last executing test programs: 21.994804227s ago: executing program 2 (id=1757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305", 0xe) 21.834959941s ago: executing program 2 (id=1761): openat$tun(0xffffffffffffff9c, 0x0, 0x82600, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8, 0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@arena={0x21, 0x0, 0x0, 0x2f, 0x20400, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000b80)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x2}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0x6, 0x7}, {0xe, 0x4}, {0x8, 0xfff}, {0x1, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x8}}]}, {0x0, [0x5f]}}, &(0x7f00000007c0)=""/209, 0x6b, 0xd1, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'caif0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4c95fefb, 0x3, 0x3101}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 21.058844629s ago: executing program 3 (id=1773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.02904917s ago: executing program 3 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) socket$packet(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305", 0xe) 20.963122481s ago: executing program 2 (id=1776): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 20.847155634s ago: executing program 2 (id=1777): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000c80)=[{0x0}, {0x0}, {&(0x7f0000000cc0)="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", 0xfd}], 0x3}}, {{&(0x7f0000000dc0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000000e00)}}], 0x3, 0x40) 20.844267974s ago: executing program 2 (id=1778): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000001000000b703000000000000b7040000000000028500000032000000b70000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000003c0), 0x0}, 0x20) sendto(r0, &(0x7f0000000440)="01", 0x1, 0x0, 0x0, 0x0) 20.813290515s ago: executing program 2 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x8, 0x6, 0x5}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 20.677985628s ago: executing program 3 (id=1782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1}, 0x14) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x1, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200}}}}}, 0x0) 20.611951939s ago: executing program 3 (id=1783): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="6c0000001800050604000000000000000a400000fe040001000000001400010020010db800c0000000000000000000010c00080008000200dc05000008000400010000000600150003000000200016800c00010004ebf7fdd81234567890abcdef050008002000", 0x67) 20.591068129s ago: executing program 3 (id=1784): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1c9442, 0x19c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0xf, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000014c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) close_range(r0, r0, 0x0) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f00000015c0)='270', 0x3) r3 = syz_open_dev$mtd(&(0x7f0000001600), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x20, 0x42, 0x100, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{}, &(0x7f00000017c0), &(0x7f0000001800)=r4}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) ioctl$BLKPG(r3, 0x1269, &(0x7f0000001940)={0x1, 0x1f, 0x98, &(0x7f0000001980)={0x3, 0xfffe, 0x12}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 20.503551932s ago: executing program 3 (id=1787): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 7.621739592s ago: executing program 4 (id=1813): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1c9442, 0x19c) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0xf, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000014c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r1, &(0x7f00000015c0)='270', 0x3) r2 = syz_open_dev$mtd(&(0x7f0000001600), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x20, 0x42, 0x100, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{}, &(0x7f00000017c0), &(0x7f0000001800)=r3}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) ioctl$BLKPG(r2, 0x1269, &(0x7f0000001940)={0x1, 0x1f, 0x98, &(0x7f0000001980)={0x3, 0xfffe, 0x12}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 7.538215734s ago: executing program 0 (id=1814): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() setgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000380)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002064"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r5}, 0xc) syz_open_procfs(0x0, &(0x7f0000000500)='auxv\x00') sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x64004080) 7.529919455s ago: executing program 4 (id=1815): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000014c0)="b9ff0303000d698cb89e40f086dd6000000e00ff89006306", 0x0, 0xfffff1de, 0x2000000, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001540)}, 0x50) 7.451078156s ago: executing program 4 (id=1816): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@volatile}]}) getsockopt$SO_NETNS_COOKIE(r1, 0x1, 0x47, &(0x7f00000000c0), 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x800000, &(0x7f0000007000)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000007100)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) 6.367914612s ago: executing program 4 (id=1817): syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000340), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000233000/0x3000)=nil) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x5, 0x3, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 5.655498608s ago: executing program 0 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1, 0x13, &(0x7f0000001200)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa, 0x0, 0x40000000}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x14, &(0x7f0000001200)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000012c0)={r1}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1208002, &(0x7f0000000180)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8002, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031372507000037773756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db857091a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcd9e94e5c255b5e8c90613e6b598b3b7a2c05de53dab700000000", @ANYRES64=0x0, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRESDEC], 0x4, 0x2b5, &(0x7f0000001300)="$eJzs3c9OE18UwPHTKXQKhD+rX/Jz44ludDPBulQX1UBibKIp1KALkyEM2nRsyUyjrTGxa1c8B3HpzsT4AryFu8bEsCIuHNN2GIZSIFRosXw/CcydOXOHM3eY5FySS5srKSmt+9a6XRUjrWKINGRXZE6K0pGUPSkRSbS/h+5lpCE359/sfFx69vxRNpdbyKsuZpdvZ1R15urXt+8/XftWnXr6ecY0ZXvuRfNn5vv2f9v/N38vvyr6WvS1XKmqrauVStVedR1dK/olS/WJ69i+o8Wy73gH4utuZWOjrnZ5bXpyw3N8X+1yXQ2pa7Wi6TCrslqWpdOTrXZaLpHUqXsUtvJ5O3suyeDC8Lys3XqLJw69DYWt4WQEAACGqbmy+bp3/W9E5yTCrdFd/4ucUP9/CM+a+XIW9X8rj6j+T0pU/5ecdv1f9epqv7SL8fofx+qv/jfOJxn8jUQjtnP/QMjzshO9O1H/AwAAAAAAAAAAAAAAAAAAAADwL9gNgtkgCGZbW0NEgnDfDFf+7+336Hqp1taPqvjzD2JfZviAj3n+GAGxhXtpkR+NWqFWSLS3nfjiw9zCvLbFFv7t1GqFZBS/1Ynrwfi4TIbxTM94Sm5c78RbsQePc/H4Zq0wIWvHZt44qyEAAAAAAGDkWRqZiw6mJZrfW5aa0h1vz987rcb+3we65vdjcmVscPcBAAAAAACO5tfflWzXdbzBNJID/Fl9N0T6634nMHuHxkXkFNdJisgJ5+SXRIY/UIcappzDlX8F/Xbf++iaYQ+L606d2QXvHhlKneZ3zPPrQUKkc2Q8HKeutwAAAADAaNmfDww7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq9B/Au0Yd8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8CQAA//8TgrWG") r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80000) sched_setscheduler(r2, 0x2, &(0x7f0000000c40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r3, &(0x7f0000000d80), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000e80)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000ec0)='GPL\x00'}, 0x80) syz_open_procfs$userns(r2, &(0x7f0000000f40)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103a42, 0x32) 5.650954748s ago: executing program 32 (id=1779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x8, 0x6, 0x5}, 0x4, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 5.065288252s ago: executing program 33 (id=1787): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, 0x0, {0xb}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 4.199489462s ago: executing program 0 (id=1822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.544621008s ago: executing program 0 (id=1823): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001f80)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002040), 0x4000087, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)={0x24, r5, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002240)=@newlink={0x5c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x81}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) 3.43245468s ago: executing program 1 (id=1825): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x15, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.351156912s ago: executing program 1 (id=1826): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r0, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000014c0)="b9ff0303000d698cb89e40f086dd6000000e00ff89006306", 0x0, 0xfffff1de, 0x2000000, 0x0, 0x0, &(0x7f0000001500), &(0x7f0000001540)}, 0x50) 3.310460523s ago: executing program 1 (id=1827): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x1c9442, 0x19c) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x11, 0xf, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000014c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./proc\x00', &(0x7f0000001540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r1, &(0x7f00000015c0)='270', 0x3) r2 = syz_open_dev$mtd(&(0x7f0000001600), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001640)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)={0x20, 0x42, 0x100, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @str='\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{}, &(0x7f00000017c0), &(0x7f0000001800)=r3}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), 0xffffffffffffffff) ioctl$BLKPG(r2, 0x1269, &(0x7f0000001940)={0x1, 0x1f, 0x98, &(0x7f0000001980)={0x3, 0xfffe, 0x12}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) 3.185752946s ago: executing program 1 (id=1828): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x80002c1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', 0x0, 0x8, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@volatile}]}) getsockopt$SO_NETNS_COOKIE(r1, 0x1, 0x47, &(0x7f00000000c0), 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x800000, &(0x7f0000007000)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f0000007100)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) 2.255966058s ago: executing program 0 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() setgid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000380)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002064"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000078085"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b00)={r5}, 0xc) syz_open_procfs(0x0, &(0x7f0000000500)='auxv\x00') sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x64004080) 1.982622684s ago: executing program 4 (id=1830): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000008c0)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x4d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000a80), 0x56) sendmsg$kcm(r5, &(0x7f0000000ac0)={&(0x7f0000000b00)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="27030200dc0f14000e0003000324c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.971301284s ago: executing program 1 (id=1831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1, 0x13, &(0x7f0000001200)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa, 0x0, 0x40000000}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x14, &(0x7f0000001200)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000012c0)={r1}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x1208002, &(0x7f0000000180)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8002, &(0x7f00000002c0)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031372507000037773756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db857091a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcd9e94e5c255b5e8c90613e6b598b3b7a2c05de53dab700000000", @ANYRES64=0x0, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRESDEC], 0x4, 0x2b5, &(0x7f0000001300)="$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") r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2) syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80000) sched_setscheduler(r2, 0x2, &(0x7f0000000c40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r3, &(0x7f0000000d80), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000e80)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000ec0)='GPL\x00'}, 0x80) syz_open_procfs$userns(r2, &(0x7f0000000f40)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103a42, 0x32) 21.8148ms ago: executing program 0 (id=1832): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.6002ms ago: executing program 1 (id=1833): socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001f80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002040), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x7, 0x4, 0x8001, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, 0x0, &(0x7f0000000240)=r3}, 0x20) 0s ago: executing program 4 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000780)=0x2) kernel console output (not intermixed with test programs): ystem. [ 98.680659][ T6052] ima: policy update failed [ 98.681800][ T27] audit: type=1802 audit(2914.983:5): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.583" res=0 errno=0 [ 98.816931][ T6062] netlink: 964 bytes leftover after parsing attributes in process `syz.0.587'. [ 98.893614][ T6066] random: crng reseeded on system resumption [ 99.429504][ T6080] loop4: detected capacity change from 0 to 1024 [ 99.443863][ T6080] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.451356][ T6080] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.470151][ T6080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 99.472026][ T6080] System zones: 0-1, 3-36 [ 99.484748][ T6080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.057008][ T6111] loop0: detected capacity change from 0 to 512 [ 100.060994][ T6115] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 100.062612][ T6115] netlink: 224 bytes leftover after parsing attributes in process `syz.3.608'. [ 100.107741][ T6120] FAULT_INJECTION: forcing a failure. [ 100.107741][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 100.110197][ T6120] CPU: 1 PID: 6120 Comm: syz.3.610 Not tainted syzkaller #0 [ 100.111438][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.113152][ T6120] Call trace: [ 100.113725][ T6120] dump_backtrace+0x1c4/0x1f0 [ 100.114504][ T6120] show_stack+0x2c/0x3c [ 100.115190][ T6120] __dump_stack+0x30/0x40 [ 100.115935][ T6120] dump_stack_lvl+0xf4/0x15c [ 100.116797][ T6120] dump_stack+0x1c/0x5c [ 100.117561][ T6120] should_fail_ex+0x3cc/0x524 [ 100.118393][ T6120] __should_failslab+0xc0/0x11c [ 100.119235][ T6120] should_failslab+0x10/0x28 [ 100.120113][ T6120] __kmem_cache_alloc_node+0x7c/0x318 [ 100.121057][ T6120] kmalloc_trace+0x48/0x94 [ 100.121844][ T6120] tipc_nametbl_insert_publ+0x5d8/0xf10 [ 100.122820][ T6120] tipc_nametbl_publish+0x10c/0x250 [ 100.123758][ T6120] tipc_sk_publish+0x17c/0x384 [ 100.124584][ T6120] tipc_sk_join+0x2d4/0x508 [ 100.125371][ T6120] tipc_setsockopt+0x3b8/0x7a8 [ 100.126192][ T6120] __sys_setsockopt+0x2fc/0x50c [ 100.127062][ T6120] __arm64_sys_setsockopt+0xc0/0xdc [ 100.128001][ T6120] invoke_syscall+0x98/0x290 [ 100.128819][ T6120] el0_svc_common+0x13c/0x258 [ 100.129628][ T6120] do_el0_svc+0x5c/0x134 [ 100.130354][ T6120] el0_svc+0x58/0x12c [ 100.131034][ T6120] el0t_64_sync_handler+0x84/0xf0 [ 100.131928][ T6120] el0t_64_sync+0x18c/0x190 [ 100.132746][ T6120] tipc: Failed to bind to 66,4294966268,4294966268 [ 100.202195][ T6126] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(5) [ 100.722188][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 100.996385][ T6152] device syzkaller0 entered