last executing test programs: 897.531202ms ago: executing program 0 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 794.683396ms ago: executing program 0 (id=227): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x8001}}, {@auto_da_alloc}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0xfe37, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f0000000880), &(0x7f00000008c0)=ANY=[], 0x34, 0x2) 761.779718ms ago: executing program 4 (id=229): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) syz_clone(0x4c82a000, &(0x7f0000000040)="ee9d8ed01de7cd4f6f7070", 0xb, 0x0, 0x0, 0x0) 489.98649ms ago: executing program 4 (id=237): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0xffffff67}], 0x1, 0x0, 0x7}}], 0x48, 0x20000004}, 0x0) 389.863914ms ago: executing program 2 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) stat(0x0, 0x0) 365.220995ms ago: executing program 2 (id=240): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x29, 0xb, '1'}], 0x18}, 0x0) 358.323215ms ago: executing program 3 (id=241): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 339.519336ms ago: executing program 4 (id=242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090000000000080009000000fffe"], 0x184}}, 0x0) 332.494636ms ago: executing program 2 (id=243): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) close(0x3) 330.140926ms ago: executing program 1 (id=244): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 316.217607ms ago: executing program 0 (id=245): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) 295.671928ms ago: executing program 3 (id=246): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x2b, 0x5, 0x0, 0x7fffffff, 0x105}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x4, 0x7, 0xb}) 293.361228ms ago: executing program 4 (id=247): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x7, 0x400004, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f00000008c0)="4d2e2e7c8bdc1151d665fe", 0xb}], 0x1) 272.116309ms ago: executing program 1 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffc) 266.196489ms ago: executing program 2 (id=249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x400454ce, 0x0) 242.49481ms ago: executing program 3 (id=250): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000220404001400350077673000"/25], 0x34}}, 0x0) 230.51508ms ago: executing program 1 (id=251): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) 221.036221ms ago: executing program 3 (id=252): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 187.267192ms ago: executing program 0 (id=253): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000e0001006e6574ee04ccb1696d0000000f000259"], 0x34}}, 0x6048800) 173.367553ms ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27a7}]}]}]}, 0x3c}}, 0x0) 173.168223ms ago: executing program 3 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000026c0)={0x18, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 144.583914ms ago: executing program 2 (id=256): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 137.251124ms ago: executing program 4 (id=257): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r0, &(0x7f0000002380)=""/130, 0x82) 122.163575ms ago: executing program 2 (id=258): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) sync() 101.121466ms ago: executing program 1 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5041}, 0x4000000) 95.294956ms ago: executing program 3 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x1000) 87.037497ms ago: executing program 0 (id=261): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x41}, {[@ssrr={0x89, 0x7, 0xf3, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 51.044969ms ago: executing program 4 (id=262): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40}}, {@oldalloc}, {@debug}, {@usrjquota}]}, 0x1, 0x4c5, &(0x7f0000000a40)="$eJzs3d1rW+cZAPBHUuzYjrd8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxbcVPLlrHkNDa5cNq7XPSitLRQetH7/gW9aa4aCqXXLb0tvSgpbepCWyio6Ehy/CE5aupIjc/vByd6z3sUPe8r8bw+es85OgGk1tnaP5mI4Yh4LyKO1le3P+Fs/WHj/s2Z2pKJavXyZ5nkebX15lOb/+9IRKxHxEBE/OtvEf/P7I5bXl2bny4WC8uN9XxlYSlfXl27cG1heq4wV1gcm7w4NTU5OjE+tW99vf3807cvvfmP/je+eu7e3RfefqvWrOHGtq392E/1rvfF8S11hyLiz48jWA/kGv0Z7HVDeCS1z+9nEXEuyf+jkUs+TSANqtVq9dvq4Xab16vAgZVN9oEz2ZGIqJez2ZGR+j78z2MoWyyVK7+/WlpZnK3vKx+LvuzVa8XCaOO7wrHoy9TWx5Lyg/XxHesTEck+8Iu5wWR9ZKZUnO3uUAfscGRH/n+Zq+c/kBK+8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0ivvfK/v4vtALrqn5cu1ZZq8/r32eurK/Ol6xdmC+X5kYWVmZGZ0vLSyFypNJdcs7PwsNcrlkpLY3+IlRv5SqFcyZdX164slFYWK1eS6/qvFPq60iugE8fP3PkgExHrfxxMltjyJ1+uwsFWrWai19cgA72R6/UABPSMqX9Ir+/xHb/tj4QBT7YWP9G7zUDr6r/E0uNoDdAN2V43AOiZ86cc/4O0Mv8P6WX+H9LLPj7wiPP/Yf4fnlzm/yG9htvc/+snW+7dNRoRP42I93N9h5v3+gIOguwnmcb+//mjvx7eubU/83VyiKA/Ip559fLLN6YrleWxWv3nm/WVVxr1471oP9CpZp428xgASK+N+zdnmks343761/pJCLvjH2rMTQ4kxyiHNjLbzlXI7NO5C+u3IuJkq/iZxv3O60c+hjZyu+KfaDxm6i+RtPdQct/07sQ/tSX+r7bEP/2D3xVIhzu18We0Vf5lk5yOzfzbPv4M79O5E+3Hv+zm+JdrM/6d6TDGU689+3Hb+LciTreM34w3kMTaGb/WtvMdxr/333//ot226uv112kVv6lWylcWlvLl1bULye/IzRUWxyYvTk1Njk6MT+WTOep8c6Z6tz+dfPfuXv0fahO/3t8PW/a/VvfbDvv/zS/f+c/ZPeL/5lzrz/9E8tj6/R+MiN91GP+L8Y/+125bLf5sm/5n94hfq5voMH75pb+7dhgAfkTKq2vz08ViYVlBQUFhs/CwkWO9OwMU8Ng8SPpetwQAAAAAAAAAAADoVDdOJ+51HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoLvAgAA//+tldf6") syz_io_uring_submit(0x0, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 12.77796ms ago: executing program 1 (id=263): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.276603][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 