last executing test programs: 7.271446652s ago: executing program 3 (id=998): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e2a}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x6f, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3, 0x6, 0x4, 0x100, 0x4, 0x180107}) syz_mount_image$exfat(&(0x7f0000000680), &(0x7f00000006c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,errors=remount-ro,iocharset=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000000,namecase=1,umask=00000000000000000000165,fmask=00000000000000000166141,uid=', @ANYRES16, @ANYBLOB="2c7a65726f5f73697a655f6469722c74696d655f6f66667365743d3078303030303030303030303030303030352c6572726f72733d636f6e74696e75030000213258e0b74d31428201eec914b0a1309eef6fa67f9c9acd3d0f7faecfc7606d1780acf362e8c2eb308f9f6bf0dbc2a6f3bbfd298af0966c8df51bff17a1d884d217f3d05e3184594b42b733f1401e6a7a99717441f7f836034df7231df364ad31334b3e1b0fd15371b2e2ee9dc35f553c93625b158095a0ab77f5b32eab3e4252e792f82e28c94d176244e9c652c8aa0a5b60223b3643598acaee5d91428250f1a54198f0b60a932f"], 0x1, 0x1535, &(0x7f0000000900)="$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") 6.873598612s ago: executing program 0 (id=1001): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.346569356s ago: executing program 1 (id=1002): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) write$FUSE_ATTR(r2, &(0x7f0000000440)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.250976206s ago: executing program 2 (id=1005): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) 6.052347426s ago: executing program 3 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xb, 0x0) io_submit(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x4000087, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000640)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000680)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendto(r3, &(0x7f0000000700)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10022, 0x0) 5.978698213s ago: executing program 0 (id=1008): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000005f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005ec0)={0x0}, 0x1, 0x0, 0x0, 0x10000}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getegid() sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4050000", @ANYRES16=r2, @ANYBLOB="a183ffffffff00000000050000000c00990002000000450000000e012a0084d5040d0008021100000108000000310040ffffffffffff00100000ffffffffffff33004008021100000009000000ffffffffffff3b0040ffffffffffff0300000008021100000102000008021100000109000000190000080211000000070000003b0000080211000001000200003d004008021100000004000000080211000001010000ffffffffffff02000000380000ffffffffffff060000003b00400802110000010d0000000802110000001f0040ffffffffffff04000000080211000000060040ffffffffffff02000000ffffffffffff87008c108c01000000002300441edd5958520804831f001c08080211000001020000000600000006000000ffffffffffff000001000000a9007f00823b0108020700000008021100000056f6fffd00010000ffff00000304ffffffffffff0600000001ffffffffffff0010000004080211000000000000008c188001a8d370b27470d2cc84100150e57b7bcda8a9efa93ff9680405000700831f000908080211000001080000000e00000089760000ffffffffffff150b0000832540040808021100000004000000ffffffffffff090000000a0000000802110000013b08000000000083038000dda91bf77ba17da379c71b771ca2305bfc3ac867c9828d9fe50a3cc69b6222dc9e19110cb999481def250e52041d1781e635dff2338ddb02f2c4803fcee50806ecf5334c8be8b0782a96aad9e003b0363f81c035d8198ea0c03a6fc9237cb306d179bf2e80355910713435f3e07ee4024085bd7620f2318144f95823ba950e9e4ee5fb5bb4abaadaf32be694614d998ad821af47c880ba4bcde7e5368a7f58448bb1a3c0696d7872d950090006010101010101dde3dfc8c36980a758fd5a44f5da3f0bc34058df1357312ef7fe370cfcbbaec8f0b5e22f074f84d6ead6885fa4309ef33b287c3d1debe21af5b30c487dc9ef8203e8d32ef99f16d2cd722e716707c48d53776a016b6867a0c749fcd33f5749a63d10cc0b154f3b3c03db3217d52d75ded2ee08c64d759085d7469689b172e875bd6ce3f47e5cc578fa8ce250da8178b0090211551c65d532eedaff9911d4deec3db6b0f8b7585ee3d090ef159a53144bb47f4997bab6afe4f416ad70b1"], 0x5c4}, 0x1, 0x0, 0x0, 0x40840}, 0x4c044) 4.090493165s ago: executing program 1 (id=1009): socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000005f000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x20000, &(0x7f0000007480)=""/131072, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000007380)=0x3, 0x4) sendto(r6, &(0x7f00000073c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000007400)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000007440)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1080, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 3.857724919s ago: executing program 4 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add 5-', 0x6) write(r0, &(0x7f00000004c0)='add', 0x3) 3.776347107s ago: executing program 3 (id=1011): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys_sec\x00', &(0x7f0000000400)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) read(r0, &(0x7f0000000800)=""/9, 0xfffffd87) 3.753424639s ago: executing program 4 (id=1012): syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0xa7c, r0}, 0x38) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='net/udp6\x00') preadv(r3, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/210, 0xd2}], 0x1, 0x2ffac000, 0x804) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) process_vm_writev(0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/156, 0x9c}], 0x53, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/109, 0x20001c34}], 0x1, 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/fillfile\x00', 0x42, 0x9f) write(r4, &(0x7f0000000540)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 3.656392639s ago: executing program 1 (id=1013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000022c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) 3.64646687s ago: executing program 0 (id=1014): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) 3.167579629s ago: executing program 2 (id=1015): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000780), 0x0, 0x1}) 3.123726313s ago: executing program 2 (id=1016): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 3.049356051s ago: executing program 2 (id=1017): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080), 0x5, 0x4c3, &(0x7f00000000c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) bind$tipc(0xffffffffffffffff, &(0x7f0000000880)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000008c0)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000940)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) r4 = dup3(0xffffffffffffffff, r3, 0x0) write$P9_RREADDIR(r4, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 2.624418054s ago: executing program 3 (id=1018): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.502600157s ago: executing program 4 (id=1019): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 2.451228752s ago: executing program 4 (id=1020): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) openat(r5, &(0x7f00000000c0)='./file0\x00', 0x305c00, 0x142) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) 2.448655482s ago: executing program 1 (id=1021): syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50, &(0x7f00000009c0)={[{@nogrpid}, {@errors_continue}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nogrpid}, {@grpjquota}]}, 0x0, 0x446, &(0x7f0000000440)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60083, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) 2.015780376s ago: executing program 2 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3e, &(0x7f0000000480)=0x6, 0x4) sendmmsg$inet(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 1.694648708s ago: executing program 0 (id=1023): socket(0x2, 0x80805, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) setfsuid(0xee00) ftruncate(r5, 0xc17a) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000500)=[{&(0x7f0000000540)=' ', 0xffffff1f}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) 1.67752436s ago: executing program 3 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)=ANY=[], 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000b80)='./debug\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) write$cgroup_pid(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000a00)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) 1.573745511s ago: executing program 1 (id=1025): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, 0x0, 0x2, 0x0) 1.156401053s ago: executing program 0 (id=1026): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000780), 0x0, 0x1}) 1.116971947s ago: executing program 0 (id=1027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x3, 0x191, &(0x7f0000000540)="$eJzsmb9OwlAUxr/blhKJgzMOmkgiJlLaom5GSXwAE/wTNohUQiyi0EFYjE9ifAEXd+NLuCuTC6NzzW2v9EpEMcZ/eH7D6Xcvh8O55ybfQEEQxL+le/94d9z141xPIoW42H9QoxxFyl/MFBrT5+uJq9JlcSN53RusxwD4/ui/rwG4yavwxNr3X347JZ5bUPp6GwoWhN4FgyF0CQp2hHbAUAy6CbsqCtXg+YZ/WnMdY6/hVvZrrmPyYPFg85Ab7K93xlCR+mPS561256Dsuk7zC8V78+vlFaxK/cn39TwbU5qfBQWW0DkwFAC9n28Y0Uik8ye1qL76zef/UyI2WvLahyvHgFt+CT99wPEWGn5FG2MgIn/yLxjmJX/SJP/IevWjbKvdydTq5apTdQ5tO7diLpnmsp0NjCiMb/jfROBPCal+bEiuznSclD2vaYWxv7bD+Jrj6oH/KUjPhWsGySwR7WGKzfJHWgXY0G4JgiAIgiAIgiAIgiAIgiA+wwxY8C/oUMJXdPZmkP0UAAD//yRcbo0=") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 1.023583237s ago: executing program 4 (id=1028): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1e, 0x0, 0x3}, 0x28) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 196.567271ms ago: executing program 2 (id=1029): syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x23, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0xa7c, r0}, 0x38) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_bond\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x844) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000cc0)='net/udp6\x00') preadv(r3, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/210, 0xd2}], 0x1, 0x2ffac000, 0x804) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) process_vm_writev(0x0, &(0x7f0000000340)=[{&(0x7f0000000600)=""/156, 0x9c}], 0x53, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/109, 0x20001c34}], 0x1, 0x0) mount(&(0x7f0000000440)=@filename='mtd0\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='jffs2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/fillfile\x00', 0x42, 0x9f) write(r4, &(0x7f0000000540)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f", 0x8000) 196.398321ms ago: executing program 3 (id=1030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000480)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x3, 0x191, &(0x7f0000000540)="$eJzsmb9OwlAUxr/blhKJgzMOmkgiJlLaom5GSXwAE/wTNohUQiyi0EFYjE9ifAEXd+NLuCuTC6NzzW2v9EpEMcZ/eH7D6Xcvh8O55ybfQEEQxL+le/94d9z141xPIoW42H9QoxxFyl/MFBrT5+uJq9JlcSN53RusxwD4/ui/rwG4yavwxNr3X347JZ5bUPp6GwoWhN4FgyF0CQp2hHbAUAy6CbsqCtXg+YZ/WnMdY6/hVvZrrmPyYPFg85Ab7K93xlCR+mPS561256Dsuk7zC8V78+vlFaxK/cn39TwbU5qfBQWW0DkwFAC9n28Y0Uik8ye1qL76zef/UyI2WvLahyvHgFt+CT99wPEWGn5FG2MgIn/yLxjmJX/SJP/IevWjbKvdydTq5apTdQ5tO7diLpnmsp0NjCiMb/jfROBPCal+bEiuznSclD2vaYWxv7bD+Jrj6oH/KUjPhWsGySwR7WGKzfJHWgXY0G4JgiAIgiAIgiAIgiAIgiA+wwxY8C/oUMJXdPZmkP0UAAD//yRcbo0=") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 68.399944ms ago: executing program 4 (id=1031): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000022c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) 0s ago: executing program 1 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) kernel console output (not intermixed with test programs): _wifi: link becomes ready [ 33.609074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.614639][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.616677][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.618320][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.620485][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.622109][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.623752][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.626194][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.632481][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.633768][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.636469][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.637814][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.641921][ T4331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.643332][ T4331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.644735][ T4331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.646166][ T4331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.648710][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.650738][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.652445][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.654008][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.660550][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.663447][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.678247][ T4340] device veth0_vlan entered promiscuous mode [ 33.685253][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.687027][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.717473][ T4340] device veth1_vlan entered promiscuous mode [ 33.728245][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.731441][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.733203][ T1616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.734558][ T1616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.735397][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.737665][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.739219][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.758368][ T4403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.762460][ T4403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.764032][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.765789][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.774416][ T4433] loop2: detected capacity change from 0 to 128 [ 