promiscuous mode [ 101.004386][ T6152] tipc: Enabled bearer , priority 0 [ 101.006317][ T6151] tipc: Resetting bearer [ 101.062290][ T6151] tipc: Disabling bearer [ 101.768336][ T6182] EXT4-fs: 140 callbacks suppressed [ 101.768346][ T6182] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.772760][ T6183] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.775522][ T6182] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.822546][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.831402][ T6182] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.833118][ T6190] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.834304][ T6191] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.844382][ T6191] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.873291][ T6194] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 101.884237][ T6196] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 102.221223][ T6210] nvme nvme1: rdma connection establishment failed (-512) [ 102.425053][ T6262] EXT4-fs error: 204 callbacks suppressed [ 102.425063][ T6262] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.672: Detected aborted journal [ 102.433288][ T6239] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.660: Detected aborted journal [ 102.433690][ T6261] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.671: Detected aborted journal [ 102.438008][ T6239] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.660: Detected aborted journal [ 102.442792][ T6262] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.672: Detected aborted journal [ 102.445417][ T6259] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.670: Detected aborted journal [ 102.454000][ T6261] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.671: Detected aborted journal [ 102.463921][ T6239] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.660: Detected aborted journal [ 102.468832][ T6239] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.660: Detected aborted journal [ 102.476238][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 102.520182][ T6270] pimreg0: tun_chr_ioctl cmd 1074812117 [ 103.256450][ T6323] loop1: detected capacity change from 0 to 1024 [ 103.274041][ T6323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.281472][ T6323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.299682][ T6323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 103.301362][ T6323] System zones: 0-1, 3-36 [ 103.315761][ T6323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.990649][ T6348] 0x000000000003-0x000000010001 : "" [ 103.993310][ T6348] ftl_cs: FTL header corrupt! [ 103.994815][ T6348] FAULT_INJECTION: forcing a failure. [ 103.994815][ T6348] name failslab, interval 1, probability 0, space 0, times 0 [ 103.999245][ T6349] udevd[6349]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd4ro': Input/output error [ 104.006122][ T6348] CPU: 0 PID: 6348 Comm: syz.0.709 Not tainted syzkaller #0 [ 104.007519][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.009388][ T6348] Call trace: [ 104.010039][ T6348] dump_backtrace+0x1c4/0x1f0 [ 104.011014][ T6348] show_stack+0x2c/0x3c [ 104.011797][ T6348] __dump_stack+0x30/0x40 [ 104.012588][ T6348] dump_stack_lvl+0xf4/0x15c [ 104.013444][ T6348] dump_stack+0x1c/0x5c [ 104.014191][ T6348] should_fail_ex+0x3cc/0x524 [ 104.015010][ T6348] __should_failslab+0xc0/0x11c [ 104.015887][ T6348] should_failslab+0x10/0x28 [ 104.016718][ T6348] kmem_cache_alloc+0x88/0x310 [ 104.017583][ T6348] __kernfs_new_node+0xec/0x5fc [ 104.018471][ T6348] kernfs_new_node+0x120/0x230 [ 104.019347][ T6348] kernfs_create_link+0x98/0x1e4 [ 104.020277][ T6348] sysfs_do_create_link_sd+0x8c/0x120 [ 104.021205][ T6348] sysfs_create_link+0x74/0x94 [ 104.022155][ T6348] device_create_sys_dev_entry+0x118/0x18c [ 104.023182][ T6348] device_add+0x8bc/0xe4c [ 104.023982][ T6348] device_add_disk+0x398/0xe04 [ 104.024829][ T6348] add_mtd_blktrans_dev+0xc48/0x1090 [ 104.025884][ T6348] mtdblock_add_mtd+0x158/0x218 [ 104.026690][ T6348] blktrans_notify_add+0xa8/0xf8 [ 104.027576][ T6348] add_mtd_device+0xdcc/0x130c [ 104.028405][ T6348] mtd_add_partition+0x224/0x3bc [ 104.029266][ T6348] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 104.030159][ T6348] mtdchar_ioctl+0x1238/0x1aec [ 104.030974][ T6348] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 104.031883][ T6348] __arm64_sys_ioctl+0x14c/0x1c8 [ 104.032760][ T6348] invoke_syscall+0x98/0x290 [ 104.033593][ T6348] el0_svc_common+0x13c/0x258 [ 104.034448][ T6348] do_el0_svc+0x5c/0x134 [ 104.035201][ T6348] el0_svc+0x58/0x12c [ 104.035875][ T6348] el0t_64_sync_handler+0x84/0xf0 [ 104.036698][ T6348] el0t_64_sync+0x18c/0x190 [ 104.088605][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 104.391836][ T6387] loop0: detected capacity change from 0 to 1024 [ 104.407210][ T6387] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.413892][ T6387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.429924][ T6387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 104.431786][ T6387] System zones: 0-1, 3-36 [ 104.433379][ T6387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.564125][ T6433] loop1: detected capacity change from 0 to 1024 [ 106.572808][ T6433] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.574790][ T6433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.578034][ T6433] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 106.580393][ T6433] System zones: 0-1, 3-36 [ 106.582084][ T6433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.810237][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 106.854176][ T6440] EXT4-fs: 210 callbacks suppressed [ 106.854186][ T6440] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 106.854929][ T6439] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 106.860617][ T6439] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 106.880653][ T6440] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 106.953844][ T6440] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 106.957640][ T6440] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 106.975381][ T6445] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 106.979967][ T6445] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 107.001659][ T6447] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 107.010950][ T6440] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 107.050660][ T6452] FAULT_INJECTION: forcing a failure. [ 107.050660][ T6452] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.054158][ T6452] CPU: 1 PID: 6452 Comm: syz.3.750 Not tainted syzkaller #0 [ 107.055609][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.057542][ T6452] Call trace: [ 107.058238][ T6452] dump_backtrace+0x1c4/0x1f0 [ 107.059280][ T6452] show_stack+0x2c/0x3c [ 107.060057][ T6452] __dump_stack+0x30/0x40 [ 107.060861][ T6452] dump_stack_lvl+0xf4/0x15c [ 107.061721][ T6452] dump_stack+0x1c/0x5c [ 107.062470][ T6452] should_fail_ex+0x3cc/0x524 [ 107.063291][ T6452] should_fail_alloc_page+0x74/0xb8 [ 107.064181][ T6452] prepare_alloc_pages+0x1b8/0x4f0 [ 107.065255][ T6452] __alloc_pages+0x134/0x544 [ 107.066213][ T6452] alloc_pages+0x434/0x6fc [ 107.067139][ T6452] __get_free_pages+0x18/0x84 [ 107.067984][ T6452] kasan_populate_vmalloc_pte+0x40/0xe8 [ 107.068939][ T6452] __apply_to_page_range+0x83c/0xbf4 [ 107.069936][ T6452] apply_to_page_range+0x4c/0x64 [ 107.070861][ T6452] kasan_populate_vmalloc+0x5c/0x6c [ 107.071820][ T6452] alloc_vmap_area+0x155c/0x169c [ 107.072692][ T6452] __get_vm_area_node+0x178/0x31c [ 107.073834][ T6452] __vmalloc_node_range+0x1d4/0xe70 [ 107.074795][ T6452] vmalloc+0x9c/0xd4 [ 107.075569][ T6452] snd_dma_vmalloc_alloc+0x20/0x30 [ 107.076569][ T6452] snd_dma_alloc_dir_pages+0x154/0x228 [ 107.077596][ T6452] do_alloc_pages+0x10c/0x238 [ 107.078475][ T6452] snd_pcm_lib_malloc_pages+0x27c/0x5f0 [ 107.079481][ T6452] snd_pcm_hw_params+0x6cc/0x1804 [ 107.080356][ T6452] snd_pcm_kernel_ioctl+0x218/0x278 [ 107.081270][ T6452] snd_pcm_oss_change_params_locked+0x1984/0x31c8 [ 107.082416][ T6452] snd_pcm_oss_read+0x1f4/0x8ac [ 107.083271][ T6452] vfs_read+0x2a4/0x7b8 [ 107.084140][ T6452] ksys_read+0x12c/0x228 [ 107.084969][ T6452] __arm64_sys_read+0x7c/0x90 [ 107.085923][ T6452] invoke_syscall+0x98/0x290 [ 107.086755][ T6452] el0_svc_common+0x13c/0x258 [ 107.087552][ T6452] do_el0_svc+0x5c/0x134 [ 107.088282][ T6452] el0_svc+0x58/0x12c [ 107.088998][ T6452] el0t_64_sync_handler+0x84/0xf0 [ 107.089838][ T6452] el0t_64_sync+0x18c/0x190 [ 107.094982][ T6452] syz.3.750: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 107.097897][ T6452] CPU: 1 PID: 6452 Comm: syz.3.750 Not tainted syzkaller #0 [ 107.099281][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.101183][ T6452] Call trace: [ 107.101796][ T6452] dump_backtrace+0x1c4/0x1f0 [ 107.102687][ T6452] show_stack+0x2c/0x3c [ 107.103422][ T6452] __dump_stack+0x30/0x40 [ 107.104184][ T6452] dump_stack_lvl+0xf4/0x15c [ 107.105036][ T6452] dump_stack+0x1c/0x5c [ 107.105813][ T6452] warn_alloc+0x214/0x324 [ 107.106588][ T6452] __vmalloc_node_range+0x24c/0xe70 [ 107.107506][ T6452] vmalloc+0x9c/0xd4 [ 107.108239][ T6452] snd_dma_vmalloc_alloc+0x20/0x30 [ 107.109148][ T6452] snd_dma_alloc_dir_pages+0x154/0x228 [ 107.110131][ T6452] do_alloc_pages+0x10c/0x238 [ 107.110964][ T6452] snd_pcm_lib_malloc_pages+0x27c/0x5f0 [ 107.111979][ T6452] snd_pcm_hw_params+0x6cc/0x1804 [ 107.112886][ T6452] snd_pcm_kernel_ioctl+0x218/0x278 [ 107.113812][ T6452] snd_pcm_oss_change_params_locked+0x1984/0x31c8 [ 107.114973][ T6452] snd_pcm_oss_read+0x1f4/0x8ac [ 107.115852][ T6452] vfs_read+0x2a4/0x7b8 [ 107.116591][ T6452] ksys_read+0x12c/0x228 [ 107.117362][ T6452] __arm64_sys_read+0x7c/0x90 [ 107.118216][ T6452] invoke_syscall+0x98/0x290 [ 107.119018][ T6452] el0_svc_common+0x13c/0x258 [ 107.119852][ T6452] do_el0_svc+0x5c/0x134 [ 107.120595][ T6452] el0_svc+0x58/0x12c [ 107.121343][ T6452] el0t_64_sync_handler+0x84/0xf0 [ 107.122193][ T6452] el0t_64_sync+0x18c/0x190 [ 107.123385][ T6452] Mem-Info: [ 107.124040][ T6452] active_anon:10853 inactive_anon:0 isolated_anon:0 [ 107.124040][ T6452] active_file:5227 inactive_file:1380 isolated_file:0 [ 107.124040][ T6452] unevictable:768 dirty:289 writeback:0 [ 107.124040][ T6452] slab_reclaimable:19498 slab_unreclaimable:94406 [ 107.124040][ T6452] mapped:35354 shmem:6796 pagetables:629 [ 107.124040][ T6452] sec_pagetables:0 bounce:0 [ 107.124040][ T6452] kernel_misc_reclaimable:0 [ 107.124040][ T6452] free:1436499 free_pcp:4191 free_cma:7360 [ 107.193342][ T6452] Node 0 active_anon:54912kB inactive_anon:0kB active_file:20908kB inactive_file:5520kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:152816kB dirty:1156kB writeback:0kB shmem:38684kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8756kB pagetables:2716kB sec_pagetables:0kB all_unreclaimable? no [ 107.200237][ T6452] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:80kB free_cma:29440kB [ 107.205880][ T6452] lowmem_reserve[]: 0 0 3532 3532 3532 [ 107.206987][ T6452] Node 0 Normal free:2657424kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:54912kB inactive_anon:0kB active_file:20908kB inactive_file:5520kB unevictable:3072kB writepending:1156kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:16536kB local_pcp:8924kB free_cma:0kB [ 107.213061][ T6452] lowmem_reserve[]: 0 0 0 0 0 [ 107.214038][ T6452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 107.217401][ T6452] Node 0 Normal: 338*4kB (UME) 309*8kB (UE) 92*16kB (U) 9*32kB (UM) 98*64kB (UME) 10*128kB (UM) 23*256kB (UME) 19*512kB (UME) 7*1024kB (UM) 6*2048kB (UME) 637*4096kB (UM) = 2657360kB [ 107.221450][ T6452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.223304][ T6452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 107.225201][ T6452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 107.226963][ T6452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 107.229339][ T6452] 16280 total pagecache pages [ 107.230581][ T6452] 0 pages in swap cache [ 107.231690][ T6452] Free swap = 124484kB [ 107.232696][ T6452] Total swap = 124996kB [ 107.233800][ T6452] 2097152 pages RAM [ 107.234437][ T6452] 0 pages HighMem/MovableOnly [ 107.235360][ T6452] 421949 pages reserved [ 107.239342][ T6452] 8192 pages cma reserved [ 107.240200][ T6452] 0 pages hwpoisoned [ 107.445285][ T6476] EXT4-fs error: 185 callbacks suppressed [ 107.445294][ T6476] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.762: Detected aborted journal [ 107.459310][ T6476] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.762: Detected aborted journal [ 107.482137][ T6478] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.763: Detected aborted journal [ 107.495725][ T6478] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.763: Detected aborted journal [ 107.568556][ T6478] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.763: Detected aborted journal [ 107.572162][ T6478] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.763: Detected aborted journal [ 107.577578][ T6478] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.763: Detected aborted journal [ 107.581638][ T6473] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.760: Detected aborted journal [ 107.611292][ T6483] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.764: Detected aborted journal [ 107.635886][ T6478] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.763: Detected aborted journal [ 108.097199][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 108.206421][ T6523] netlink: 23 bytes leftover after parsing attributes in process `syz.2.781'. [ 108.207999][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 109.042814][ T6550] netlink: 'syz.3.790': attribute type 2 has an invalid length. [ 109.044711][ T6550] netlink: 224 bytes leftover after parsing attributes in process `syz.3.790'. [ 109.058121][ T6550] device syzkaller0 entered promiscuous mode [ 109.130932][ T6552] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 110.063283][ T6580] netlink: 48 bytes leftover after parsing attributes in process `syz.2.800'. [ 110.146745][ T6584] ip_tables: iptables: counters copy to user failed while replacing table [ 110.513805][ T6616] xt_l2tp: invalid flags combination: 8 [ 110.532693][ T4409] hid-generic 0005:0008:0009.0002: unknown main item tag 0x0 [ 110.534149][ T4409] hid-generic 0005:0008:0009.0002: unknown main item tag 0x0 [ 110.535438][ T4409] hid-generic 0005:0008:0009.0002: unknown main item tag 0x0 [ 110.541211][ T4409] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 110.544787][ T6621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.556690][ T6622] udevd[6622]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 110.999289][ T6586] nvme nvme1: rdma connection establishment failed (-512) [ 111.076086][ T6642] sctp: [Deprecated]: syz.0.821 (pid 6642) Use of int in max_burst socket option. [ 111.076086][ T6642] Use struct sctp_assoc_value instead [ 111.128495][ T6649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.951746][ T6686] EXT4-fs: 163 callbacks suppressed [ 111.951756][ T6686] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 111.973096][ T6688] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 111.994831][ T6655] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 111.996442][ T6656] nvme nvme1: rdma connection establishment failed (-512) [ 112.010649][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 112.029439][ T6684] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 112.033021][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 112.037319][ T6690] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 112.039654][ T6692] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 112.055943][ T6694] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 112.060289][ T6694] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 112.063370][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.846'. [ 112.234885][ T4341] Bluetooth: hci4: link tx timeout [ 112.236088][ T4341] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.276801][ T6726] Bluetooth: MGMT ver 