19.276620][ T29] audit: type=1400 audit(1764164594.962:57): avc: denied { transition } for pid=3190 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.281313][ T29] audit: type=1400 audit(1764164594.962:58): avc: denied { noatsecure } for pid=3190 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.284330][ T29] audit: type=1400 audit(1764164594.962:59): avc: denied { write } for pid=3190 comm="sh" path="pipe:[1488]" dev="pipefs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.287621][ T29] audit: type=1400 audit(1764164594.962:60): avc: denied { rlimitinh } for pid=3190 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.290414][ T29] audit: type=1400 audit(1764164594.962:61): avc: denied { siginh } for pid=3190 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 27.577446][ T29] audit: type=1400 audit(1764164603.262:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.600689][ T29] audit: type=1400 audit(1764164603.292:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.623876][ T3299] cgroup: Unknown subsys name 'net' [ 27.629430][ T29] audit: type=1400 audit(1764164603.312:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.750851][ T3299] cgroup: Unknown subsys name 'cpuset' [ 27.757189][ T3299] cgroup: Unknown subsys name 'rlimit' [ 27.867844][ T29] audit: type=1400 audit(1764164603.552:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.891273][ T29] audit: type=1400 audit(1764164603.552:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.911866][ T29] audit: type=1400 audit(1764164603.552:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.932247][ T29] audit: type=1400 audit(1764164603.552:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.933224][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.952570][ T29] audit: type=1400 audit(1764164603.552:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.985880][ T29] audit: type=1400 audit(1764164603.552:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.009164][ T29] audit: type=1400 audit(1764164603.652:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.043422][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.062246][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.177416][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.187796][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.194912][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.202043][ T3312] bridge_slave_0: entered allmulticast mode [ 29.208401][ T3312] bridge_slave_0: entered promiscuous mode [ 29.217014][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.224137][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.231270][ T3312] bridge_slave_1: entered allmulticast mode [ 29.237827][ T3312] bridge_slave_1: entered promiscuous mode [ 29.251971][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.281093][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.291226][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.363857][ T3312] team0: Port device team_slave_0 added [ 29.383750][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.390897][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.397980][ T3315] bridge_slave_0: entered allmulticast mode [ 29.404478][ T3315] bridge_slave_0: entered promiscuous mode [ 29.411687][ T3312] team0: Port device team_slave_1 added [ 29.424315][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.431461][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.438525][ T3320] bridge_slave_0: entered allmulticast mode [ 29.444931][ T3320] bridge_slave_0: entered promiscuous mode [ 29.453496][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.460661][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.467858][ T3315] bridge_slave_1: entered allmulticast mode [ 29.474366][ T3315] bridge_slave_1: entered promiscuous mode [ 29.485364][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.494106][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.501290][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.508416][ T3320] bridge_slave_1: entered allmulticast mode [ 29.514826][ T3320] bridge_slave_1: entered promiscuous mode [ 29.539324][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.546310][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.572229][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.585065][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.592035][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.617972][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.643539][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.652914][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.665922][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.681772][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.694698][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.748456][ T3312] hsr_slave_0: entered promiscuous mode [ 29.754561][ T3312] hsr_slave_1: entered promiscuous mode [ 29.761199][ T3315] team0: Port device team_slave_0 added [ 29.770858][ T3315] team0: Port device team_slave_1 added [ 29.782322][ T3320] team0: Port device team_slave_0 added [ 29.808213][ T3320] team0: Port device team_slave_1 added [ 29.814087][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.821180][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.828369][ T3313] bridge_slave_0: entered allmulticast mode [ 29.834735][ T3313] bridge_slave_0: entered promiscuous mode [ 29.861275][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.868366][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.875619][ T3313] bridge_slave_1: entered allmulticast mode [ 29.882125][ T3313] bridge_slave_1: entered promiscuous mode [ 29.899058][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.906063][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.932079][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.943132][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.950115][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.976076][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.999185][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.006399][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.013619][ T3316] bridge_slave_0: entered allmulticast mode [ 30.020128][ T3316] bridge_slave_0: entered promiscuous mode [ 30.027144][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.034129][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.060107][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.071384][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.078397][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.104377][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.122838][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.132059][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.139178][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.146338][ T3316] bridge_slave_1: entered allmulticast mode [ 30.152685][ T3316] bridge_slave_1: entered promiscuous mode [ 30.168386][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.192127][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.213899][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.253397][ T3313] team0: Port device team_slave_0 added [ 30.259574][ T3316] team0: Port device team_slave_0 added [ 30.278778][ T3316] team0: Port device team_slave_1 added [ 30.285305][ T3313] team0: Port device team_slave_1 added [ 30.293180][ T3315] hsr_slave_0: entered promiscuous mode [ 30.299329][ T3315] hsr_slave_1: entered promiscuous mode [ 30.305326][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.311067][ T3315] Cannot create hsr debugfs directory [ 30.321829][ T3320] hsr_slave_0: entered promiscuous mode [ 30.327876][ T3320] hsr_slave_1: entered promiscuous mode [ 30.333729][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 30.339448][ T3320] Cannot create hsr debugfs directory [ 30.374992][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.382024][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.408098][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.424965][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.431950][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.457924][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.473855][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.480890][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.506941][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.526241][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.533289][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.559281][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.611846][ T3313] hsr_slave_0: entered promiscuous mode [ 30.617723][ T3313] hsr_slave_1: entered promiscuous mode [ 30.623642][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 30.629479][ T3313] Cannot create hsr debugfs directory [ 30.650676][ T3316] hsr_slave_0: entered promiscuous mode [ 30.656711][ T3316] hsr_slave_1: entered promiscuous mode [ 30.662596][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 30.668349][ T3316] Cannot create hsr debugfs directory [ 30.749518][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.757992][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.775908][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.787179][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.842289][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.851555][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.860608][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.873064][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.915305][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.924879][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.938210][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.950876][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.968397][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.988279][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.002312][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.011064][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.030734][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.041522][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.064475][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.071557][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.080324][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.087443][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.113213][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.122565][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.135368][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.144591][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.153235][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.177016][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.190970][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.208811][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.222329][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.229399][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