last executing test programs: 17.61271086s ago: executing program 0 (id=350): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000d00)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000700)=""/95, 0x5f}, {0x0, 0x9d00}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000880)=""/26, 0x1a}, {&(0x7f0000000980)=""/8, 0x8}, {&(0x7f0000000ac0)=""/213, 0xd5}, {&(0x7f0000000bc0)=""/164, 0xa4}, {&(0x7f0000000c80)=""/88, 0x58}], 0x9, 0x4, 0x200) 17.498762407s ago: executing program 0 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018008000100666962001c000280080001400000000a080002400000000308000340000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 17.388324822s ago: executing program 0 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 17.227799961s ago: executing program 0 (id=364): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@user_xattr}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000940)="$eJzs3c9rVNceAPDvnZn8MHnvJYq893yLZ+DxUHjPxER9yKNQ3YvYH7uuUhPFGo0kKW2s0Ah2UyjdtFDoqovaf6DrVih01UW3XXTTVRGkSBa1SJ1y7/xwMsnkxziTG5PPB69zzz0z95wb/eacOXPOnQD2rJH0r0LEoYi4kUQMNeSVopo5Unne8sNbF5cfpsfK5Vd+SeLWu8lS47mS6uNg9cW/D0XyfSHiQHF1ufOLN69OzsxMz1XTYwvXbozNL948duXa5OXpy9PXJ/43cfrUyVOnx4+3f3HF7E/duTtvvDX0/vnXPv/0cTL+xY/nkzgTT6pPSK+t+eV97ZecGYmRKFc8ajye/lxPP+O5d4pfh2r/T55Kmg+wY12KiIMR0RMRf4uhKDb8aw7Fey/lWjmgq8pJ1NooYM9J2or//s5XBNhmtX5A5b19Zdu411Docq8E2A4PzlYGpCqx3xMRtfgvVcYGoz8bGxhYTlaM8yQR8Qwjc3VpGd99c/5OukXTONyKYcOPO1AYsMLS7WyUuxZqDe1/ksXmcPRnqYHlwor4LzRs6fGX2yx/pCm9uf4H0AlLtyPi79X2v3dr8T/SEP+vt1m++AcAAAAAAIDOuXc2Iv671vy/Qn3+z7dflsvN838GI+JMB8rf+PO/wv3qTtKB4oAGD85GvLDm/N/6HN/hYjX152w+QE9y6crM9PGI+EtEHI2evjQ93nTexhnCxz448Emr8hvn/6VbWn5tLmD1TPdLTQtxpyYXJp/1uoGIB7cj/pHN/z1cPbJy/k/a/idrzP9N4/vGJss48O+7F1rlbRz/QLeUP4s4smb7/7S7nax/f46xrD8wVusVrPbPdz78qlX54h/yk7b/A5X47421478vabxfz/zWzt8bEScWS+VW+e32/3uTV4uxlJ2/tohxYW48ojc5V6yVm3p7cmFhbmJrdYbdqhYP2eN4Jf6P/mv98b96/78hDvdFxNImy/zrk8GfWuVp/yE/afxPrd//H17Z/m99Z+Lu8Nctik8ubKr9P5m16UerR4z/QaPV9+PYbIDmUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeM4VIuJPkRRG6/uFwuhoxGBEHIyBwszs/MJ/Ls2+eX0qzcu+/79Q+6bfoUo6qX3//3BE9EREmp6opmv5JyJif0R8VNyXpUcvzs5M5X3xAAAAAAAAAAAAAAAAAAAAsEMMZmv+y33N6/9TPxfzrh3QdaXqo3iHvafU9ivLfR2tCLDt2o9/4Hm3+fjv6Wo9gO3XOv4fPS5ntrU6wDbS/4e9q83493EB7ALaf9irNjmm19/tegB50P4DAAAAAMCusv/wvR+SiFj6/75sS/VW80z2h92tkHcFgNyYwwt7V2k27xoAeWnnPf5AF+oB5Cep7/225mL/1rP/k+5UCAAAAAAAAAAAAABY5cgh6/9hr1p//b+5/bCbrbP+f63gd7sA2EVaf/WHth92O+/xgWSDXwTW/wMAAAAAAAAAAADADtB/8+rkzMz03Pzi87fzYhuv6su78kuTO+FH19mdJ905c09E7IwL7NROEhG1I1Fq/eTaLThyrGrOv5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6PwIAAP//1fokZA==") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x2000001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e60ab, 0x0) 16.941459345s ago: executing program 0 (id=374): r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r0, 0x400000) finit_module(r0, 0x0, 0x0) 16.647622631s ago: executing program 0 (id=379): r0 = msgget$private(0x0, 0x208) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000002880)={0x1}, 0x8, 0x800) 16.593904953s ago: executing program 32 (id=379): r0 = msgget$private(0x0, 0x208) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000002880)={0x1}, 0x8, 0x800) 13.726056901s ago: executing program 4 (id=416): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000003247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35149a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e571f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521f9e3dbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b13fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc90307f5f7a9cb7f1e5ed79dbf92e5d9c3f40a1313db007da349939e8805418029fef1be9f8729d4f1e43572059a7b4564d00"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) 12.610021209s ago: executing program 4 (id=433): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 12.018945469s ago: executing program 4 (id=443): unshare(0x60000600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250b00000008000100", @ANYRES32=r0], 0x1c}}, 0x0) 11.783660921s ago: executing program 4 (id=447): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@user_xattr}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000940)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x2000001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e60ab, 0x0) 11.517347515s ago: executing program 4 (id=449): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x588, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 8.850461823s ago: executing program 4 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000020a010800000000000000000200000308000240000000000900010073797a30"], 0x50}}, 0x0) 8.850360983s ago: executing program 33 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000020a010800000000000000000200000308000240000000000900010073797a30"], 0x50}}, 0x0) 3.322063978s ago: executing program 1 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f"], 0x4c}}, 0x0) 3.126667228s ago: executing program 1 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 3.007289675s ago: executing program 1 (id=603): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4000000) 2.90250491s ago: executing program 1 (id=608): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@user_xattr}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000940)="$eJzs3c9rVNceAPDvnZn8MHnvJYq893yLZ+DxUHjPxER9yKNQ3YvYH7uuUhPFGo0kKW2s0Ah2UyjdtFDoqovaf6DrVih01UW3XXTTVRGkSBa1SJ1y7/xwMsnkxziTG5PPB69zzz0z95wb/eacOXPOnQD2rJH0r0LEoYi4kUQMNeSVopo5Unne8sNbF5cfpsfK5Vd+SeLWu8lS47mS6uNg9cW/D0XyfSHiQHF1ufOLN69OzsxMz1XTYwvXbozNL948duXa5OXpy9PXJ/43cfrUyVOnx4+3f3HF7E/duTtvvDX0/vnXPv/0cTL+xY/nkzgTT6pPSK+t+eV97ZecGYmRKFc8ajye/lxPP+O5d4pfh2r/T55Kmg+wY12KiIMR0RMRf4uhKDb8aw7Fey/lWjmgq8pJ1NooYM9J2or//s5XBNhmtX5A5b19Zdu411Docq8E2A4PzlYGpCqx3xMRtfgvVcYGoz8bGxhYTlaM8yQR8Qwjc3VpGd99c/5OukXTONyKYcOPO1AYsMLS7WyUuxZqDe1/ksXmcPRnqYHlwor4LzRs6fGX2yx/pCm9uf4H0AlLtyPi79X2v3dr8T/SEP+vt1m++AcAAAAAAIDOuXc2Iv671vy/Qn3+z7dflsvN838GI+JMB8rf+PO/wv3qTtKB4oAGD85GvLDm/N/6HN/hYjX152w+QE9y6crM9PGI+EtEHI2evjQ93nTexhnCxz448Emr8hvn/6VbWn5tLmD1TPdLTQtxpyYXJp/1uoGIB7cj/pHN/z1cPbJy/k/a/idrzP9N4/vGJss48O+7F1rlbRz/QLeUP4s4smb7/7S7nax/f46xrD8wVusVrPbPdz78qlX54h/yk7b/A5X47421478vabxfz/zWzt8bEScWS+VW+e32/3uTV4uxlJ2/tohxYW48ojc5V6yVm3p7cmFhbmJrdYbdqhYP2eN4Jf6P/mv98b96/78hDvdFxNImy/zrk8GfWuVp/yE/afxPrd//H17Z/m99Z+Lu8Nctik8ubKr9P5m16UerR4z/QaPV9+PYbIDmUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeM4VIuJPkRRG6/uFwuhoxGBEHIyBwszs/MJ/Ls2+eX0qzcu+/79Q+6bfoUo6qX3//3BE9EREmp6opmv5JyJif0R8VNyXpUcvzs5M5X3xAAAAAAAAAAAAAAAAAAAAsEMMZmv+y33N6/9TPxfzrh3QdaXqo3iHvafU9ivLfR2tCLDt2o9/4Hm3+fjv6Wo9gO3XOv4fPS5ntrU6wDbS/4e9q83493EB7ALaf9irNjmm19/tegB50P4DAAAAAMCusv/wvR+SiFj6/75sS/VW80z2h92tkHcFgNyYwwt7V2k27xoAeWnnPf5AF+oB5Cep7/225mL/1rP/k+5UCAAAAAAAAAAAAABY5cgh6/9hr1p//b+5/bCbrbP+f63gd7sA2EVaf/WHth92O+/xgWSDXwTW/wMAAAAAAAAAAADADtB/8+rkzMz03Pzi87fzYhuv6su78kuTO+FH19mdJ905c09E7IwL7NROEhG1I1Fq/eTaLThyrGrOv5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6PwIAAP//1fokZA==") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='securityfs\x00', 0x2000001, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e60ab, 0x0) 2.442124424s ago: executing program 1 (id=630): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 1.93266655s ago: executing program 1 (id=643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250300000008000100", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0xc000) 1.848298965s ago: executing program 34 (id=643): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250300000008000100", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0xc000) 768.67977ms ago: executing program 2 (id=668): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CE_THRESHOLD={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xc, 0xc89f, 0xfff75ef7, 0x1, 0x8001, 0x3}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) 570.12305ms ago: executing program 6 (id=675): rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 513.320593ms ago: executing program 3 (id=676): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x8, 0x5, 0xff7, 0xb, 0x8, 0x57, 0x10, "ff03cae9ffed0000040500", "39e80000460062ff010000ec00"}) 473.091336ms ago: executing program 3 (id=677): r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}], 0x1, 0x0) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000080)=0x4) 369.478881ms ago: executing program 3 (id=679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x40, r1, 0x4}, 0x38) 342.569382ms ago: executing program 2 (id=680): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0xffc9) 334.404553ms ago: executing program 5 (id=681): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) setuid(0xee01) fcntl$setstatus(r0, 0x4, 0x44400) 332.754803ms ago: executing program 6 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000800000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc740000000c0a010100000000000000000a0001060900020073797a31000000000900010073797a31000000004800038044000080080003400000000238000b80340001800a00010071756f7461000000240002800c00014000000000000000d50c0004400000000200"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) 283.116416ms ago: executing program 3 (id=683): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, r0, 0x341, 0x70bd2a, 0x25dfdffb, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004815}, 0x8014) 274.469926ms ago: executing program 2 (id=685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff000000000400000085000000360000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000002000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="0167b2bc4930cbe9c83c8f02f601", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 268.057486ms ago: executing program 5 (id=686): unshare(0x2c020400) r0 = inotify_init1(0x800) quotactl_fd$Q_SYNC(r0, 0x80000304, 0x0, 0x0) 199.46837ms ago: executing program 6 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 198.95032ms ago: executing program 5 (id=688): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000240)={0x9317, 0x1, [{0x1, 0x1}]}) 177.382801ms ago: executing program 3 (id=689): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_inodes=8']) 163.296971ms ago: executing program 2 (id=690): set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000040)=""/51) 159.652302ms ago: executing program 5 (id=691): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 127.801304ms ago: executing program 6 (id=692): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timer_delete(r0) 87.062066ms ago: executing program 5 (id=693): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1a, &(0x7f0000000180)={0x2, {{0x2, 0xfffc, @multicast2}}}, 0x88) 76.930596ms ago: executing program 2 (id=694): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f00000000c0)="de", 0x1}], 0x2, 0x1, 0x0) 58.679247ms ago: executing program 6 (id=695): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00 \x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 not permitted [ 42.987061][ T4052] tipc: Enabling of bearer rejected, failed to enable media [ 43.489697][ T4069] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 43.646167][ T4083] loop2: detected capacity change from 0 to 512 [ 43.685143][ T4083] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.254: corrupted inode contents [ 43.726249][ T4083] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.727646][ T4083] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.254: mark_inode_dirty error [ 43.737091][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 43.737110][ C1] EXT4-fs (loop2): initial error at time 1776787894: ext4_do_update_inode:5690: inode 16 [ 43.737164][ C1] EXT4-fs (loop2): last error at time 1776787894: ext4_do_update_inode:5690: inode 16 [ 43.775243][ T4083] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.775507][ T4083] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.254: corrupted inode contents [ 43.775537][ T4083] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.776409][ T4083] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.254: mark_inode_dirty error [ 43.818448][ T4083] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.818742][ T4083] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.254: corrupted inode contents [ 43.840461][ T4083] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.841852][ T4083] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 43.866602][ T4094] loop0: detected capacity change from 0 to 1024 [ 43.873075][ T4083] loop2: lost filesystem error report for type 5 error -117 [ 43.876619][ T4083] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.254: corrupted inode contents [ 43.907850][ T4094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.951867][ T4083] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.952122][ T4083] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.254: mark_inode_dirty error [ 44.006521][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.030561][ T4083] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 44.030787][ T4083] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 44.058882][ T4083] loop2: lost filesystem error report for type 5 error -117 [ 44.060473][ T4083] EXT4-fs (loop2): 1 truncate cleaned up [ 44.080203][ T1929] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 44.098044][ T1929] loop2: lost filesystem error report for type 5 error -117 [ 44.105854][ T4083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.143718][ T4083] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.168636][ T4111] loop1: detected capacity change from 0 to 512 [ 44.215542][ T4111] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.266: corrupted inode contents [ 44.231044][ T4119] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 44.244758][ T4083] syz.2.254 (4083) used greatest stack depth: 10216 bytes left [ 44.289126][ T4111] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.290265][ T4111] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 44.298954][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 44.314721][ C1] EXT4-fs (loop1): initial error at time 1776787895: ext4_do_update_inode:5690: inode 15 [ 44.322712][ T4111] loop1: lost filesystem error report for type 5 error -117 [ 44.324621][ C1] EXT4-fs (loop1): last error at time 1776787895: ext4_do_update_inode:5690 [ 44.326724][ T4111] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.266: corrupted inode contents [ 44.332168][ C1] [ 44.365696][ T4111] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.365960][ T4111] EXT4-fs error (device loop1): ext4_evict_inode:315: inode #15: comm syz.1.266: mark_inode_dirty error [ 44.388707][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.389549][ T4111] EXT4-fs (loop1): 1 orphan inode deleted [ 44.409262][ T1929] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 44.429550][ T1929] loop2: lost filesystem error report for type 5 error -117 [ 44.444334][ T4134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 44.464921][ T4111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.539067][ T4144] loop0: detected capacity change from 0 to 512 [ 44.548239][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.555092][ T4144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.599682][ T4144] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.621028][ T4144] EXT4-fs (loop0): 1 truncate cleaned up [ 44.627884][ T4144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.661370][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.718957][ T4157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'. [ 44.845636][ T4175] loop1: detected capacity change from 0 to 256 [ 44.863157][ T4175] ======================================================= [ 44.863157][ T4175] WARNING: The mand mount option has been deprecated and [ 44.863157][ T4175] and is ignored by this kernel. Remove the mand [ 44.863157][ T4175] option from the mount to silence this warning. [ 44.863157][ T4175] ======================================================= [ 44.931967][ T4183] loop2: detected capacity change from 0 to 128 [ 44.936377][ T4175] FAT-fs (loop1): Directory bread(block 64) failed [ 44.955787][ T4175] FAT-fs (loop1): Directory bread(block 65) failed [ 44.962748][ T4175] FAT-fs (loop1): Directory bread(block 66) failed [ 44.971022][ T4183] FAT-fs (loop2): Directory bread(block 32) failed [ 44.977726][ T4183] FAT-fs (loop2): Directory bread(block 33) failed [ 44.984586][ T4175] FAT-fs (loop1): Directory bread(block 67) failed [ 44.991583][ T4175] FAT-fs (loop1): Directory bread(block 68) failed [ 44.998389][ T4183] FAT-fs (loop2): Directory bread(block 34) failed [ 45.005305][ T4175] FAT-fs (loop1): Directory bread(block 69) failed [ 45.012261][ T4183] FAT-fs (loop2): Directory bread(block 35) failed [ 45.031129][ T4175] FAT-fs (loop1): Directory bread(block 70) failed [ 45.041400][ T4183] FAT-fs (loop2): Directory bread(block 36) failed [ 45.044123][ T4191] loop0: detected capacity change from 0 to 164 [ 45.048406][ T4175] FAT-fs (loop1): Directory bread(block 