1.22 [ 112.555570][ T6742] EXT4-fs error: 217 callbacks suppressed [ 112.555581][ T6742] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.868: Detected aborted journal [ 112.562560][ T6742] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.868: Detected aborted journal [ 112.582837][ T6744] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.869: Detected aborted journal [ 112.593794][ T6745] device syzkaller0 entered promiscuous mode [ 112.749592][ T6717] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.856: Detected aborted journal [ 112.771424][ T6747] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.871: Detected aborted journal [ 112.773330][ T6746] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.870: Detected aborted journal [ 112.792437][ T6750] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.872: Detected aborted journal [ 112.796191][ T6751] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.873: Detected aborted journal [ 112.800543][ T6751] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.873: Detected aborted journal [ 112.818354][ T6754] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.874: Detected aborted journal [ 112.873332][ T6759] device vlan0 entered promiscuous mode [ 113.089018][ T6787] device geneve1 entered promiscuous mode [ 113.102051][ T6787] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.106224][ T6787] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.167554][ T6797] netlink: 88 bytes leftover after parsing attributes in process `syz.2.893'. [ 113.851467][ T6842] netlink: 44 bytes leftover after parsing attributes in process `syz.3.909'. [ 113.853198][ T6842] tipc: Invalid UDP bearer configuration [ 113.853249][ T6842] tipc: Enabling of bearer rejected, failed to enable media [ 113.902315][ T6844] device syzkaller0 entered promiscuous mode [ 114.194121][ T6859] device syzkaller0 entered promiscuous mode [ 114.248747][ T4341] Bluetooth: hci4: command 0x0406 tx timeout [ 114.344526][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 114.350620][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.354523][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.362857][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.364995][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.648085][ T6924] device syzkaller0 entered promiscuous mode [ 115.115778][ T6938] ip_tables: iptables: counters copy to user failed while replacing table [ 117.537820][ T4317] EXT4-fs: 148 callbacks suppressed [ 117.537833][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 117.540211][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 119.038941][ T4317] EXT4-fs error: 163 callbacks suppressed [ 119.038954][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 119.042005][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 120.039667][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 120.041894][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 121.040629][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 121.042782][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 121.541151][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 121.543438][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 122.042060][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 122.044372][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 122.542572][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 122.544768][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 123.043101][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 123.045120][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.609630][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.610863][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.848532][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 125.852966][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 125.855501][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 125.857598][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 125.859987][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1741: comm udevd: reading directory lblock 0 [ 125.862292][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1599: comm udevd: reading directory lblock 0 [ 125.889209][ T6959] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.948: Detected aborted journal [ 125.891325][ T6959] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.901082][ T6960] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.949: Detected aborted journal [ 125.903077][ T6960] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.907656][ T6959] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.948: Detected aborted journal [ 125.912042][ T6960] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.949: Detected aborted journal [ 125.914030][ T6960] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.914068][ T6963] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.915396][ T6959] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.921831][ T6961] device syzkaller0 entered promiscuous mode [ 125.950004][ T6969] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.956055][ T6971] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 125.967556][ T6971] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 126.034157][ T6981] loop2: detected capacity change from 0 to 512 [ 126.241983][ T6989] batman_adv: batadv0: Adding interface: syzkaller0 [ 126.243538][ T6989] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.248438][ T6989] batman_adv: batadv0: Interface activated: syzkaller0 [ 126.384224][ T6988] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 126.429746][ T6988] batman_adv: batadv0: Removing interface: syzkaller0 [ 126.560577][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.960'. [ 126.587167][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 126.594304][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.613806][ T6995] bond1: (slave geneve2): Opening slave failed [ 126.656453][ T7000] device syzkaller0 entered promiscuous mode [ 126.695473][ T7002] batman_adv: batadv0: Adding interface: syzkaller0 [ 126.697008][ T7002] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.701899][ T7002] batman_adv: batadv0: Interface activated: syzkaller0 [ 126.761531][ T7001] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 126.820081][ T7001] batman_adv: batadv0: Removing interface: syzkaller0 [ 126.840622][ T7006] xt_l2tp: invalid flags combination: 8 [ 126.880241][ T4416] hid-generic 0005:0008:0009.0003: unknown main item tag 0x0 [ 126.881792][ T4416] hid-generic 0005:0008:0009.0003: unknown main item tag 0x0 [ 126.883054][ T4416] hid-generic 0005:0008:0009.0003: unknown main item tag 0x0 [ 126.884885][ T4416] hid-generic 0005:0008:0009.0003: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 126.916094][ T7014] udevd[7014]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 127.080390][ T7034] loop0: detected capacity change from 0 to 512 [ 127.482591][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 127.562606][ T7051] bond1: (slave veth3): Enslaving as an active interface with an up link [ 127.584795][ T7058] EXT4-fs: 72 callbacks suppressed [ 127.584805][ T7058] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.590978][ T7058] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.646803][ T7064] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.653213][ T7064] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.672345][ T7066] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.700509][ T7068] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.779633][ T7073] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.863456][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.876245][ T7028] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 127.878187][ T7029] nvme nvme1: rdma connection establishment failed (-512) [ 127.879960][ T7075] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 128.110692][ T7093] netlink: 44 bytes leftover after parsing attributes in process `syz.1.995'. [ 128.890931][ T7114] loop0: detected capacity change from 0 to 512 [ 129.334028][ T7129] 0x000000000003-0x000000010001 : "" [ 129.337335][ T7129] ftl_cs: FTL header corrupt! [ 129.339542][ T7129] FAULT_INJECTION: forcing a failure. [ 129.339542][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 129.341838][ T7129] CPU: 1 PID: 7129 Comm: syz.4.1008 Not tainted syzkaller #0 [ 129.343202][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 129.344794][ T7129] Call trace: [ 129.345333][ T7129] dump_backtrace+0x1c4/0x1f0 [ 129.346058][ T7129] show_stack+0x2c/0x3c [ 129.346747][ T7129] __dump_stack+0x30/0x40 [ 129.347490][ T7129] dump_stack_lvl+0xf4/0x15c [ 129.348231][ T7129] dump_stack+0x1c/0x5c [ 129.348933][ T7129] should_fail_ex+0x3cc/0x524 [ 129.349757][ T7129] __should_failslab+0xc0/0x11c [ 129.350617][ T7129] should_failslab+0x10/0x28 [ 129.351436][ T7129] kmem_cache_alloc+0x88/0x310 [ 129.352232][ T7129] __kernfs_new_node+0xec/0x5fc [ 129.353061][ T7129] kernfs_new_node+0x120/0x230 [ 129.353874][ T7129] kernfs_create_link+0x98/0x1e4 [ 129.354751][ T7129] sysfs_do_create_link_sd+0x8c/0x120 [ 129.355684][ T7129] sysfs_create_link+0x74/0x94 [ 129.356534][ T7129] device_add_disk+0x418/0xe04 [ 129.357359][ T7129] add_mtd_blktrans_dev+0xc48/0x1090 [ 129.358266][ T7129] mtdblock_add_mtd+0x158/0x218 [ 129.359096][ T7129] blktrans_notify_add+0xa8/0xf8 [ 129.359962][ T7130] udevd[7130]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd5ro': Input/output error [ 129.361765][ T7129] add_mtd_device+0xdcc/0x130c [ 129.362606][ T7129] mtd_add_partition+0x224/0x3bc [ 129.363452][ T7129] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 129.364332][ T7129] mtdchar_ioctl+0x1238/0x1aec [ 129.365202][ T7129] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 129.366096][ T7129] __arm64_sys_ioctl+0x14c/0x1c8 [ 129.366954][ T7129] invoke_syscall+0x98/0x290 [ 129.367774][ T7129] el0_svc_common+0x13c/0x258 [ 129.368581][ T7129] do_el0_svc+0x5c/0x134 [ 129.369332][ T7129] el0_svc+0x58/0x12c [ 129.370020][ T7129] el0t_64_sync_handler+0x84/0xf0 [ 129.370835][ T7129] el0t_64_sync+0x18c/0x190 [ 129.804280][ T7162] loop1: detected capacity change from 0 to 512 [ 130.654065][ T7168] 0x000000000003-0x000000010001 : "" [ 130.671274][ T7171] tipc: Enabling of bearer rejected, already enabled [ 130.713903][ T7168] ftl_cs: FTL header corrupt! [ 130.716824][ T7168] FAULT_INJECTION: forcing a failure. [ 130.716824][ T7168] name failslab, interval 1, probability 0, space 0, times 0 [ 130.725950][ T7175] udevd[7175]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd6ro': Input/output error [ 130.728204][ T7168] CPU: 0 PID: 7168 Comm: syz.2.1021 Not tainted syzkaller #0 [ 130.729582][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 130.731520][ T7168] Call trace: [ 130.732135][ T7168] dump_backtrace+0x1c4/0x1f0 [ 130.733087][ T7168] show_stack+0x2c/0x3c [ 130.733940][ T7168] __dump_stack+0x30/0x40 [ 130.734751][ T7168] dump_stack_lvl+0xf4/0x15c [ 130.735616][ T7168] dump_stack+0x1c/0x5c [ 130.736497][ T7168] should_fail_ex+0x3cc/0x524 [ 130.737486][ T7168] __should_failslab+0xc0/0x11c [ 130.738485][ T7168] should_failslab+0x10/0x28 [ 130.739456][ T7168] __kmem_cache_alloc_node+0x7c/0x318 [ 130.740577][ T7168] kmalloc_trace+0x48/0x94 [ 130.741425][ T7168] kobject_create_and_add+0x64/0x218 [ 130.742433][ T7168] device_add_disk+0x4f0/0xe04 [ 130.743331][ T7168] add_mtd_blktrans_dev+0xc48/0x1090 [ 130.744225][ T7168] mtdblock_add_mtd+0x158/0x218 [ 130.745070][ T7168] blktrans_notify_add+0xa8/0xf8 [ 130.745914][ T7168] add_mtd_device+0xdcc/0x130c [ 130.746771][ T7168] mtd_add_partition+0x224/0x3bc [ 130.747636][ T7168] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 130.748646][ T7168] mtdchar_ioctl+0x1238/0x1aec [ 130.749657][ T7168] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 130.750700][ T7168] __arm64_sys_ioctl+0x14c/0x1c8 [ 130.751695][ T7168] invoke_syscall+0x98/0x290 [ 130.752577][ T7168] el0_svc_common+0x13c/0x258 [ 130.753485][ T7168] do_el0_svc+0x5c/0x134 [ 130.754294][ T7168] el0_svc+0x58/0x12c [ 130.755025][ T7168] el0t_64_sync_handler+0x84/0xf0 [ 130.755962][ T7168] el0t_64_sync+0x18c/0x190 [ 130.874217][ T4317] EXT4-fs error: 208 callbacks suppressed [ 130.874232][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 130.883230][ T7179] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1026: Detected aborted journal [ 130.886421][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 130.899223][ T7181] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1027: Detected aborted journal [ 130.925133][ T7184] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1028: Detected aborted journal [ 130.925164][ T7181] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1027: Detected aborted journal [ 130.930774][ T7184] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1028: Detected aborted journal [ 130.942677][ T7179] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1026: Detected aborted journal [ 130.949617][ T7186] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1029: Detected aborted journal [ 130.956705][ T7188] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1030: Detected aborted journal [ 131.272471][ T7210] loop3: detected capacity change from 0 to 512 [ 132.116148][ T7217] tipc: Enabling of bearer rejected, already enabled [ 132.186537][ T7224] nvme_fabrics: missing parameter 'transport=%s' [ 132.187956][ T7224] nvme_fabrics: missing parameter 'nqn=%s' [ 132.429277][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'. [ 132.600806][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 132.607390][ T7238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.617197][ T7243] bond1: (slave geneve2): Opening slave failed [ 132.657295][ T7248] EXT4-fs: 129 callbacks suppressed [ 132.657304][ T7248] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.661539][ T7235] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.666823][ T7248] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.678862][ T7248] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.681077][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.705421][ T7250] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.709227][ T7250] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.731788][ T7252] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.755332][ T7254] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.777477][ T7256] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 132.814435][ T7261] nvme_fabrics: missing parameter 'transport=%s' [ 132.815726][ T7261] nvme_fabrics: missing parameter 'nqn=%s' [ 132.837656][ T7265] tipc: Enabling of bearer rejected, already enabled [ 132.904404][ T7267] loop2: detected capacity change from 0 to 512 [ 133.965200][ T7274] loop2: detected capacity change from 0 to 1024 [ 133.984888][ T7274] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.990929][ T7274] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.000183][ T7274] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 134.002005][ T7274] System zones: 0-1, 3-36 [ 134.007754][ T7274] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.058158][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'. [ 134.082000][ T7285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.260841][ T7296] nvme_fabrics: missing parameter 'transport=%s' [ 134.262371][ T7296] nvme_fabrics: missing parameter 'nqn=%s' [ 134.519247][ T7306] loop1: detected capacity change from 0 to 512 [ 135.478331][ T7312] tipc: Enabling of bearer rejected, already enabled [ 135.484678][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 135.686221][ T7325] FAULT_INJECTION: forcing a failure. [ 135.686221][ T7325] name failslab, interval 1, probability 0, space 0, times 0 [ 135.709191][ T7325] CPU: 1 PID: 7325 Comm: syz.2.1080 Not tainted syzkaller #0 [ 135.710681][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 135.712646][ T7325] Call trace: [ 135.713294][ T7325] dump_backtrace+0x1c4/0x1f0 [ 135.714217][ T7325] show_stack+0x2c/0x3c [ 