10022] loop3: detected capacity change from 0 to 4096 [ 512.346471][T10022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.896091][T10043] loop3: detected capacity change from 4096 to 1 [ 513.149094][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.231456][ T5816] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 513.282295][ T5816] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 513.327388][ T5816] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 513.357481][ T5816] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 513.593804][ T5850] IPVS: starting estimator thread 0... [ 513.703923][T10071] IPVS: using max 18 ests per chain, 43200 per kthread [ 513.934958][T10086] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 514.060692][T10089] loop3: detected capacity change from 0 to 128 [ 514.091014][T10089] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 514.145549][T10089] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 514.215111][ T5816] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 515.467056][T10125] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 515.479032][T10125] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 515.535812][T10127] lo speed is unknown, defaulting to 1000 [ 515.563715][T10129] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 515.563947][T10127] lo speed is unknown, defaulting to 1000 [ 515.580085][T10129] overlayfs: failed to set xattr on upper [ 515.606434][T10129] overlayfs: ...falling back to redirect_dir=nofollow. [ 515.627667][T10127] lo speed is unknown, defaulting to 1000 [ 515.682455][T10129] overlayfs: ...falling back to index=off. [ 515.690945][T10127] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 515.725644][T10129] overlayfs: ...falling back to uuid=null. [ 515.738267][T10127] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 515.889164][T10127] lo speed is unknown, defaulting to 1000 [ 515.901108][T10127] lo speed is unknown, defaulting to 1000 [ 515.917709][T10127] lo speed is unknown, defaulting to 1000 [ 515.934360][T10127] lo speed is unknown, defaulting to 1000 [ 516.210312][T10148] tipc: Failed to remove unknown binding: 66,0,0/1517434890:1707321914/1707321915 [ 516.261821][T10149] tipc: Failed to remove unknown binding: 66,0,0/1517434890:1707321914/1707321915 [ 517.011091][T10147] orangefs_mount: mount request failed with -4 [ 519.772706][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 519.813009][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 519.853028][T10214] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.862053][T10214] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.870398][T10214] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.878701][T10214] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.956796][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 519.985868][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 521.825227][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 521.825245][ T28] audit: type=1326 audit(521.782:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 521.942615][ T28] audit: type=1326 audit(521.782:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 522.019804][ T28] audit: type=1326 audit(521.782:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 522.112541][ T28] audit: type=1326 audit(521.782:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 522.214149][ T28] audit: type=1326 audit(521.782:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa9a119e159 code=0x7ffc0000 [ 522.294915][ T28] audit: type=1326 audit(521.902:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9a115e98e code=0x7ffc0000 [ 522.379839][ T28] audit: type=1326 audit(521.902:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9a115e98e code=0x7ffc0000 [ 522.469901][ T28] audit: type=1326 audit(521.902:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9a115e98e code=0x7ffc0000 [ 522.556161][ T28] audit: type=1326 audit(521.902:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9a115e98e code=0x7ffc0000 [ 522.639133][ T28] audit: type=1326 audit(521.902:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10260 comm="syz.3.