71) failed [ 45.061120][ T4183] FAT-fs (loop2): Directory bread(block 37) failed [ 45.067367][ T4175] FAT-fs (loop1): Directory bread(block 72) failed [ 45.070139][ T4183] FAT-fs (loop2): Directory bread(block 38) failed [ 45.078608][ T4175] FAT-fs (loop1): Directory bread(block 73) failed [ 45.082731][ T4183] FAT-fs (loop2): Directory bread(block 39) failed [ 45.095022][ T4183] FAT-fs (loop2): Directory bread(block 40) failed [ 45.101993][ T4183] FAT-fs (loop2): Directory bread(block 41) failed [ 45.114312][ T4191] Unsupported NM flag settings (240) [ 45.159502][ T4183] syz.2.299: attempt to access beyond end of device [ 45.159502][ T4183] loop2: rw=0, sector=4112, nr_sectors = 4 limit=128 [ 45.175365][ T4183] syz.2.299: attempt to access beyond end of device [ 45.175365][ T4183] loop2: rw=0, sector=167964, nr_sectors = 4 limit=128 [ 45.267058][ T4200] EXT4-fs: Ignoring removed bh option [ 45.273988][ T4200] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.285560][ T4200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 45.295316][ T4200] System zones: 0-1, 3-12 [ 45.312942][ T4200] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.304: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.347740][ T4200] EXT4-fs (loop2): Remounting filesystem read-only [ 45.354466][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.354490][ C0] EXT4-fs (loop2): initial error at time 1776787896: ext4_map_blocks:833: inode 3: block 1 [ 45.354526][ C0] EXT4-fs (loop2): last error at time 1776787896: ext4_map_blocks:833: inode 3: block 1 [ 45.410021][ T4200] EXT4-fs (loop2): 1 orphan inode deleted [ 45.416526][ T4200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.419317][ T4209] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.451083][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.477461][ T4209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.508592][ T4209] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.550646][ T4216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.563916][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.592790][ T4216] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 45.608850][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.615433][ C0] EXT4-fs (loop2): initial error at time 1776787896: ext4_mb_generate_buddy:1317 [ 45.624823][ C0] EXT4-fs (loop2): last error at time 1776787896: ext4_mb_generate_buddy:1317 [ 45.636275][ T4216] EXT4-fs (loop2): 1 truncate cleaned up [ 45.651447][ T4216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.700899][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.705272][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 45.767154][ T4232] xt_hashlimit: size too large, truncated to 1048576 [ 45.806605][ T4236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.880938][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.105233][ T4265] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.119465][ T4265] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.169215][ T4265] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.174295][ T4269] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.190890][ T4269] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.226221][ T3326] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.249087][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.280190][ T4277] netlink: 44 bytes leftover after parsing attributes in process `syz.3.338'. [ 46.556237][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 46.556256][ T28] audit: type=1326 audit(1776787897.319:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.596357][ T28] audit: type=1326 audit(1776787897.319:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.620660][ T28] audit: type=1326 audit(1776787897.359:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.644868][ T28] audit: type=1326 audit(1776787897.359:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.670419][ T28] audit: type=1326 audit(1776787897.359:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.694598][ T28] audit: type=1326 audit(1776787897.359:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.718574][ T28] audit: type=1326 audit(1776787897.359:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.810722][ T28] audit: type=1326 audit(1776787897.359:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.857279][ T28] audit: type=1326 audit(1776787897.359:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.882236][ T28] audit: type=1326 audit(1776787897.359:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f26b433c819 code=0x7ffc0000 [ 46.973802][ T4334] set_capacity_and_notify: 6 callbacks suppressed [ 46.973821][ T4334] loop0: detected capacity change from 0 to 1024 [ 47.003766][ T4334] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (46228!=20869) [ 47.022408][ T4334] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.066643][ T4343] mmap: syz.3.368 (4343) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.154828][ T4334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.196245][ T4353] loop1: detected capacity change from 0 to 512 [ 47.225578][ T3326] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 48: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65540, size=1024 fake=0 [ 47.243402][ T4353] EXT4-fs: Ignoring removed nobh option [ 47.246177][ T3326] EXT4-fs (loop0): Remounting filesystem read-only [ 47.290347][ T4353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.330648][ T4353] EXT4-fs (loop1): 1 truncate cleaned up [ 47.374150][ T4353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.469935][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.555754][ T1929] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.615238][ T1929] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.675922][ T1929] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.735021][ T1929] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.753415][ T4380] loop2: detected capacity change from 0 to 512 [ 47.785985][ T4380] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.829896][ T4380] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 47.849372][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.855912][ C1] EXT4-fs (loop2): initial error at time 1776787898: ext4_mb_generate_buddy:1317 [ 47.865219][ C1] EXT4-fs (loop2): last error at time 1776787898: ext4_mb_generate_buddy:1317 [ 47.894425][ T4378] ------------[ cut here ]------------ [ 47.899976][ T4378] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.3.383/4378 [ 47.909792][ T4378] Modules linked in: [ 47.913792][ T4378] CPU: 0 UID: 0 PID: 4378 Comm: syz.3.383 Not tainted syzkaller #0 PREEMPT(full) [ 47.923085][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.933186][ T4378] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 47.939114][ T4378] Code: 8b 05 f1 4b 19 08 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 94 c9 64 04 cc e8 7e 11 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 70 11 1e 00 90 0f 0b 90 e9 af fa ff ff [ 47.958878][ T4378] RSP: 0018:ffffc90010ee3dd8 EFLAGS: 00010093 [ 47.965308][ T4378] RAX: ffffffff813b3452 RBX: ffff8881054e1100 RCX: ffff8881054e1100 [ 47.973383][ T4378] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 47.981562][ T4378] RBP: 0000000000000080 R08: ffff8881054e1bf8 R09: 0000000000000000 [ 47.989644][ T4378] R10: ffffc90010ee3df0 R11: 0001c90010ee3df0 R12: ffff8881054e1100 [ 47.997677][ T4378] R13: ffff8881054e1928 R14: ffff888105146410 R15: 0000000000000080 [ 48.005862][ T4378] FS: 0000000000000000(0000) GS:ffff8882ae6cc000(0000) knlGS:0000000000000000 [ 48.014921][ T4378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.021548][ T4378] CR2: 0000001b34918ff8 CR3: 000000011b584000 CR4: 00000000003506f0 [ 48.029772][ T4378] Call Trace: [ 48.033151][ T4378] [ 48.036190][ T4378] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 48.041679][ T4378] ? __list_add_valid_or_report+0x38/0xe0 [ 48.047589][ T4378] do_exit+0xc13/0x1530 [ 48.051928][ T4378] ? switch_fpu_return+0xe7/0x1b0 [ 48.057158][ T4378] __x64_sys_exit+0x1f/0x20 [ 48.061752][ T4378] x64_sys_call+0x301d/0x3020 [ 48.066470][ T4378] do_syscall_64+0x12c/0x3b0 [ 48.071162][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.077181][ T4378] RIP: 0033:0x7f26b433c819 [ 48.081625][ T4378] Code: Unable to access opcode bytes at 0x7f26b433c7ef. [ 48.088764][ T4378] RSP: 002b:00007f26b2d96fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 48.097238][ T4378] RAX: ffffffffffffffda RBX: 