135.714915][ T7325] __dump_stack+0x30/0x40 [ 135.715675][ T7325] dump_stack_lvl+0xf4/0x15c [ 135.716459][ T7325] dump_stack+0x1c/0x5c [ 135.717191][ T7325] should_fail_ex+0x3cc/0x524 [ 135.718184][ T7325] __should_failslab+0xc0/0x11c [ 135.719114][ T7325] should_failslab+0x10/0x28 [ 135.719969][ T7325] __kmem_cache_alloc_node+0x7c/0x318 [ 135.720975][ T7325] kmalloc_trace+0x48/0x94 [ 135.721812][ T7325] snd_pcm_oss_open+0x8ec/0x176c [ 135.722757][ T7325] soundcore_open+0x2f8/0x47c [ 135.723614][ T7325] chrdev_open+0x3d0/0x51c [ 135.724381][ T7325] do_dentry_open+0x738/0xf8c [ 135.725192][ T7325] vfs_open+0x7c/0x90 [ 135.725889][ T7325] path_openat+0x1fc0/0x27a0 [ 135.726698][ T7325] do_filp_open+0x198/0x38c [ 135.727484][ T7325] do_sys_openat2+0x134/0x3fc [ 135.728262][ T7325] __arm64_sys_openat+0x11c/0x150 [ 135.729085][ T7325] invoke_syscall+0x98/0x290 [ 135.729859][ T7325] el0_svc_common+0x13c/0x258 [ 135.730651][ T7325] do_el0_svc+0x5c/0x134 [ 135.731379][ T7325] el0_svc+0x58/0x12c [ 135.732059][ T7325] el0t_64_sync_handler+0x84/0xf0 [ 135.732873][ T7325] el0t_64_sync+0x18c/0x190 [ 136.519388][ T7326] EXT4-fs error: 137 callbacks suppressed [ 136.519413][ T7326] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1079: Detected aborted journal [ 136.607945][ T7333] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1081: Detected aborted journal [ 136.632337][ T7333] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1081: Detected aborted journal [ 136.652106][ T7335] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1082: Detected aborted journal [ 136.655982][ T7334] 0x000000000003-0x000000010001 : "" [ 136.660493][ T7335] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1082: Detected aborted journal [ 136.762635][ T7334] ftl_cs: FTL header corrupt! [ 136.764179][ T7334] FAULT_INJECTION: forcing a failure. [ 136.764179][ T7334] name failslab, interval 1, probability 0, space 0, times 0 [ 136.767509][ T6958] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 136.771673][ T7334] CPU: 1 PID: 7334 Comm: syz.0.1081 Not tainted syzkaller #0 [ 136.773000][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.774874][ T7334] Call trace: [ 136.775437][ T7334] dump_backtrace+0x1c4/0x1f0 [ 136.776301][ T7334] show_stack+0x2c/0x3c [ 136.777056][ T7334] __dump_stack+0x30/0x40 [ 136.777834][ T7334] dump_stack_lvl+0xf4/0x15c [ 136.778630][ T7334] dump_stack+0x1c/0x5c [ 136.779326][ T7334] should_fail_ex+0x3cc/0x524 [ 136.780172][ T7334] __should_failslab+0xc0/0x11c [ 136.781016][ T7334] should_failslab+0x10/0x28 [ 136.781826][ T7334] kmem_cache_alloc+0x88/0x310 [ 136.782705][ T7334] __kernfs_new_node+0xec/0x5fc [ 136.783591][ T7334] kernfs_new_node+0x120/0x230 [ 136.784405][ T7334] __kernfs_create_file+0x60/0x2e0 [ 136.785313][ T7334] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 136.786222][ T7334] sysfs_create_file_ns+0x10c/0x19c [ 136.787183][ T7334] device_create_file+0xfc/0x1b0 [ 136.788046][ T7334] device_add+0x834/0xe4c [ 136.788847][ T7334] device_add_disk+0x398/0xe04 [ 136.789714][ T7334] add_mtd_blktrans_dev+0xc48/0x1090 [ 136.790672][ T7334] mtdblock_add_mtd+0x158/0x218 [ 136.791510][ T7334] blktrans_notify_add+0xa8/0xf8 [ 136.792395][ T7334] add_mtd_device+0xdcc/0x130c [ 136.793258][ T7334] mtd_add_partition+0x224/0x3bc [ 136.794168][ T7334] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 136.795098][ T7334] mtdchar_ioctl+0x1238/0x1aec [ 136.795977][ T7334] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 136.796912][ T7334] __arm64_sys_ioctl+0x14c/0x1c8 [ 136.797810][ T7334] invoke_syscall+0x98/0x290 [ 136.798711][ T7334] el0_svc_common+0x13c/0x258 [ 136.799620][ T7334] do_el0_svc+0x5c/0x134 [ 136.800412][ T7334] el0_svc+0x58/0x12c [ 136.801203][ T7334] el0t_64_sync_handler+0x84/0xf0 [ 136.802093][ T7334] el0t_64_sync+0x18c/0x190 [ 136.812269][ T6958] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1741: comm udevd: reading directory lblock 0 [ 136.824210][ T7339] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1083: Detected aborted journal [ 136.828945][ T7341] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 136.831507][ T7341] udevd[7341]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd7ro': Input/output error [ 136.831716][ T7339] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1083: Detected aborted journal [ 136.881925][ T7345] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.897412][ T7343] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 136.916124][ T7347] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.067618][ T7354] loop1: detected capacity change from 0 to 512 [ 137.774466][ T7348] EXT4-fs: 82 callbacks suppressed [ 137.774490][ T7348] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.785283][ T7348] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.874434][ T7356] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.891989][ T7356] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.901300][ T7356] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.906744][ T7358] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.916203][ T7356] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.920125][ T7356] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.924649][ T7358] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 137.982208][ T7356] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 138.124032][ T7363] FAULT_INJECTION: forcing a failure. [ 138.124032][ T7363] name failslab, interval 1, probability 0, space 0, times 0 [ 138.126218][ T7363] CPU: 1 PID: 7363 Comm: syz.1.1093 Not tainted syzkaller #0 [ 138.127461][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.129324][ T7363] Call trace: [ 138.129923][ T7363] dump_backtrace+0x1c4/0x1f0 [ 138.130775][ T7363] show_stack+0x2c/0x3c [ 138.131512][ T7363] __dump_stack+0x30/0x40 [ 138.132297][ T7363] dump_stack_lvl+0xf4/0x15c [ 138.133098][ T7363] dump_stack+0x1c/0x5c [ 138.133831][ T7363] should_fail_ex+0x3cc/0x524 [ 138.134652][ T7363] __should_failslab+0xc0/0x11c [ 138.135513][ T7363] should_failslab+0x10/0x28 [ 138.136311][ T7363] __kmem_cache_alloc_node+0x7c/0x318 [ 138.137249][ T7363] kmalloc_trace+0x48/0x94 [ 138.138020][ T7363] snd_pcm_oss_open+0x8ec/0x176c [ 138.138887][ T7363] soundcore_open+0x2f8/0x47c [ 138.139709][ T7363] chrdev_open+0x3d0/0x51c [ 138.140494][ T7363] do_dentry_open+0x738/0xf8c [ 138.141290][ T7363] vfs_open+0x7c/0x90 [ 138.141924][ T7363] path_openat+0x1fc0/0x27a0 [ 138.142698][ T7363] do_filp_open+0x198/0x38c [ 138.143484][ T7363] do_sys_openat2+0x134/0x3fc [ 138.144344][ T7363] __arm64_sys_openat+0x11c/0x150 [ 138.145265][ T7363] invoke_syscall+0x98/0x290 [ 138.146026][ T7363] el0_svc_common+0x13c/0x258 [ 138.146848][ T7363] do_el0_svc+0x5c/0x134 [ 138.147582][ T7363] el0_svc+0x58/0x12c [ 138.148293][ T7363] el0t_64_sync_handler+0x84/0xf0 [ 138.149138][ T7363] el0t_64_sync+0x18c/0x190 [ 138.198467][ T7368] tipc: Enabling of bearer rejected, already enabled [ 138.275465][ T7372] 0x000000000003-0x000000010001 : "" [ 138.282660][ T7372] ftl_cs: FTL header corrupt! [ 138.283706][ T7373] udevd[7373]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd8ro': Input/output error [ 138.284803][ T7372] FAULT_INJECTION: forcing a failure. [ 138.284803][ T7372] name failslab, interval 1, probability 0, space 0, times 0 [ 138.291860][ T7372] CPU: 1 PID: 7372 Comm: syz.1.1096 Not tainted syzkaller #0 [ 138.293193][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.294980][ T7372] Call trace: [ 138.295537][ T7372] dump_backtrace+0x1c4/0x1f0 [ 138.296309][ T7372] show_stack+0x2c/0x3c [ 138.296954][ T7372] __dump_stack+0x30/0x40 [ 138.297670][ T7372] dump_stack_lvl+0xf4/0x15c [ 138.298426][ T7372] dump_stack+0x1c/0x5c [ 138.299193][ T7372] should_fail_ex+0x3cc/0x524 [ 138.300044][ T7372] __should_failslab+0xc0/0x11c [ 138.300908][ T7372] should_failslab+0x10/0x28 [ 138.301716][ T7372] kmem_cache_alloc+0x88/0x310 [ 138.302536][ T7372] __kernfs_new_node+0xec/0x5fc [ 138.303366][ T7372] kernfs_new_node+0x120/0x230 [ 138.304188][ T7372] kernfs_create_dir_ns+0x58/0x138 [ 138.305035][ T7372] sysfs_create_dir_ns+0x120/0x264 [ 138.305958][ T7372] kobject_add_internal+0x5a8/0xb18 [ 138.306869][ T7372] kobject_add+0x144/0x20c [ 138.307778][ T7372] blk_register_queue+0x84/0x334 [ 138.308810][ T7372] device_add_disk+0x53c/0xe04 [ 138.309805][ T7372] add_mtd_blktrans_dev+0xc48/0x1090 [ 138.310891][ T7372] mtdblock_add_mtd+0x158/0x218 [ 138.311860][ T7372] blktrans_notify_add+0xa8/0xf8 [ 138.312755][ T7372] add_mtd_device+0xdcc/0x130c [ 138.313593][ T7372] mtd_add_partition+0x224/0x3bc [ 138.314484][ T7372] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 138.315387][ T7372] mtdchar_ioctl+0x1238/0x1aec [ 138.316149][ T7372] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 138.317050][ T7372] __arm64_sys_ioctl+0x14c/0x1c8 [ 138.317915][ T7372] invoke_syscall+0x98/0x290 [ 138.318683][ T7372] el0_svc_common+0x13c/0x258 [ 138.319466][ T7372] do_el0_svc+0x5c/0x134 [ 138.320224][ T7372] el0_svc+0x58/0x12c [ 138.320873][ T7372] el0t_64_sync_handler+0x84/0xf0 [ 138.321758][ T7372] el0t_64_sync+0x18c/0x190 [ 138.328937][ T7372] kobject_add_internal failed for queue (error: -12 parent: mtdblock8) [ 138.412510][ T7379] sctp: [Deprecated]: syz.4.1097 (pid 7379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.412510][ T7379] Use struct sctp_sack_info instead [ 138.415735][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000905c29b8: rx timeout, send abort Jan 1 01:14:50 syzkaller kern.alert kernel: [ 138.415735][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000905c29b8: rx timeout, send abort [ 138.424326][ T7379] sctp: [Deprecated]: syz.4.1097 (pid 7379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.424326][ T7379] Use struct sctp_sack_info instead [ 138.451069][ T7382] loop3: detected capacity change from 0 to 1024 [ 138.456139][ T7382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.458416][ T7382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.463964][ T7382] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 138.465583][ T7382] System zones: 0-1, 3-36 [ 138.476516][ T7382] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.914876][ C1] vxcan0: j1939_tp_rxtimer: 0x000000008a5fa0fa: rx timeout, send abort [ 138.916849][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000905c29b8: abort rx timeout. Force session deactivation Jan 1 01:14:51 syzkaller kern.alert kernel: [ 138.914876][ C1] vxcan0: j1939_tp_rxtimer: 0x000000008a5fa0fa: rx timeout, send abort Jan 1 01:14:51 syzkaller kern.alert kernel: [ 138.916849][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000905c29b8: abort rx timeout. Force session deactivation [ 138.968686][ T4346] Bluetooth: hci4: command 0x0407 tx timeout [ 138.990740][ T7396] ip_tables: iptables: counters copy to user failed while replacing table [ 139.137162][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.139635][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.362290][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 139.416779][ C1] vxcan0: j1939_tp_rxtimer: 0x000000008a5fa0fa: abort rx timeout. Force session deactivation Jan 1 01:14:51 syzkaller kern.alert kernel: [ 139.416779][ C1] vxcan0: j1939_tp_rxtimer: 0x000000008a5fa0fa: abort rx timeout. Force session deactivation [ 139.581162][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.604308][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.009855][ T7396] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.012278][ T7396] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.015687][ T7396] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.018160][ T7396] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.446179][ T4341] Bluetooth: hci4: link tx timeout [ 140.447093][ T4341] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.472001][ T7436] Bluetooth: MGMT ver 1.22 [ 140.591850][ T7441] loop0: detected capacity change from 0 to 1024 [ 140.600232][ T7441] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.602489][ T7441] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 140.614826][ T7441] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 140.616391][ T7441] System zones: 0-1, 3-36 [ 140.619272][ T7441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.043128][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 141.097179][ T7470] TC_ACT_REPEAT abuse ? [ 141.577967][ T4317] EXT4-fs error: 127 callbacks suppressed [ 141.577979][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 141.584144][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 141.584581][ T7493] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1146: Detected aborted journal [ 141.592545][ T7496] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 141.594899][ T7493] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1146: Detected aborted journal [ 141.605720][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 141.608213][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 141.613428][ T7499] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1149: Detected aborted journal [ 141.620766][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 141.633476][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 141.635193][ T7501] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1151: Detected aborted journal [ 141.639427][ T7503] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:10: reading directory lblock 0 [ 142.391284][ T7530] loop1: detected capacity change from 0 to 512 [ 143.117935][ T7525] EXT4-fs: 108 callbacks suppressed [ 143.117957][ T7525] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.128589][ T7525] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.150157][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.181679][ T7532] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.189252][ T7534] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.197370][ T7532] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.256896][ T7532] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.265540][ T7532] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.278204][ T7536] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.284801][ T7533] loop3: detected capacity change from 0 to 1024 [ 143.290447][ T7536] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 143.400675][ T7533] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.405049][ T7533] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.463003][ T7541] tipc: Enabling of bearer rejected, already enabled [ 143.476749][ T7533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 143.478364][ T7533] System zones: 0-1, 3-36 [ 143.484767][ T7533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 143.651086][ T7558] device batadv_slave_1 entered promiscuous mode [ 143.667851][ T7561] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 143.731667][ T7557] device batadv_slave_1 left promiscuous mode [ 143.740117][ T7561] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 143.742250][ T7561] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 143.744362][ T7561] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 143.746379][ T7561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 143.748308][ T7561] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 144.117855][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 144.436965][ T7581] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 144.590805][ T7586] tipc: Enabling of bearer rejected, already enabled [ 145.046830][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 145.270895][ T7601] loop1: detected capacity change from 0 to 1024 [ 145.282364][ T7601] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.289025][ T7601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.303474][ T7601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 145.305106][ T7601] System zones: 0-1, 3-36 [ 145.311919][ T7601] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 145.539602][ T7617] tipc: Enabling of bearer rejected, already enabled [ 145.558320][ T7619] nvme_fabrics: unknown