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa9a115e98e code=0x7ffc0000 [ 523.883108][T10301] tipc: Enabling of bearer rejected, failed to enable media [ 524.279514][T10309] bond5: entered allmulticast mode [ 524.326690][T10312] bridge1: entered promiscuous mode [ 524.365333][T10312] bridge1: entered allmulticast mode [ 524.405697][T10312] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 525.191320][T10333] netlink: 'syz.3.1471': attribute type 2 has an invalid length. [ 525.209807][T10333] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1471'. [ 525.229411][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1471'. [ 526.807533][T10373] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1486'. Stopping sshd: stopped /usr/sbin/sshd (pid 5529) OK Stopping crond: stopped /usr/sbin/crond (pid 5513) OK [ 529.654591][T10432] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5434) [ 530.249708][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. Stopping network: [ 531.416664][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. OK Stopping iptables: OK Stopping system message bus: done [ 535.347646][T10565] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5122) OK umount: can't remount debugfs read-only [ 541.265443][T10682] bond5: left allmulticast mode [ 541.270379][T10682] ip6gretap1: left allmulticast mode [ 541.327584][T10682] ip6gretap1: left promiscuous mode [ 542.133861][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.76 closed by remote host. [ 544.592725][ T8893] tipc: Resetting bearer [ 544.764718][ T8893] tipc: Disabling bearer Sent SIGKILL to all processes Requesting system poweroff [ 544.986118][T10717] tipc: Disabling bearer [ 545.232187][T10627] syz.2.1544 (10627) used greatest stack depth: 19560 bytes left [ 545.311193][ T5816] tipc: Disabling bearer [ 545.416077][T10621] syz.2.1544 (10621) used greatest stack depth: 18808 bytes left [ 545.591267][ T5975] ------------[ cut here ]------------ [ 545.597089][ T5975] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 545.607672][ T5975] WARNING: CPU: 0 PID: 5975 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 545.617054][ T5975] Modules linked in: [ 545.620961][ T5975] CPU: 0 PID: 5975 Comm: kworker/0:10 Not tainted syzkaller #0 [ 545.628691][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.638843][ T5975] Workqueue: events delete_netdev [ 545.643991][ T5975] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 545.649837][ T5975] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 545.669663][ T5975] RSP: 0018:ffffc900053bf840 EFLAGS: 00010246 [ 545.675822][ T5975] RAX: 62a6a6fe52662000 RBX: ffffffff8bc599a0 RCX: ffff88807dff1e00 [ 545.683913][ T5975] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 545.691923][ T5975] RBP: 0000000000000005 R08: ffffc900053bf447 R09: 1ffff92000a77e88 [ 545.699975][ T5975] R10: dffffc0000000000 R11: fffff52000a77e89 R12: 1ffffffff178b230 [ 545.708007][ T5975] R13: dffffc0000000000 R14: ffff888077a3fe88 R15: ffff888075503820 [ 545.716064][ T5975] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 545.725099][ T5975] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.731710][ T5975] CR2: 0000200000404030 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 545.739937][ T5975] Call Trace: [ 545.743327][ T5975] [ 545.746295][ T5975] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 545.752455][ T5975] netdev_queue_update_kobjects+0x3e1/0x480 [ 545.758415][ T5975] netdev_unregister_kobject+0x108/0x250 [ 545.764164][ T5975] unregister_netdevice_many_notify+0x1449/0x1910 [ 545.770625][ T5975] ? trace_raw_output_contention_end+0xd0/0xd0 [ 545.776858][ T5975] ? unregister_netdevice_many+0x20/0x20 [ 545.782603][ T5975] ? rcu_is_watching+0x15/0xb0 [ 545.787426][ T5975] ? trace_contention_end+0x39/0xe0 [ 545.792712][ T5975] ? __mutex_lock+0x30d/0xc80 [ 545.797432][ T5975] unregister_netdevice_queue+0x2e9/0x330 [ 545.803270][ T5975] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 545.809296][ T5975] ? list_netdevice+0x730/0x730 [ 545.814723][ T5975] ? read_lock_is_recursive+0x20/0x20 [ 545.820145][ T5975] lowpan_unregister_netdev+0x1c/0x30 [ 545.825605][ T5975] unregister_dev+0x70/0x1a0 [ 545.830325][ T5975] ? process_scheduled_works+0x975/0x1600 [ 545.836092][ T5975] process_scheduled_works+0xa60/0x1600 [ 545.841673][ T5975] ? worker_attach_to_pool+0x370/0x370 [ 545.847240][ T5975] ? assign_work+0x3cc/0x5d0 [ 545.851889][ T5975] worker_thread+0xa5e/0xfe0 [ 545.856589][ T5975] ? _raw_spin_unlock+0x40/0x40 [ 545.861483][ T5975] ? __kthread_parkme+0x71/0x1c0 [ 545.866504][ T5975] kthread+0x2fa/0x390 [ 545.870591][ T5975] ? pr_cont_work+0x550/0x550 [ 545.875340][ T5975] ? kthread_blkcg+0xd0/0xd0 [ 545.879972][ T5975] ret_from_fork+0x48/0x80 [ 545.884470][ T5975] ? kthread_blkcg+0xd0/0xd0 [ 545.889102][ T5975] ret_from_fork_asm+0x11/0x20 [ 545.894430][ T5975] [ 545.897499][ T5975] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 545.904809][ T5975] CPU: 0 PID: 5975 Comm: kworker/0:10 Not tainted syzkaller #0 [ 545.912409][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.922514][ T5975] Workqueue: events delete_netdev [ 545.927609][ T5975] Call Trace: [ 545.930915][ T5975] [ 545.933865][ T5975] dump_stack_lvl+0x18c/0x250 [ 545.938593][ T5975] ? show_regs_print_info+0x20/0x20 [ 545.943819][ T5975] ? load_image+0x420/0x420 [ 545.948354][ T5975] panic+0x2ca/0x720 [ 545.952304][ T5975] ? bpf_jit_dump+0xd0/0xd0 [ 545.956838][ T5975] ? ret_from_fork_asm+0x11/0x20 [ 545.961811][ T5975] __warn+0x2e0/0x470 [ 545.965816][ T5975] ? sysfs_remove_group+0x17b/0x290 [ 545.971064][ T5975] ? sysfs_remove_group+0x17b/0x290 [ 545.976320][ T5975] report_bug+0x2be/0x4f0 [ 545.980687][ T5975] ? sysfs_remove_group+0x17b/0x290 [ 545.985918][ T5975] ? sysfs_remove_group+0x17b/0x290 [ 545.991127][ T5975] ? sysfs_remove_group+0x17d/0x290 [ 545.996398][ T5975] handle_bug+0xcf/0x120 [ 546.000674][ T5975] exc_invalid_op+0x1a/0x50 [ 546.005204][ T5975] asm_exc_invalid_op+0x1a/0x20 [ 546.010078][ T5975] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 546.015909][ T5975] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 546.035543][ T5975] RSP: 0018:ffffc900053bf840 EFLAGS: 00010246 [ 546.041726][ T5975] RAX: 62a6a6fe52662000 RBX: ffffffff8bc599a0 RCX: ffff88807dff1e00 [ 546.049717][ T5975] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 546.057702][ T5975] RBP: 0000000000000005 R08: ffffc900053bf447 R09: 1ffff92000a77e88 [ 546.065696][ T5975] R10: dffffc0000000000 R11: fffff52000a77e89 R12: 1ffffffff178b230 [ 546.073679][ T5975] R13: dffffc0000000000 R14: ffff888077a3fe88 R15: ffff888075503820 [ 546.081690][ T5975] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 546.088075][ T5975] netdev_queue_update_kobjects+0x3e1/0x480 [ 546.094034][ T5975] netdev_unregister_kobject+0x108/0x250 [ 546.099699][ T5975] unregister_netdevice_many_notify+0x1449/0x1910 [ 546.106193][ T5975] ? trace_raw_output_contention_end+0xd0/0xd0 [ 546.112368][ T5975] ? unregister_netdevice_many+0x20/0x20 [ 546.118022][ T5975] ? rcu_is_watching+0x15/0xb0 [ 546.122816][ T5975] ? trace_contention_end+0x39/0xe0 [ 546.128044][ T5975] ? __mutex_lock+0x30d/0xc80 [ 546.132760][ T5975] unregister_netdevice_queue+0x2e9/0x330 [ 546.138519][ T5975] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 546.144522][ T5975] ? list_netdevice+0x730/0x730 [ 546.149408][ T5975] ? read_lock_is_recursive+0x20/0x20 [ 546.154806][ T5975] lowpan_unregister_netdev+0x1c/0x30 [ 546.160195][ T5975] unregister_dev+0x70/0x1a0 [ 546.164818][ T5975] ? process_scheduled_works+0x975/0x1600 [ 546.170573][ T5975] process_scheduled_works+0xa60/0x1600 [ 546.176168][ T5975] ? worker_attach_to_pool+0x370/0x370 [ 546.181663][ T5975] ? assign_work+0x3cc/0x5d0 [ 546.186297][ T5975] worker_thread+0xa5e/0xfe0 [ 546.190919][ T5975] ? _raw_spin_unlock+0x40/0x40 [ 546.195795][ T5975] ? __kthread_parkme+0x71/0x1c0 [ 546.200767][ T5975] kthread+0x2fa/0x390 [ 546.204876][ T5975] ? pr_cont_work+0x550/0x550 [ 546.209579][ T5975] ? kthread_blkcg+0xd0/0xd0 [ 546.214180][ T5975] ret_from_fork+0x48/0x80 [ 546.218710][ T5975] ? kthread_blkcg+0xd0/0xd0 [ 546.223344][ T5975] ret_from_fork_asm+0x11/0x20 [ 546.228161][ T5975] [ 546.231810][ T5975] Kernel Offset: disabled [ 546.236244][ T5975] Rebooting in 86400 seconds..