33.781595][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.783796][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.785154][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.785753][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.791225][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.793400][ T4433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.807870][ T4403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.809540][ T4403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.812277][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.825400][ T4340] device veth0_macvtap entered promiscuous mode [ 33.841012][ T4437] ip_tables: iptables: counters copy to user failed while replacing table [ 33.844838][ T4340] device veth1_macvtap entered promiscuous mode [ 33.873094][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.874917][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.876683][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.192099][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.193952][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.196265][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.198194][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.201527][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.204543][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.207550][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.210011][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.212288][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.214439][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.216566][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.218589][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.224471][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.226400][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.229164][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.232729][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.234326][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.235901][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.237538][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.273411][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.280126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.283579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.285530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.288125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.291387][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.316529][ T1616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.318173][ T1616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.321849][ T4449] loop3: detected capacity change from 0 to 128 [ 34.400137][ T4334] Bluetooth: hci1: command 0x041b tx timeout [ 34.401900][ T4334] Bluetooth: hci2: command 0x041b tx timeout [ 34.403403][ T4334] Bluetooth: hci0: command 0x041b tx timeout [ 34.479621][ T4343] Bluetooth: hci4: command 0x041b tx timeout [ 34.481217][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 34.609282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.634595][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 34.638979][ T4449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.669696][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.671305][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.676474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.786265][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 34.818110][ T4460] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.822803][ T4462] loop3: detected capacity change from 0 to 512 [ 34.866080][ T27] audit: type=1326 audit(34.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579728 code=0x0 [ 34.870739][ T4465] loop2: detected capacity change from 0 to 512 [ 34.892703][ T4458] FAULT_INJECTION: forcing a failure. [ 34.892703][ T4458] name failslab, interval 1, probability 0, space 0, times 1 [ 34.895399][ T4458] CPU: 1 PID: 4458 Comm: syz.4.5 Not tainted syzkaller #0 [ 34.896659][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.898521][ T4458] Call trace: [ 34.899157][ T4458] dump_backtrace+0x1c4/0x1f0 [ 34.899972][ T4458] show_stack+0x2c/0x3c [ 34.900682][ T4458] __dump_stack+0x30/0x40 [ 34.901433][ T4458] dump_stack_lvl+0xf4/0x15c [ 34.902381][ T4458] dump_stack+0x1c/0x5c [ 34.903241][ T4458] should_fail_ex+0x3cc/0x524 [ 34.904207][ T4458] __should_failslab+0xc0/0x11c [ 34.905179][ T4458] should_failslab+0x10/0x28 [ 34.906082][ T4458] kmem_cache_alloc+0x88/0x310 [ 34.907009][ T4458] __kernfs_new_node+0xec/0x5fc [ 34.907965][ T4458] kernfs_new_node+0x120/0x230 [ 34.908913][ T4458] kernfs_create_dir_ns+0x58/0x138 [ 34.909863][ T4458] internal_create_group+0x1d0/0xb24 [ 34.910773][ T4458] sysfs_create_groups+0x60/0x134 [ 34.911642][ T4458] ib_setup_port_attrs+0xb38/0x1a14 [ 34.912572][ T4458] ib_register_device+0xdb0/0x1030 [ 34.913438][ T4458] siw_newlink+0x7c8/0xc28 [ 34.914219][ T4458] nldev_newlink+0x430/0x50c [ 34.915025][ T4458] rdma_nl_rcv+0x4fc/0x828 [ 34.915817][ T4458] netlink_unicast+0x5fc/0x80c [ 34.916656][ T4458] netlink_sendmsg+0x6f0/0x9d8 [ 34.917527][ T4458] ____sys_sendmsg+0x588/0x90c [ 34.918380][ T4458] __sys_sendmsg+0x288/0x374 [ 34.919214][ T4458] __arm64_sys_sendmsg+0x80/0x94 [ 34.920050][ T4458] invoke_syscall+0x98/0x290 [ 34.920877][ T4458] el0_svc_common+0x13c/0x258 [ 34.921688][ T4458] do_el0_svc+0x5c/0x134 [ 34.922440][ T4458] el0_svc+0x58/0x12c [ 34.923123][ T4458] el0t_64_sync_handler+0x84/0xf0 [ 34.924002][ T4458] el0t_64_sync+0x18c/0x190 [ 34.931491][ T4323] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.977115][ T4458] infiniband syz2: Couldn't register device with driver model [ 34.987620][ T4458] siw: device registration error -12 [ 36.247942][ T4502] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 36.360568][ T4511] device bridge1 entered promiscuous mode [ 37.789436][ T4510] sched: RT throttling activated [ 37.820160][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 37.821302][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 37.898789][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 37.900644][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 37.901884][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 38.995592][ T4570] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 39.006247][ T4570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 39.008121][ T4570] device vxcan0 entered promiscuous mode [ 39.009272][ T4570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.027728][ T4570] netlink: 'syz.1.33': attribute type 10 has an invalid length. [ 39.029309][ T4570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.33'. [ 39.036999][ T4570] device dummy0 entered promiscuous mode [ 39.334838][ T4575] loop3: detected capacity change from 0 to 8 [ 39.361971][ T4577] loop4: detected capacity change from 0 to 512 [ 39.472595][ T4580] SQUASHFS error: Unable to read directory block [631:26] [ 39.575011][ T4586] Bluetooth: MGMT ver 1.22 [ 39.590090][ T27] audit: type=1326 audit(39.580:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4581 comm="syz.2.37" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff98779728 code=0x0 [ 39.683937][ T4343] Bluetooth: hci0: unexpected subevent 0x01 length: 19 > 18 [ 39.685776][ T4343] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 39.920204][ T4343] Bluetooth: hci3: command 0x0419 tx timeout [ 39.921740][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 39.922887][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 39.924058][ T4346] Bluetooth: hci4: command 0x0419 tx timeout [ 39.925236][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 39.927401][ T4337] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 39.977790][ T4595] loop0: detected capacity change from 0 to 32768 [ 39.990398][ T4595] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 39.993321][ T4595] XFS (loop0): Mounting V5 Filesystem [ 40.024998][ T4595] XFS (loop0): Ending clean mount [ 40.027981][ T4595] XFS (loop0): Quotacheck needed: Please wait. [ 40.034979][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.036899][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.037874][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.039091][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.041866][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.043319][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.045316][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.046711][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.048519][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.057086][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.060932][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.062724][ T4403] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.066814][ T4595] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 40.210707][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.212996][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.214251][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.215676][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.218530][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.221658][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.223539][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.225426][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.227496][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.236049][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.238213][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.241381][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.244184][ T11] XFS (loop0): page discard on page 00000000f33230fd, inode 0x244c, pos 0. [ 40.247124][ T14] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.249223][ T14] XFS (loop0): Unmount and run xfs_repair [ 40.250791][ T14] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.251974][ T14] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.253725][ T14] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.255231][ T14] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.256751][ T14] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.258208][ T14] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.259913][ T14] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.261595][ T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.263286][ T14] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.265036][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.267329][ T11] XFS (loop0): page discard on page 000000008f4e1802, inode 0x244c, pos 4096. [ 40.272748][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.274749][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.275694][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.277369][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.279167][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.281731][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.283555][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.285439][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.287559][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.292086][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.293908][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.298454][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.300706][ T11] XFS (loop0): page discard on page 00000000d4b9d045, inode 0x244c, pos 8192. [ 40.302506][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.304406][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.305353][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.306638][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.308095][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.312294][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.313782][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.315487][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.317094][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.318693][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.327136][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.328997][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.334023][ T11] XFS (loop0): page discard on page 00000000c271bf91, inode 0x244c, pos 12288. [ 40.336737][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.338546][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.355823][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.357214][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.358676][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.363514][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.365031][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.366465][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.367926][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.376676][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.378157][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.379774][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.381724][ T11] XFS (loop0): page discard on page 000000007d17a75c, inode 0x244c, pos 16384. [ 40.383515][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.385492][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.386483][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.387694][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.389131][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.394165][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.395711][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.397203][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.402859][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.403494][ T4612] smc: net device lo applied user defined pnetid SYZ2 [ 40.404694][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.407284][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.409452][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.411446][ T11] XFS (loop0): page discard on page 0000000019221533, inode 0x244c, pos 20480. [ 40.412621][ T4612] smc: net device lo erased user defined pnetid SYZ2 [ 40.415836][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.417750][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.418823][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.420794][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.422410][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.423920][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.425403][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.427056][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.428611][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.432601][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.434116][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.435630][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.437599][ T11] XFS (loop0): page discard on page 00000000b4f59844, inode 0x244c, pos 24576. [ 40.439577][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.441418][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.442395][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.443635][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.445001][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.446377][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.447781][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.454903][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.456365][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.775832][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.777456][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.779174][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.781595][ T11] XFS (loop0): page discard on page 00000000eb04e224, inode 0x244c, pos 28672. [ 40.783834][ T4377] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.786188][ T4377] XFS (loop0): Unmount and run xfs_repair [ 40.787267][ T4377] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.788707][ T4377] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.793108][ T4377] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.799107][ T4377] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.812404][ T4377] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.816323][ T4377] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.816525][ T4610] device veth1_macvtap left promiscuous mode [ 40.818988][ T4610] device macsec0 entered promiscuous mode [ 40.825409][ T4377] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.829757][ T4377] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.832479][ T4377] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.836372][ T11] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x18c/0x290" at daddr 0x4 len 4 error 74 [ 40.838526][ T11] XFS (loop0): page discard on page 00000000c41b40e4, inode 0x244c, pos 32768. [ 40.843393][ T4377] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.845535][ T4377] XFS (loop0): Unmount and run xfs_repair [ 40.846639][ T4377] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.848045][ T4377] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.855154][ T4377] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.856964][ T4377] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.866385][ T4628] loop2: detected capacity change from 0 to 1024 [ 40.868313][ T4377] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.882036][ T4628] ======================================================= [ 40.882036][ T4628] WARNING: The mand mount option has been deprecated and [ 40.882036][ T4628] and is ignored by this kernel. Remove the mand [ 40.882036][ T4628] option from the mount to silence this warning. [ 40.882036][ T4628] ======================================================= [ 40.888625][ T4377] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.893749][ T4377] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.897520][ T4377] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.901713][ T4377] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.906553][ T11] XFS (loop0): page discard on page 000000005a3f0119, inode 0x244c, pos 36864. [ 40.907481][ T4628] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.910880][ T4628] EXT4-fs (loop2): unsupported descriptor size 30438 [ 40.912143][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.914173][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.915097][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.916241][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.917647][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.919048][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.921114][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.922829][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.925188][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.930457][ T4630] capability: warning: `syz.1.52' uses deprecated v2 capabilities in a way that may be insecure [ 40.939553][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.941088][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.942972][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.944998][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.945934][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.947147][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.948665][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.955162][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.956719][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.958156][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.960939][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.962401][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.963876][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.970825][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 40.972613][ T4402] XFS (loop0): Unmount and run xfs_repair [ 40.973556][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 40.974741][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 40.979609][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 40.981086][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 40.983106][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 40.984655][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 40.986152][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.988611][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 40.990495][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.056538][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 41.066329][ T4402] XFS (loop0): Unmount and run xfs_repair [ 41.070020][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 41.074565][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 41.076448][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 41.078344][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 41.082912][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 41.084695][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 41.086578][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.088429][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.728217][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.730735][ T4397] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.732081][ T4397] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 41.734224][ T4397] XFS (loop0): Unmount and run xfs_repair [ 41.735266][ T4397] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 41.736556][ T4397] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 41.738112][ T4397] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 41.769698][ T4397] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 41.771419][ T4397] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 41.772968][ T4397] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 41.774573][ T4397] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.776117][ T4397] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.777655][ T4397] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.797201][ T4402] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 41.799133][ T4402] XFS (loop0): Unmount and run xfs_repair [ 41.800744][ T4402] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 41.802166][ T4402] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 41.803666][ T4402] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 41.805121][ T4402] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 41.806588][ T4402] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 41.807967][ T4402] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 41.811872][ T4402] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.821310][ T4402] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.822918][ T4402] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.825346][ T4377] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0x108, xfs_bnobt block 0x4 [ 41.828977][ T4377] XFS (loop0): Unmount and run xfs_repair [ 41.830152][ T4377] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 41.831469][ T4377] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 41.832994][ T4377] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 41.837721][ T4377] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 41.846961][ T4377] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 41.852792][ T4377] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 41.857503][ T4377] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.865011][ T4377] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.870998][ T4377] 00000070: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 41.877429][ T4335] XFS (loop0): Unmounting Filesystem [ 41.982345][ T4665] loop2: detected capacity change from 0 to 128 [ 42.009462][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 42.066136][ T4671] overlayfs: unrecognized mount option "\']*=°˘°©ć[\1\Ăĺý07†đ˙$Áܲą" or missing value [ 43.166909][ T4672] loop4: detected capacity change from 0 to 2048 [ 43.532942][ T4672] loop4: p1 < > p4 [ 43.532942][ T4672] p4: [ 43.535723][ T4672] loop4: p4 size 722688 extends beyond EOD, truncated [ 43.676020][ T4682] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.689184][ T4679] syz.2.61: attempt to access beyond end of device [ 43.689184][ T4679] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 43.694447][ T4679] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 45.322527][ T4740] ip_tables: iptables: counters copy to user failed while replacing table [ 45.326904][ T4727] loop1: detected capacity change from 0 to 32768 [ 45.344945][ T4727] XFS (loop1): Mounting V5 Filesystem [ 45.366247][ T4727] XFS (loop1): Ending clean mount [ 45.385029][ T4727] XFS (loop1): Quotacheck needed: Please wait. [ 45.409082][ T4727] XFS (loop1): Quotacheck: Done. [ 45.569739][ T4337] Bluetooth: hci0: Invalid connection link type handle 0x00c8 [ 45.936870][ T4756] binder: 4755:4756 ioctl c0306201 20000500 returned -14 [ 45.943148][ T4756] binder: 4755:4756 tried to acquire reference to desc 0, got 1 instead [ 45.945784][ T4756] binder_alloc: 4755: pid 4755 spamming oneway? 2 buffers allocated for a total size of 5120 [ 45.947949][ T4756] binder_alloc: 4755: pid 4755 spamming oneway? 3 buffers allocated for a total size of 5128 [ 45.951332][ T114] binder: undelivered TRANSACTION_COMPLETE [ 45.952432][ T114] binder: undelivered TRANSACTION_COMPLETE [ 45.953413][ T114] binder: undelivered TRANSACTION_COMPLETE [ 45.961432][ T114] binder: undelivered transaction 6, process died. [ 45.962716][ T114] binder: undelivered transaction 7, process died. [ 45.964403][ T114] binder: undelivered transaction 5, process died. [ 46.017348][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.450794][ T4330] XFS (loop1): Unmounting Filesystem [ 46.465938][ T4771] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 48.568697][ T4784] loop1: detected capacity change from 0 to 1764 [ 51.114388][ T4833] syz.3.100 (4833): drop_caches: 2 [ 51.674707][ T4839] process 'syz.3.102' launched '/dev/fd/3' with NULL argv: empty string added [ 52.210807][ T4849] loop4: detected capacity change from 0 to 256 [ 52.212520][ T4849] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.228162][ T4838] loop2: detected capacity change from 0 to 40427 [ 52.251728][ T4838] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff [ 52.253739][ T4838] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 52.255964][ T4838] F2FS-fs (loop2): invalid crc value [ 52.262239][ T4838] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.269136][ T4838] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8 [ 52.275599][ T4838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.313541][ T4849] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.335569][ T4838] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c [ 52.348966][ T4849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.659390][ T4849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.708035][ T4336] syz-executor: attempt to access beyond end of device [ 52.708035][ T4336] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.182748][ T4870] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 53.196740][ T4870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.222082][ T4870] bond1: (slave gretap1): making interface the new active one [ 53.225143][ T4870] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 53.227038][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 53.649261][ T4878] loop3: detected capacity change from 0 to 2048 [ 54.016654][ T4878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 54.872474][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 54.899508][ T4377] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.127356][ T4377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.387878][ T4377] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 