parameter or missing value 't' in ctrl creation request [ 145.604290][ T7628] netlink: 'syz.4.1193': attribute type 3 has an invalid length. [ 146.527039][ T7646] nvme_rdma: malformed address passed: 172.20.2:4420 [ 146.608278][ T7643] EXT4-fs error: 169 callbacks suppressed [ 146.608290][ T7643] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1200: Detected aborted journal [ 146.612623][ T7643] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1200: Detected aborted journal [ 146.621267][ T7643] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1200: Detected aborted journal [ 146.625550][ T7653] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1203: Detected aborted journal [ 146.629605][ T7643] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1200: Detected aborted journal [ 146.632919][ T7653] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1203: Detected aborted journal [ 146.638983][ T7653] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1203: Detected aborted journal [ 146.646030][ T7654] tipc: Enabling of bearer rejected, already enabled [ 146.676181][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 146.734606][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 146.766786][ T7655] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1204: Detected aborted journal [ 146.776147][ T7655] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1204: Detected aborted journal [ 147.023687][ T7674] nvme_rdma: malformed address passed: 172.20.2:4420 [ 147.272267][ T7686] tipc: Enabling of bearer rejected, already enabled [ 147.290224][ T7688] loop1: detected capacity change from 0 to 1024 [ 147.305212][ T7688] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 147.310718][ T7688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.329946][ T7688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 147.334096][ T7688] System zones: 0-1, 3-36 [ 147.343206][ T7688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.452975][ T7691] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1217'. [ 147.947156][ T7705] nvme_rdma: malformed address passed: 172.20.2:4420 [ 147.984227][ T7709] can: request_module (can-proto-0) failed. [ 148.054561][ T7716] tipc: Enabling of bearer rejected, already enabled [ 148.173509][ T7721] EXT4-fs: 135 callbacks suppressed [ 148.173520][ T7721] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.216160][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 148.240709][ T7726] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.326358][ T7730] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.332815][ T7730] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.362215][ T7732] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.392064][ T7734] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.396308][ T7735] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.427475][ T7736] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.451697][ T7736] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.455374][ T7737] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 148.497534][ T7739] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.500778][ T7739] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 148.588212][ T3940] udevd[3940]: worker [6958] terminated by signal 7 (Bus error) [ 148.592519][ T3940] udevd[3940]: worker [6958] failed while handling '/devices/virtual/bluetooth/hci4/hci4:200/net/bnep0' [ 148.651826][ T7751] tipc: Enabling of bearer rejected, already enabled [ 148.731626][ T7753] loop2: detected capacity change from 0 to 1024 [ 148.744503][ T7753] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.748923][ T7753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.752374][ T7753] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 148.754138][ T7753] System zones: 0-1, 3-36 [ 148.756340][ T7753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.888459][ T7765] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 149.098513][ T7779] tipc: Enabling of bearer rejected, already enabled [ 149.903586][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 149.927206][ T7787] tipc: Enabled bearer , priority 0 [ 149.936716][ T7787] device syzkaller0 entered promiscuous mode [ 150.061884][ T7791] tipc: Resetting bearer [ 150.071494][ T7785] tipc: Resetting bearer [ 150.199358][ T7785] tipc: Disabling bearer [ 150.203361][ T7798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.274685][ T7798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.293360][ T7801] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 150.483892][ T7816] tipc: Enabling of bearer rejected, already enabled [ 150.577036][ T7820] loop4: detected capacity change from 0 to 1024 [ 150.583915][ T7820] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.590383][ T7820] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.601737][ T7820] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 150.603656][ T7820] System zones: 0-1, 3-36 [ 150.605795][ T7820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.582728][ T7833] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 151.632208][ T7839] EXT4-fs error: 153 callbacks suppressed [ 151.632218][ T7839] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1277: Detected aborted journal [ 151.636086][ T7840] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1276: Detected aborted journal [ 151.640691][ T7839] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1277: Detected aborted journal [ 151.643875][ T7840] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1276: Detected aborted journal [ 151.647660][ T7841] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1278: Detected aborted journal [ 151.653516][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1277'. [ 151.657994][ T7841] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1278: Detected aborted journal [ 151.671606][ T7841] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1278: Detected aborted journal [ 151.679115][ T7841] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1278: Detected aborted journal [ 151.700036][ T7841] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1278: Detected aborted journal [ 151.704831][ T7844] tipc: Enabling of bearer rejected, already enabled [ 151.707770][ T7845] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1279: Detected aborted journal [ 152.173726][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 152.566176][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 152.724883][ T7878] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 153.289367][ T4346] Bluetooth: hci3: command 0x0406 tx timeout [ 153.290599][ T4341] Bluetooth: hci2: command 0x0406 tx timeout [ 153.291962][ T4341] Bluetooth: hci1: command 0x0406 tx timeout [ 153.621708][ T7886] EXT4-fs: 123 callbacks suppressed [ 153.621730][ T7886] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.709491][ T7893] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.722217][ T7895] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.724758][ T7893] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.735151][ T7895] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.778463][ T7893] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.789015][ T7895] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.940374][ T7899] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 153.948962][ T7900] loop1: detected capacity change from 0 to 1024 [ 153.955011][ T7900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.956883][ T7900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.967863][ T7900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 153.969707][ T7900] System zones: 0-1, 3-36 [ 154.130236][ T7900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.133075][ T7899] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 154.144589][ T7899] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 154.876752][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 154.878152][ T7858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.967442][ T7912] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 155.189708][ T7935] 0x000000000003-0x000000010001 : "" [ 155.192929][ T7935] ftl_cs: FTL header corrupt! [ 155.197147][ T7936] udevd[7936]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd9ro': Input/output error [ 155.203000][ T7935] FAULT_INJECTION: forcing a failure. [ 155.203000][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 155.205393][ T7935] CPU: 1 PID: 7935 Comm: syz.0.1308 Not tainted syzkaller #0 [ 155.206669][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 155.208446][ T7935] Call trace: [ 155.209080][ T7935] dump_backtrace+0x1c4/0x1f0 [ 155.209913][ T7935] show_stack+0x2c/0x3c [ 155.210659][ T7935] __dump_stack+0x30/0x40 [ 155.211434][ T7935] dump_stack_lvl+0xf4/0x15c [ 155.212286][ T7935] dump_stack+0x1c/0x5c [ 155.213041][ T7935] should_fail_ex+0x3cc/0x524 [ 155.213878][ T7935] __should_failslab+0xc0/0x11c [ 155.214744][ T7935] should_failslab+0x10/0x28 [ 155.215573][ T7935] kmem_cache_alloc+0x88/0x310 [ 155.216415][ T7935] __kernfs_new_node+0xec/0x5fc [ 155.217286][ T7935] kernfs_new_node+0x120/0x230 [ 155.218136][ T7935] __kernfs_create_file+0x60/0x2e0 [ 155.219026][ T7935] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 155.219983][ T7935] internal_create_group+0x3e8/0xb24 [ 155.220906][ T7935] sysfs_create_groups+0x60/0x134 [ 155.221807][ T7935] kobject_add_internal+0x5e4/0xb18 [ 155.222735][ T7935] kobject_add+0x144/0x20c [ 155.223535][ T7935] blk_register_queue+0x84/0x334 [ 155.224416][ T7935] device_add_disk+0x53c/0xe04 [ 155.225253][ T7935] add_mtd_blktrans_dev+0xc48/0x1090 [ 155.226257][ T7935] mtdblock_add_mtd+0x158/0x218 [ 155.227191][ T7935] blktrans_notify_add+0xa8/0xf8 [ 155.228076][ T7935] add_mtd_device+0xdcc/0x130c [ 155.228927][ T7935] mtd_add_partition+0x224/0x3bc [ 155.229829][ T7935] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 155.230740][ T7935] mtdchar_ioctl+0x1238/0x1aec [ 155.231593][ T7935] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 155.232552][ T7935] __arm64_sys_ioctl+0x14c/0x1c8 [ 155.233432][ T7935] invoke_syscall+0x98/0x290 [ 155.234266][ T7935] el0_svc_common+0x13c/0x258 [ 155.235130][ T7935] do_el0_svc+0x5c/0x134 [ 155.235898][ T7935] el0_svc+0x58/0x12c [ 155.236589][ T7935] el0t_64_sync_handler+0x84/0xf0 [ 155.237453][ T7935] el0t_64_sync+0x18c/0x190 [ 156.071397][ T7935] kobject_add_internal failed for queue (error: -12 parent: mtdblock9) [ 156.182882][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 156.214246][ T7948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.241662][ T7948] bond3: (slave geneve2): Opening slave failed [ 156.525761][ T7971] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 156.647623][ T7974] EXT4-fs error: 121 callbacks suppressed [ 156.647639][ T7974] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1323: Detected aborted journal [ 156.652065][ T7974] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1323: Detected aborted journal [ 156.659148][ T7974] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1323: Detected aborted journal [ 156.670258][ T7974] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1323: Detected aborted journal [ 156.690861][ T7974] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1323: Detected aborted journal [ 156.697792][ T7975] tipc: Enabling of bearer rejected, already enabled [ 156.713050][ T7974] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1323: Detected aborted journal [ 156.722515][ T7974] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1323: Detected aborted journal [ 156.722787][ T7965] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1319: Detected aborted journal [ 156.830728][ T7980] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1324: Detected aborted journal [ 156.844523][ T7980] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1324: Detected aborted journal [ 156.885085][ T7981] loop1: detected capacity change from 0 to 1024 [ 156.910562][ T7981] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.931330][ T7981] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.955509][ T7981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 156.962246][ T7981] System zones: 0-1, 3-36 [ 156.987722][ T7981] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.553658][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 158.858245][ T7999] EXT4-fs: 87 callbacks suppressed [ 158.858255][ T7999] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 158.865299][ T8001] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 158.879558][ T7999] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 158.881783][ T8001] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 158.908767][ T8000] 0x000000000003-0x000000010001 : "" [ 158.922639][ T8000] ftl_cs: FTL header corrupt! [ 158.927451][ T8000] FAULT_INJECTION: forcing a failure. [ 158.927451][ T8000] name failslab, interval 1, probability 0, space 0, times 0 [ 158.930447][ T8003] udevd[8003]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd10ro': Input/output error [ 158.934287][ T8000] CPU: 0 PID: 8000 Comm: syz.4.1330 Not tainted syzkaller #0 [ 158.935643][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 158.937381][ T8000] Call trace: [ 158.937917][ T8000] dump_backtrace+0x1c4/0x1f0 [ 158.938674][ T8000] show_stack+0x2c/0x3c [ 158.939413][ T8000] __dump_stack+0x30/0x40 [ 158.940244][ T8000] dump_stack_lvl+0xf4/0x15c [ 158.941062][ T8000] dump_stack+0x1c/0x5c [ 158.941829][ T8000] should_fail_ex+0x3cc/0x524 [ 158.942664][ T8000] __should_failslab+0xc0/0x11c [ 158.943505][ T8000] should_failslab+0x10/0x28 [ 158.944328][ T8000] kmem_cache_alloc+0x88/0x310 [ 158.945175][ T8000] __kernfs_new_node+0xec/0x5fc [ 158.946055][ T8000] kernfs_new_node+0x120/0x230 [ 158.946860][ T8000] __kernfs_create_file+0x60/0x2e0 [ 158.947751][ T8000] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 158.948848][ T8000] internal_create_group+0x3e8/0xb24 [ 158.949776][ T8000] sysfs_create_groups+0x60/0x134 [ 158.950720][ T8000] kobject_add_internal+0x5e4/0xb18 [ 158.951672][ T8000] kobject_add+0x144/0x20c [ 158.952434][ T8000] blk_register_queue+0x84/0x334 [ 158.953276][ T8000] device_add_disk+0x53c/0xe04 [ 158.954091][ T8000] add_mtd_blktrans_dev+0xc48/0x1090 [ 158.955019][ T8000] mtdblock_add_mtd+0x158/0x218 [ 158.955873][ T8000] blktrans_notify_add+0xa8/0xf8 [ 158.956747][ T8000] add_mtd_device+0xdcc/0x130c [ 158.957588][ T8000] mtd_add_partition+0x224/0x3bc [ 158.958454][ T8000] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 158.959328][ T8000] mtdchar_ioctl+0x1238/0x1aec [ 158.960171][ T8000] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 158.961093][ T8000] __arm64_sys_ioctl+0x14c/0x1c8 [ 158.962005][ T8000] invoke_syscall+0x98/0x290 [ 158.962826][ T8000] el0_svc_common+0x13c/0x258 [ 158.963622][ T8000] do_el0_svc+0x5c/0x134 [ 158.964355][ T8000] el0_svc+0x58/0x12c [ 158.965065][ T8000] el0t_64_sync_handler+0x84/0xf0 [ 158.965954][ T8000] el0t_64_sync+0x18c/0x190 [ 159.038889][ T8000] kobject_add_internal failed for queue (error: -12 parent: mtdblock10) [ 159.050799][ T7999] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 159.052638][ T8005] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 159.070320][ T8005] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 159.132051][ T8007] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 159.144083][ T8007] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 159.160304][ T8009] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 159.172734][ T8010] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 159.448465][ T8021] loop4: detected capacity change from 0 to 512 [ 161.670086][ T8036] loop3: detected capacity change from 0 to 1024 [ 161.707032][ T8036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.721650][ T8036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 161.744853][ T8036] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 161.747892][ T8036] System zones: 0-1, 3-36 [ 161.768244][ T8036] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.772178][ T8035] EXT4-fs error: 70 callbacks suppressed [ 161.772184][ T8035] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1341: Detected aborted journal [ 161.794342][ T8039] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1342: Detected aborted journal [ 161.808106][ T8035] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1341: Detected aborted journal [ 161.816794][ T8041] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1343: Detected aborted journal [ 161.820988][ T8041] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1343: Detected aborted journal [ 161.829281][ T8039] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1342: Detected aborted journal [ 161.837035][ T8035] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1341: Detected aborted journal [ 161.838014][ T8043] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1344: Detected aborted journal [ 161.842031][ T8035] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1341: Detected aborted journal [ 161.856990][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 161.989431][ T8049] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 163.202259][ T8061] loop4: detected capacity change from 0 to 512 [ 164.150650][ T8069] EXT4-fs: 60 callbacks suppressed [ 164.150660][ T8069] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.359010][ T8069] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.364239][ T8063] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.376810][ T8069] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.384480][ T8069] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.386459][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.394990][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 164.400628][ T8069] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.411833][ T8069] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.434353][ T8075] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.436646][ T8069] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 164.958389][ T8093] nvme_fabrics: unknown parameter or missing value 'trsvci' in ctrl creation request [ 167.101013][ T8111] loop0: detected capacity change from 0 to 512 [ 167.232282][ T8102] EXT4-fs error: 80 callbacks suppressed [ 167.232304][ T8102] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1364: Detected aborted journal [ 167.344817][ T8102] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1364: Detected aborted journal [ 167.354937][ T8102] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1364: Detected aborted journal [ 167.382355][ T8106] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1366: Detected aborted journal [ 167.437462][ T8106] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1366: Detected aborted journal [ 167.441414][ T8106] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1366: Detected aborted journal [ 167.447288][ T8107] loop1: detected capacity change from 0 to 1024 [ 167.490209][ T8107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.492237][ T8107] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.524530][ T8107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 167.526073][ T8107] System zones: 0-1, 3-36 [ 167.533407][ T8115] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1367: Detected aborted journal [ 167.538123][ T8107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.547767][ T8106] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1366: Detected aborted journal [ 167.557631][ T8106] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1366: Detected aborted journal [ 167.571683][ T8115] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1367: Detected aborted journal [ 168.962562][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 168.965464][ T8133] nvme_fabrics: unknown parameter or missing value 'trsvcid=' in ctrl creation request [ 169.213488][ T8136] EXT4-fs: 73 callbacks suppressed [ 169.213498][ T8136] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.226001][ T8138] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.233832][ T8138] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.245619][ T8138] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.248033][ T8140] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.255708][ T8138] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.290865][ T8142] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.293317][ T8140] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.306508][ T8144] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 169.312747][ T8144] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 170.154283][ T8155] loop4: detected capacity change from 0 to 512 [ 171.081097][ T8163] loop2: detected capacity change from 0 to 1024 [ 171.101994][ T8167] nvme_fabrics: unknown parameter or missing value 'trsvcid=' in ctrl creation request [ 171.104621][ T8163] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.110154][ T8163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.124956][ T8163] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 171.126705][ T8163] System zones: 0-1, 3-36 [ 171.941568][ T8163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.016380][ T8175] 0x000000000003-0x000000010001 : "" [ 172.026519][ T8175] ftl_cs: FTL header corrupt! [ 172.147333][ T8178] udevd[8178]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd11ro': Input/output error [ 172.240993][ T8176] EXT4-fs error: 87 callbacks suppressed [ 172.241004][ T8176] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1390: Detected aborted journal [ 172.248327][ T8185] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1392: Detected aborted journal [ 172.265385][ T8186] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1393: Detected aborted journal [ 172.272145][ T8176] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1390: Detected aborted journal [ 172.276053][ T8185] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1392: Detected aborted journal [ 172.278797][ T8186] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1393: Detected aborted journal [ 172.279088][ T8176] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1390: Detected aborted journal [ 172.301537][ T8176] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1390: Detected aborted journal [ 173.141688][ T8176] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1390: Detected aborted journal [ 173.152323][ T8191] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1394: Detected aborted journal [ 173.521676][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 173.609516][ T8203] loop4: detected capacity change from 0 to 512 [ 174.324200][ T8199] EXT4-fs: 63 callbacks suppressed [ 174.324224][ T8199] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.335222][ T8199] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.396549][ T8204] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.407096][ T8204] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.677687][ T8206] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.710078][ T8206] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.724838][ T8207] nvme_fabrics: unknown parameter or missing value 'trsvcid=' in ctrl creation request [ 174.733991][ T8206] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.765444][ T8208] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.774902][ T8208] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 174.785501][ T8208] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 177.250012][ T8232] EXT4-fs error: 49 callbacks suppressed [ 177.250037][ T8232] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1410: Detected aborted journal [ 177.266912][ T8239] loop2: detected capacity change from 0 to 512 [ 177.359566][ T8232] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1410: Detected aborted journal [ 177.370751][ T8232] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1410: Detected aborted journal [ 177.455115][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 177.905971][ T8232] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1410: Detected aborted journal [ 177.927333][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 177.937379][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 177.947411][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 177.957567][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1741: comm udevd: reading directory lblock 0 [ 177.962334][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1599: comm udevd: reading directory lblock 0 [ 179.014300][ T8245] loop2: detected capacity change from 0 to 1024 [ 179.048192][ T8245] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.061097][ T8245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.081322][ T8245] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 179.082771][ T8245] System zones: 0-1, 3-36 [ 179.085732][ T8245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 179.338273][ T8259] EXT4-fs: 42 callbacks suppressed [ 179.338284][ T8259] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.347027][ T8257] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.349388][ T8259] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.359501][ T8258] nvme_fabrics: unknown parameter or missing value 'trsvcid=' in ctrl creation request [ 179.361745][ T8257] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.420814][ T8262] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.424284][ T8263] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.429067][ T8263] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.437813][ T8266] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.441006][ T8266] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 179.452765][ T8268] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 180.622919][ T8276] loop3: detected capacity change from 0 to 512 [ 183.473200][ T4317] EXT4-fs error: 44 callbacks suppressed [ 183.473214][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 183.502643][ T8281] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1428: Detected aborted journal [ 183.511190][ T8281] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1428: Detected aborted journal [ 183.513187][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 183.515908][ T8283] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1427: Detected aborted journal [ 183.532899][ T8285] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1430: Detected aborted journal [ 183.543028][ T8287] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1429: Detected aborted journal [ 183.553049][ T8283] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1427: Detected aborted journal [ 183.560829][ T8287] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1429: Detected aborted journal [ 183.570298][ T8287] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1429: Detected aborted journal [ 183.573868][ T8283] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1427: Detected aborted journal [ 184.423463][ T8298] EXT4-fs: 25 callbacks suppressed [ 184.423474][ T8298] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.441956][ T8298] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.444319][ T8299] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.520072][ T8299] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.526954][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 184.541841][ T8301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.554474][ T8301] bond2: (slave geneve2): Opening slave failed [ 184.587730][ T8303] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.597877][ T8303] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.637601][ T8298] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.643575][ T8298] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.650601][ T8298] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.653742][ T8307] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 184.889480][ T8315] loop0: detected capacity change from 0 to 1024 [ 184.896696][ T8315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.901976][ T8315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.917524][ T8315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 184.921952][ T8315] System zones: 0-1, 3-36 [ 184.937553][ T8315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.996556][ T8326] loop4: detected capacity change from 0 to 512 [ 186.937227][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 187.147137][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 187.152259][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.153492][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.197317][ T8346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.277755][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 188.464662][ T8383] 0x000000000003-0x000000010001 : "" [ 188.472965][ T8383] ftl_cs: FTL header corrupt! [ 188.481502][ T8386] udevd[8386]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd12ro': Input/output error [ 188.487380][ T8380] EXT4-fs error: 97 callbacks suppressed [ 188.487392][ T8380] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1463: Detected aborted journal [ 188.490896][ T8380] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1463: Detected aborted journal [ 188.556804][ T8378] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1462: Detected aborted journal [ 189.253910][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 189.262906][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 189.265769][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 189.275912][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 189.282171][ T8388] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1465: Detected aborted journal [ 189.285883][ T8390] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #220: comm dhcpcd: reading directory lblock 0 [ 189.292545][ T8391] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #220: comm dhcpcd: reading directory lblock 0 [ 189.468419][ T8401] EXT4-fs: 76 callbacks suppressed [ 189.468431][ T8401] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.474948][ T8401] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.506190][ T8403] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.511784][ T8403] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.515060][ T8405] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.518917][ T8405] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.537751][ T8408] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.540331][ T8408] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.565556][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 189.579268][ T8402] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.601819][ T8401] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.602604][ T8408] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 189.673699][ T8421] device syzkaller0 entered promiscuous mode [ 189.715486][ T8427] 0x000000000003-0x000000010001 : "" [ 189.731449][ T8432] udevd[8432]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd13ro': Input/output error [ 189.735252][ T8427] ftl_cs: FTL header corrupt! [ 190.935597][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 190.941626][ T8463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.923188][ T8492] device syzkaller0 entered promiscuous mode [ 193.532215][ T8528] EXT4-fs error: 146 callbacks suppressed [ 193.532230][ T8528] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1512: Detected aborted journal [ 193.802097][ T8554] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1522: Detected aborted journal [ 193.808085][ T8564] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:5: reading directory lblock 0 [ 193.809243][ T8565] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1524: Detected aborted journal [ 193.814092][ T8565] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1524: Detected aborted journal [ 193.830703][ T8567] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:5: reading directory