.237830][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.244926][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.254749][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.261998][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.284466][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.291577][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.354101][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.371091][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.391885][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.422589][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.429691][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.442066][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.449154][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.462502][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.492193][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.503454][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.513884][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.527617][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.554082][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.561192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.571652][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.595517][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.606062][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.620052][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.627125][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.649132][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.748871][ T3315] veth0_vlan: entered promiscuous mode [ 31.767416][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.776550][ T3312] veth0_vlan: entered promiscuous mode [ 31.784531][ T3315] veth1_vlan: entered promiscuous mode [ 31.792603][ T3312] veth1_vlan: entered promiscuous mode [ 31.806398][ T3315] veth0_macvtap: entered promiscuous mode [ 31.834112][ T3315] veth1_macvtap: entered promiscuous mode [ 31.843053][ T3313] veth0_vlan: entered promiscuous mode [ 31.861726][ T3320] veth0_vlan: entered promiscuous mode [ 31.867506][ T3313] veth1_vlan: entered promiscuous mode [ 31.884095][ T3312] veth0_macvtap: entered promiscuous mode [ 31.899455][ T3320] veth1_vlan: entered promiscuous mode [ 31.906398][ T3312] veth1_macvtap: entered promiscuous mode [ 31.921723][ T3313] veth0_macvtap: entered promiscuous mode [ 31.928982][ T3313] veth1_macvtap: entered promiscuous mode [ 31.938032][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.953280][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.966858][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.978318][ T3320] veth0_macvtap: entered promiscuous mode [ 31.988311][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.999411][ T3320] veth1_macvtap: entered promiscuous mode [ 32.006378][ T408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.015858][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.023430][ T408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.037811][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.046621][ T3316] veth0_vlan: entered promiscuous mode [ 32.055330][ T408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.064179][ T408] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.079028][ T408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.088485][ T408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.097582][ T3316] veth1_vlan: entered promiscuous mode [ 32.107876][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.116879][ T408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.126432][ T408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.142172][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.151246][ T408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.166401][ T408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.175412][ T408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.204371][ T408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.223063][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.244706][ T3316] veth0_macvtap: entered promiscuous mode [ 32.263972][ T408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.274054][ T408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283946][ T408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295432][ T3316] veth1_macvtap: entered promiscuous mode [ 32.315959][ T1700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.330160][ T3488] ucma_write: process 4 (syz.0.6) changed security contexts after opening file descriptor, this is not allowed. [ 32.349288][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.404188][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.428851][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.447767][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.477104][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.510771][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.608489][ T3519] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 32.640145][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 32.640160][ T29] audit: type=1400 audit(1764164608.322:110): avc: denied { create } for pid=3520 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.682575][ T29] audit: type=1400 audit(1764164608.332:111): avc: denied { setopt } for pid=3520 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.719664][ T29] audit: type=1400 audit(1764164608.402:112): avc: denied { write } for pid=3527 