last executing test programs: 11.254730298s ago: executing program 1 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) 11.242738648s ago: executing program 1 (id=212): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) 11.175745341s ago: executing program 1 (id=214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x14, r1, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 11.158712262s ago: executing program 1 (id=216): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nodioread_nolock}, {@user_xattr}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 10.756642089s ago: executing program 1 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 10.477494002s ago: executing program 1 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x2400000000}, 0x18) fsync(0xffffffffffffffff) 10.477283031s ago: executing program 32 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x2400000000}, 0x18) fsync(0xffffffffffffffff) 707.133399ms ago: executing program 3 (id=734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x6, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000010000000000000001a8020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 674.912911ms ago: executing program 3 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0xc000800) close(r0) 632.928152ms ago: executing program 3 (id=740): r0 = socket$kcm(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x4}) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 604.524094ms ago: executing program 3 (id=743): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x23, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) 562.830156ms ago: executing program 3 (id=748): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000012009702"], 0x28}}, 0x800) 540.021287ms ago: executing program 3 (id=751): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) ppoll(&(0x7f00000001c0)=[{r0, 0x88}], 0x1, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x800) 436.311741ms ago: executing program 0 (id=759): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x19c, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 430.222301ms ago: executing program 4 (id=762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc27d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000180)=0x7, 0x400, 0x2) 312.210146ms ago: executing program 4 (id=767): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 311.809996ms ago: executing program 2 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x20, 0x1, 0xfffffffc, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x4}}]}}}]}, 0x5c}}, 0x0) 311.168026ms ago: executing program 5 (id=769): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 299.005237ms ago: executing program 0 (id=770): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x3ff}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 290.309867ms ago: executing program 2 (id=771): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4078, 0xe0}], 0x1, 0xf3, 0x3) mq_timedsend(r0, &(0x7f0000000200)="ed7a6ce3b71a267f6d4fb4d5c7e85ed02408ae52d00046bdb2f5794ef3a8cf76658e40b5af3a9a4643fedf76c5457866bf14f0d38b7cea5ce4f9a7564a9780e04279d2b1c506e65b728d1d37f7c2b396629b03a3b769b2953ee07219feaa53befc13c0d700df52c5e8da25d220e3cc212e7cf73a796300a152dac9cb4fe913647171583a9ef7968550123c8e3613dd5ab8dd4f23b3aa137ad72b320656162ce3a902fd74ad2d38a3a87bb18b18ee7672517e6e", 0xb3, 0xa9, 0x0) 277.593788ms ago: executing program 5 (id=772): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x7fff}, &(0x7f0000000740)=0x8) 205.677711ms ago: executing program 5 (id=773): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x4a}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 205.540211ms ago: executing program 2 (id=774): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 205.441321ms ago: executing program 0 (id=775): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10}, 0xc) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000580)={0x0, 0x2}) 204.748061ms ago: executing program 4 (id=776): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 175.627742ms ago: executing program 2 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 157.776813ms ago: executing program 0 (id=778): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, 0x0, 0x0) 151.708744ms ago: executing program 2 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 142.691654ms ago: executing program 0 (id=780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0x98}}, 0x0) 105.137075ms ago: executing program 2 (id=781): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x19c, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 104.917055ms ago: executing program 0 (id=782): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() 104.206365ms ago: executing program 5 (id=783): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setreuid(0x0, 0xee01) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1e, 0xb, 0xc5, 0x0}) 85.986576ms ago: executing program 4 (id=784): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) 72.655217ms ago: executing program 5 (id=785): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) setitimer(0x0, 0x0, 0x0) 751.18µs ago: executing program 4 (id=786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 262.3µs ago: executing program 4 (id=787): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x170bd29, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0xff, 0x6, 0x2000}}, 0x1c}}, 0x4000844) 0s ago: executing program 5 (id=788): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x8000001}) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x800, 0x3, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x67, 0x0, 0x1, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) kernel console output (not intermixed with test programs): =process permissive=1 [ 19.171783][ T29] audit: type=1400 audit(1764524521.185:61): avc: denied { siginh } for pid=3191 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 27.063265][ T29] audit: type=1400 audit(1764524529.085:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.086324][ T29] audit: type=1400 audit(1764524529.105:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.086983][ T3303] cgroup: Unknown subsys name 'net' [ 27.114093][ T29] audit: type=1400 audit(1764524529.135:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.229319][ T3303] cgroup: Unknown subsys name 'cpuset' [ 27.235565][ T3303] cgroup: Unknown subsys name 'rlimit' [ 27.404579][ T29] audit: type=1400 audit(1764524529.425:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.428616][ T29] audit: type=1400 audit(1764524529.425:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.449178][ T29] audit: type=1400 audit(1764524529.425:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.469637][ T29] audit: type=1400 audit(1764524529.425:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.490272][ T29] audit: type=1400 audit(1764524529.455:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.497509][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.515228][ T29] audit: type=1400 audit(1764524529.455:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.547301][ T29] audit: type=1400 audit(1764524529.555:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.589575][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.354512][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.391617][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.441424][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.471966][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 29.505378][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.512575][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.520174][ T3319] bridge_slave_0: entered allmulticast mode [ 29.526514][ T3319] bridge_slave_0: entered promiscuous mode [ 29.547758][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.554917][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.562067][ T3319] bridge_slave_1: entered allmulticast mode [ 29.568519][ T3319] bridge_slave_1: entered promiscuous mode [ 29.578626][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 29.591431][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.598523][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.605681][ T3313] bridge_slave_0: entered allmulticast mode [ 29.612076][ T3313] bridge_slave_0: entered promiscuous mode [ 29.630482][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.637699][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.645186][ T3313] bridge_slave_1: entered allmulticast mode [ 29.651488][ T3313] bridge_slave_1: entered promiscuous mode [ 29.681684][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.707000][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.717024][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.726267][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.733390][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.740648][ T3314] bridge_slave_0: entered allmulticast mode [ 29.746919][ T3314] bridge_slave_0: entered promiscuous mode [ 29.759536][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.766612][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.773857][ T3328] bridge_slave_0: entered allmulticast mode [ 29.780272][ T3328] bridge_slave_0: entered promiscuous mode [ 29.792070][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.801486][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.808608][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.815774][ T3314] bridge_slave_1: entered allmulticast mode [ 29.822112][ T3314] bridge_slave_1: entered promiscuous mode [ 29.837585][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.844776][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.851884][ T3328] bridge_slave_1: entered allmulticast mode [ 29.858301][ T3328] bridge_slave_1: entered promiscuous mode [ 29.882240][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.889403][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.896519][ T3327] bridge_slave_0: entered allmulticast mode [ 29.903006][ T3327] bridge_slave_0: entered promiscuous mode [ 29.919644][ T3319] team0: Port device team_slave_0 added [ 29.926340][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.936695][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.946087][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.953288][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.960663][ T3327] bridge_slave_1: entered allmulticast mode [ 29.967159][ T3327] bridge_slave_1: entered promiscuous mode [ 29.978262][ T3313] team0: Port device team_slave_0 added [ 29.984808][ T3319] team0: Port device team_slave_1 added [ 30.005505][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.015785][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.025665][ T3313] team0: Port device team_slave_1 added [ 30.036800][ T3314] team0: Port device team_slave_0 added [ 30.061182][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.068195][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.094107][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.105654][ T3314] team0: Port device team_slave_1 added [ 30.112703][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.136166][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.143244][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.169822][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.181449][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.195641][ T3328] team0: Port device team_slave_0 added [ 30.201910][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.209209][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.235563][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.257821][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.264890][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.291174][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.302556][ T3328] team0: Port device team_slave_1 added [ 30.308498][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.315443][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.341941][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.356426][ T3327] team0: Port device team_slave_0 added [ 30.367522][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.374530][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.400492][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.421070][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.428110][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.454488][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.468240][ T3327] team0: Port device team_slave_1 added [ 30.486449][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.493625][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.519748][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.557491][ T3313] hsr_slave_0: entered promiscuous mode [ 30.563514][ T3313] hsr_slave_1: entered promiscuous mode [ 30.571367][ T3319] hsr_slave_0: entered promiscuous mode [ 30.577673][ T3319] hsr_slave_1: entered promiscuous mode [ 30.583571][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 30.589539][ T3319] Cannot create hsr debugfs directory [ 30.605331][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.612415][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.638419][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.664748][ T3314] hsr_slave_0: entered promiscuous mode [ 30.670880][ T3314] hsr_slave_1: entered promiscuous mode [ 30.676761][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 30.682536][ T3314] Cannot create hsr debugfs directory [ 30.688450][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.695457][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.721379][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.741557][ T3328] hsr_slave_0: entered promiscuous mode [ 30.747751][ T3328] hsr_slave_1: entered promiscuous mode [ 30.753782][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 30.759652][ T3328] Cannot create hsr debugfs directory [ 30.821197][ T3327] hsr_slave_0: entered promiscuous mode [ 30.827277][ T3327] hsr_slave_1: entered promiscuous mode [ 30.833301][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 30.839168][ T3327] Cannot create hsr debugfs directory [ 30.984853][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.995068][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.003556][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.014421][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.029251][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.037673][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.049747][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.062872][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.084261][ T3328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.093205][ T3328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.108065][ T3328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.117519][ T3328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.163353][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.180697][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.190536][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.199793][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.209507][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.220169][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.228996][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.243512][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.274112][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.296763][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.314163][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.330295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.338357][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.350727][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.358684][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.379974][ T2860] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.387082][ T2860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.395711][ T2860] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.402968][ T2860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.421403][ T2860] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.428572][ T2860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.437460][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.452683][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.459772][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.480461][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.487543][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.499280][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.519897][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.530850][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.542463][ T3328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.552994][ T3328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.571169][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.578436][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.588463][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.595631][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.644000][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.663777][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.700752][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.720395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.727487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.737302][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.744443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.766893][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.803074][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.837320][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.877368][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.926539][ T3328] veth0_vlan: entered promiscuous mode [ 31.935078][ T3328] veth1_vlan: entered promiscuous