00007f26b45b5fa0 RCX: 00007f26b433c819 [ 48.105257][ T4378] RDX: 00007f26b2d979c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.113257][ T4378] RBP: 00007f26b43d2c91 R08: 0000000000000000 R09: 0000000000000000 [ 48.121424][ T4378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.129422][ T4378] R13: 00007f26b45b6038 R14: 00007f26b45b5fa0 R15: 00007fffbb3e3d68 [ 48.137608][ T4378] [ 48.140913][ T4378] ---[ end trace 0000000000000000 ]--- [ 48.155380][ T4380] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.384: Failed to acquire dquot type 1 [ 48.183769][ T4380] loop2: lost filesystem error report for type 5 error -28 [ 48.184057][ T4380] EXT4-fs (loop2): 1 truncate cleaned up [ 48.209373][ T4380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.284017][ T1929] bridge_slave_1: left allmulticast mode [ 48.288263][ T4392] loop3: detected capacity change from 0 to 512 [ 48.291844][ T1929] bridge_slave_1: left promiscuous mode [ 48.307787][ T4380] syz.2.384 (4380) used greatest stack depth: 9536 bytes left [ 48.328142][ T1929] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.356328][ T1929] bridge_slave_0: left allmulticast mode [ 48.364783][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.375348][ T1929] bridge_slave_0: left promiscuous mode [ 48.386307][ T1929] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.467765][ T4402] loop3: detected capacity change from 0 to 512 [ 48.486688][ T4402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.568184][ T4402] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.597490][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.632004][ T1929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.677646][ T1929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.702221][ T1929] bond0 (unregistering): Released all slaves [ 48.730893][ T4395] __nla_validate_parse: 1 callbacks suppressed [ 48.730911][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 48.758571][ T4395] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 48.796878][ T1929] hsr_slave_0: left promiscuous mode [ 48.827541][ T1929] hsr_slave_1: left promiscuous mode [ 48.850980][ T4414] loop1: detected capacity change from 0 to 512 [ 48.862009][ T1929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.878167][ T1929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.903923][ T1929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.912412][ T4414] EXT4-fs: Ignoring removed bh option [ 48.925414][ T1929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.936305][ T4414] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 48.957235][ T4414] EXT4-fs (loop1): 1 truncate cleaned up [ 48.965522][ T1929] veth1_macvtap: left promiscuous mode [ 48.976554][ T4414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.979986][ T1929] veth0_macvtap: left promiscuous mode [ 49.048014][ T1929] veth1_vlan: left promiscuous mode [ 49.065792][ T1929] veth0_vlan: left promiscuous mode [ 49.086775][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.169794][ T4432] xt_hashlimit: size too large, truncated to 1048576 [ 49.305009][ T1929] team0 (unregistering): Port device team_slave_1 removed [ 49.324007][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.337852][ T1929] team0 (unregistering): Port device team_slave_0 removed [ 49.446241][ T3050] 8021q: adding VLAN 0 to HW filter on device eth1 [ 49.666646][ T4374] chnl_net:caif_netlink_parms(): no params data found [ 49.807775][ T3050] 8021q: adding VLAN 0 to HW filter on device eth2 [ 49.823066][ T4478] loop2: detected capacity change from 0 to 256 [ 49.830690][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.840373][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.847741][ T4374] bridge_slave_0: entered allmulticast mode [ 49.854754][ T4374] bridge_slave_0: entered promiscuous mode [ 49.862345][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.869791][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.877324][ T4374] bridge_slave_1: entered allmulticast mode [ 49.885473][ T4374] bridge_slave_1: entered promiscuous mode [ 49.903110][ T4478] FAT-fs (loop2): Directory bread(block 64) failed [ 49.935879][ T4478] FAT-fs (loop2): Directory bread(block 65) failed [ 49.943579][ T4374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.957187][ T4478] FAT-fs (loop2): Directory bread(block 66) failed [ 49.964290][ T4478] FAT-fs (loop2): Directory bread(block 67) failed [ 49.973601][ T4374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.984957][ T4478] FAT-fs (loop2): Directory bread(block 68) failed [ 49.991869][ T4478] FAT-fs (loop2): Directory bread(block 69) failed [ 49.998735][ T4478] FAT-fs (loop2): Directory bread(block 70) failed [ 50.005657][ T4478] FAT-fs (loop2): Directory bread(block 71) failed [ 50.012626][ T4478] FAT-fs (loop2): Directory bread(block 72) failed [ 50.019599][ T4478] FAT-fs (loop2): Directory bread(block 73) failed [ 50.038541][ T4374] team0: Port device team_slave_0 added [ 50.050580][ T4482] loop3: detected capacity change from 0 to 128 [ 50.070447][ T4374] team0: Port device team_slave_1 added [ 50.106334][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.130697][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.182543][ T4374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.214365][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.228150][ T4486] loop4: detected capacity change from 0 to 2048 [ 50.240112][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.296620][ T4374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.345837][ T4486] loop4: p2 p3 p7 [ 50.407805][ T4374] hsr_slave_0: entered promiscuous mode [ 50.435376][ T4374] hsr_slave_1: entered promiscuous mode [ 50.451872][ T4506] loop2: detected capacity change from 0 to 512 [ 50.454334][ T4374] debugfs: 'hsr0' already exists in 'hsr' [ 50.478898][ T4374] Cannot create hsr debugfs directory [ 50.501491][ T4506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.529282][ T3050] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.541384][ T4506] EXT4-fs (loop2): 1 truncate cleaned up [ 50.563740][ T4506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.680267][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.817695][ T4374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.020851][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.039306][ T4374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.163106][ T4547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.278223][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.280747][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.312172][ T4556] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 51.329550][ T3050] 8021q: adding VLAN 0 to HW filter on device eth4 [ 51.361915][ T4556] EXT4-fs (loop2): mount failed [ 51.410499][ T4374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.430627][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.456397][ T4374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.491576][ T4374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.513449][ T4563] bridge0: entered promiscuous mode [ 51.523695][ T4563] bridge0: port 3(macsec1) entered blocking state [ 51.538963][ T4563] bridge0: port 3(macsec1) entered disabled state [ 51.549363][ T4563] macsec1: entered allmulticast mode [ 51.559332][ T4563] bridge0: entered allmulticast mode [ 51.578424][ T4563] macsec1: left allmulticast mode [ 51.590367][ T4563] bridge0: left allmulticast mode [ 51.606062][ T4563] bridge0: left promiscuous mode [ 51.735923][ T4374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.766215][ T4374] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.809927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.817085][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.843584][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.850854][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.024429][ T4374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.037397][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 52.037451][ T28] audit: type=1400 audit(1776787902.799:345): avc: denied { setopt } for pid=4601 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.253617][ T28] audit: type=1400 audit(1776787903.019:346): avc: denied { sqpoll } for pid=4621 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.347520][ T4374] veth0_vlan: entered promiscuous mode [ 52.371541][ T4374] veth1_vlan: entered promiscuous mode [ 52.400422][ T4630] set_capacity_and_notify: 3 callbacks suppressed [ 52.400438][ T4630] loop4: detected capacity change from 0 to 1024 [ 52.417052][ T4630] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (46228!