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.733691][ T3529] capability: warning: `syz.2.22' uses deprecated v2 capabilities in a way that may be insecure [ 32.792642][ T29] audit: type=1400 audit(1764164608.482:113): avc: denied { write } for pid=3534 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.812143][ T29] audit: type=1400 audit(1764164608.482:114): avc: denied { connect } for pid=3534 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.831610][ T29] audit: type=1400 audit(1764164608.482:115): avc: denied { name_connect } for pid=3534 comm="syz.1.25" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 32.872218][ T3539] loop2: detected capacity change from 0 to 1024 [ 32.901044][ T3539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.908435][ T29] audit: type=1400 audit(1764164608.592:116): avc: denied { getopt } for pid=3534 comm="syz.1.25" laddr=172.20.20.170 lport=36495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.938156][ T3538] loop3: detected capacity change from 0 to 4096 [ 32.951105][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.978312][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.992920][ T29] audit: type=1400 audit(1764164608.682:117): avc: denied { mount } for pid=3537 comm="syz.2.26" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.024962][ T3538] EXT4-fs error (device loop3): ext4_get_first_dir_block:3549: inode #12: block 80: comm syz.3.27: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 33.051038][ T3538] EXT4-fs error (device loop3): ext4_get_first_dir_block:3552: inode #12: comm syz.3.27: directory missing '..' [ 33.056554][ T29] audit: type=1400 audit(1764164608.682:118): avc: denied { add_name } for pid=3536 comm="syz.3.27" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.064203][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.083497][ T29] audit: type=1400 audit(1764164608.682:119): avc: denied { create } for pid=3536 comm="syz.3.27" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 33.145130][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.178409][ T3553] tmpfs: Bad value for 'mpol' [ 33.186793][ T3555] loop0: detected capacity change from 0 to 256 [ 33.202723][ T3555] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.251854][ T3555] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.264645][ T3561] loop3: detected capacity change from 0 to 1764 [ 33.378320][ T3573] xt_hashlimit: max too large, truncated to 1048576 [ 33.631140][ T3603] loop3: detected capacity change from 0 to 512 [ 33.648198][ T3603] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.660919][ T3603] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 33.661074][ T3603] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.56: bg 0: block 248: padding at end of block bitmap is not set [ 33.661241][ T3603] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.56: Failed to acquire dquot type 1 [ 33.661734][ T3603] EXT4-fs (loop3): 1 truncate cleaned up [ 33.662159][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 33.666796][ T3603] syz.3.56 (3603) used greatest stack depth: 9344 bytes left [ 33.691655][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 33.714273][ T3612] loop0: detected capacity change from 0 to 512 [ 33.767337][ T3612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.785254][ T3612] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.834531][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.851024][ T3629] loop1: detected capacity change from 0 to 128 [ 33.860624][ T3629] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 33.873624][ T3629] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.880631][ T3626] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.925892][ T3634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.68'. [ 33.953280][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.033563][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 34.063309][ T3652] syz.2.77 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.083731][ T3654] loop4: detected capacity change from 0 to 164 [ 34.110567][ T3654] ======================================================= [ 34.110567][ T3654] WARNING: The mand mount option has been deprecated and [ 34.110567][ T3654] and is ignored by this kernel. Remove the mand [ 34.110567][ T3654] option from the mount to silence this warning. [ 34.110567][ T3654] ======================================================= [ 34.166904][ T3654] binfmt_misc: register: failed to install interpreter file ./file1 [ 34.182697][ T3664] loop1: detected capacity change from 0 to 1024 [ 34.185944][ T3664] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 34.221657][ T3664] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.225378][ T3673] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 34.240602][ T3664] EXT4-fs (loop1): invalid journal inode [ 34.259372][ T3664] EXT4-fs (loop1): can't get journal size [ 34.259615][ T3673] Zero length message leads to an empty skb [ 34.262885][ T3664] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.82: blocks 48-48 from inode overlap system zone [ 34.268772][ T3664] EXT4-fs (loop1): failed to initialize system zone (-117) [ 34.268832][ T3664] EXT4-fs (loop1): mount failed [ 34.309388][ T3681] loop3: detected capacity change from 0 to 512 [ 34.345043][ T3681] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.345212][ T3681] EXT4-fs (loop3): mount failed [ 34.404910][ T3694] bridge1: entered promiscuous mode [ 34.404927][ T3694] bridge1: entered allmulticast mode [ 