lblock 0 [ 193.857720][ T8568] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1525: Detected aborted journal [ 193.862875][ T8568] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1525: Detected aborted journal [ 193.870065][ T8570] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1526: Detected aborted journal [ 193.897764][ T3995] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm dhcpcd: reading directory lblock 0 [ 193.902639][ T8569] device syzkaller0 entered promiscuous mode [ 193.922393][ T8573] FAULT_INJECTION: forcing a failure. [ 193.922393][ T8573] name failslab, interval 1, probability 0, space 0, times 0 [ 193.928400][ T8573] CPU: 1 PID: 8573 Comm: syz.1.1527 Not tainted syzkaller #0 [ 193.929801][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 193.931593][ T8573] Call trace: [ 193.932201][ T8573] dump_backtrace+0x1c4/0x1f0 [ 193.933029][ T8573] show_stack+0x2c/0x3c [ 193.933775][ T8573] __dump_stack+0x30/0x40 [ 193.934586][ T8573] dump_stack_lvl+0xf4/0x15c [ 193.935417][ T8573] dump_stack+0x1c/0x5c [ 193.936178][ T8573] should_fail_ex+0x3cc/0x524 [ 193.936976][ T8573] __should_failslab+0xc0/0x11c [ 193.937862][ T8573] should_failslab+0x10/0x28 [ 193.938655][ T8573] slab_pre_alloc_hook+0x6c/0x31c [ 193.939575][ T8573] kmem_cache_alloc_lru+0x60/0x284 [ 193.940534][ T8573] shmem_alloc_inode+0x2c/0x48 [ 193.941383][ T8573] new_inode_pseudo+0x68/0x1cc [ 193.942247][ T8573] new_inode+0x38/0x174 [ 193.942935][ T8573] shmem_get_inode+0x2cc/0xa8c [ 193.943767][ T8573] shmem_mknod+0x64/0x1c4 [ 193.944550][ T8573] shmem_rename2+0x1b4/0x33c [ 193.945368][ T8573] vfs_rename+0xb08/0xe3c [ 193.946124][ T8573] ovl_get_workdir+0x710/0x1084 [ 193.946959][ T8573] ovl_fill_super+0x17d0/0x3938 [ 193.947838][ T8573] mount_nodev+0x68/0x108 [ 193.948564][ T8573] ovl_mount+0x3c/0x50 [ 193.949241][ T8573] legacy_get_tree+0xd8/0x174 [ 193.950062][ T8573] vfs_get_tree+0x90/0x278 [ 193.950808][ T8573] do_new_mount+0x228/0x804 [ 193.951593][ T8573] path_mount+0x5ac/0xe6c [ 193.952363][ T8573] __arm64_sys_mount+0x4a0/0x5a0 [ 193.953221][ T8573] invoke_syscall+0x98/0x290 [ 193.954055][ T8573] el0_svc_common+0x13c/0x258 [ 193.954914][ T8573] do_el0_svc+0x5c/0x134 [ 193.955690][ T8573] el0_svc+0x58/0x12c [ 193.956382][ T8573] el0t_64_sync_handler+0x84/0xf0 [ 193.957254][ T8573] el0t_64_sync+0x18c/0x190 [ 194.499617][ T8624] EXT4-fs: 136 callbacks suppressed [ 194.499627][ T8624] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.506273][ T8626] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.511492][ T8626] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.513276][ T8625] FAULT_INJECTION: forcing a failure. [ 194.513276][ T8625] name failslab, interval 1, probability 0, space 0, times 0 [ 194.515595][ T8625] CPU: 0 PID: 8625 Comm: syz.3.1546 Not tainted syzkaller #0 [ 194.516907][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 194.518789][ T8625] Call trace: [ 194.519376][ T8625] dump_backtrace+0x1c4/0x1f0 [ 194.520268][ T8625] show_stack+0x2c/0x3c [ 194.520992][ T8625] __dump_stack+0x30/0x40 [ 194.521791][ T8625] dump_stack_lvl+0xf4/0x15c [ 194.522625][ T8625] dump_stack+0x1c/0x5c [ 194.523407][ T8625] should_fail_ex+0x3cc/0x524 [ 194.524250][ T8625] __should_failslab+0xc0/0x11c [ 194.524560][ T8628] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.525101][ T8625] should_failslab+0x10/0x28 [ 194.527058][ T8625] __kmem_cache_alloc_node+0x7c/0x318 [ 194.527908][ T8625] __kmalloc_node_track_caller+0xb8/0x174 [ 194.528985][ T8625] kmemdup+0x5c/0x98 [ 194.529711][ T8625] key_alloc+0x2b0/0xdec [ 194.530491][ T8625] keyring_alloc+0x68/0xe0 [ 194.531274][ T8625] join_session_keyring+0x120/0x3e0 [ 194.532144][ T8625] lookup_user_key+0x3f8/0xf94 [ 194.532939][ T8625] keyctl_get_persistent+0x208/0x624 [ 194.533903][ T8625] __arm64_sys_keyctl+0x5cc/0x8e0 [ 194.534771][ T8625] invoke_syscall+0x98/0x290 [ 194.535602][ T8625] el0_svc_common+0x13c/0x258 [ 194.536441][ T8625] do_el0_svc+0x5c/0x134 [ 194.537184][ T8625] el0_svc+0x58/0x12c [ 194.537893][ T8625] el0t_64_sync_handler+0x84/0xf0 [ 194.538931][ T8625] el0t_64_sync+0x18c/0x190 [ 194.556435][ T8628] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.563653][ T8630] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.576154][ T8631] device syzkaller0 entered promiscuous mode [ 194.584159][ T8632] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.590679][ T8632] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.601409][ T8634] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.625444][ T4317] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 194.924426][ T8649] FAULT_INJECTION: forcing a failure. [ 194.924426][ T8649] name failslab, interval 1, probability 0, space 0, times 0 [ 194.933554][ T8649] CPU: 0 PID: 8649 Comm: syz.1.1556 Not tainted syzkaller #0 [ 194.934670][ T8649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 194.936340][ T8649] Call trace: [ 194.936862][ T8649] dump_backtrace+0x1c4/0x1f0 [ 194.937715][ T8649] show_stack+0x2c/0x3c [ 194.938454][ T8649] __dump_stack+0x30/0x40 [ 194.939324][ T8649] dump_stack_lvl+0xf4/0x15c [ 194.940168][ T8649] dump_stack+0x1c/0x5c [ 194.940866][ T8649] should_fail_ex+0x3cc/0x524 [ 194.941760][ T8649] __should_failslab+0xc0/0x11c [ 194.942592][ T8649] should_failslab+0x10/0x28 [ 194.943430][ T8649] kmem_cache_alloc+0x88/0x310 [ 194.944270][ T8649] __alloc_file+0x30/0x234 [ 194.945109][ T8649] alloc_empty_file+0xa0/0x184 [ 194.946058][ T8649] alloc_file+0x64/0x564 [ 194.946925][ T8649] alloc_file_pseudo+0x16c/0x1f4 [ 194.947781][ T8649] __shmem_file_setup+0x1a0/0x26c [ 194.948759][ T8649] shmem_zero_setup+0x98/0x140 [ 194.949634][ T8649] mmap_region+0xf98/0x1860 [ 194.950446][ T8649] do_mmap+0xa64/0x1210 [ 194.951292][ T8649] vm_mmap_pgoff+0x194/0x298 [ 194.952173][ T8649] ksys_mmap_pgoff+0xd0/0x5a0 [ 194.953062][ T8649] __arm64_sys_mmap+0x108/0x120 [ 194.953927][ T8649] invoke_syscall+0x98/0x290 [ 194.954753][ T8649] el0_svc_common+0x13c/0x258 [ 194.955721][ T8649] do_el0_svc+0x5c/0x134 [ 194.956500][ T8649] el0_svc+0x58/0x12c [ 194.957241][ T8649] el0t_64_sync_handler+0x84/0xf0 [ 194.958138][ T8649] el0t_64_sync+0x18c/0x190 [ 195.044705][ T8654] FAULT_INJECTION: forcing a failure. [ 195.044705][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 195.047044][ T8654] CPU: 1 PID: 8654 Comm: syz.4.1558 Not tainted syzkaller #0 [ 195.048322][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 195.050021][ T8654] Call trace: [ 195.050629][ T8654] dump_backtrace+0x1c4/0x1f0 [ 195.051453][ T8654] show_stack+0x2c/0x3c [ 195.052192][ T8654] __dump_stack+0x30/0x40 [ 195.052984][ T8654] dump_stack_lvl+0xf4/0x15c [ 195.053739][ T8654] dump_stack+0x1c/0x5c [ 195.054458][ T8654] should_fail_ex+0x3cc/0x524 [ 195.055318][ T8654] __should_failslab+0xc0/0x11c [ 195.056170][ T8654] should_failslab+0x10/0x28 [ 195.056969][ T8654] __kmem_cache_alloc_node+0x7c/0x318 [ 195.057904][ T8654] __kmalloc+0xc4/0x180 [ 195.058645][ T8654] __arm64_sys_futex_waitv+0x23c/0x694 [ 195.059593][ T8654] invoke_syscall+0x98/0x290 [ 195.060435][ T8654] el0_svc_common+0x13c/0x258 [ 195.061271][ T8654] do_el0_svc+0x5c/0x134 [ 195.062011][ T8654] el0_svc+0x58/0x12c [ 195.062714][ T8654] el0t_64_sync_handler+0x84/0xf0 [ 195.063608][ T8654] el0t_64_sync+0x18c/0x190 [ 195.229755][ T8670] tipc: Enabling of bearer rejected, already enabled [ 195.282068][ T8672] device syzkaller0 entered promiscuous mode [ 195.467811][ T8681] ip_tables: iptables: counters copy to user failed while replacing table [ 195.772064][ T8700] tipc: Enabling of bearer rejected, already enabled [ 195.836031][ T8707] device syzkaller0 entered promiscuous mode [ 196.030468][ T8718] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1585'. [ 196.035608][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.037179][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.251972][ T8732] tipc: Enabling of bearer rejected, already enabled [ 196.313418][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 196.322995][ T8738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.448360][ T8752] device syzkaller0 entered promiscuous mode [ 196.793683][ T8776] batman_adv: batadv0: Adding interface: syzkaller0 [ 196.794899][ T8776] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.800205][ T8776] batman_adv: batadv0: Interface activated: syzkaller0 [ 196.806704][ T8773] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 196.899810][ T8773] batman_adv: batadv0: Removing interface: syzkaller0 [ 197.086458][ T8800] device syzkaller0 entered promiscuous mode [ 197.096229][ T8802] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 197.287007][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'. [ 197.308063][ T8812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.656675][ T8839] device syzkaller0 entered promiscuous mode [ 197.791800][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 197.833566][ T8843] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.330718][ T8882] device syzkaller0 entered promiscuous mode [ 198.453092][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 198.467441][ T8901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.545327][ T8911] EXT4-fs error: 311 callbacks suppressed [ 198.545337][ T8911] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1654: Detected aborted journal [ 198.555379][ T8911] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1654: Detected aborted journal [ 198.564097][ T8913] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1655: Detected aborted journal [ 198.572487][ T8913] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1655: Detected aborted journal [ 198.595657][ T8915] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1656: Detected aborted journal [ 198.603861][ T8915] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1656: Detected aborted journal [ 198.618219][ T8917] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1657: Detected aborted journal [ 198.638394][ T3995] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm dhcpcd: reading directory lblock 0 [ 198.645723][ T8919] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1658: Detected aborted journal [ 198.654882][ T8917] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1657: Detected aborted journal [ 198.816480][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 198.824072][ T8939] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.881415][ T8948] FAULT_INJECTION: forcing a failure. [ 198.881415][ T8948] name failslab, interval 1, probability 0, space 0, times 0 [ 198.883801][ T8948] CPU: 1 PID: 8948 Comm: syz.1.1668 Not tainted syzkaller #0 [ 198.884990][ T8948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 198.886684][ T8948] Call trace: [ 198.887340][ T8948] dump_backtrace+0x1c4/0x1f0 [ 198.888256][ T8948] show_stack+0x2c/0x3c [ 198.888990][ T8948] __dump_stack+0x30/0x40 [ 198.889760][ T8948] dump_stack_lvl+0xf4/0x15c [ 198.890578][ T8948] dump_stack+0x1c/0x5c [ 198.891324][ T8948] should_fail_ex+0x3cc/0x524 [ 198.892159][ T8948] __should_failslab+0xc0/0x11c [ 198.893028][ T8948] should_failslab+0x10/0x28 [ 198.893813][ T8948] __kmem_cache_alloc_node+0x7c/0x318 [ 198.894741][ T8948] __kmalloc+0xc4/0x180 [ 198.895500][ T8948] tomoyo_encode+0x260/0x484 [ 198.896335][ T8948] tomoyo_realpath_from_path+0x4b4/0x508 [ 198.897351][ T8948] tomoyo_path_perm+0x1e4/0x49c [ 198.898247][ T8948] tomoyo_path_symlink+0xac/0xf8 [ 198.899112][ T8948] security_path_symlink+0xec/0x13c [ 198.899986][ T8948] do_symlinkat+0xfc/0x35c [ 198.900716][ T8948] __arm64_sys_symlinkat+0xa4/0xbc [ 198.901588][ T8948] invoke_syscall+0x98/0x290 [ 198.902365][ T8948] el0_svc_common+0x13c/0x258 [ 198.903179][ T8948] do_el0_svc+0x5c/0x134 [ 198.903923][ T8948] el0_svc+0x58/0x12c [ 198.904618][ T8948] el0t_64_sync_handler+0x84/0xf0 [ 198.905448][ T8948] el0t_64_sync+0x18c/0x190 [ 198.912609][ T8935] device syzkaller0 entered promiscuous mode [ 198.981939][ T8948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.227527][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 199.235321][ T8982] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.468719][ T9003] device syzkaller0 entered promiscuous mode [ 199.517644][ T9008] EXT4-fs: 260 callbacks suppressed [ 199.517654][ T9008] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.543995][ T9008] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.589182][ T9010] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.599932][ T9010] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.627183][ T9012] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.636186][ T9012] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.647889][ T9014] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.658203][ T9014] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.683454][ T8945] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.735823][ T9018] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 199.814900][ T9024] device syzkaller0 entered promiscuous mode [ 199.824786][ T9028] batman_adv: batadv0: Adding interface: syzkaller0 [ 199.825930][ T9028] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.843966][ T9028] batman_adv: batadv0: Interface activated: syzkaller0 [ 199.899523][ T9026] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 199.982495][ T9026] batman_adv: batadv0: Removing interface: syzkaller0 [ 200.187411][ T9050] device syzkaller0 entered promiscuous mode [ 200.571686][ T9090] xt_l2tp: invalid flags combination: 8 [ 200.735942][ T9097] device syzkaller0 entered promiscuous mode [ 201.383404][ T9138] device syzkaller0 entered promiscuous mode [ 201.546883][ T9146] xt_l2tp: invalid flags combination: 8 [ 202.707967][ T9213] device syzkaller0 entered promiscuous mode [ 203.565707][ T9219] EXT4-fs error: 314 callbacks suppressed [ 203.565740][ T9219] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1761: Detected aborted journal [ 203.592742][ T9269] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1775: Detected aborted journal [ 203.603092][ T9269] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1775: Detected aborted journal [ 203.623058][ T9271] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1776: Detected aborted journal [ 203.631936][ T9269] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1775: Detected aborted journal [ 203.635419][ T4317] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 203.638382][ T9271] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1776: Detected aborted journal [ 203.676372][ T9273] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1777: Detected aborted journal [ 203.681308][ T9273] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1777: Detected aborted journal [ 203.722668][ T9275] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1778: Detected aborted journal [ 203.921693][ T9278] device syzkaller0 entered promiscuous mode [ 203.997459][ T9296] 0x000000000003-0x000000010001 : "" [ 204.004093][ T9296] ftl_cs: FTL header corrupt! [ 204.047147][ T9298] udevd[9298]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd14ro': Input/output error [ 205.230838][ T9303] EXT4-fs: 193 callbacks suppressed [ 205.230851][ T9303] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 205.249993][ T9285] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 205.252196][ T9308] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 205.273984][ T9310] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 205.355070][ T9285] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 206.121000][ T9321] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 206.229279][ T9321] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 206.244701][ T9324] loop0: detected capacity change from 0 to 512 [ 206.394774][ T9321] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 206.399273][ T9321] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 206.956742][ T9321] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 207.102959][ T9328] loop4: detected capacity change from 0 to 1024 [ 207.120735][ T9328] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.125179][ T9328] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.135135][ T9328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 207.136884][ T9328] System zones: 0-1, 3-36 [ 207.144774][ T9328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.036399][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 208.666270][ T4069] EXT4-fs error: 65 callbacks suppressed [ 208.666284][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #98: comm crond: reading directory lblock 0 [ 209.425277][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.430879][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.439570][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.441736][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.451394][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.453398][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.459049][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.465746][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 209.467885][ T4069] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #96: comm crond: reading directory lblock 0 [ 210.363068][ T9358] EXT4-fs: 21 callbacks suppressed [ 210.363078][ T9358] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 210.611042][ T9362] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 210.677095][ T9362] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 210.678738][ T9362] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 210.787552][ T9362] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 210.793518][ T9362] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 211.022279][ T9358] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 212.524210][ T9362] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 212.572912][ T9366] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 212.592567][ T9368] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 212.701492][ T9371] loop4: detected capacity change from 0 to 512 [ 213.675498][ T9373] EXT4-fs error: 39 callbacks suppressed [ 213.675509][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 213.681670][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 213.702231][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 213.708177][ T9374] loop0: detected capacity change from 0 to 1024 [ 213.719365][ T9374] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.726666][ T9374] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.746619][ T9374] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 213.748160][ T9374] System zones: 0-1, 3-36 [ 213.750050][ T9376] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1806: Detected aborted journal [ 213.752577][ T9374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.754551][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 213.760514][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 213.823084][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 213.879038][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 214.514786][ T9373] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1805: Detected aborted journal [ 214.632626][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 214.646887][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 215.616962][ T9391] EXT4-fs: 16 callbacks suppressed [ 215.616973][ T9391] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 215.621810][ T9391] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 215.985915][ T9395] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 215.989144][ T9395] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 216.009693][ T9397] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 216.019575][ T9397] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 216.069409][ T9399] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 216.079178][ T9399] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 216.194317][ T9399] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 216.937975][ T9402] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 216.944958][ T9403] 0x000000000003-0x000000010001 : "" [ 216.954197][ T9403] ftl_cs: FTL header corrupt! [ 216.956573][ T9403] FAULT_INJECTION: forcing a failure. [ 216.956573][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 216.956848][ T9405] udevd[9405]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd15ro': Input/output error [ 216.959306][ T9403] CPU: 0 PID: 9403 Comm: syz.4.1813 Not tainted syzkaller #0 [ 216.962177][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 216.963740][ T9403] Call trace: [ 216.964266][ T9403] dump_backtrace+0x1c4/0x1f0 [ 216.965022][ T9403] show_stack+0x2c/0x3c [ 216.965684][ T9403] __dump_stack+0x30/0x40 [ 216.966385][ T9403] dump_stack_lvl+0xf4/0x15c [ 216.967143][ T9403] dump_stack+0x1c/0x5c [ 216.967862][ T9403] should_fail_ex+0x3cc/0x524 [ 216.968660][ T9403] __should_failslab+0xc0/0x11c [ 216.969705][ T9403] should_failslab+0x10/0x28 [ 216.970752][ T9403] kmem_cache_alloc+0x88/0x310 [ 216.971720][ T9403] __kernfs_new_node+0xec/0x5fc [ 216.972633][ T9403] kernfs_new_node+0x120/0x230 [ 216.973531][ T9403] __kernfs_create_file+0x60/0x2e0 [ 216.974468][ T9403] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 216.975469][ T9403] internal_create_group+0x3e8/0xb24 [ 216.976414][ T9403] sysfs_create_groups+0x60/0x134 [ 216.977331][ T9403] kobject_add_internal+0x5e4/0xb18 [ 216.978338][ T9403] kobject_add+0x144/0x20c [ 216.979262][ T9403] blk_register_queue+0x84/0x334 [ 216.980216][ T9403] device_add_disk+0x53c/0xe04 [ 216.981104][ T9403] add_mtd_blktrans_dev+0xc48/0x1090 [ 216.982149][ T9403] mtdblock_add_mtd+0x158/0x218 [ 216.983107][ T9403] blktrans_notify_add+0xa8/0xf8 [ 216.983984][ T9403] add_mtd_device+0xdcc/0x130c [ 216.984883][ T9403] mtd_add_partition+0x224/0x3bc [ 216.985788][ T9403] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 216.986698][ T9403] mtdchar_ioctl+0x1238/0x1aec [ 216.987519][ T9403] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 216.988438][ T9403] __arm64_sys_ioctl+0x14c/0x1c8 [ 216.989320][ T9403] invoke_syscall+0x98/0x290 [ 216.990148][ T9403] el0_svc_common+0x13c/0x258 [ 216.990988][ T9403] do_el0_svc+0x5c/0x134 [ 216.991717][ T9403] el0_svc+0x58/0x12c [ 216.992443][ T9403] el0t_64_sync_handler+0x84/0xf0 [ 216.993391][ T9403] el0t_64_sync+0x18c/0x190 [ 216.998966][ T9403] kobject_add_internal failed for queue (error: -12 parent: mtdblock15) [ 217.170300][ T9415] loop4: detected capacity change from 0 to 512 [ 218.914041][ T9422] EXT4-fs error: 46 callbacks suppressed [ 218.914052][ T9422] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1818: Detected aborted journal [ 218.921244][ T9421] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 218.931625][ T9422] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1818: Detected aborted journal [ 218.941827][ T9422] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1818: Detected aborted journal [ 218.947887][ T9424] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 218.957982][ T9423] loop0: detected capacity change from 0 to 1024 [ 218.964877][ T9423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.966838][ T9423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.973520][ T9423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 218.975297][ T9423] System zones: 0-1, 3-36 [ 218.977012][ T9423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.983483][ T9422] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1818: Detected aborted journal [ 218.985219][ T9425] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 218.989897][ T9422] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1818: Detected aborted journal [ 219.036537][ T9428] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 219.058419][ T9422] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1818: Detected aborted journal [ 220.051472][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 220.807481][ T9438] EXT4-fs: 29 callbacks suppressed [ 220.807491][ T9438] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 220.833853][ T9438] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.017927][ T9443] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.017967][ T9442] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.035073][ T9443] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.052230][ T9442] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.126853][ T9449] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.133908][ T9449] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.166847][ T9442] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.179757][ T9453] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 221.269450][ T9460] 0x000000000003-0x000000010001 : "" [ 221.281362][ T9461] udevd[9461]: failed to execute '/lib/udev/mtd_probe' 'mtd_probe /dev/mtd16ro': Input/output error [ 221.296296][ T9460] ftl_cs: FTL header corrupt! [ 221.298128][ T9460] FAULT_INJECTION: forcing a failure. [ 221.298128][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 221.305197][ T9460] CPU: 0 PID: 9460 Comm: syz.1.1827 Not tainted syzkaller #0 [ 221.306550][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 221.308380][ T9460] Call trace: [ 221.308991][ T9460] dump_backtrace+0x1c4/0x1f0 [ 221.309857][ T9460] show_stack+0x2c/0x3c [ 221.310582][ T9460] __dump_stack+0x30/0x40 [ 221.311340][ T9460] dump_stack_lvl+0xf4/0x15c [ 221.312111][ T9460] dump_stack+0x1c/0x5c [ 221.312849][ T9460] should_fail_ex+0x3cc/0x524 [ 221.313669][ T9460] __should_failslab+0xc0/0x11c [ 221.314545][ T9460] should_failslab+0x10/0x28 [ 221.315338][ T9460] kmem_cache_alloc+0x88/0x310 [ 221.316123][ T9460] __kernfs_new_node+0xec/0x5fc [ 221.316976][ T9460] kernfs_new_node+0x120/0x230 [ 221.317787][ T9460] __kernfs_create_file+0x60/0x2e0 [ 221.318653][ T9460] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 221.319606][ T9460] internal_create_group+0x3e8/0xb24 [ 221.320521][ T9460] sysfs_create_groups+0x60/0x134 [ 221.321389][ T9460] kobject_add_internal+0x5e4/0xb18 [ 221.322306][ T9460] kobject_add+0x144/0x20c [ 221.323124][ T9460] blk_register_queue+0x84/0x334 [ 221.324035][ T9460] device_add_disk+0x53c/0xe04 [ 221.324910][ T9460] add_mtd_blktrans_dev+0xc48/0x1090 [ 221.325833][ T9460] mtdblock_add_mtd+0x158/0x218 [ 221.326676][ T9460] blktrans_notify_add+0xa8/0xf8 [ 221.327632][ T9460] add_mtd_device+0xdcc/0x130c [ 221.328521][ T9460] mtd_add_partition+0x224/0x3bc [ 221.329436][ T9460] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 221.330388][ T9460] mtdchar_ioctl+0x1238/0x1aec [ 221.331268][ T9460] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 221.332208][ T9460] __arm64_sys_ioctl+0x14c/0x1c8 [ 221.333107][ T9460] invoke_syscall+0x98/0x290 [ 221.333912][ T9460] el0_svc_common+0x13c/0x258 [ 221.334862][ T9460] do_el0_svc+0x5c/0x134 [ 221.335692][ T9460] el0_svc+0x58/0x12c [ 221.336377][ T9460] el0t_64_sync_handler+0x84/0xf0 [ 221.337255][ T9460] el0t_64_sync+0x18c/0x190 [ 221.342992][ T9460] kobject_add_internal failed for queue (error: -12 parent: mtdblock16) [ 221.352842][ T4503] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.456128][ T4503] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.502361][ T9475] loop1: detected capacity change from 0 to 512 [ 221.704229][ T4503] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.250708][ T4503] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.829023][ T4503] tipc: Disabling bearer [ 222.832800][ T4503] tipc: Left network mode [ 223.176849][ T9499] loop1: detected capacity change from 0 to 1024 [ 223.195388][ T9499] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.205082][ T9499] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.225118][ T9499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 223.226688][ T9499] System zones: 0-1, 3-36 [ 223.228929][ T9499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 224.096231][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 224.189273][ T3995] EXT4-fs error: 139 callbacks suppressed [ 224.189286][ T3995] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 224.193878][ T3995] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 224.253612][ T3995] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 224.504101][ T3995] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #2: comm dhcpcd: reading directory lblock 0 [ 224.521645][ T9536] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 224.534505][ T9538] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1832: Detected aborted journal [ 224.536772][ T9537] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 [ 224.543293][ T9540] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1833: Detected aborted journal [ 224.543334][ T9538] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1832: Detected aborted journal [ 224.555687][ T9542] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1531: comm syz-executor: reading directory lblock 0 SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: failed to mkdtemp (errno 5: Input/output error) SYZFAIL: repeatedly failed to execute the program proc=5 req=1819 state=1 status=67 (errno 9: Bad file descriptor) [ 226.161519][ T9547] EXT4-fs: 40 callbacks suppressed [ 226.161533][ T9547] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 226.163906][ T9547] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 226.169081][ T9547] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 226.723473][ T4503] device hsr_slave_0 left promiscuous mode [ 226.778959][ T4503] device hsr_slave_1 left promiscuous mode [ 226.868777][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.870249][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.871976][ T4503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.873248][ T4503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.874754][ T4503] device bridge_slave_1 left promiscuous mode [ 226.876953][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.939610][ T4503] device bridge_slave_0 left promiscuous mode [ 226.940878][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.069776][ T4503] device veth1_macvtap left promiscuous mode [ 227.071016][ T4503] device veth0_macvtap left promiscuous mode [ 227.072090][ T4503] device veth1_vlan left promiscuous mode [ 227.073114][ T4503] device veth0_vlan left promiscuous mode [ 227.792140][ T4503] bond2 (unregistering): Released all slaves [ 227.796832][ T4503] bond1 (unregistering): Released all slaves [ 229.707933][ T3940] EXT4-fs error: 77 callbacks suppressed [ 229.707947][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 229.711670][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 229.714012][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 229.716030][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 229.718143][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1741: comm udevd: reading directory lblock 0 [ 229.720981][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1599: comm udevd: reading directory lblock 0 [ 230.030738][ T4503] team0 (unregistering): Port device team_slave_1 removed [ 230.200698][ T4503] team0 (unregistering): Port device team_slave_0 removed [ 230.379547][ T4503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.599070][ T4503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.979952][ T4503] bond0 (unregistering): Released all slaves [ 233.811992][ T4454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.889992][ T4454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.894437][ T9564] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #220: comm dhcpcd: reading directory lblock 0 [ 233.990034][ T4454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.023588][ T9565] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #220: comm dhcpcd: reading directory lblock 0 [ 234.101648][ T4454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.225067][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 234.227718][ T3940] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 234.319336][ T4454] tipc: Disabling bearer [ 234.320359][ T4454] tipc: Left network mode