55.389584][ T4377] usb 1-1: config 189 has no interface number 0 [ 55.391896][ T4377] usb 1-1: config 189 interface 127 has no altsetting 0 [ 55.420602][ T4377] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 55.422407][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.424104][ T4377] usb 1-1: Product: syz [ 55.424835][ T4377] usb 1-1: Manufacturer: syz [ 55.425744][ T4377] usb 1-1: SerialNumber: syz [ 55.917702][ T4904] device syzkaller0 entered promiscuous mode [ 55.938844][ T4904] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 57.266842][ T4908] loop4: detected capacity change from 0 to 32768 [ 57.283554][ T4908] XFS (loop4): Mounting V5 Filesystem [ 57.312756][ T4908] XFS (loop4): Ending clean mount [ 57.314703][ T4908] XFS (loop4): Quotacheck needed: Please wait. [ 57.373271][ T4924] loop3: detected capacity change from 0 to 512 [ 57.375875][ T4924] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.378959][ T4924] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.386317][ T4908] XFS (loop4): Quotacheck: Done. [ 57.388958][ T4924] EXT4-fs warning (device loop3): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 57.634875][ T4337] Bluetooth: hci4: Invalid connection link type handle 0x00c8 [ 57.941856][ T4924] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 57.943278][ T4924] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.123: bad orphan inode 768 [ 57.961718][ T4924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.349101][ T4934] mmap: syz.1.124 (4934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.418252][ T4936] tipc: Started in network mode [ 58.421597][ T4936] tipc: Node identity 4, cluster identity 4711 [ 58.428037][ T4936] tipc: Node number set to 4 [ 58.441499][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 58.494174][ T4340] XFS (loop4): Unmounting Filesystem [ 58.922780][ T4377] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 58.925664][ T4377] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 58.930865][ T4377] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 58.933662][ T4377] safe_serial 1-1:189.127: safe_serial converter detected [ 58.938680][ T4377] safe_serial: probe of 1-1:189.127 failed with error -22 [ 58.945172][ T4377] usb 1-1: USB disconnect, device number 2 [ 59.464842][ T4944] Zero length message leads to an empty skb [ 59.840020][ T27] audit: type=1326 audit(59.830:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.2.131" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98779728 code=0x0 [ 59.993323][ T4975] loop1: detected capacity change from 0 to 512 [ 60.021302][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 60.023237][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 60.079495][ T4771] IPVS: ip_vs_send_async error -101 [ 60.086226][ T4978] input: syz0 as /devices/virtual/input/input3 [ 60.737122][ T4994] loop0: detected capacity change from 0 to 2048 [ 60.746286][ T4994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.892743][ T4997] CIFS: bad ip= option (127.0.0.1,nc=\\127.0.0.1\share) [ 62.386531][ T5015] tipc: Started in network mode [ 62.387541][ T5015] tipc: Node identity ea9912fd11de, cluster identity 4711 [ 62.390437][ T5015] tipc: Enabled bearer , priority 0 [ 62.392999][ T5015] device syzkaller0 entered promiscuous mode [ 62.436750][ T5015] tipc: Resetting bearer [ 62.442965][ T5022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 62.448154][ T5014] tipc: Resetting bearer [ 62.839871][ T5029] 0x000000000000-0x000000020000 : "" [ 63.160800][ T5029] ftl_cs: FTL header not found. [ 63.530474][ T5014] tipc: Disabling bearer [ 63.554303][ T5030] bridge1: port 1(erspan0) entered blocking state [ 63.555585][ T5030] bridge1: port 1(erspan0) entered disabled state [ 63.557210][ T5030] device erspan0 entered promiscuous mode [ 63.558957][ T5030] bridge1: port 1(erspan0) entered blocking state [ 63.560278][ T5030] bridge1: port 1(erspan0) entered forwarding state [ 63.581142][ T5034] device erspan0 left promiscuous mode [ 63.582893][ T5034] bridge1: port 1(erspan0) entered disabled state [ 63.623426][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.625741][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.627191][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.630151][ T5034] device bridge_slave_0 left promiscuous mode [ 63.631771][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.000810][ T5034] device bridge_slave_1 left promiscuous mode [ 64.001947][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.053595][ T5034] bond0: (slave bond_slave_0): Releasing backup interface [ 64.073957][ T5034] bond0: (slave bond_slave_1): Releasing backup interface [ 64.096332][ T5054] syz.1.159 uses obsolete (PF_INET,SOCK_PACKET) [ 64.139819][ T5034] team0: Port device team_slave_0 removed [ 64.151976][ T5034] team0: Port device team_slave_1 removed [ 64.153634][ T5034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.155182][ T5034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.157705][ T5034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.159105][ T5034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.170779][ T14] tipc: Node number set to 4215739133 [ 64.172499][ T5033] tipc: Started in network mode [ 64.173329][ T5033] tipc: Node identity 26c580544d42, cluster identity 4711 [ 64.175091][ T5033] tipc: Enabled bearer , priority 0 [ 64.177944][ T5047] device syzkaller0 entered promiscuous mode [ 64.208338][ T5055] tipc: Resetting bearer [ 64.231453][ T5032] tipc: Resetting bearer [ 64.310455][ T5032] tipc: Disabling bearer [ 64.550136][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.553712][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.247042][ T5082] loop4: detected capacity change from 0 to 512 [ 65.286606][ T5082] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 65.288919][ T5082] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.167: invalid indirect mapped block 256 (level 1) [ 65.301513][ T5082] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.167: invalid indirect mapped block 2683928664 (level 1) [ 65.305740][ T5082] EXT4-fs (loop4): 1 truncate cleaned up [ 65.307007][ T5082] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.319443][ T5084] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 65.423071][ T5092] usb usb8: usbfs: process 5092 (syz.4.167) did not claim interface 0 before use [ 66.023401][ T5102] loop0: detected capacity change from 0 to 1024 [ 66.476777][ T5102] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 66.846000][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 66.996739][ T5110] FAULT_INJECTION: forcing a failure. [ 66.996739][ T5110] name failslab, interval 1, probability 0, space 0, times 0 [ 67.001762][ T5110] CPU: 1 PID: 5110 Comm: syz.3.173 Not tainted syzkaller #0 [ 67.003041][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 67.004656][ T5110] Call trace: [ 67.005203][ T5110] dump_backtrace+0x1c4/0x1f0 [ 67.006028][ T5110] show_stack+0x2c/0x3c [ 67.006810][ T5110] __dump_stack+0x30/0x40 [ 67.007553][ T5110] dump_stack_lvl+0xf4/0x15c [ 67.008372][ T5110] dump_stack+0x1c/0x5c [ 67.009111][ T5110] should_fail_ex+0x3cc/0x524 [ 67.009941][ T5110] __should_failslab+0xc0/0x11c [ 67.010832][ T5110] should_failslab+0x10/0x28 [ 67.011813][ T5110] kmem_cache_alloc+0x88/0x310 [ 67.012792][ T5110] radix_tree_node_alloc+0xa0/0x348 [ 67.013793][ T5110] idr_get_free+0x25c/0x8c4 [ 67.014576][ T5110] idr_alloc_u32+0x134/0x2a4 [ 67.015396][ T5110] tcf_idr_check_alloc+0x540/0x6ec [ 67.016335][ T5110] tcf_gact_init+0x258/0x74c [ 67.017162][ T5110] tcf_action_init_1+0x388/0x614 [ 67.018037][ T5110] tcf_action_init+0x268/0x810 [ 67.018870][ T5110] tc_ctl_action+0x308/0xa18 [ 67.019682][ T5110] rtnetlink_rcv_msg+0x694/0xcc4 [ 67.020536][ T5110] netlink_rcv_skb+0x220/0x3ec [ 67.021391][ T5110] rtnetlink_rcv+0x28/0x38 [ 67.022182][ T5110] netlink_unicast+0x5fc/0x80c [ 67.023061][ T5110] netlink_sendmsg+0x6f0/0x9d8 [ 67.023901][ T5110] ____sys_sendmsg+0x588/0x90c [ 67.024773][ T5110] __sys_sendmsg+0x288/0x374 [ 67.025624][ T5110] __arm64_sys_sendmsg+0x80/0x94 [ 67.026564][ T5110] invoke_syscall+0x98/0x290 [ 67.027466][ T5110] el0_svc_common+0x13c/0x258 [ 67.028349][ T5110] do_el0_svc+0x5c/0x134 [ 67.029122][ T5110] el0_svc+0x58/0x12c [ 67.029827][ T5110] el0t_64_sync_handler+0x84/0xf0 [ 67.030706][ T5110] el0t_64_sync+0x18c/0x190 [ 67.946465][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 67.968807][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.172'. [ 68.076712][ T5113] bridge1: port 1(erspan0) entered blocking state [ 68.078349][ T5113] bridge1: port 1(erspan0) entered disabled state [ 68.087355][ T5113] device erspan0 entered promiscuous mode [ 68.089044][ T5113] bridge1: port 1(erspan0) entered blocking state [ 68.090267][ T5113] bridge1: port 1(erspan0) entered forwarding state [ 68.134339][ T5113] device erspan0 left promiscuous mode [ 68.136185][ T5113] bridge1: port 1(erspan0) entered disabled state [ 68.904206][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.911317][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.912906][ T5113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.915070][ T5113] device bridge_slave_0 left promiscuous mode [ 68.917773][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.990317][ T5113] device bridge_slave_1 left promiscuous mode [ 68.991518][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.041682][ T5113] bond0: (slave bond_slave_0): Releasing backup interface [ 69.083879][ T5113] bond0: (slave bond_slave_1): Releasing backup interface [ 69.150300][ T5113] team0: Port device team_slave_0 removed [ 69.163387][ T5113] team0: Port device team_slave_1 removed [ 69.164962][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.166384][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.168337][ T5113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.170035][ T5113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.190868][ T5151] tipc: Started in network mode [ 69.191961][ T5151] tipc: Node identity 4, cluster identity 4711 [ 69.193166][ T5151] tipc: Node number set to 4 [ 69.200485][ T5146] netlink: 'syz.3.183': attribute type 14 has an invalid length. [ 69.201806][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 69.206499][ T5146] bond0: option xmit_hash_policy: invalid value (113) [ 69.213958][ T5134] device syzkaller0 entered promiscuous mode [ 69.224742][ T5149] TC_ACT_REPEAT abuse ? [ 69.611721][ T116] cfg80211: failed to load regulatory.db [ 69.811961][ T5172] loop0: detected capacity change from 0 to 128 [ 69.824388][ T5172] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.029997][ T5172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.619651][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'. [ 70.657411][ T5187] bridge1: port 1(erspan0) entered blocking state [ 70.658898][ T5187] bridge1: port 1(erspan0) entered disabled state [ 70.675211][ T5187] device erspan0 entered promiscuous mode [ 70.682105][ T5187] bridge1: port 1(erspan0) entered blocking state [ 70.683350][ T5187] bridge1: port 1(erspan0) entered forwarding state [ 70.693267][ T5187] device erspan0 left promiscuous mode [ 70.694502][ T5187] bridge1: port 1(erspan0) entered disabled state [ 70.722749][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.725747][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.727251][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.093998][ T5187] device bridge_slave_0 left promiscuous mode [ 71.112326][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.195434][ T5187] device bridge_slave_1 left promiscuous mode [ 71.197126][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.529289][ T5187] bond0: (slave bond_slave_0): Releasing backup interface [ 71.576877][ T5187] bond0: (slave bond_slave_1): Releasing backup interface [ 71.672159][ T5187] team0: Port device team_slave_0 removed [ 71.685382][ T5187] team0: Port device team_slave_1 removed [ 71.687187][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.688789][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.968700][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.970244][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.983024][ T5187] bond1: (slave gretap1): Releasing active interface [ 72.797965][ T5234] loop1: detected capacity change from 0 to 8 [ 72.901915][ T5236] Invalid ELF header magic: != ELF [ 73.377667][ T5237] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 74.303079][ T5260] loop0: detected capacity change from 0 to 512 [ 74.316840][ T5260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.325559][ T5260] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.327288][ T5260] EXT4-fs warning (device loop0): ext4_enable_quotas:7100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 74.332587][ T5260] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 74.335338][ T5260] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.216: bad orphan inode 768 [ 74.340982][ T5260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.866409][ T5271] loop2: detected capacity change from 0 to 2048 [ 74.987803][ T5271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.802894][ T5283] null_blk: disk my_zoned_dev created [ 75.979960][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 76.035490][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 77.620785][ T5305] device-mapper: ioctl: The device has no table. [ 78.221002][ T5330] infiniband syz2: set down [ 78.222581][ T5330] infiniband syz2: added ipvlan0 [ 78.266032][ T5332] loop2: detected capacity change from 0 to 16 [ 78.279235][ T5332] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.675572][ T5330] RDS/IB: syz2: added [ 78.676777][ T5330] smc: adding ib device syz2 with port count 1 [ 78.678123][ T5330] smc: ib device syz2 port 1 has pnetid [ 79.574639][ T5342] netlink: 80 bytes leftover after parsing attributes in process `syz.1.240'. [ 81.274109][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.276973][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.312402][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 82.461452][ T5391] Set syz1 is full, maxelem 246 reached [ 82.798814][ T5400] loop0: detected capacity change from 0 to 512 [ 82.805220][ T5400] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.257: Unrecognised inode hash code 255 [ 82.807706][ T5400] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.257: Corrupt directory, running e2fsck is recommended [ 82.811867][ T5400] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 82.813452][ T5400] EXT4-fs error (device loop0): ext4_iget_extra_inode:4766: inode #15: comm syz.0.257: corrupted in-inode xattr [ 82.861640][ T5400] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.257: couldn't read orphan inode 15 (err -117) [ 82.881703][ T5404] loop2: detected capacity change from 0 to 1024 [ 82.926155][ T5400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.110958][ T5404] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.287955][ T5402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 84.094473][ T5414] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.257: Unrecognised inode hash code 255 [ 84.096615][ T5414] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.257: Corrupt directory, running e2fsck is recommended [ 84.622628][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 84.625371][ T5408] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 84.722838][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 85.305096][ T5451] loop2: detected capacity change from 0 to 512 [ 85.370156][ T5451] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 85.371917][ T5451] FAT-fs (loop2): Filesystem has been set read-only [ 85.374435][ T5451] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 85.376112][ T5451] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 85.426967][ T5451] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 86.931903][ T5556] loop3: detected capacity change from 0 to 1024 [ 87.729943][ T5556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 88.326758][ T4331] EXT4-fs (loop3): unmounting filesystem. [ 88.725156][ T5584] loop3: detected capacity change from 0 to 128 [ 90.815451][ T5543] kworker/u4:31: attempt to access beyond end of device [ 90.815451][ T5543] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 91.622585][ T5593] loop2: detected capacity change from 0 to 1024 [ 91.712682][ T5593] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 91.714408][ T5593] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 91.716037][ T5593] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.281: Failed to acquire dquot type 0 [ 91.723488][ T5593] EXT4-fs error (device loop2): mb_free_blocks:1853: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 91.727961][ T5593] EXT4-fs (loop2): 1 truncate cleaned up [ 91.729208][ T5593] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 91.851597][ T5600] loop3: detected capacity change from 0 to 2048 [ 92.435673][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 92.447162][ T5600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.452105][ T5600] fs-verity: sha512 using implementation "sha512-ce" [ 92.468425][ T5599] EXT4-fs (loop3): unmounting filesystem. [ 92.557463][ T5616] loop1: detected capacity change from 0 to 1024 [ 92.864602][ T5616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.674808][ T5630] loop4: detected capacity change from 0 to 2048 [ 94.924350][ T5630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 95.567625][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 95.585313][ T5635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.301'. [ 95.919053][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 97.378346][ T5686] loop0: detected capacity change from 0 to 32768 [ 97.405839][ T5686] JBD2: Ignoring recovery information on journal [ 97.407933][ T5686] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 97.409613][ T5686] JBD2: bad block at offset 32 [ 97.421786][ T5686] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.281718][ T5702] loop1: detected capacity change from 0 to 2048 [ 98.603612][ T5702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.012251][ T5711] rdma_rxe: rxe_register_device failed with error -23 [ 99.013885][ T5711] rdma_rxe: failed to add ipvlan0 [ 100.157935][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 100.630845][ T4335] ocfs2: Unmounting device (7,0) on (node local) [ 101.448515][ T5733] loop0: detected capacity change from 0 to 32768 [ 101.452782][ T5733] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.318 (5733) [ 101.460866][ T5733] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 101.462942][ T5733] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 101.464597][ T5733] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 101.466346][ T5733] BTRFS info (device loop0): use zstd compression, level 3 [ 101.467529][ T5733] BTRFS info (device loop0): force clearing of disk cache [ 101.468721][ T5733] BTRFS info (device loop0): enabling disk space caching [ 101.470011][ T5733] BTRFS info (device loop0): disk space caching is enabled [ 101.605381][ T5750] tipc: Enabled bearer , priority 0 [ 101.607316][ T5750] device syzkaller0 entered promiscuous mode [ 101.692951][ T5761] tipc: Resetting bearer [ 101.712689][ T5748] tipc: Resetting bearer [ 101.833182][ T5733] BTRFS info (device loop0): enabling ssd optimizations [ 101.837781][ T5733] BTRFS info (device loop0): rebuilding free space tree [ 101.855698][ T5733] BTRFS info (device loop0): disabling free space tree [ 101.857117][ T5733] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 101.858918][ T5733] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.085514][ T5763] loop4: detected capacity change from 0 to 1024 [ 102.118151][ T5763] EXT4-fs (loop4): filesystem is read-only [ 102.121789][ T5763] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 102.180327][ T5748] tipc: Disabling bearer [ 102.310282][ T4335] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 102.804321][ T4946] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 11 /dev/loop0 scanned by udevd (4946) [ 102.814497][ T5797] device syzkaller0 entered promiscuous mode [ 104.130779][ T5811] rdma_rxe: rxe_register_device failed with error -23 [ 104.132174][ T5811] rdma_rxe: failed to add ipvlan0 [ 104.134355][ T5811] loop0: detected capacity change from 0 to 16 [ 104.266452][ T5811] erofs: (device loop0): mounted with root inode @ nid 36. [ 104.755926][ T5815] loop1: detected capacity change from 0 to 2048 [ 110.242286][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.244781][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.356457][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.358040][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.360644][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.361996][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.676224][ T5914] team0: Port device bridge0 added [ 110.863559][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.058942][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.139252][ T5916] device bridge1 left promiscuous mode [ 113.500598][ T5945] loop0: detected capacity change from 0 to 1024 [ 113.624093][ T5945] EXT4-fs (loop0): filesystem is read-only [ 113.625327][ T5945] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 114.119174][ T5983] tipc: Enabling of bearer rejected, failed to enable media [ 114.292449][ T5995] loop0: detected capacity change from 0 to 2048 [ 114.330144][ T5995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.454562][ T6038] loop2: detected capacity change from 0 to 1024 [ 117.590823][ T6038] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 118.117318][ T6058] EXT4-fs error (device loop2): ext4_free_blocks:6235: comm syz.2.388: Freeing blocks not in datazone - block = 0, count = 16 [ 118.416745][ T6058] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.388: bg 0: block 112: padding at end of block bitmap is not set [ 118.439664][ T6058] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 118.441888][ T6058] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.441888][ T6058] [ 118.443384][ T6058] EXT4-fs (loop2): Total free blocks count 0 [ 118.444334][ T6058] EXT4-fs (loop2): Free/Dirty block details [ 118.445345][ T6058] EXT4-fs (loop2): free_blocks=0 [ 118.446185][ T6058] EXT4-fs (loop2): dirty_blocks=4576 [ 118.447021][ T6058] EXT4-fs (loop2): Block reservation details [ 118.447976][ T6058] EXT4-fs (loop2): i_reserved_data_blocks=286 [ 118.492014][ T5506] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 118.842334][ T6067] device macvlan0 entered promiscuous mode [ 118.951879][ T6069] loop2: detected capacity change from 0 to 1024 [ 119.208894][ T6077] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4330] was attempted by " \x22ľţŤ“CĂiŻG ě¦3“oŤx˙\x07€'Ę9ű˙ l/Eߍďţ •¦Ű·;N7šW®NŤOÜ}±Á)*Q´ëËżĂGGŽ˝ňęńŃnŢů‡í\x0bńĆäą“µS\x0bó‹KłËËł3µ©făÂÂĚěŽáA—ßęHű¨Íż}ećâĹĺÚŃ—G6Ý}µzçŔÓ‡Ş'FŹĽŐ­ťźě©éë˙ŘĎţéá=ź OEߌď˝ôAŞGD%Ľ¶ůÝń¨\x0dF_Ůí•źhŻČ\x5cŁŢ\x5c)ďL•\x5cŐQíYh¬Ű#»Đ‹d,âZůß©đ‘rő&ëKőósłµłőĄ•ĆJcˇ™*ťŃ–ëSŤJŚ¦Ĺh{=xö›ţ(âX¤¸óëV:E·^<3ůćĐČöĐ·\x0bĽÇÓV‹Őx\x0czö©QÄ_DŠNĹ…ÜWí¶y?â+eľqąĚ[)®çŰ©ü1ń+ď'đXë‹\x22~)R+Ít{ż˝]yú[µ×›zj»Ű•ŹýţÁn˛mÂ>6Eśooń·ŇÇ˙°\x0b ŘEü4RÜś!-Fď9ĄŤćĄÚąúůąÎQÁÝc˙ky©µµµµjęd-çPαśgsNç\x5cĚy-çőś7rŢĚy+çjÎŰ9[9Ł’ź?g-çPαśgsNç\x5cĚy-çőś7rŢĚy+çjÎŰ9[9ĂyO , priority 0 [ 132.050456][ T6323] rxe_eth0 speed is unknown, defaulting to 1000 [ 132.790263][ T14] tipc: Node number set to 1804042324 [ 133.681538][ T4900] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 134.113230][ T5798] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 134.608316][ T6349] ceph: No mds server is up or the cluster is laggy [ 134.655728][ T4900] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 135.031620][ T6378] netlink: 104 bytes leftover after parsing attributes in process `syz.1.459'. [ 135.387970][ T6377] loop2: detected capacity change from 0 to 128 [ 135.458541][ T6377] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.729641][ T6377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 135.913216][ T6454] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 136.265013][ T6454] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 137.339065][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 138.988489][ T6506] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.481' resets device [ 139.418861][ T6522] loop4: detected capacity change from 0 to 16 [ 139.612244][ T6522] erofs: (device loop4): mounted with root inode @ nid 36. [ 140.689231][ T6534] loop2: detected capacity change from 0 to 512 [ 140.698569][ T6534] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 140.775481][ T6534] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 140.831665][ T6538] loop4: detected capacity change from 0 to 1764 [ 140.895744][ T6543] loop0: detected capacity change from 0 to 256 [ 140.959556][ T6544] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.504548][ T6543] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 142.301943][ T6554] loop4: detected capacity change from 0 to 2048 [ 142.358155][ T6554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 143.324662][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 143.838217][ T6588] loop0: detected capacity change from 0 to 128 [ 143.857875][ T6588] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 144.138593][ T6593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.263080][ T6595] loop2: detected capacity change from 0 to 128 [ 144.284003][ T6595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.718860][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 144.721565][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 144.740251][ T6608] loop0: detected capacity change from 0 to 736 [ 145.384639][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 145.651975][ T6619] loop0: detected capacity change from 0 to 2048 [ 145.887167][ T6626] nftables ruleset with unbound set [ 146.082111][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 147.039896][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 147.144679][ T6649] loop0: detected capacity change from 0 to 512 [ 147.180571][ T6649] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 147.197078][ T6649] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 147.440058][ T6653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.054099][ T6663] loop0: detected capacity change from 0 to 2048 [ 148.114511][ T6663] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.693607][ T6683] syz.1.526 sent an empty control message without MSG_MORE. [ 149.725207][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 150.493107][ T6706] loop4: detected capacity change from 0 to 512 [ 150.498921][ T6706] EXT2-fs (loop4): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 150.503839][ T6706] EXT2-fs (loop4): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 150.696045][ T6713] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.033130][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 154.034250][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 154.035286][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 154.036296][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 154.879480][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 155.744429][ T6743] netlink: 'syz.1.552': attribute type 1 has an invalid length. [ 155.820006][ T6743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.836886][ T6746] device macvlan2 entered promiscuous mode [ 155.838762][ T6746] device bond2 entered promiscuous mode [ 155.850173][ T6746] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.853082][ T6746] team0: Port device macvlan2 added [ 155.874444][ T6743] bond2: (slave ip6gretap1): making interface the new active one [ 155.875958][ T6743] device ip6gretap1 entered promiscuous mode [ 155.878043][ T6743] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 155.890547][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 155.893765][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 156.360129][ T6760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.520828][ T6773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 158.294506][ T6786] team0: Port device bridge0 added [ 162.908788][ T6840] loop0: detected capacity change from 0 to 128 [ 162.926012][ T6840] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.334378][ T6840] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 163.901540][ T6853] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 163.917364][ T6855] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 164.144604][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 164.229169][ T6859] loop2: detected capacity change from 0 to 256 [ 164.248938][ T6859] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 165.635648][ T6865] Illegal XDP return value 5 on prog (id 64) dev N/A, expect packet loss! [ 166.588702][ T6878] xt_hashlimit: max too large, truncated to 1048576 [ 166.617774][ T6878] jffs2: notice: (6878) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.699773][ T6881] rdma_rxe: rxe_register_device failed with error -23 [ 166.701313][ T6881] rdma_rxe: failed to add ipvlan0 [ 166.703881][ T6881] loop0: detected capacity change from 0 to 16 [ 166.706236][ T6881] erofs: (device loop0): mounted with root inode @ nid 36. [ 167.364507][ T5800] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 167.707013][ T5800] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 168.232518][ T6885] ceph: No mds server is up or the cluster is laggy [ 168.397872][ T5800] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 169.115400][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 169.117524][ T48] CPU: 1 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 169.118838][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 169.120709][ T48] Workqueue: hci2 hci_rx_work [ 169.121587][ T48] Call trace: [ 169.122197][ T48] dump_backtrace+0x1c4/0x1f0 [ 169.123065][ T48] show_stack+0x2c/0x3c [ 169.123815][ T48] __dump_stack+0x30/0x40 [ 169.124621][ T48] dump_stack_lvl+0xf4/0x15c [ 169.125513][ T48] dump_stack+0x1c/0x5c [ 169.126259][ T48] sysfs_create_dir_ns+0x244/0x264 [ 169.127183][ T48] kobject_add_internal+0x5a8/0xb18 [ 169.128126][ T48] kobject_add+0x144/0x20c [ 169.128932][ T48] device_add+0x3dc/0xe4c [ 169.129717][ T48] hci_conn_add_sysfs+0xb8/0x1bc [ 169.130616][ T48] le_conn_complete_evt+0xe28/0x14a8 [ 169.131561][ T48] hci_le_conn_complete_evt+0x114/0x3b8 [ 169.132582][ T48] hci_le_meta_evt+0x2c0/0x4a8 [ 169.133483][ T48] hci_event_packet+0x4b0/0xb30 [ 169.134398][ T48] hci_rx_work+0x310/0xa70 [ 169.135224][ T48] process_one_work+0x7e4/0x13bc [ 169.136141][ T48] worker_thread+0x8cc/0xfe8 [ 169.136980][ T48] kthread+0x254/0x2e0 [ 169.137748][ T48] ret_from_fork+0x10/0x20 [ 169.140842][ T48] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 169.143479][ T48] Bluetooth: hci2: failed to register connection device [ 170.430595][ T6934] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 170.554647][ T6940] bond1: (slave veth3): Enslaving as an active interface with a down link [ 171.199681][ T48] Bluetooth: hci2: command 0x2016 tx timeout [ 171.364775][ T6934] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 171.483005][ T6934] device macvlan2 entered promiscuous mode [ 171.492518][ T6934] device bond1 entered promiscuous mode [ 171.494897][ T6934] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.882111][ T6934] device bond1 left promiscuous mode [ 172.102762][ T6964] netlink: 300 bytes leftover after parsing attributes in process `syz.1.608'. [ 172.610574][ T6966] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 172.612102][ T6966] netlink: 55 bytes leftover after parsing attributes in process `syz.1.608'. [ 173.374286][ T6984] loop2: detected capacity change from 0 to 512 [ 173.451272][ T6984] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 173.453640][ T6984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 173.733175][ T6984] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.613: bad orphan inode 131083 [ 173.737158][ T6984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.372493][ T6994] device syzkaller0 entered promiscuous mode [ 174.395907][ T6994] tipc: Enabled bearer , priority 0 [ 174.424955][ T6994] tipc: Resetting bearer [ 174.460143][ T6988] tipc: Resetting bearer [ 174.574735][ T7002] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes»G [ 174.576601][ T7002] Error parsing options; rc = [-22] [ 174.985098][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 175.007417][ T6988] tipc: Disabling bearer [ 175.015366][ T7011] loop2: detected capacity change from 0 to 512 [ 175.017313][ T7011] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 175.019315][ T7011] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 175.364002][ T7014] device syzkaller0 entered promiscuous mode [ 175.643656][ T7020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.691921][ T7035] pi3usb30532 0-0005: Error reading config register -5 [ 176.693470][ T7035] pi3usb30532: probe of 0-0005 failed with error -5 [ 176.696008][ T7035] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 176.786391][ T7033] block device autoloading is deprecated and will be removed. [ 177.078348][ T7033] md/raid:md0: device ram1 operational as raid disk 1 [ 177.083759][ T7033] md/raid:md0: device ram0 operational as raid disk 0 [ 177.110636][ T7033] md/raid:md0: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 177.114160][ T7033] md0: detected capacity change from 0 to 8192 [ 177.127037][ T7046] md: md0 still in use. [ 177.180527][ T7052] loop0: detected capacity change from 0 to 512 [ 177.184692][ T7052] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 177.187703][ T7052] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 177.365780][ T7056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.558596][ T48] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 180.952183][ T7088] loop2: detected capacity change from 0 to 512 [ 180.971812][ T7088] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 180.976510][ T7088] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 181.395172][ T7090] i2c i2c-0: Failed to register i2c client pi3usb30532 at 0x05 (-16) [ 181.492852][ T7100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.209850][ T7139] loop2: detected capacity change from 0 to 512 [ 183.221844][ T7139] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 183.225598][ T7139] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 183.453946][ T7147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.633575][ T7135] netlink: 'syz.3.658': attribute type 2 has an invalid length. [ 184.027688][ T27] audit: type=1807 audit(184.011:5): action=appraise res=1 [ 184.027957][ T7156] ima: policy update completed [ 184.029083][ T27] audit: type=1807 audit(184.011:6): action=appraise func=POLICY_CHECK res=1 [ 184.039612][ T27] audit: type=1802 audit(184.031:7): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.665" res=1 errno=0 [ 184.113292][ T7159] loop2: detected capacity change from 0 to 512 [ 184.119856][ T7159] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 184.150417][ T7159] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 184.207821][ T3940] udevd[3940]: could not touch /run/udev/queue: Permission denied [ 184.216580][ T3940] udevd[3940]: could not touch /run/udev/queue: Permission denied [ 184.233532][ T27] audit: type=1800 audit(184.191:8): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="udevd" name="/run/udev/queue" dev="tmpfs" ino=2512 res=0 errno=0 [ 184.246191][ T27] audit: type=1800 audit(184.201:9): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 184.255735][ T27] audit: type=1800 audit(184.201:10): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 184.258277][ T7165] [U] „ [ 184.259219][ T27] audit: type=1800 audit(184.201:11): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 184.263508][ T27] audit: type=1800 audit(184.201:12): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 184.267392][ T27] audit: type=1800 audit(184.201:13): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 184.270893][ T27] audit: type=1800 audit(184.201:14): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="udevd" name="/run/udev/queue" dev="tmpfs" ino=2512 res=0 errno=0 [ 184.336639][ T7168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.960074][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.801771][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.803017][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.333143][ T7195] loop2: detected capacity change from 0 to 1024 [ 189.338504][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 189.338517][ T27] audit: type=1800 audit(189.321:25): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 189.343018][ T27] audit: type=1800 audit(189.321:26): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 189.346851][ T27] audit: type=1800 audit(189.321:27): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 189.355612][ T27] audit: type=1800 audit(189.331:28): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 189.359148][ T27] audit: type=1800 audit(189.331:29): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 189.369871][ T7195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.400114][ T7195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.413296][ T27] audit: type=1800 audit(189.401:30): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="syz.2.678" name="/newroot/139/file1/file1" dev="loop2" ino=15 res=0 errno=0 [ 189.644270][ T7207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.156256][ T7215] loop0: detected capacity change from 0 to 1024 [ 190.197858][ T7215] EXT4-fs: Ignoring removed bh option [ 190.199828][ T27] audit: type=1800 audit(190.191:31): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 190.203148][ T27] audit: type=1800 audit(190.191:32): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 190.216751][ T27] audit: type=1800 audit(190.201:33): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 190.220086][ T27] audit: type=1800 audit(190.201:34): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 190.228160][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 190.630452][ T7215] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 191.028357][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 191.550242][ T7246] overlayfs: failed to clone upperpath [ 192.104915][ T7259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.505432][ T7273] tipc: Enabling of bearer rejected, failed to enable media [ 193.220751][ T7287] NILFS (nullb0): couldn't find nilfs on the device [ 194.978093][ T7321] "syz.4.708" (7321) uses obsolete ecb(arc4) skcipher [ 196.217994][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 196.218003][ T27] audit: type=1326 audit(196.201:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.231155][ T27] audit: type=1326 audit(196.221:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.242220][ T27] audit: type=1326 audit(196.221:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.251998][ T27] audit: type=1326 audit(196.221:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.256026][ T27] audit: type=1326 audit(196.221:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.309957][ T27] audit: type=1326 audit(196.221:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.322274][ T27] audit: type=1326 audit(196.221:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.326583][ T27] audit: type=1326 audit(196.221:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.357678][ T27] audit: type=1326 audit(196.221:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 196.371486][ T27] audit: type=1326 audit(196.221:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7333 comm="syz.1.713" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffa6579728 code=0x7ffc0000 [ 197.422283][ T7358] loop2: detected capacity change from 0 to 512 [ 197.427856][ T7358] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.263771][ T7358] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.720: bad orphan inode 131083 [ 198.269257][ T7358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 198.777579][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 199.818428][ T7399] rdma_rxe: rxe_register_device failed with error -23 [ 199.820099][ T7399] rdma_rxe: failed to add ipvlan0 [ 203.186355][ T7448] loop0: detected capacity change from 0 to 512 [ 203.193147][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 203.193157][ T27] audit: type=1800 audit(203.181:122): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 203.197477][ T27] audit: type=1800 audit(203.181:123): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 203.234008][ T7448] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 203.354020][ T7448] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 203.390432][ T27] audit: type=1800 audit(203.181:124): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 203.521887][ T27] audit: type=1800 audit(203.181:125): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 203.552187][ T27] audit: type=1800 audit(203.181:126): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 204.059218][ T27] audit: type=1800 audit(204.041:127): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 204.063630][ T27] audit: type=1800 audit(204.051:128): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 204.083224][ T27] audit: type=1800 audit(204.051:129): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 204.086827][ T27] audit: type=1800 audit(204.051:130): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 204.103564][ T27] audit: type=1800 audit(204.051:131): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 204.174671][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 206.930295][ T7531] wireguard: wg0: Could not create IPv6 socket [ 207.961601][ T7551] netlink: 'syz.0.771': attribute type 10 has an invalid length. [ 207.963225][ T7551] netlink: 55 bytes leftover after parsing attributes in process `syz.0.771'. [ 209.243430][ T7572] tipc: Enabling of bearer rejected, failed to enable media [ 209.247594][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 209.247601][ T27] audit: type=1800 audit(209.231:145): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:7" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 209.914360][ T27] audit: type=1800 audit(209.901:146): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:33" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 209.923030][ T27] audit: type=1800 audit(209.901:147): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:38" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 209.934235][ T27] audit: type=1800 audit(209.921:148): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:38" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 209.943489][ T27] audit: type=1800 audit(209.931:149): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:33" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 209.962077][ T27] audit: type=1800 audit(209.931:150): pid=7584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:33" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 210.427852][ T7592] loop0: detected capacity change from 0 to 128 [ 210.434931][ T27] audit: type=1800 audit(210.421:151): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 210.439312][ T27] audit: type=1800 audit(210.421:152): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 210.450468][ T27] audit: type=1800 audit(210.421:153): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 210.455055][ T27] audit: type=1800 audit(210.431:154): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 211.783681][ T7620] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4336] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[7620] [ 213.535373][ T4319] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 213.938892][ T4319] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 213.958289][ T7632] ceph: No mds server is up or the cluster is laggy [ 214.077506][ T7650] loop0: detected capacity change from 0 to 128 [ 214.081829][ T7650] EXT4-fs (loop0): Test dummy encryption mode enabled [ 214.085906][ T7650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 214.259609][ T7656] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 215.807805][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 215.807816][ T27] audit: type=1800 audit(215.791:175): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 215.896526][ T27] audit: type=1800 audit(215.791:176): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.032660][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 216.295239][ T27] audit: type=1800 audit(216.281:177): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.300245][ T27] audit: type=1800 audit(216.281:178): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.309815][ T27] audit: type=1800 audit(216.281:179): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.386744][ T27] audit: type=1800 audit(216.281:180): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.393152][ T27] audit: type=1800 audit(216.281:181): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.396966][ T27] audit: type=1800 audit(216.311:182): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.400426][ T27] audit: type=1800 audit(216.311:183): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 216.403854][ T27] audit: type=1800 audit(216.311:184): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 220.230769][ T7729] overlayfs: failed to clone lowerpath [ 220.246944][ T7729] overlayfs: failed to clone lowerpath [ 220.605335][ T7733] capability: warning: `syz.0.819' uses 32-bit capabilities (legacy support in use) [ 220.716614][ T7742] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 221.011887][ T7739] siw: device registration error -23 [ 221.485078][ T7753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.725734][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 221.725744][ T27] audit: type=1800 audit(221.711:187): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:16" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.740094][ T27] audit: type=1800 audit(221.721:188): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:16" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.807661][ T27] audit: type=1800 audit(221.791:189): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:16" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.814456][ T27] audit: type=1800 audit(221.801:190): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:16" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.822103][ T27] audit: type=1800 audit(221.811:191): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:16" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.826669][ T27] audit: type=1800 audit(221.811:192): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:16" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.832681][ T27] audit: type=1800 audit(221.821:193): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:16" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.836567][ T27] audit: type=1800 audit(221.821:194): pid=7776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:38" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.840253][ T27] audit: type=1800 audit(221.821:195): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:38" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 221.844058][ T27] audit: type=1800 audit(221.831:196): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:38" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 222.696850][ T7833] loop0: detected capacity change from 0 to 32768 [ 223.041799][ T7833] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 223.043662][ T7833] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 223.045144][ T7833] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 223.047034][ T7833] BTRFS info (device loop0): use zstd compression, level 3 [ 223.048323][ T7833] BTRFS info (device loop0): force clearing of disk cache [ 223.049553][ T7833] BTRFS info (device loop0): enabling disk space caching [ 223.050699][ T7833] BTRFS info (device loop0): disk space caching is enabled [ 223.062170][ T7833] BTRFS info (device loop0): enabling ssd optimizations [ 223.065036][ T7833] BTRFS info (device loop0): rebuilding free space tree [ 223.069238][ T7833] BTRFS info (device loop0): disabling free space tree [ 223.070699][ T7833] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.072228][ T7833] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.163551][ T7858] udevd[7858]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Permission denied [ 223.544545][ T4335] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.886277][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 224.904743][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 224.926008][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 224.968769][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 225.578472][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 225.586472][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 225.593362][ T7862] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 227.419273][ T7926] loop2: detected capacity change from 0 to 64 [ 227.435962][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 227.435976][ T27] audit: type=1800 audit(227.421:241): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 227.447171][ T27] audit: type=1800 audit(227.421:242): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 227.450888][ T27] audit: type=1800 audit(227.431:243): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 227.454168][ T27] audit: type=1800 audit(227.431:244): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 227.457383][ T27] audit: type=1800 audit(227.431:245): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 227.943758][ T7938] syz.2.858: attempt to access beyond end of device [ 227.943758][ T7938] loop2: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 227.947024][ T7938] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 227.948912][ T7938] syz.2.858: attempt to access beyond end of device [ 227.948912][ T7938] loop2: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 227.951703][ T7938] Buffer I/O error on dev loop2, logical block 162, lost async page write [ 227.953469][ T7938] syz.2.858: attempt to access beyond end of device [ 227.953469][ T7938] loop2: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 227.955867][ T7938] Buffer I/O error on dev loop2, logical block 163, lost async page write [ 227.957674][ T7938] syz.2.858: attempt to access beyond end of device [ 227.957674][ T7938] loop2: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 227.960172][ T7938] Buffer I/O error on dev loop2, logical block 167, lost async page write [ 227.961686][ T7938] syz.2.858: attempt to access beyond end of device [ 227.961686][ T7938] loop2: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 227.964302][ T7938] Buffer I/O error on dev loop2, logical block 169, lost async page write [ 227.965917][ T7938] syz.2.858: attempt to access beyond end of device [ 227.965917][ T7938] loop2: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 227.968613][ T7938] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 227.970365][ T7938] syz.2.858: attempt to access beyond end of device [ 227.970365][ T7938] loop2: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 227.972636][ T7938] Buffer I/O error on dev loop2, logical block 172, lost async page write [ 228.576152][ T27] audit: type=1800 audit(228.561:246): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 228.581746][ T27] audit: type=1800 audit(228.561:247): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 228.586436][ T27] audit: type=1800 audit(228.561:248): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 228.594980][ T27] audit: type=1800 audit(228.571:249): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 228.598687][ T27] audit: type=1800 audit(228.571:250): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 228.780961][ T7953] loop0: detected capacity change from 0 to 32768 [ 228.787489][ T7953] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.866 (7953) [ 228.818229][ T7953] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 228.820367][ T7953] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 228.822324][ T7953] BTRFS info (device loop0): using free space tree [ 228.834746][ T7953] BTRFS info (device loop0): enabling ssd optimizations [ 228.837463][ T7975] udevd[7975]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Permission denied [ 230.070685][ T4335] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 231.082347][ T8020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.114194][ T8020] device bond_slave_0 entered promiscuous mode [ 231.115556][ T8020] device bond_slave_1 entered promiscuous mode [ 231.119093][ T8020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.132745][ T8020] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 231.164605][ T8020] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 231.192318][ T5506] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 231.212432][ T8020] netlink: 14 bytes leftover after parsing attributes in process `syz.3.880'. [ 231.242875][ T8020] device bond_slave_0 left promiscuous mode [ 231.244747][ T8020] device bond_slave_1 left promiscuous mode [ 231.423880][ T8020] bond1: (slave macvlan2): Removing an active aggregator [ 231.425474][ T8020] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 231.429104][ T8020] bond1: (slave macvlan2): Releasing backup interface [ 231.431292][ T8020] bond1: (slave macvlan2): the permanent HWaddr of slave - 42:8e:e5:95:eb:c0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 231.514386][ T8020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.841900][ T8020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.883133][ T8020] bond0 (unregistering): Released all slaves [ 232.760880][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 232.760894][ T27] audit: type=1800 audit(232.751:273): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:30" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 232.768542][ T27] audit: type=1800 audit(232.751:274): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:30" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 234.979538][ T8096] atomic_op 000000006b39b4f8 conn xmit_atomic 0000000000000000 [ 235.634931][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 236.330454][ T8127] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 237.869730][ T8160] loop0: detected capacity change from 0 to 512 [ 237.872844][ T27] audit: type=1800 audit(237.861:275): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 237.875933][ T27] audit: type=1800 audit(237.861:276): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 237.883374][ T27] audit: type=1800 audit(237.861:277): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 237.889293][ T27] audit: type=1800 audit(237.861:278): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 237.899053][ T27] audit: type=1800 audit(237.861:279): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 237.905889][ T8160] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 237.907234][ T8160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 237.908557][ T8160] System zones: 0-1, 15-15, 18-18, 34-34 [ 237.909905][ T8160] EXT4-fs (loop0): orphan cleanup on readonly fs [ 237.911094][ T8160] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 