34.406952][ T3694] team0: Port device bridge1 added [ 34.628815][ T3720] capability: warning: `syz.3.109' uses 32-bit capabilities (legacy support in use) [ 34.819773][ T3746] loop4: detected capacity change from 0 to 512 [ 34.834160][ T3746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.847369][ T3746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.850116][ T3750] loop0: detected capacity change from 0 to 128 [ 34.865585][ T3746] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.120: Invalid block bitmap block 0 in block_group 0 [ 34.879078][ T3753] loop2: detected capacity change from 0 to 2048 [ 34.881653][ T3746] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 34.886226][ T3750] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.895573][ T3746] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.120: attempt to clear invalid blocks 983261 len 1 [ 34.906291][ T3750] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.920975][ T3746] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.120: Invalid inode table block 0 in block_group 0 [ 34.943440][ T3746] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 34.943829][ T3753] Alternate GPT is invalid, using primary GPT. [ 34.957848][ T3746] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 34.959290][ T3753] loop2: p2 p3 p7 [ 34.995583][ T3746] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.120: Invalid inode table block 0 in block_group 0 [ 35.030639][ T408] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.067074][ T3765] loop0: detected capacity change from 0 to 512 [ 35.074006][ T3746] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 35.079248][ T3765] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.128: inode has both inline data and extents flags [ 35.089122][ T3746] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.120: mark_inode_dirty error [ 35.108614][ T3765] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.128: couldn't read orphan inode 15 (err -117) [ 35.125711][ T3770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.132'. [ 35.135806][ T3746] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 35.135843][ T3765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.159180][ T3746] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.120: Invalid inode table block 0 in block_group 0 [ 35.180540][ T3746] EXT4-fs (loop4): 1 truncate cleaned up [ 35.185719][ T3773] loop2: detected capacity change from 0 to 512 [ 35.186735][ T3746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.215505][ T3765] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1057052516 > max in inode 18 [ 35.282575][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.292484][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.364791][ T3795] vlan2: entered promiscuous mode [ 35.369897][ T3795] bridge0: entered promiscuous mode [ 35.398161][ T3798] loop4: detected capacity change from 0 to 1024 [ 35.415421][ T3802] loop1: detected capacity change from 0 to 512 [ 35.428208][ T3805] loop3: detected capacity change from 0 to 164 [ 35.434776][ T3798] EXT4-fs: Ignoring removed oldalloc option [ 35.441250][ T3802] EXT4-fs: inline encryption not supported [ 35.447151][ T3802] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.619549][ T3798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.640922][ T3802] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.144: inode #13: comm syz.1.144: iget: illegal inode # [ 35.667151][ T3798] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.672274][ T3819] loop2: detected capacity change from 0 to 512 [ 35.678122][ T3802] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.144: couldn't read orphan inode 13 (err -117) [ 35.697064][ T3802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.700775][ T3798] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.146: lblock 0 mapped to illegal pblock 0 (length 1) [ 35.727452][ T3819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.741563][ T3802] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 35.758362][ T3798] EXT4-fs (loop4): Remounting filesystem read-only [ 35.778852][ T3802] EXT4-fs error (device loop1): __ext4_remount:6748: comm syz.1.144: Abort forced by user [ 35.801085][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.811274][ T3819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.823879][ T3819] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.886166][ T3802] EXT4-fs (loop1): Remounting filesystem read-only [ 35.892763][ T3802] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 35.921740][ T3831] loop4: detected capacity change from 0 to 128 [ 35.935735][ T3819] EXT4-fs error (device loop2): ext4_rename:3812: inode #16: comm syz.2.153: target of rename is already freed [ 35.970697][ T3831] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.990912][ T3836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 36.019418][ T3831] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.053920][ T3836] vlan2: entered promiscuous mode [ 36.058984][ T3836] gretap0: entered promiscuous mode [ 36.071252][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.081856][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.092283][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.262434][ T3868] loop2: detected capacity change from 0 to 128 [ 36.272120][ T3868] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.361696][ T3868] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.395120][ T3879] tmpfs: Bad value for 'mpol' [ 