=20869) [ 52.440702][ T4630] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 52.465663][ T28] audit: type=1400 audit(1776787903.229:347): avc: denied { connect } for pid=4631 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.558257][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.614563][ T4374] veth0_macvtap: entered promiscuous mode [ 52.623772][ T3328] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 48: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65540, size=1024 fake=0 [ 52.627627][ T4374] veth1_macvtap: entered promiscuous mode [ 52.666678][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.678352][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.686232][ T3328] EXT4-fs (loop4): Remounting filesystem read-only [ 52.990954][ T3887] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.010881][ T28] audit: type=1400 audit(1776787903.769:348): avc: denied { ioctl } for pid=4637 comm="syz.2.451" path="socket:[8704]" dev="sockfs" ino=8704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.063486][ T4640] loop2: detected capacity change from 0 to 1024 [ 53.072510][ T28] audit: type=1400 audit(1776787903.769:349): avc: denied { write } for pid=4637 comm="syz.2.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.092531][ T4640] EXT4-fs: inline encryption not supported [ 53.098910][ T4640] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 53.109713][ T4642] loop1: detected capacity change from 0 to 512 [ 53.116827][ T4642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.131507][ T4640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.157329][ T4642] EXT4-fs (loop1): 1 truncate cleaned up [ 53.167662][ T4642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.971848][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.990315][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.017874][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.058134][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.076055][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.089223][ T4655] netlink: 68 bytes leftover after parsing attributes in process `syz.3.456'. [ 55.103749][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.119265][ T28] audit: type=1400 audit(1776787905.889:350): avc: denied { mounton } for pid=4374 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.156905][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 55.179895][ T4659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.236653][ T28] audit: type=1400 audit(1776787905.999:351): avc: denied { append } for pid=4669 comm="syz.5.381" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.293546][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.346357][ T28] audit: type=1400 audit(1776787906.109:352): avc: denied { setcurrent } for pid=4678 comm="syz.3.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 55.407995][ T4685] netlink: 'syz.3.470': attribute type 25 has an invalid length. [ 55.424414][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.447633][ T28] audit: type=1400 audit(1776787906.209:353): avc: denied { create } for pid=4689 comm="syz.1.471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=appletalk_socket permissive=1 [ 55.481419][ T4693] netlink: 'syz.2.472': attribute type 5 has an invalid length. [ 55.535308][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.551261][ T4697] veth0: entered promiscuous mode [ 55.569731][ T4697] veth0: left promiscuous mode [ 55.603037][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.648392][ T4710] bridge0: entered promiscuous mode [ 55.666025][ T4710] bridge0: port 3(macsec1) entered blocking state [ 55.682752][ T4710] bridge0: port 3(macsec1) entered disabled state [ 55.694293][ T4710] macsec1: entered allmulticast mode [ 55.702086][ T4710] bridge0: entered allmulticast mode [ 55.725000][ T4710] macsec1: left allmulticast mode [ 55.734929][ T4710] bridge0: left allmulticast mode [ 55.741648][ T4710] bridge0: left promiscuous mode [ 55.825486][ T12] bridge_slave_1: left allmulticast mode [ 55.846234][ T12] bridge_slave_1: left promiscuous mode [ 55.862376][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.907518][ T4729] loop2: detected capacity change from 0 to 2048 [ 55.932477][ T4729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.959828][ T28] audit: type=1400 audit(1776787906.729:354): avc: denied { add_name } for pid=4728 comm="syz.2.496" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.999664][ T4737] unsupported nla_type 210 [ 56.093487][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.105640][ T12] bridge_slave_0: left allmulticast mode [ 56.131479][ T12] bridge_slave_0: left promiscuous mode [ 56.153916][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.195285][ T4743] loop2: detected capacity change from 0 to 512 [ 56.207120][ T4743] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.223491][ T4743] EXT4-fs (loop2): 1 truncate cleaned up [ 56.231487][ T4743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.263094][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.283981][ T12] smc: removing net device bond0 with user defined pnetid SYZ2 [ 56.292344][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.305317][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.318335][ T12] bond0 (unregistering): Released all slaves [ 56.340353][ T4740] dummy0: entered promiscuous mode [ 56.346747][ T4740] macsec1: entered allmulticast mode [ 56.354744][ T4740] dummy0: entered allmulticast mode [ 56.363699][ T12] IPVS: stopping master sync thread 4119 ... [ 56.372097][ T4749] veth0: entered promiscuous mode [ 56.382154][ T4749] veth0: left promiscuous mode [ 56.443334][ T12] hsr_slave_0: left promiscuous mode [ 56.459928][ T12] hsr_slave_1: left promiscuous mode [ 56.480143][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.500894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.517364][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.531920][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.561308][ T12] veth1_macvtap: left promiscuous mode [ 56.576681][ T12] veth0_macvtap: left promiscuous mode [ 56.579341][ T4762] syz.3.500 uses obsolete (PF_INET,SOCK_PACKET) [ 56.583853][ T12] veth1_vlan: left promiscuous mode [ 56.599490][ T12] veth0_vlan: left promiscuous mode [ 56.624008][ T4764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.501'. [ 56.864103][ T12] team0 (unregistering): Port device team_slave_1 removed [ 56.888506][ T12] team0 (unregistering): Port device team_slave_0 removed [ 56.970437][ T4781] veth0: entered promiscuous mode [ 56.977454][ T4781] veth0: left promiscuous mode [ 57.046517][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 57.046610][ T28] audit: type=1400 audit(1776787907.809:381): avc: denied { search } for pid=4784 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.114206][ T4788] loop3: detected capacity change from 0 to 512 [ 57.133932][ T28] audit: type=1400 audit(1776787907.889:382): avc: denied { module_request } for pid=4686 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 57.168030][ T4686] chnl_net:caif_netlink_parms(): no params data found [ 57.174010][ T4788] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.243914][ T4788] EXT4-fs (loop3): 1 truncate cleaned up [ 57.255277][ T28] audit: type=1400 audit(1776787907.929:383): avc: denied { mounton } for pid=4786 comm="syz.3.510" path="/123/file2" dev="tmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.280246][ T28] audit: type=1400 audit(1776787907.969:384): avc: denied { read open } for pid=4792 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.291482][ T4788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.307603][ T28] audit: type=1400 audit(1776787907.969:385): avc: denied { getattr } for pid=4792 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.418308][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.431802][ T28] audit: type=1400 audit(1776787907.969:386): avc: denied { getattr } for pid=4792 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.469584][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.479538][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.487099][ T4686] bridge_slave_0: entered allmulticast mode [ 57.494562][ T4686] bridge_slave_0: entered promiscuous mode [ 57.501905][ T28] audit: type=1400 audit(1776787908.009:387): avc: denied { read } for pid=4794 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.524644][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.536967][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.544500][ T4686] bridge_slave_1: entered allmulticast mode [ 57.555516][ T28] audit: type=1400 audit(1776787908.009:388): avc: denied { open } for pid=4794 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.582275][ T4686] bridge_slave_1: entered promiscuous mode [ 57.610747][ T28] audit: type=1400 audit(1776787908.109:389): avc: denied { mount } for pid=4786 comm="syz.3.510" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.633487][ T4686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.661747][ T4686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.669065][ T4811] loop3: detected capacity change from 0 to 512 [ 57.680268][ T28] audit: type=1400 audit(1776787908.139:390): avc: denied { setattr } for pid=4786 comm="syz.3.510" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.703410][ T4811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.721919][ T4814] loop5: detected capacity change from 0 to 1024 [ 57.734323][ T4811] EXT4-fs (loop3): 1 truncate cleaned up [ 57.747868][ T4686] team0: Port device team_slave_0 added [ 57.750792][ T4811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.784578][ T4814] EXT4-fs: inline encryption not supported [ 57.792500][ T4814] EXT4-fs (loop5): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 57.803015][ T4686] team0: Port device team_slave_1 added [ 57.810904][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.839327][ T4814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.852935][ T3050] 8021q: adding VLAN 0 to HW filter on device eth5 [ 57.938262][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.950669][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.986997][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.036985][ T4686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.054785][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.061858][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.089837][ T4686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.148091][ T4686] hsr_slave_0: entered promiscuous mode [ 58.159779][ T4686] hsr_slave_1: entered promiscuous mode [ 58.175256][ T4686] debugfs: 'hsr0' already exists in 'hsr' [ 58.192395][ T4686] Cannot create hsr debugfs directory [ 58.392787][ T4857] loop3: detected capacity change from 0 to 164 [ 58.417773][ T4857] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 58.436894][ T4857] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.463869][ T4686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 58.479977][ T4857] block device autoloading is deprecated and will be removed. [ 58.501253][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.518424][ T4863] loop2: detected capacity change from 0 to 512 [ 58.530852][ T4865] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.535694][ T3050] 8021q: adding VLAN 0 to HW filter on device eth6 [ 58.555548][ T4686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 58.561677][ T4865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.530'. [ 58.573280][ T4863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.617677][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.647199][ T4686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 58.667452][ T4863] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.692289][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.730587][ T4686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 58.761237][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.776410][ T4686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.833110][ T4882] syz_tun: entered promiscuous mode [ 58.849385][ T4882] macvtap1: entered promiscuous mode [ 58.855027][ T4882] macvtap1: entered allmulticast mode [ 58.860904][ T4882] syz_tun: entered allmulticast mode [ 58.874867][ T4882] syz_tun: left allmulticast mode [ 58.887973][ T4882] syz_tun: left promiscuous mode [ 59.069190][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.102145][ T4686] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.114590][ T3050] 8021q: adding VLAN 0 to HW filter on device eth7 [ 59.140288][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.147544][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.184829][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.192235][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.205382][ T4921] loop5: detected capacity change from 0 to 1024 [ 59.248379][ T4921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.396710][ T4374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.458063][ T4935] loop3: detected capacity change from 0 to 1024 [ 59.492351][ T4935] EXT4-fs: Ignoring removed oldalloc option [ 59.553292][ T4935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.602163][ T4686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.644950][ T4958] loop2: detected capacity change from 0 to 512 [ 59.680830][ T4958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.706214][ T4958] EXT4-fs (loop2): 1 truncate cleaned up [ 59.717769][ T4958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.765137][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.783569][ T4969] loop1: detected capacity change from 0 to 512 [ 59.789410][ T3330] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.817013][ T3050] 8021q: adding VLAN 0 to HW filter on device eth8 [ 59.833149][ T4974] raw_sendmsg: syz.5.557 forgot to set AF_INET. Fix it! [ 60.045753][ T5001] xt_hashlimit: size too large, truncated to 1048576 [ 60.093297][ T4686] veth0_vlan: entered promiscuous mode [ 60.108453][ T4686] veth1_vlan: entered promiscuous mode [ 60.135539][ T5008] loop1: detected capacity change from 0 to 512 [ 60.147204][ T5008] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.160283][ T5008] EXT4-fs (loop1): 1 truncate cleaned up [ 60.203013][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 60.208222][ T4686] veth0_macvtap: entered promiscuous mode [ 60.220130][ T4686] veth1_macvtap: entered promiscuous mode [ 60.253495][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.278690][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.303536][ T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.336545][ T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.336593][ T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.336761][ T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.362289][ T5021] netlink: 52 bytes leftover after parsing attributes in process `syz.5.572'. [ 60.362309][ T5021] netlink: 56 bytes leftover after parsing attributes in process `syz.5.572'. [ 60.571457][ T5041] loop6: detected capacity change from 0 to 512 [ 60.578475][ T5041] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 60.594884][ T5041] EXT4-fs (loop6): 1 truncate cleaned up [ 60.642299][ T5043] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 60.671059][ T5043] FAT-fs (loop3): Filesystem has been set read-only [ 60.689597][ T5052] can0: slcan on ptm0. [ 60.706948][ T5054] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 60.723146][ T5051] Alternate GPT is invalid, using primary GPT. [ 60.735678][ T5051] loop1: p2 p3 p7 [ 60.740074][ T5049] can0 (unregistered): slcan off ptm0. [ 60.769660][ T3011] Alternate GPT is invalid, using primary GPT. [ 60.785977][ T3011] loop1: p2 p3 p7 [ 60.849042][ T5066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 60.901155][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 60.940825][ T5072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 60.984726][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 61.006095][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 61.017369][ T5083] udevd[5083]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 61.054873][ T5082] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 61.106253][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 61.107375][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 61.122971][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 61.298626][ T5105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.326240][ T5106] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (46228!