mode [ 31.984967][ T3319] veth0_vlan: entered promiscuous mode [ 31.991784][ T3313] veth0_vlan: entered promiscuous mode [ 32.003757][ T3328] veth0_macvtap: entered promiscuous mode [ 32.023877][ T3319] veth1_vlan: entered promiscuous mode [ 32.032926][ T3313] veth1_vlan: entered promiscuous mode [ 32.041144][ T3328] veth1_macvtap: entered promiscuous mode [ 32.073123][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.084770][ T3313] veth0_macvtap: entered promiscuous mode [ 32.095580][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.109531][ T3319] veth0_macvtap: entered promiscuous mode [ 32.122141][ T3327] veth0_vlan: entered promiscuous mode [ 32.129057][ T3313] veth1_macvtap: entered promiscuous mode [ 32.139097][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.153198][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.162408][ T3319] veth1_macvtap: entered promiscuous mode [ 32.175172][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.184480][ T3327] veth1_vlan: entered promiscuous mode [ 32.193458][ T3314] veth0_vlan: entered promiscuous mode [ 32.199863][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.212749][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.223711][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.239368][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.239383][ T29] audit: type=1400 audit(1764524534.265:81): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.9m1aKP/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.243466][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.245485][ T29] audit: type=1400 audit(1764524534.265:82): avc: denied { mount } for pid=3328 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.272147][ T3314] veth1_vlan: entered promiscuous mode [ 32.276960][ T29] audit: type=1400 audit(1764524534.265:83): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.9m1aKP/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.310230][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.329808][ T29] audit: type=1400 audit(1764524534.265:84): avc: denied { mount } for pid=3328 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.342539][ T3327] veth0_macvtap: entered promiscuous mode [ 32.358883][ T29] audit: type=1400 audit(1764524534.265:85): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.9m1aKP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.367509][ T3327] veth1_macvtap: entered promiscuous mode [ 32.391291][ T29] audit: type=1400 audit(1764524534.265:86): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/root/syzkaller.9m1aKP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.402085][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.424874][ T29] audit: type=1400 audit(1764524534.265:87): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.455407][ T29] audit: type=1400 audit(1764524534.325:88): avc: denied { mounton } for pid=3328 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.464883][ T3314] veth0_macvtap: entered promiscuous mode [ 32.478663][ T29] audit: type=1400 audit(1764524534.325:89): avc: denied { mount } for pid=3328 comm="syz-executor" name="/" dev="gadgetfs" ino=3793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.508875][ T3328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.525686][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.535767][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.547211][ T3314] veth1_macvtap: entered promiscuous mode [ 32.558374][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.569217][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.580410][ T29] audit: type=1400 audit(1764524534.605:90): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.609531][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.638649][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.646098][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.675722][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.697327][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.706193][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.716275][ T3487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.725063][ T3487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.734036][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.755343][ T3487] Zero length message leads to an empty skb [ 32.755571][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.822219][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.831631][ T3490] loop1: detected capacity change from 0 to 1764 [ 32.843778][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.867897][ T3495] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 32.881533][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902419][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.924374][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.936069][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.945890][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.016122][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.158615][ T3529] loop0: detected capacity change from 0 to 256 [ 33.165278][ T3529] ======================================================= [ 33.165278][ T3529] WARNING: The mand mount option has been deprecated and [ 33.165278][ T3529] and is ignored by this kernel. Remove the mand [ 33.165278][ T3529] option from the mount to silence this warning. [ 33.165278][ T3529] ======================================================= [ 33.224173][ T3529] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.371137][ T3548] loop4: detected capacity change from 0 to 1024 [ 33.381031][ T3548] EXT4-fs: Ignoring removed oldalloc option [ 33.387082][ T3548] EXT4-fs: Ignoring removed bh option [ 33.423082][ T3559] loop0: detected capacity change from 0 to 128 [ 33.447532][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.484902][ T3559] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.491494][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'. [ 33.506430][ T3570] bridge_slave_1: left allmulticast mode [ 33.506450][ T3570] bridge_slave_1: left promiscuous mode [ 33.506547][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.519237][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.529233][ T3559] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.578682][ T3570] bridge_slave_0: left allmulticast mode [ 33.579932][ T3559] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 33.584375][ T3570] bridge_slave_0: left promiscuous mode [ 33.591659][ T3559] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 33.597430][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.640441][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.770675][ T3591] loop3: detected capacity change from 0 to 512 [ 33.787485][ T3591] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.48: inode has both inline data and extents flags [ 33.804428][ T3591] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.48: couldn't read orphan inode 15 (err -117) [ 33.819417][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.853572][ T3596] loop4: detected capacity change from 0 to 512 [ 33.891802][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.918328][ T3596] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.51: ea_inode file size=0 entry size=6 [ 33.932479][ T3596] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.947485][ T3596] ------------[ cut here ]------------ [ 33.953285][ T3596] EA inode 11 i_nlink=2 [ 33.953525][ T3596] WARNING: CPU: 1 PID: 3596 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 33.967922][ T3596] Modules linked in: [ 33.971880][ T3596] CPU: 1 UID: 0 PID: 3596 Comm: syz.4.51 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.981492][ T3596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.991637][ T3596] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 33.998375][ T3596] Code: 90 49 8d 7e 40 e8 d6 f6 b8 ff 4d 8b 6e 40 4c 89 e7 e8 ea f1 b8 ff 41 8b 56 48 48 c7 c7 ff d7 55 86 4c 89 ee e8 a7 f2 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 28 01 b6 03 0f 1f 84 00 00 00 00 00 [ 34.018331][ T3596] RSP: 0018:ffffc9000331b778 EFLAGS: 00010246 [ 34.024458][ T3596] RAX: 255fd3f1532ff200 RBX: ffff888108fd2010 RCX: 0000000000080000 [ 34.032578][ T3596] RDX: ffffc90003f78000 RSI: 0000000000005304 RDI: 0000000000005305 [ 34.040687][ T3596] RBP: 0000000000000002 R08: 0001c9000331b5f7 R09: 0000000000000000 [ 34.048715][ T3596] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888108fd1fc0 [ 34.056716][ T3596] R13: 000000000000000b R14: ffff888108fd1f78 R15: 0000000000000001 [ 34.064743][ T3596] FS: 00007fa686fd76c0(0000) GS:ffff8882aef10000(0000) knlGS:0000000000000000 [ 34.073927][ T3596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.080578][ T3596] CR2: 0000000000000000 CR3: 000000011a722000 CR4: 00000000003506f0 [ 34.088610][ T3596] Call Trace: [ 34.091998][ T3596] [ 34.094958][ T3596] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 34.100936][ T3596] ? errseq_check+0x2c/0x50 [ 34.105486][ T3596] ext4_xattr_delete_inode+0x6b7/0x790 [ 34.111318][ T3596] ? ext4_truncate+0x92e/0xae0 [ 34.116217][ T3596] ext4_evict_inode+0xa6a/0xd90 [ 34.121396][ T3596] ? __pfx_ext4_evict_inode+0x10/0x10 [ 34.126910][ T3596] evict+0x2e3/0x550 [ 34.131291][ T3596] ? __dquot_initialize+0x146/0x7c0 [ 34.136551][ T3596] iput+0x4ed/0x650 [ 34.140534][ T3596] ext4_process_orphan+0x1a9/0x1c0 [ 34.145715][ T3596] ext4_orphan_cleanup+0x6a8/0xa00 [ 34.150900][ T3596] ext4_fill_super+0x3483/0x3810 [ 34.155201][ T3605] loop3: detected capacity change from 0 to 1024 [ 34.156020][ T3596] ? snprintf+0x86/0xb0 [ 34.166555][ T3596] ? set_blocksize+0x1a8/0x310 [ 34.171397][ T3596] ? sb_set_blocksize+0xe3/0x100 [ 34.176401][ T3596] ? setup_bdev_super+0x30e/0x370 [ 34.181261][ T3605] EXT4-fs: inline encryption not supported [ 34.181536][ T3596] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.192636][ T3596] get_tree_bdev_flags+0x291/0x300 [ 34.197894][ T3596] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.203749][ T3596] get_tree_bdev+0x1f/0x30 [ 34.208293][ T3596] ext4_get_tree+0x1c/0x30 [ 34.212808][ T3596] vfs_get_tree+0x57/0x1d0 [ 34.217258][ T3596] do_new_mount+0x24d/0x660 [ 34.221842][ T3596] path_mount+0x4a5/0xb70 [ 34.226299][ T3596] ? user_path_at+0x109/0x130 [ 34.231381][ T3596] __se_sys_mount+0x28c/0x2e0 [ 34.236612][ T3596] __x64_sys_mount+0x67/0x80 [ 34.241281][ T3596] x64_sys_call+0x2b51/0x3000 [ 34.246033][ T3596] do_syscall_64+0xd2/0x200 [ 34.250929][ T3596] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.257137][ T3596] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.262937][ T3596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.268917][ T3596] RIP: 0033:0x7fa688570eea [ 34.273366][ T3596] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.293150][ T3596] RSP: 002b:00007fa686fd6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.301635][ T3596] RAX: ffffffffffffffda RBX: 00007fa686fd6ef0 RCX: 00007fa688570eea [ 34.301887][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.309758][ T3596] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa686fd6eb0 [ 34.309777][ T3596] RBP: 0000200000000180 R08: 00007fa686fd6ef0 R09: 0000000000800700 [ 34.309792][ T3596] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 34.346351][ T3596] R13: 00007fa686fd6eb0 R14: 0000000000000473 R15: 0000200000000680 [ 34.354398][ T3596] [ 34.357527][ T3596] ---[ end trace 0000000000000000 ]--- [ 34.373732][ T3596] EXT4-fs (loop4): 1 orphan inode deleted [ 34.380270][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.402387][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.472911][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.473234][ T3619] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure [ 34.552720][ T3630] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 34.588508][ T3630] SELinux: failed to load policy [ 34.618391][ T3635] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 34.625023][ T3635] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 34.632731][ T3635] vhci_hcd vhci_hcd.0: Device attached [ 34.656315][ T3638] vhci_hcd: connection closed [ 34.658064][ T31] vhci_hcd: stop threads [ 34.667097][ T31] vhci_hcd: release socket [ 34.671568][ T31] vhci_hcd: disconnect device [ 34.826892][ T36] IPVS: starting estimator thread 0... [ 34.918983][ T3669] IPVS: using max 2928 ests per chain, 146400 per kthread [ 35.000068][ T31] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.022628][ T31] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.045818][ T31] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.063111][ T31] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.182240][ T3713] netlink: 28 bytes leftover after parsing attributes in process `syz.3.103'. [ 35.236104][ T3723] loop2: detected capacity change from 0 to 1024 [ 35.236514][ T3723] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.236549][ T3723] EXT4-fs: inline encryption not supported [ 35.237099][ T3723] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.251460][ T3723] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.108: bad orphan inode 11 [ 35.257559][ T3723] EXT4-fs (loop2): Remounting filesystem read-only [ 35.257594][ T3723] ext4_test_bit(bit=10, block=4) = 1 [ 35.257609][ T3723] is_bad_inode(inode)=0 [ 35.257618][ T3723] NEXT_ORPHAN(inode)=3254779904 [ 35.257627][ T3723] max_ino=32 [ 35.257635][ T3723] i_nlink=0 [ 35.258227][ T3723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.266988][ T3723] EXT4-fs: Cannot change journaled quota options when quota turned on [ 35.287647][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.405804][ T3741] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3741 comm=syz.3.115 [ 35.405832][ T3741] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3741 comm=syz.3.115 [ 35.696155][ T3787] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.137'. [ 35.808695][ T3802] tmpfs: Bad value for 'mpol' [ 35.859323][ T3807] loop0: detected capacity change from 0 to 128 [ 35.892439][ T3801] loop2: detected capacity change from 0 to 8192 [ 35.900020][ T3807] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 35.904096][ T3807] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 35.925529][ T3807] FAT-fs (loop0): Filesystem has been set read-only [ 35.926038][ T3807] FAT-fs (loop0): error, invalid access to FAT (entry 0x0affffff) [ 35.936050][ T3304] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 35.936061][ T3304] loop2: partition table partially beyond EOD, truncated [ 35.936194][ T3304] loop2: p1 size 67108864 extends beyond EOD, truncated [ 35.944593][ T3319] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 35.944694][ T3304] loop2: p2 start 150995200 is beyond EOD, truncated [ 35.944728][ T3304] loop2: p3 start 327168 is beyond EOD, truncated [ 35.949916][ T3304] loop2: p5 size 67108864 extends beyond EOD, truncated [ 35.950735][ T3304] loop2: p6 start 150995200 is beyond EOD, truncated [ 35.961930][ T3801] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 35.961943][ T3801] loop2: partition table partially beyond EOD, truncated [ 35.962041][ T3801] loop2: p1 size 67108864 extends beyond EOD, truncated [ 35.963578][ T3801] loop2: p2 start 150995200 is beyond EOD, truncated [ 35.963601][ T3801] loop2: p3 start 327168 is beyond EOD, truncated [ 35.968104][ T3801] loop2: p5 size 67108864 extends beyond EOD, truncated [ 35.978123][ T3801] loop2: p6 start 150995200 is beyond EOD, truncated [ 36.007556][ T3003] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 36.007569][ T3003] loop2: partition table partially beyond EOD, truncated [ 36.007630][ T3003] loop2: p1 size 67108864 extends beyond EOD, truncated [ 36.023426][ T3003] loop2: p2 start 150995200 is beyond EOD, [ 36.040154][ T3827] loop4: detected capacity change from 0 to 1024 [ 36.045560][ T3003] truncated [ 36.079999][ T3827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.085657][ T3003] loop2: p3 start 327168 is beyond EOD, truncated [ 36.086201][ T3003] loop2: p5 size 67108864 extends beyond EOD, [ 36.146561][ T3834] loop0: detected capacity change from 0 to 512 [ 36.154055][ T3003] truncated [ 36.154635][ T3003] loop2: p6 start 150995200 is beyond EOD, [ 36.162115][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.166798][ T3003] truncated [ 36.189907][ T3834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.199018][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.212891][ T3834] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.236816][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.242882][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 36.294519][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 36.299090][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.315065][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.358392][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.382840][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 36.389310][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 36.394281][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.439719][ T3852] loop2: detected capacity change from 0 to 512 [ 36.439973][ T3855] loop0: detected capacity change from 0 to 128 [ 36.460222][ T3852] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.473425][ T3852] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.490691][ T3855] FAT-fs (loop0): error, clusters badly computed (2 != 0) [ 36.497987][ T3855] FAT-fs (loop0): Filesystem has been set read-only [ 36.513918][ T3855] FAT-fs (loop0): error, clusters badly computed (3 != 1) [ 36.531947][ T3852] EXT4-fs (loop2): 1 truncate cleaned up [ 36.537986][ T3855] FAT-fs (loop0): error, clusters badly computed (4 != 2) [ 36.550917][ T3852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.625576][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.669307][ T3858] loop0: detected capacity change from 0 to 2048 [ 36.721823][ T3858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.839684][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.120295][ T3900] loop0: detected capacity change from 0 to 2048 [ 37.140432][ T3898] loop2: detected capacity change from 0 to 256 [ 37.168944][ T3900] EXT4-fs (loop0): failed to initialize system zone (-117) [ 37.186816][ T3900] EXT4-fs (loop0): mount failed [ 37.286689][ T3918] loop0: detected capacity change from 0 to 512 [ 37.317911][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 37.317930][ T29] audit: type=1400 audit(1764524539.335:211): avc: denied { create } for pid=3920 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.327467][ T3924] netlink: 296 bytes leftover after parsing attributes in process `syz.4.194'. [ 37.360506][ T29] audit: type=1400 audit(1764524539.385:212): avc: denied { connect } for pid=3920 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.380303][ T29] audit: type=1400 audit(1764524539.385:213): avc: denied { write } for pid=3920 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.427337][ T29] audit: type=1400 audit(1764524539.425:214): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.1.88 dest=52846 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 37.474500][ T3918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.526732][ T3918] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.554518][ T3937] netlink: 224 bytes leftover after parsing attributes in process `syz.1.200'. [ 37.564068][ T3937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 37.579382][ T29] audit: type=1400 audit(1764524539.595:215): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 37.603110][ T29] audit: type=1400 audit(1764524539.595:216): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 37.637566][ T3946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.203'. [ 37.644225][ T29] audit: type=1400 audit(1764524539.655:217): avc: denied { read } for pid=3944 comm="syz.4.204" path="socket:[6420]" dev="sockfs" ino=6420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.688411][ T3918] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.192: corrupted xattr block 6: invalid header [ 37.714703][ T3918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 37.725447][ T3946] __nla_validate_parse: 1 callbacks suppressed [ 37.725464][ T3946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.203'. [ 37.741315][ T3946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.203'. [ 37.757648][ T3955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.758476][ T29] audit: type=1400 audit(1764524539.775:218): avc: denied { create } for pid=3954 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.772791][ T3918] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.192: corrupted xattr block 6: invalid header [ 37.794250][ T29] audit: type=1400 audit(1764524539.815:219): avc: denied { write } for pid=3954 comm="syz.1.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.831534][ T3960] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 37.863667][ T3918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 37.876667][ T3946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.203'. [ 37.885771][ T3946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.203'. [ 37.894550][ T3918] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.192: corrupted xattr block 6: invalid header [ 37.942982][ T3972] loop1: detected capacity change from 0 to 512 [ 37.950522][ T3918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 37.963710][ T3972] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.976325][ T3976] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 37.988057][ T3976] team0: Port device dummy0 added [ 37.997959][ T3976] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 38.009224][ T3972] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 38.017749][ T3976] team0: Port device dummy0 removed [ 38.042614][ T3976] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.053911][ T3972] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.060433][ T3972] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 38.076583][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.096188][ T3976] syz.3.217 (3976) used greatest stack depth: 10640 bytes left [ 38.104333][ T3972] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.216: attempt to clear invalid blocks 2 len 1 [ 38.121597][ T3972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.216: bg 0: block 456: padding at end of block bitmap is not set [ 38.141027][ T3972] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 38.160100][ T3972] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.216: invalid indirect mapped block 1819239214 (level 0) [ 38.184447][ T3972] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.216: invalid indirect mapped block 1819239214 (level 1) [ 38.228396][ T3972] EXT4-fs (loop1): 1 truncate cleaned up [ 38.242198][ T3972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.258645][ T4000] loop0: detected capacity change from 0 to 256 [ 38.275638][ T29] audit: type=1400 audit(1764524540.295:220): avc: denied { mount } for pid=3999 comm="syz.0.229" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.316618][ T3313] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 38.344163][ T3313] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 38.362256][ T3313] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds [ 38.392137][ T3887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.577540][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 38.591649][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.653574][ T4037] loop3: detected capacity change from 0 to 128 [ 38.663662][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.732056][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.785951][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.892193][ T4034] chnl_net:caif_netlink_parms(): no params data found [ 38.904459][ T12] bridge_slave_1: left allmulticast mode [ 38.910200][ T12] bridge_slave_1: left promiscuous mode [ 38.916037][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.924368][ T12] bridge_slave_0: left allmulticast mode [ 38.930157][ T12] bridge_slave_0: left promiscuous mode [ 38.935917][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.050833][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.066314][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.088298][ T12] bond0 (unregistering): Released all slaves [ 39.147921][ T12] hsr_slave_0: left promiscuous mode [ 39.169706][ T12] hsr_slave_1: left promiscuous mode [ 39.188000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.195563][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.262501][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.270056][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.287111][ T4090] loop2: detected capacity change from 0 to 2048 [ 39.317014][ T12] veth1_macvtap: left promiscuous mode [ 39.325298][ T12] veth0_macvtap: left promiscuous mode [ 39.336428][ T12] veth1_vlan: left promiscuous mode [ 39.341777][ T12] veth0_vlan: left promiscuous mode [ 39.360191][ T3623] loop2: p1 p2 < > p3 < p5 p6 > p4 [ 39.365439][ T3623] loop2: partition table partially beyond EOD, truncated [ 39.389024][ T3623] loop2: p1 size 917504 extends beyond EOD, truncated [ 39.397060][ T3623] loop2: p2 start 4278190080 is beyond EOD, truncated [ 39.404977][ T3623] loop2: p4 size 8192 extends beyond EOD, truncated [ 39.412697][ T3623] loop2: p5 size 917504 extends beyond EOD, truncated [ 39.420084][ T3623] loop2: p6 size 8192 extends beyond EOD, truncated [ 39.433568][ T4090] loop2: p1 p2 < > p3 < p5 p6 > p4 [ 39.439068][ T4090] loop2: partition table partially beyond EOD, truncated [ 39.448420][ T4090] loop2: p1 size 917504 extends beyond EOD, truncated [ 39.455819][ T4090] loop2: p2 start 4278190080 is beyond EOD, truncated [ 39.463720][ T4090] loop2: p4 size 8192 extends beyond EOD, truncated [ 39.480756][ T4090] loop2: p5 size 917504 extends beyond EOD, truncated [ 39.492442][ T4090] loop2: p6 size 8192 extends beyond EOD, truncated [ 39.499495][ T12] team0 (unregistering): Port device team_slave_1 removed [ 39.520841][ T12] team0 (unregistering): Port device team_slave_0 removed [ 39.538401][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.580991][ T4111] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 39.587797][ T4111] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 39.596068][ T4111] vhci_hcd vhci_hcd.0: Device attached [ 39.603585][ T4112] vhci_hcd: connection closed [ 39.603793][ T61] vhci_hcd: stop threads [ 39.612896][ T61] vhci_hcd: release socket [ 39.617311][ T61] vhci_hcd: disconnect device [ 39.622193][ T4034] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.629364][ T4034] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.637034][ T4034] bridge_slave_0: entered allmulticast mode [ 39.647269][ T4034] bridge_slave_0: entered promiscuous mode [ 39.662950][ T4034] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.670114][ T4034] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.677425][ T4034] bridge_slave_1: entered allmulticast mode [ 39.684350][ T4034] bridge_slave_1: entered promiscuous mode [ 39.720167][ T4034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.734313][ T4034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.762086][ T4034] team0: Port device team_slave_0 added [ 39.763176][ T4034] team0: Port device team_slave_1 added [ 39.811571][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.818795][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.818889][ T4034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.822297][ T4034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.862764][ T4034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.888749][ T4034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.957783][ T4034] hsr_slave_0: entered promiscuous mode [ 39.966724][ T4034] hsr_slave_1: entered promiscuous mode [ 39.971615][ T4140] loop4: detected capacity change from 0 to 2048 [ 40.020840][ T3623] Alternate GPT is invalid, using primary GPT. [ 40.027336][ T3623] loop4: p2 p3 p7 [ 40.051761][ T4140] Alternate GPT is invalid, using primary GPT. [ 40.058328][ T4140] loop4: p2 p3 p7 [ 40.213228][ T4034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.221786][ T4167] loop4: detected capacity change from 0 to 512 [ 40.241057][ T4034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.254227][ T4167] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.285: inode has both inline data and extents flags [ 40.268363][ T4034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.284219][ T4167] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.285: couldn't read orphan inode 15 (err -117) [ 40.304647][ T4034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.304755][ T4167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.389705][ T4034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.421057][ T4197] netlink: 9 bytes leftover after parsing attributes in process `syz.3.291'. [ 40.431235][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.431933][ T4034] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.451187][ T4197] netlink: 9 bytes leftover after parsing attributes in process `syz.3.291'. [ 40.466722][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.471405][ T4202] loop4: detected capacity change from 0 to 128 [ 40.473981][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.497301][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.504546][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.636162][ T4222] tipc: Started in network mode [ 40.641370][ T4222] tipc: Node identity , cluster identity 4711 [ 40.647513][ T4222] tipc: Failed to set node id, please configure manually [ 40.654671][ T4222] tipc: Enabling of bearer rejected, failed to enable media [ 40.686652][ T4228] netlink: 168 bytes leftover after parsing attributes in process `syz.4.299'. [ 40.773251][ T4034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.825512][ T4254] tipc: Failed to obtain node identity [ 40.831199][ T4254] tipc: Enabling of bearer rejected, failed to enable media [ 40.991025][ T4279] loop4: detected capacity change from 0 to 512 [ 41.008982][ T4279] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.024778][ T4279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 41.033222][ T4279] System zones: 1-12 [ 41.037741][ T4279] EXT4-fs (loop4): 1 truncate cleaned up [ 41.038738][ T4287] netlink: 'syz.3.316': attribute type 3 has an invalid length. [ 41.044034][ T4279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.051149][ T4287] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 41.071312][ T4287] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.316'. [ 41.091299][ T4034] veth0_vlan: entered promiscuous mode [ 41.099408][ T4034] veth1_vlan: entered promiscuous mode [ 41.104912][ T4279] EXT4-fs warning (device loop4): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 41.112114][ T4034] veth0_macvtap: entered promiscuous mode [ 41.124137][ T4034] veth1_macvtap: entered promiscuous mode [ 41.135235][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.144326][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.158581][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.188575][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.216938][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.227472][ T4279] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 41.241354][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.297467][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.344826][ T4307] netlink: 60 bytes leftover after parsing attributes in process `syz.4.322'. [ 41.518977][ T4328] syz.3.332 (4328) used greatest stack depth: 10552 bytes left [ 41.590922][ T4341] loop2: detected capacity change from 0 to 512 [ 41.591283][ T4341] EXT4-fs: Ignoring removed i_version option [ 41.605441][ T4341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.734166][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.845684][ T4369] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 41.866000][ T4373] loop0: detected capacity change from 0 to 256 [ 41.873119][ T4375] kernel profiling enabled (shift: 3) [ 42.053942][ T4396] loop4: detected capacity change from 0 to 256 [ 42.065871][ T4396] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 42.065897][ T4396] FAT-fs (loop4): Filesystem has been set read-only [ 42.066169][ T4396] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 42.066464][ T4396] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 42.238703][ T4406] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 42.265509][ T4412] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 42.322184][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 42.322201][ T29] audit: type=1400 audit(1764524544.345:297): avc: denied { execmem } for pid=4416 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.349226][ T29] audit: type=1400 audit(1764524544.375:298): avc: denied { setopt } for pid=4418 comm="syz.5.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.416966][ T29] audit: type=1326 audit(1764524544.435:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.5.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613146f749 code=0x7ffc0000 [ 42.487201][ T4442] smc: net device bond0 applied user defined pnetid SYZ0 [ 42.494947][ T29] audit: type=1326 audit(1764524544.435:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10494cf749 code=0x7ffc0000 [ 42.518475][ T29] audit: type=1326 audit(1764524544.435:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10494cf749 code=0x7ffc0000 [ 42.541814][ T29] audit: type=1326 audit(1764524544.465:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f10494cf749 code=0x7ffc0000 [ 42.565345][ T29] audit: type=1326 audit(1764524544.465:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10494cf749 code=0x7ffc0000 [ 42.588797][ T29] audit: type=1326 audit(1764524544.465:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10494cf749 code=0x7ffc0000 [ 42.612152][ T29] audit: type=1326 audit(1764524544.465:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f10494cf749 code=0x7ffc0000 [ 42.635735][ T29] audit: type=1326 audit(1764524544.465:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4431 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10494cf749 code=0x7ffc0000 [ 42.847885][ T4468] loop4: detected capacity change from 0 to 4096 [ 42.859536][ T4468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.873892][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.916628][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.027541][ T4492] loop3: detected capacity change from 0 to 2048 [ 43.110662][ T4492] Alternate GPT is invalid, using primary GPT. [ 43.117243][ T4492] loop3: p2 p3 p7 [ 43.236592][ T3623] udevd[3623]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 43.249303][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 43.259740][ T3622] udevd[3622]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 43.272590][ T4526] loop2: detected capacity change from 0 to 512 [ 43.307487][ T4526] EXT4-fs: Ignoring removed oldalloc option [ 43.321772][ T4526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.354687][ T4526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 43.378950][ T4526] System zones: 1-3, 19-19, 35-38 [ 43.398598][ T4526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.432400][ T4526] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.459315][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.566324][ T4555] loop5: detected capacity change from 0 to 1024 [ 43.575667][ T4555] EXT4-fs: Ignoring removed bh option [ 43.619413][ T4555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.674868][ T4034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.803744][ T4576] syz.5.443 (4576) used greatest stack depth: 10448 bytes left [ 44.076041][ T4631] loop4: detected capacity change from 0 to 512 [ 44.109635][ T4631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.120227][ T3304] printk: udevd: 15 output lines suppressed due to ratelimiting [ 44.131195][ T4635] __nla_validate_parse: 3 callbacks suppressed [ 44.131213][ T4635] netlink: 48 bytes leftover after parsing attributes in process `syz.0.474'. [ 44.154739][ T4631] EXT4-fs (loop4): 1 truncate cleaned up [ 44.176898][ T4640] loop5: detected capacity change from 0 to 2048 [ 44.188258][ T4635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'. [ 44.188633][ T4631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.225101][ T4642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 44.295985][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.311850][ T4640] Alternate GPT is invalid, using primary GPT. [ 44.318480][ T4640] loop5: p2 p3 p7 [ 44.321357][ T4654] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 44.392515][ T4668] mmap: syz.5.488 (4668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.412233][ T4672] loop4: detected capacity change from 0 to 1024 [ 44.443723][ T4672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.465094][ T4672] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.482719][ T4683] ip6gre0: entered promiscuous mode [ 44.494111][ T4672] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.489: bg 0: block 112: padding at end of block bitmap is not set [ 44.506409][ T4683] team0: Device ip6gre0 is of different type [ 44.532622][ T4672] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 44.545224][ T4672] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.545224][ T4672] [ 44.564872][ T4696] loop5: detected capacity change from 0 to 512 [ 44.573333][ T4695] netlink: 296 bytes leftover after parsing attributes in process `syz.3.502'. [ 44.574894][ T4672] syz.4.489 (4672) used greatest stack depth: 10024 bytes left [ 44.616829][ T4696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.617506][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.640103][ T4696] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.670863][ T4696] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.503: corrupted xattr block 6: invalid header [ 44.693321][ T4696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 44.703346][ T4696] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.503: corrupted xattr block 6: invalid header [ 44.744455][ T4696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 44.754520][ T4696] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.503: corrupted xattr block 6: invalid header [ 44.772761][ T4696] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 44.814584][ T4034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.870409][ T4747] loop0: detected capacity change from 0 to 512 [ 44.877036][ T4747] EXT4-fs: Ignoring removed orlov option [ 44.900487][ T4747] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 44.918947][ T4747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 44.927893][ T4747] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.526: corrupted in-inode xattr: e_value size too large [ 44.949262][ T4753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 44.954289][ T4747] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.526: couldn't read orphan inode 15 (err -117) [ 44.960037][ T4753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.984194][ T4747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.002500][ T4747] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.526: bad entry in directory: rec_len is smaller than minimal - offset=828, inode=0, rec_len=0, size=1024 fake=0 [ 45.043352][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.056709][ T4753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.067164][ T4753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.094682][ T4770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.533'. [ 45.111617][ T4753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.121989][ T4753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.172165][ T4753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.182563][ T4753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.247181][ T61] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.255509][ T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.268764][ T61] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.277108][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.288538][ T61] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.296870][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.316885][ T61] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.325477][ T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.467547][ T4815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.557'. [ 45.495223][ T4817] netlink: 96 bytes leftover after parsing attributes in process `syz.4.558'. [ 45.504237][ T4817] netlink: 96 bytes leftover after parsing attributes in process `syz.4.558'. [ 45.911663][ T4858] loop4: detected capacity change from 0 to 512 [ 45.926468][ T4858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.948634][ T4858] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.577: bad orphan inode 131083 [ 45.966143][ T4858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.971303][ T4867] pim6reg: entered allmulticast mode [ 45.993483][ T4869] hub 9-0:1.0: USB hub found [ 45.999050][ T4869] hub 9-0:1.0: 8 ports detected [ 46.022876][ T4867] pim6reg: left allmulticast mode [ 46.051497][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.063274][ T4872] sch_fq: defrate 0 ignored. [ 46.225035][ T4906] loop3: detected capacity change from 0 to 512 [ 46.237415][ T4909] netlink: 92 bytes leftover after parsing attributes in process `syz.4.601'. [ 46.241122][ T4901] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 46.247045][ T4909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.601'. [ 46.301585][ T4906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.319572][ T4914] loop0: detected capacity change from 0 to 1024 [ 46.326223][ T4906] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.352200][ T4916] loop2: detected capacity change from 0 to 128 [ 46.362271][ T3328] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.363835][ T4916] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 46.379354][ T4916] FAT-fs (loop2): Filesystem has been set read-only [ 46.386339][ T4916] syz.2.604: attempt to access beyond end of device [ 46.386339][ T4916] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 46.401319][ T4914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.423472][ T4914] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.426167][ T4924] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 46.434514][ T4916] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 46.449964][ T4916] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 46.462110][ T4916] syz.2.604: attempt to access beyond end of device [ 46.462110][ T4916] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.479406][ T4914] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.603: bg 0: block 112: padding at end of block bitmap is not set [ 46.500173][ T4928] loop4: detected capacity change from 0 to 1024 [ 46.504354][ T4916] syz.2.604: attempt to access beyond end of device [ 46.504354][ T4916] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.509283][ T4914] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 46.533139][ T4914] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.533139][ T4914] [ 46.541896][ T4930] loop5: detected capacity change from 0 to 512 [ 46.551297][ T4928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 46.552104][ T4934] loop3: detected capacity change from 0 to 128 [ 46.564560][ T4928] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.581074][ T4930] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.611: inode has both inline data and extents flags [ 46.603829][ T4930] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.611: couldn't read orphan inode 15 (err -117) [ 46.617158][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.617858][ T4930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.644184][ T4930] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 46.669938][ T4034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.688930][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.698316][ T4942] loop0: detected capacity change from 0 to 736 [ 46.792235][ T4963] loop3: detected capacity change from 0 to 128 [ 46.792560][ T4961] tipc: Invalid UDP bearer configuration [ 46.798680][ T4961] tipc: Enabling of bearer rejected, failed to enable media [ 46.843692][ T4963] FAT-fs (loop3): Directory bread(block 32) failed [ 46.873692][ T4963] FAT-fs (loop3): Directory bread(block 33) failed [ 46.885604][ T4963] FAT-fs (loop3): Directory bread(block 34) failed [ 46.892523][ T4963] FAT-fs (loop3): Directory bread(block 35) failed [ 46.899667][ T4963] FAT-fs (loop3): Directory bread(block 36) failed [ 46.907831][ T4963] FAT-fs (loop3): Directory bread(block 37) failed [ 46.915326][ T4963] FAT-fs (loop3): Directory bread(block 38) failed [ 46.922570][ T4963] FAT-fs (loop3): Directory bread(block 39) failed [ 46.934608][ T4963] FAT-fs (loop3): Directory bread(block 40) failed [ 46.941652][ T4963] FAT-fs (loop3): Directory bread(block 41) failed [ 46.997962][ T4996] loop4: detected capacity change from 0 to 512 [ 47.029695][ T4996] EXT4-fs: Ignoring removed bh option [ 47.051247][ T4996] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.063127][ T4996] EXT4-fs (loop4): 1 truncate cleaned up [ 47.072344][ T4996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.099290][ T4996] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 47.130705][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.480331][ T5095] capability: warning: `syz.5.687' uses 32-bit capabilities (legacy support in use) [ 47.524086][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 47.524102][ T29] audit: type=1400 audit(1764524549.535:376): avc: denied { nlmsg_write } for pid=5101 comm="syz.5.