237.912675][ T8160] EXT4-fs warning (device loop0): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 237.915174][ T8160] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 237.916561][ T8160] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.922: bad orphan inode 16 [ 237.918594][ T8160] ext4_test_bit(bit=15, block=18) = 1 [ 237.919568][ T8160] is_bad_inode(inode)=0 [ 237.920401][ T8160] NEXT_ORPHAN(inode)=0 [ 237.921221][ T8160] max_ino=32 [ 237.921845][ T8160] i_nlink=2 [ 237.922768][ T8160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 237.942884][ T27] audit: type=1800 audit(237.931:280): pid=8164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:24" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 238.304468][ T8179] loop2: detected capacity change from 0 to 1024 [ 238.306851][ T8179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 238.592999][ T27] audit: type=1800 audit(238.581:281): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 238.596540][ T27] audit: type=1800 audit(238.581:282): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 238.600346][ T27] audit: type=1800 audit(238.581:283): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 238.605987][ T8179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 238.740069][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 239.806405][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 240.515759][ T8221] tipc: Enabled bearer , priority 0 [ 240.517984][ T8221] device syzkaller0 entered promiscuous mode [ 240.522950][ T8221] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 240.622564][ T8221] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 240.629756][ T8221] tipc: Resetting bearer [ 240.642477][ T8220] tipc: Resetting bearer [ 240.695293][ T8225] loop0: detected capacity change from 0 to 764 [ 241.190034][ T8220] tipc: Disabling bearer [ 241.273038][ T8235] tc action pedit 'at' offset -2147483645 out of bounds [ 244.064026][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 244.064037][ T27] audit: type=1800 audit(244.051:319): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167682 res=0 errno=0 [ 244.068330][ T27] audit: type=1800 audit(244.051:320): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167682 res=0 errno=0 [ 244.075895][ T27] audit: type=1800 audit(244.051:321): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167682 res=0 errno=0 [ 244.095995][ T27] audit: type=1800 audit(244.051:322): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=167686 res=0 errno=0 [ 244.101845][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 244.109973][ T27] audit: type=1800 audit(244.051:323): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=167682 res=0 errno=0 [ 244.121706][ T27] audit: type=1800 audit(244.071:324): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=167682 res=0 errno=0 [ 244.125102][ T27] audit: type=1800 audit(244.071:325): pid=3995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=167682 res=0 errno=0 [ 244.488915][ T8317] netlink: 44 bytes leftover after parsing attributes in process `syz.4.969'. [ 245.438516][ T8326] rxe_eth0 speed is unknown, defaulting to 1000 [ 248.910764][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.912305][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.994230][ T27] audit: type=1800 audit(248.981:326): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:6" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 249.005872][ T27] audit: type=1800 audit(248.991:327): pid=8380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=appraise_data cause=missing-hash comm="kworker/u4:6" name="/sbin/modprobe" dev="nvme0n1p2" ino=1569 res=0 errno=0 [ 249.028453][ T48] Bluetooth: Unknown LE signaling command 0x0f [ 249.029837][ T48] Bluetooth: Wrong link type (-22) [ 249.399707][ T8387] loop0: detected capacity change from 0 to 512 [ 249.412911][ T27] audit: type=1800 audit(249.401:328): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 249.416256][ T27] audit: type=1800 audit(249.401:329): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 249.422148][ T27] audit: type=1800 audit(249.401:330): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 249.425400][ T27] audit: type=1800 audit(249.411:331): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 249.441932][ T27] audit: type=1800 audit(249.411:332): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 249.456712][ T8387] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.992: bad orphan inode 13 [ 249.475987][ T8387] ext4_test_bit(bit=12, block=4) = 1 [ 249.476961][ T8387] is_bad_inode(inode)=0 [ 249.477684][ T8387] NEXT_ORPHAN(inode)=0 [ 249.478361][ T8387] max_ino=32 [ 249.478959][ T8387] i_nlink=1 [ 249.481013][ T8387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 249.610917][ T8401] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.992: Hash code is SIPHASH, but hash not in dirent [ 249.613143][ T8401] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.992: Corrupt directory, running e2fsck is recommended [ 249.617188][ T8401] EXT4-fs warning (device loop0): dx_probe:845: inode #2: comm syz.0.992: Hash code is SIPHASH, but hash not in dirent [ 249.619465][ T8401] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.992: Corrupt directory, running e2fsck is recommended [ 249.621741][ T8401] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #2: block 13: comm syz.0.992: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 250.331092][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 250.410059][ T27] audit: type=1800 audit(250.361:333): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 250.434141][ T8408] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 250.506447][ T27] audit: type=1800 audit(250.361:334): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 250.619590][ T27] audit: type=1800 audit(250.361:335): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 250.659691][ T27] audit: type=1800 audit(250.641:336): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 250.663545][ T27] audit: type=1800 audit(250.641:337): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37414 res=0 errno=0 [ 250.697143][ T8414] loop2: detected capacity change from 0 to 8 [ 251.689117][ T8441] loop0: detected capacity change from 0 to 1024 [ 253.574779][ T8441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 254.005645][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 254.361396][ T8462] xt_hashlimit: max too large, truncated to 1048576 [ 254.388496][ T8462] jffs2: notice: (8462) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 254.619374][ T8478] loop2: detected capacity change from 0 to 512 [ 254.624345][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 254.624357][ T27] audit: type=1800 audit(254.611:369): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 254.632551][ T8478] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.1017: bad orphan inode 13 [ 254.634184][ T27] audit: type=1800 audit(254.611:370): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 254.638201][ T8478] ext4_test_bit(bit=12, block=4) = 1 [ 254.639145][ T8478] is_bad_inode(inode)=0 [ 254.640007][ T8478] NEXT_ORPHAN(inode)=0 [ 254.640820][ T8478] max_ino=32 [ 254.641328][ T8478] i_nlink=1 [ 254.642234][ T8478] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.654864][ T27] audit: type=1800 audit(254.621:371): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 254.675013][ T27] audit: type=1800 audit(254.621:372): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 254.693164][ T27] audit: type=1800 audit(254.621:373): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 254.703490][ T27] audit: type=1800 audit(254.621:374): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 254.714135][ T27] audit: type=1800 audit(254.621:375): pid=3940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 254.803740][ T8481] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.1017: Hash code is SIPHASH, but hash not in dirent [ 254.806010][ T8481] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1017: Corrupt directory, running e2fsck is recommended [ 254.808804][ T8481] EXT4-fs warning (device loop2): dx_probe:845: inode #2: comm syz.2.1017: Hash code is SIPHASH, but hash not in dirent [ 254.811246][ T8481] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1017: Corrupt directory, running e2fsck is recommended [ 254.813630][ T8481] EXT4-fs error (device loop2): ext4_find_dest_de:2117: inode #2: block 13: comm syz.2.1017: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 255.635369][ T4336] EXT4-fs (loop2): unmounting filesystem. [ 255.969979][ T27] audit: type=1800 audit(255.961:376): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 255.973205][ T27] audit: type=1800 audit(255.961:377): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 255.979539][ T27] audit: type=1800 audit(255.961:378): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=37616 res=0 errno=0 [ 256.015643][ T8497] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 256.026052][ T8501] ip_tables: iptables: counters copy to user failed while replacing table [ 256.432315][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 256.735160][ T8518] rdma_rxe: rxe_register_device failed with error -23 [ 256.738043][ T8518] rdma_rxe: failed to add ipvlan0 [ 256.745123][ T8518] loop0: detected capacity change from 0 to 16 [ 257.076506][ T8518] erofs: (device loop0): mounted with root inode @ nid 36. [ 257.633206][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.634929][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.953538][ T8529] rdma_rxe: rxe_register_device failed with error -23 [ 257.955065][ T8529] rdma_rxe: failed to add ipvlan0 [ 258.411291][ T8523] xt_hashlimit: max too large, truncated to 1048576 [ 258.525281][ T8523] jffs2: notice: (8523) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.597841][ T8522] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 258.603223][ T8522] Mem abort info: [ 258.607656][ T8522] ESR = 0x0000000086000006 [ 258.608667][ T8522] EC = 0x21: IABT (current EL), IL = 32 bits Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.597841][ T8522] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.603223][ T8522] Mem abort info: Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.607656][ T8522] ESR = 0x0000000086000006 [ 258.618864][ T8522] SET = 0, FnV = 0 [ 258.624950][ T8522] EA = 0, S1PTW = 0 [ 258.625709][ T8522] FSC = 0x06: level 2 translation fault Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.608667][ T8522] EC = 0x21: IABT (current EL), IL = 32 bits[ 258.629019][ T8522] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000116161000 Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.618864][ T8522] SET = 0, FnV = 0 [ 258.635160][ T8522] [0000000000000000] pgd=080000010e756003, p4d=080000010e756003, pud=080000010c613003, pmd=0000000000000000 Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.624950][ T8522] EA = 0, S1PTW = 0[ 258.649393][ T8522] Internal error: Oops: 0000000086000006 [#1] PREEMPT SMP [ 258.650720][ T8522] Modules linked in: [ 258.651520][ T8522] CPU: 1 PID: 8522 Comm: syz.2.1029 Not tainted syzkaller #0 [ 258.653030][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 258.654758][ T8522] pstate: 62400805 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=-c) [ 258.656096][ T8522] pc : 0x0 [ 258.656619][ T8522] lr : generic_file_read_iter+0x3f0/0x5ac [ 258.657636][ T8522] sp : ffff800022bd7060 [ 258.658359][ T8522] x29: ffff800022bd7160 x28: dfff800000000000 x27: ffff70000457ae10 [ 258.659782][ T8522] x26: 0000000000000008 x25: ffff0000da7f0780 x24: 1ffff0000457ae50 [ 258.661181][ T8522] x23: 0000000000020002 x22: ffff80001200e818 x21: 0000000000001000 [ 258.662581][ T8522] x20: ffff800022bd7220 x19: ffff800022bd7270 x18: 0000000000000000 [ 258.664013][ T8522] x17: 0000000000000000 x16: ffff800011ba16d0 x15: 0000000000000000 [ 258.665443][ T8522] x14: 0000000000000001 x13: 1fffe0001b3f2737 x12: 0000000000000000 [ 258.666883][ T8522] x11: ff00800008a2c3a4 x10: 0000000000000000 x9 : b5615daecc3eb400 [ 258.668339][ T8522] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 258.669767][ T8522] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008a2b97c [ 258.671169][ T8522] x2 : 0000000000000000 x1 : ffff800022bd7270 x0 : ffff800022bd7220 [ 258.672614][ T8522] Call trace: [ 258.673192][ T8522] 0x0 [ 258.673662][ T8522] __kernel_read+0x24c/0x5c0 [ 258.674448][ T8522] integrity_kernel_read+0x9c/0xe4 [ 258.675380][ T8522] ima_calc_file_hash+0x918/0x1560 [ 258.676288][ T8522] ima_collect_measurement+0x410/0x950 [ 258.677272][ T8522] ima_update_xattr+0x154/0x49c [ 258.678126][ T8522] ima_file_free+0x2b0/0x370 [ 258.678954][ T8522] __fput+0x140/0x7b0 [ 258.679682][ T8522] ____fput+0x20/0x30 [ 258.680435][ T8522] task_work_run+0x1f4/0x280 [ 258.681240][ T8522] do_notify_resume+0x20f8/0x2c84 [ 258.682157][ T8522] el0_svc+0x9c/0x12c [ 258.682842][ T8522] el0t_64_sync_handler+0x84/0xf0 [ 258.683740][ T8522] el0t_64_sync+0x18c/0x190 [ 258.684575][ T8522] Code: bad PC value [ 258.685293][ T8522] ---[ end trace 0000000000000000 ]--- Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.625709][ T8522] FSC = 0x06: level 2 translation fault Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.629019][ T8522] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000116161000 Jan 1 00:04:18 syzkaller kern.alert kernel: [ 258.635160][ T8522] [0000000000000000] pgd=080000010e756003, p4d=080000010e756003, pud=080000010c613003, pmd=0000000000000000 [ 258.982333][ T8522] Kernel panic - not syncing: Oops: Fatal exception [ 258.983456][ T8522] SMP: stopping secondary CPUs [ 258.984277][ T8522] Kernel Offset: disabled [ 258.984993][ T8522] CPU features: 0x050000,000f0097,a65bfea7 [ 258.986059][ T8522] Memory Limit: none [ 259.266182][ T8522] Rebooting in 86400 seconds..