=20869) [ 61.330324][ T5105] EXT4-fs (loop5): 1 truncate cleaned up [ 61.343150][ T5106] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 61.511028][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 61.724972][ T3321] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 48: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65540, size=1024 fake=0 [ 61.831734][ T5158] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.633: EA inode hash validation failed [ 61.844983][ T5158] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.633: iget: bad extra_isize 90 (inode size 256) [ 61.846661][ T3321] EXT4-fs (loop1): Remounting filesystem read-only [ 61.858459][ T5158] fserror_report: 2 callbacks suppressed [ 61.858520][ T5158] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.876799][ T5158] EXT4-fs (loop2): Remounting filesystem read-only [ 61.886282][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 61.886307][ C0] EXT4-fs (loop2): initial error at time 1776787912: ext4_xattr_inode_iget:441: inode 11 [ 61.886341][ C0] EXT4-fs (loop2): last error at time 1776787912: ext4_xattr_inode_iget:441: inode 11 [ 61.922665][ T5158] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 61.934957][ T5158] EXT4-fs (loop2): 1 orphan inode deleted [ 62.095679][ T5175] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.137630][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 62.137648][ T28] audit: type=1400 audit(1776787912.899:464): avc: denied { mount } for pid=5177 comm="syz.5.642" name="/" dev="hugetlbfs" ino=10062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 62.170992][ T5175] EXT4-fs warning (device loop3): __ext4_ioctl:1558: Setting inode version is not supported with metadata_csum enabled. [ 62.219935][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.276039][ T28] audit: type=1400 audit(1776787912.939:465): avc: denied { setattr } for pid=5174 comm="syz.3.641" path="/155/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.320145][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.346073][ T28] audit: type=1400 audit(1776787913.009:466): avc: denied { unmount } for pid=4374 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 62.401738][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.457697][ T28] audit: type=1400 audit(1776787913.219:467): avc: denied { mounton } for pid=5191 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.494010][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.527870][ T28] audit: type=1400 audit(1776787913.289:468): avc: denied { create } for pid=5193 comm="syz.5.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.575728][ T28] audit: type=1400 audit(1776787913.289:469): avc: denied { listen } for pid=5193 comm="syz.5.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.661846][ T28] audit: type=1400 audit(1776787913.289:470): avc: denied { ioctl } for pid=5193 comm="syz.5.651" path="socket:[10978]" dev="sockfs" ino=10978 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.690762][ T5203] set_capacity_and_notify: 10 callbacks suppressed [ 62.690779][ T5203] loop5: detected capacity change from 0 to 1024 [ 62.713636][ T5203] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 62.739002][ T53] bridge_slave_1: left allmulticast mode [ 62.744857][ T53] bridge_slave_1: left promiscuous mode [ 62.751313][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.760054][ T53] bridge_slave_0: left allmulticast mode [ 62.766938][ T5203] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.653: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.784770][ T53] bridge_slave_0: left promiscuous mode [ 62.794233][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.800025][ T5203] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.801583][ T5203] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 62.811062][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 62.811101][ C0] EXT4-fs (loop5): initial error at time 1776787913: ext4_map_blocks:791: inode 3: block 2 [ 62.811165][ C0] EXT4-fs (loop5): last error at time 1776787913: ext4_map_blocks:791: inode 3: block 2 [ 62.865734][ T5203] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.653: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.881405][ T5203] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.881570][ T5203] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 62.904159][ T5203] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.653: Failed to acquire dquot type 0 [ 62.916025][ T5203] loop5: lost filesystem error report for type 5 error -117 [ 62.916165][ T5203] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 63.024878][ T5203] loop5: lost filesystem error report for type 5 error -117 [ 63.026392][ T5203] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.653: mark_inode_dirty error [ 63.079763][ T28] audit: type=1400 audit(1776787913.839:471): avc: denied { remount } for pid=5227 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.113515][ T5203] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.113682][ T5203] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 63.135485][ T5203] EXT4-fs (loop5): 1 orphan inode deleted [ 63.146642][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.155650][ T36] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.185034][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.191355][ T5203] EXT4-fs: Ignoring removed bh option [ 63.201296][ T36] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 0 [ 63.221433][ T53] bond0 (unregistering): Released all slaves [ 63.232875][ T53] bond1 (unregistering): Released all slaves [ 63.242432][ T5203] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 63.266406][ T5240] loop3: detected capacity change from 0 to 764 [ 63.271615][ T5242] IPVS: Error connecting to the multicast addr [ 63.284148][ T5203] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 63.296880][ T5203] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.653: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.313728][ T5240] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 63.377501][ T53] hsr_slave_0: left promiscuous mode [ 63.389798][ T53] hsr_slave_1: left promiscuous mode [ 63.407079][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.436430][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.452686][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.468890][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.493643][ T53] veth1_macvtap: left promiscuous mode [ 63.499664][ T53] veth0_macvtap: left promiscuous mode [ 63.510505][ T53] veth1_vlan: left promiscuous mode [ 63.525552][ T53] veth0_vlan: left promiscuous mode [ 63.533650][ T5265] SELinux: Context system_u:object_r:devtty_t:s0 is not valid (left unmapped). [ 63.559263][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.672'. [ 63.618290][ T5270] loop3: detected capacity change from 0 to 512 [ 63.716463][ T53] team0 (unregistering): Port device team_slave_1 removed [ 63.726978][ T53] team0 (unregistering): Port device team_slave_0 removed [ 63.776089][ T3050] 8021q: adding VLAN 0 to HW filter on device eth9 [ 63.865039][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.682'. [ 63.979699][ T5191] chnl_net:caif_netlink_parms(): no params data found [ 64.028285][ T5320] devtmpfs: Too few inodes for current use [ 64.048539][ T36] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.106543][ T36] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.147136][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.168081][ T5085] ================================================================== [ 64.176289][ T5085] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 64.183292][ T5085] [ 64.185656][ T5085] write to 0xffff8881016bfc0c of 4 bytes by task 4390 on cpu 1: [ 64.193408][ T5085] shmem_mknod+0x143/0x170 [ 64.197862][ T5085] shmem_create+0x34/0x50 [ 64.202257][ T5085] path_openat+0xd75/0x2050 [ 64.206808][ T5085] do_file_open+0x16c/0x290 [ 64.211374][ T5085] do_sys_openat2+0x94/0x130 [ 64.216178][ T5085] __x64_sys_openat+0xf2/0x120 [ 64.221006][ T5085] x64_sys_call+0x1e39/0x3020 [ 64.225805][ T5085] do_syscall_64+0x12c/0x3b0 [ 64.230429][ T5085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.236349][ T5085] [ 64.238809][ T5085] read to 0xffff8881016bfc0c of 4 bytes by task 5085 on cpu 0: [ 64.246470][ T5085] fill_mg_cmtime+0x5b/0x240 [ 64.251178][ T5085] generic_fillattr+0x24a/0x340 [ 64.256057][ T5085] shmem_getattr+0x181/0x200 [ 64.260858][ T5085] vfs_getattr_nosec+0x146/0x1e0 [ 64.265833][ T5085] vfs_getattr+0x48/0x60 [ 64.270103][ T5085] vfs_statx_path+0x28/0x140 [ 64.274731][ T5085] vfs_statx+0xc4/0x170 [ 64.279000][ T5085] vfs_fstatat+0x118/0x170 [ 64.283474][ T5085] __se_sys_newfstatat+0x55/0x3e0 [ 64.288705][ T5085] __x64_sys_newfstatat+0x55/0x70 [ 64.293769][ T5085] x64_sys_call+0x2c64/0x3020 [ 64.298568][ T5085] do_syscall_64+0x12c/0x3b0 [ 64.303209][ T5085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.309225][ T5085] [ 64.311592][ T5085] value changed: 0x382725c6 -> 0x382e8cb6 [ 64.317416][ T5085] [ 64.319757][ T5085] Reported by Kernel Concurrency Sanitizer on: [ 64.326032][ T5085] CPU: 0 UID: 0 PID: 5085 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 64.336852][ T5085] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 64.340686][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 64.351292][ T5085] ================================================================== [ 64.461045][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.730662][ T53] bond0 (unregistering): Released all slaves [ 64.853008][ T3050] 8021q: adding VLAN 0 to HW filter on device eth10 [ 64.968440][ T3050] 8021q: adding VLAN 0 to HW filter on device eth11 [ 65.079427][ T3050] 8021q: adding VLAN 0 to HW filter on device eth12 [ 65.125402][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.149997][ T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.201767][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.212475][ T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.261757][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.272193][ T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.332167][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.342833][ T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.411934][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.442078][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.512805][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.546467][ T3050] 8021q: adding VLAN 0 to HW filter on device eth13 [ 65.561432][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.644010][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.672383][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.695646][ T3050] 8021q: adding VLAN 0 to HW filter on device eth14 [ 65.722272][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.781805][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.826035][ T3050] 8021q: adding VLAN 0 to HW filter on device eth15 [ 65.865698][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.923490][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.971825][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.021971][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.078518][ T3050] 8021q: adding VLAN 0 to HW filter on device eth16 [ 66.121127][ T53] bridge_slave_1: left allmulticast mode [ 66.126954][ T53] bridge_slave_1: left promiscuous mode [ 66.132965][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.140732][ T53] bridge_slave_0: left allmulticast mode [ 66.146512][ T53] bridge_slave_0: left promiscuous mode [ 66.152324][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.161444][ T53] bridge_slave_1: left allmulticast mode [ 66.167249][ T53] bridge_slave_1: left promiscuous mode [ 66.173249][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.181386][ T53] bridge_slave_0: left allmulticast mode [ 66.187103][ T53] bridge_slave_0: left promiscuous mode [ 66.193565][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.202609][ T53] bridge_slave_1: left allmulticast mode [ 66.208345][ T53] bridge_slave_1: left promiscuous mode [ 66.214199][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.222309][ T53] bridge_slave_0: left allmulticast mode [ 66.228011][ T53] bridge_slave_0: left promiscuous mode [ 66.233928][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.243670][ T53] bridge_slave_1: left allmulticast mode [ 66.249447][ T53] bridge_slave_1: left promiscuous mode [ 66.255234][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.263311][ T53] bridge_slave_0: left allmulticast mode [ 66.269094][ T53] bridge_slave_0: left promiscuous mode [ 66.274783][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.471843][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.482122][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.492172][ T53] bond0 (unregistering): Released all slaves [ 66.572254][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.582810][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.592939][ T53] bond0 (unregistering): Released all slaves [ 66.622436][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.632665][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.642594][ T53] bond0 (unregistering): Released all slaves [ 66.701473][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.711582][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.721082][ T53] bond0 (unregistering): Released all slaves [ 66.770386][ T53] hsr_slave_0: left promiscuous mode [ 66.776178][ T53] hsr_slave_1: left promiscuous mode [ 66.782200][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.789976][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.797817][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.806812][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.816976][ T53] hsr_slave_0: left promiscuous mode [ 66.823099][ T53] hsr_slave_1: left promiscuous mode [ 66.829792][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.837286][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.845499][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.853131][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.863002][ T53] hsr_slave_0: left promiscuous mode [ 66.869208][ T53] hsr_slave_1: left promiscuous mode [ 66.874962][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.882658][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.890485][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.898109][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.908465][ T53] hsr_slave_0: left promiscuous mode [ 66.914833][ T53] hsr_slave_1: left promiscuous mode [ 66.921284][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.929050][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.936764][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.944887][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.964431][ T53] veth1_macvtap: left promiscuous mode [ 66.970043][ T53] veth0_macvtap: left promiscuous mode [ 66.975569][ T53] veth1_vlan: left promiscuous mode [ 66.980964][ T53] veth0_vlan: left promiscuous mode [ 66.986836][ T53] veth1_macvtap: left promiscuous mode [ 66.992473][ T53] veth0_macvtap: left promiscuous mode [ 66.998120][ T53] veth1_vlan: left promiscuous mode [ 67.003456][ T53] veth0_vlan: left promiscuous mode [ 67.009340][ T53] dummy0: left allmulticast mode [ 67.014546][ T53] veth1_macvtap: left promiscuous mode [ 67.020164][ T53] veth0_macvtap: left promiscuous mode [ 67.025908][ T53] veth1_vlan: left promiscuous mode [ 67.031381][ T53] veth0_vlan: left promiscuous mode [ 67.037339][ T53] veth1_macvtap: left promiscuous mode [ 67.042989][ T53] veth0_macvtap: left promiscuous mode [ 67.048617][ T53] veth1_vlan: left promiscuous mode [ 67.054312][ T53] veth0_vlan: left promiscuous mode [ 67.231097][ T53] team0 (unregistering): Port device team_slave_1 removed [ 67.241427][ T53] team0 (unregistering): Port device team_slave_0 removed [ 67.306256][ T53] team0 (unregistering): Port device team_slave_1 removed [ 67.315787][ T53] team0 (unregistering): Port device team_slave_0 removed [ 67.382020][ T53] team0 (unregistering): Port device team_slave_1 removed [ 67.392347][ T53] team0 (unregistering): Port device team_slave_0 removed [ 67.454934][ T53] team0 (unregistering): Port device team_slave_1 removed [ 67.465638][ T53] team0 (unregistering): Port device team_slave_0 removed [ 67.501928][ T3050] 8021q: adding VLAN 0 to HW filter on device eth17 [ 67.627829][ T3050] 8021q: adding VLAN 0 to HW filter on device eth18 [ 67.738671][ T3050] 8021q: adding VLAN 0 to HW filter on device eth19 [ 67.849641][ T3050] 8021q: adding VLAN 0 to HW filter on device eth20 [ 67.959739][ T3050] 8021q: adding VLAN 0 to HW filter on device eth21 [ 68.072108][ T3050] 8021q: adding VLAN 0 to HW filter on device eth22 [ 68.197848][ T3050] 8021q: adding VLAN 0 to HW filter on device eth23 [ 68.311248][ T3050] 8021q: adding VLAN 0 to HW filter on device eth24 [ 68.437922][ T3050] 8021q: adding VLAN 0 to HW filter on device eth25 [ 68.551550][ T3050] 8021q: adding VLAN 0 to HW filter on device eth26 [ 68.662211][ T3050] 8021q: adding VLAN 0 to HW filter on device eth27 [ 68.774679][ T3050] 8021q: adding VLAN 0 to HW filter on device eth28