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 47.581839][ T5115] netlink: 'syz.4.696': attribute type 49 has an invalid length. [ 47.623058][ T5123] loop4: detected capacity change from 0 to 512 [ 47.630426][ T5123] EXT4-fs: Ignoring removed bh option [ 47.636359][ T5123] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.646458][ T5123] EXT4-fs (loop4): 1 truncate cleaned up [ 47.653153][ T5123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.667704][ T5123] EXT4-fs warning (device loop4): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 47.716764][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.725896][ T5131] loop0: detected capacity change from 0 to 512 [ 47.732912][ T5131] EXT4-fs: Ignoring removed i_version option [ 47.739057][ T5131] EXT4-fs: Ignoring removed bh option [ 47.766033][ T5131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.779760][ T5131] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.791200][ T5134] loop5: detected capacity change from 0 to 2048 [ 47.803670][ T29] audit: type=1400 audit(2000000000.230:377): avc: denied { append } for pid=5130 comm="syz.0.703" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.840273][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.859636][ T5134] EXT4-fs (loop5): failed to initialize system zone (-117) [ 47.866913][ T29] audit: type=1400 audit(2000000000.290:378): avc: denied { create } for pid=5146 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 47.879822][ T5151] loop0: detected capacity change from 0 to 1024 [ 47.886243][ T29] audit: type=1400 audit(2000000000.290:379): avc: denied { bind } for pid=5146 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 47.893740][ T5151] EXT4-fs: inline encryption not supported [ 47.917667][ T5134] EXT4-fs (loop5): mount failed [ 47.934420][ T5151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.995558][ T5151] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 48.018477][ T5151] EXT4-fs (loop0): Remounting filesystem read-only [ 48.060666][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.069848][ T5171] loop5: detected capacity change from 0 to 4096 [ 48.076583][ T5171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.089228][ T5171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.113481][ T5171] SELinux: Context @|0AWiSѱ4$ EtڍygBEEA2zLp{c|^;tݾHRן臟g is not valid (left unmapped). [ 48.127444][ T29] audit: type=1400 audit(2000000000.540:380): avc: denied { append } for pid=5170 comm="syz.5.720" path="/69/file0/cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.151530][ T29] audit: type=1400 audit(2000000000.560:381): avc: denied { relabelto } for pid=5170 comm="syz.5.720" name="cgroup.controllers" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=4018937C08C130AE4195D957691BE45389BED1B11A348DC024800B9CD4457410DA8D1879D66742B145BC110645C7418A327A144CB3BB9770047B08637C5E3B74DDBEEE4852D79FE8879F02C1F167 [ 48.195612][ T29] audit: type=1400 audit(2000000000.620:382): avc: denied { ioctl } for pid=5183 comm="syz.3.735" path="socket:[11381]" dev="sockfs" ino=11381 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.228087][ T4034] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.260115][ T29] audit: type=1400 audit(2000000000.690:383): avc: denied { kexec_image_load } for pid=5187 comm="syz.3.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 48.294256][ T5192] loop5: detected capacity change from 0 to 764 [ 48.301214][ T5191] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 48.354534][ T29] audit: type=1400 audit(2000000000.780:384): avc: denied { connect } for pid=5195 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.384164][ T29] audit: type=1400 audit(2000000000.800:385): avc: denied { write } for pid=5195 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.636947][ T5251] loop0: detected capacity change from 0 to 128 [ 48.648849][ T5251] FAT-fs (loop0): Directory bread(block 32) failed [ 48.656151][ T5251] FAT-fs (loop0): Directory bread(block 33) failed [ 48.666967][ T5251] FAT-fs (loop0): Directory bread(block 34) failed [ 48.674341][ T5251] FAT-fs (loop0): Directory bread(block 35) failed [ 48.681364][ T5251] FAT-fs (loop0): Directory bread(block 36) failed [ 48.688261][ T5251] FAT-fs (loop0): Directory bread(block 37) failed [ 48.695421][ T5251] FAT-fs (loop0): Directory bread(block 38) failed [ 48.702108][ T5251] FAT-fs (loop0): Directory bread(block 39) failed [ 48.711393][ T5251] FAT-fs (loop0): Directory bread(block 40) failed [ 48.718190][ T5251] FAT-fs (loop0): Directory bread(block 41) failed [ 48.825221][ T5277] sctp: [Deprecated]: syz.5.772 (pid 5277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.825221][ T5277] Use struct sctp_sack_info instead [ 48.842683][ T5277] sctp: [Deprecated]: syz.5.772 (pid 5277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.842683][ T5277] Use struct sctp_sack_info instead [ 48.901556][ T5279] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 48.920799][ T5283] pim6reg: entered allmulticast mode [ 48.999615][ T5297] loop2: detected capacity change from 0 to 128 [ 49.035607][ T5303] syz.5.785 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.058597][ T5297] FAT-fs (loop2): Directory bread(block 32) failed [ 49.065315][ T5297] FAT-fs (loop2): Directory bread(block 33) failed [ 49.072249][ T5297] FAT-fs (loop2): Directory bread(block 34) failed [ 49.079381][ T5297] FAT-fs (loop2): Directory bread(block 35) failed [ 49.086283][ T5298] ================================================================== [ 49.094664][ T5298] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 49.102079][ T5298] [ 49.104413][ T5298] read-write to 0xffff8881071c8fe0 of 8 bytes by task 31 on cpu 0: [ 49.112303][ T5298] __xa_clear_mark+0xf5/0x1e0 [ 49.116988][ T5298] __folio_end_writeback+0xf7/0x3b0 [ 49.122192][ T5298] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 49.128543][ T5298] folio_end_writeback+0x1c/0x70 [ 49.133493][ T5298] ext4_finish_bio+0x459/0x8c0 [ 49.138356][ T5298] ext4_release_io_end+0x9f/0x1f0 [ 49.143393][ T5298] ext4_end_io_end+0x18d/0x240 [ 49.148170][ T5298] ext4_end_io_rsv_work+0x151/0x1e0 [ 49.153379][ T5298] process_scheduled_works+0x4ce/0x9d0 [ 49.158882][ T5298] worker_thread+0x582/0x770 [ 49.163570][ T5298] kthread+0x489/0x510 [ 49.167644][ T5298] ret_from_fork+0x122/0x1b0 [ 49.172236][ T5298] ret_from_fork_asm+0x1a/0x30 [ 49.177007][ T5298] [ 49.179330][ T5298] read to 0xffff8881071c8fe0 of 8 bytes by task 5298 on cpu 1: [ 49.186957][ T5298] xas_find_marked+0x218/0x620 [ 49.191723][ T5298] find_get_entry+0x5d/0x380 [ 49.196322][ T5298] filemap_get_folios_tag+0x92/0x210 [ 49.201791][ T5298] filemap_fdatawait_keep_errors+0x6c/0x180 [ 49.207738][ T5298] sync_inodes_sb+0x39c/0x440 [ 49.212424][ T5298] sync_inodes_one_sb+0x3d/0x50 [ 49.217366][ T5298] __iterate_supers+0x110/0x220 [ 49.222350][ T5298] iterate_supers+0x1f/0x30 [ 49.226854][ T5298] ksys_sync+0x5c/0xe0 [ 49.230927][ T5298] __ia32_sys_sync+0xe/0x20 [ 49.235437][ T5298] x64_sys_call+0x2d1f/0x3000 [ 49.240126][ T5298] do_syscall_64+0xd2/0x200 [ 49.244649][ T5298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.250566][ T5298] [ 49.252898][ T5298] value changed: 0xc000000000003ff0 -> 0xc000000000000000 [ 49.260010][ T5298] [ 49.262352][ T5298] Reported by Kernel Concurrency Sanitizer on: [ 49.268617][ T5298] CPU: 1 UID: 0 PID: 5298 Comm: syz.0.782 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 49.280014][ T5298] Tainted: [W]=WARN [ 49.283826][ T5298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.293901][ T5298] ================================================================== [ 49.302464][ T5297] FAT-fs (loop2): Directory bread(block 36) failed [ 49.309314][ T5297] FAT-fs (loop2): Directory bread(block 37) failed [ 49.315856][ T5297] FAT-fs (loop2): Directory bread(block 38) failed [ 49.325620][ T5297] FAT-fs (loop2): Directory bread(block 39) failed [ 49.332430][ T5297] FAT-fs (loop2): Directory bread(block 40) failed [ 49.339056][ T5297] FAT-fs (loop2): Directory bread(block 41) failed