36.431393][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.486648][ T3896] loop0: detected capacity change from 0 to 512 [ 36.488149][ T3896] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.521780][ T3896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 36.521829][ T3896] System zones: 1-12 [ 36.522129][ T3896] EXT4-fs (loop0): 1 truncate cleaned up [ 36.522661][ T3896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.640971][ T3910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 36.666749][ T3896] EXT4-fs warning (device loop0): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new) [ 36.666788][ T3896] EXT4-fs warning (device loop0): ext4_group_extend:1891: can't read last block, resize aborted [ 36.731159][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.843602][ T3928] loop0: detected capacity change from 0 to 128 [ 36.864510][ T3928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 36.984967][ T3946] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 36.986563][ T3945] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 36.986580][ T3945] netlink: 244 bytes leftover after parsing attributes in process `syz.1.211'. [ 37.178714][ T3967] vlan2: entered promiscuous mode [ 37.178729][ T3967] hsr0: entered promiscuous mode [ 37.178836][ T3967] vlan2: entered allmulticast mode [ 37.178849][ T3967] hsr0: entered allmulticast mode [ 37.178888][ T3967] hsr_slave_0: entered allmulticast mode [ 37.178903][ T3967] hsr_slave_1: entered allmulticast mode [ 37.259904][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 37.356275][ T3977] loop0: detected capacity change from 0 to 1024 [ 37.401585][ T3981] loop2: detected capacity change from 0 to 2048 [ 37.417322][ T3981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.438974][ T3977] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 37.500196][ T3987] netlink: 144 bytes leftover after parsing attributes in process `syz.3.230'. [ 37.511139][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.523704][ T3977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.651205][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 37.651221][ T29] audit: type=1400 audit(2000000003.850:241): avc: denied { setattr } for pid=3976 comm="syz.0.227" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.690957][ T4000] tipc: Enabling of bearer rejected, failed to enable media [ 37.715954][ T4006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 37.810935][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.940907][ T29] audit: type=1400 audit(2000000004.140:242): avc: denied { ioctl } for pid=4039 comm="syz.2.256" path="socket:[6492]" dev="sockfs" ino=6492 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.020433][ T29] audit: type=1400 audit(2000000004.140:243): avc: denied { write } for pid=4039 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.079611][ T4054] loop4: detected capacity change from 0 to 512 [ 38.103861][ T4045] ================================================================== [ 38.111984][ T4045] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 38.119401][ T4045] [ 38.121772][ T4045] read-write to 0xffff88810719e478 of 8 bytes by task 52 on cpu 1: [ 38.129685][ T4045] __xa_clear_mark+0xf5/0x1e0 [ 38.134395][ T4045] __folio_end_writeback+0xf7/0x3b0 [ 38.139620][ T4045] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 38.145887][ T4045] folio_end_writeback+0x1c/0x70 [ 38.150843][ T4045] ext4_finish_bio+0x459/0x8c0 [ 38.155629][ T4045] ext4_release_io_end+0x9f/0x1f0 [ 38.160668][ T4045] ext4_end_io_end+0x18d/0x240 [ 38.165458][ T4045] ext4_end_io_rsv_work+0x151/0x1e0 [ 38.170674][ T4045] process_scheduled_works+0x4ce/0x9d0 [ 38.176158][ T4045] worker_thread+0x582/0x770 [ 38.180758][ T4045] kthread+0x489/0x510 [ 38.184833][ T4045] ret_from_fork+0x122/0x1b0 [ 38.189432][ T4045] ret_from_fork_asm+0x1a/0x30 [ 38.194201][ T4045] [ 38.196547][ T4045] read to 0xffff88810719e478 of 8 bytes by task 4045 on cpu 0: [ 38.204093][ T4045] xas_find_marked+0x218/0x620 [ 38.208873][ T4045] find_get_entry+0x5d/0x380 [ 38.213481][ T4045] filemap_get_folios_tag+0x13b/0x210 [ 38.218871][ T4045] filemap_fdatawait_keep_errors+0x6c/0x180 [ 38.224784][ T4045] sync_inodes_sb+0x39c/0x440 [ 38.229479][ T4045] sync_inodes_one_sb+0x3d/0x50 [ 38.234341][ T4045] __iterate_supers+0x110/0x220 [ 38.239200][ T4045] iterate_supers+0x1f/0x30 [ 38.243714][ T4045] ksys_sync+0x5c/0xe0 [ 38.247797][ T4045] __ia32_sys_sync+0xe/0x20 [ 38.252306][ T4045] x64_sys_call+0x2d1f/0x3000 [ 38.256983][ T4045] do_syscall_64+0xd2/0x200 [ 38.261493][ T4045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.267390][ T4045] [ 38.269715][ T4045] value changed: 0xffff000000000000 -> 0x0000000000000000 [ 38.276818][ T4045] [ 38.279137][ T4045] Reported by Kernel Concurrency Sanitizer on: [ 38.285295][ T4045] CPU: 0 UID: 0 PID: 4045 Comm: syz.2.258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.294953][ T4045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.305098][ T4045] ================================================================== [ 38.313928][ T4054] EXT4-fs: Ignoring removed oldalloc option [ 38.325458][ T4054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.390923][ T4054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 38.398887][ T4054] System zones: 1-3, 19-19, 35-38 [ 38.430887][ T4054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.460924][ T4054] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.581448][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.