last executing test programs: 862.173603ms ago: executing program 3 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETIFF(r0, 0x800454d2, 0xfffffffffffffffe) 681.829337ms ago: executing program 3 (id=261): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0xfffffffd, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "280948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d4505d4992861ac00000600", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) 624.903108ms ago: executing program 1 (id=266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc6410000000000035090100000000009500000000000000b702000000000000db9af0ff41000000b5090000000000007b9af0ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffb70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 605.637828ms ago: executing program 3 (id=267): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xd1, 0x0, 0x0) 568.824049ms ago: executing program 1 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f00000003c0)=ANY=[@ANYBLOB='uid=']) 553.156339ms ago: executing program 0 (id=271): r0 = io_uring_setup(0x3, &(0x7f0000000040)={0x0, 0xc89e, 0x1000, 0x10008, 0x20002f7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x244072, 0xffffffffffffffff, 0x2d5c000) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000180)={0x2}, 0x0) 545.343839ms ago: executing program 3 (id=273): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4}, {0x1, 0x1, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 503.39743ms ago: executing program 0 (id=275): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xfff) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) 492.66801ms ago: executing program 3 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 470.528091ms ago: executing program 4 (id=277): unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) 444.316941ms ago: executing program 1 (id=278): socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlockall(0x5) 443.782592ms ago: executing program 3 (id=279): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x7, 0x80000}) 436.004952ms ago: executing program 4 (id=280): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 406.559122ms ago: executing program 0 (id=281): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4005b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0xec, 0x2c76f8f4, 0x6, 0x200c9cc}) 384.217022ms ago: executing program 4 (id=282): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0xff, 0x4, 0x81, 0xffffffff, 0x0, 0x17, 0x4, 0x0, [0x0, 0x100000]}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 355.454023ms ago: executing program 2 (id=283): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 314.932834ms ago: executing program 4 (id=284): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 272.179925ms ago: executing program 1 (id=285): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e02, 0x200c, @local, 0x80101}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 271.828805ms ago: executing program 4 (id=286): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 253.038665ms ago: executing program 1 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 248.324855ms ago: executing program 4 (id=288): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x5, 0x50f, &(0x7f00000006c0)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) 218.205916ms ago: executing program 0 (id=289): perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}) 199.825346ms ago: executing program 1 (id=290): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 199.419856ms ago: executing program 2 (id=291): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f91124fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 142.849507ms ago: executing program 2 (id=292): set_mempolicy(0x3, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0xb51c, 0x7fffffff, 0x0}) 88.654868ms ago: executing program 0 (id=293): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) 49.952739ms ago: executing program 2 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, 0xfffffffffffffffb) 28.156849ms ago: executing program 2 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x40, 0x36, 0xb}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.04697ms ago: executing program 2 (id=296): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsmount(r0, 0x0, 0x6) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000001cc0)='nolazytime', &(0x7f0000001d00)="6bc4fc", 0x3) 0s ago: executing program 0 (id=297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x773568b9b38b679a}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 29.306217][ T29] audit: type=1400 audit(1759519461.844:62): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.329246][ T29] audit: type=1400 audit(1759519461.874:63): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.330210][ T3285] cgroup: Unknown subsys name 'net' [ 29.356959][ T29] audit: type=1400 audit(1759519461.894:64): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.528526][ T3285] cgroup: Unknown subsys name 'cpuset' [ 29.534730][ T3285] cgroup: Unknown subsys name 'rlimit' [ 29.666172][ T29] audit: type=1400 audit(1759519462.204:65): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.693260][ T29] audit: type=1400 audit(1759519462.204:66): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.713864][ T29] audit: type=1400 audit(1759519462.204:67): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.722965][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.734262][ T29] audit: type=1400 audit(1759519462.204:68): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.763640][ T29] audit: type=1400 audit(1759519462.204:69): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.788526][ T29] audit: type=1400 audit(1759519462.204:70): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.811903][ T29] audit: type=1400 audit(1759519462.294:71): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.840063][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.975141][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 30.984391][ T3295] chnl_net:caif_netlink_parms(): no params data found [ 31.025112][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 31.082291][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 31.122127][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.129266][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.136506][ T3295] bridge_slave_0: entered allmulticast mode [ 31.142952][ T3295] bridge_slave_0: entered promiscuous mode [ 31.153630][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.160788][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.168099][ T3295] bridge_slave_1: entered allmulticast mode [ 31.174638][ T3295] bridge_slave_1: entered promiscuous mode [ 31.180755][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.187849][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.194972][ T3296] bridge_slave_0: entered allmulticast mode [ 31.201421][ T3296] bridge_slave_0: entered promiscuous mode [ 31.209801][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.216871][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.224139][ T3296] bridge_slave_1: entered allmulticast mode [ 31.230670][ T3296] bridge_slave_1: entered promiscuous mode [ 31.264871][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.272054][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.279316][ T3299] bridge_slave_0: entered allmulticast mode [ 31.285644][ T3299] bridge_slave_0: entered promiscuous mode [ 31.300438][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.314690][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.321846][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.329031][ T3299] bridge_slave_1: entered allmulticast mode [ 31.335513][ T3299] bridge_slave_1: entered promiscuous mode [ 31.341847][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 31.359264][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.369439][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.396336][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.415184][ T3295] team0: Port device team_slave_0 added [ 31.422120][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.446232][ T3295] team0: Port device team_slave_1 added [ 31.453032][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.462417][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.469628][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.476711][ T3304] bridge_slave_0: entered allmulticast mode [ 31.483150][ T3304] bridge_slave_0: entered promiscuous mode [ 31.511187][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.518288][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.525391][ T3304] bridge_slave_1: entered allmulticast mode [ 31.531922][ T3304] bridge_slave_1: entered promiscuous mode [ 31.538749][ T3296] team0: Port device team_slave_0 added [ 31.553222][ T3299] team0: Port device team_slave_0 added [ 31.564860][ T3296] team0: Port device team_slave_1 added [ 31.573058][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.580047][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.606186][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.617764][ T3299] team0: Port device team_slave_1 added [ 31.623812][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.630857][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.656830][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.690552][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.714722][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.721767][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.747781][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.759780][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.769288][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.776314][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.802492][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.813626][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.820639][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.846662][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.857731][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.864814][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.872074][ T3300] bridge_slave_0: entered allmulticast mode [ 31.878471][ T3300] bridge_slave_0: entered promiscuous mode [ 31.885778][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.892919][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.900067][ T3300] bridge_slave_1: entered allmulticast mode [ 31.906498][ T3300] bridge_slave_1: entered promiscuous mode [ 31.912765][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.919742][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.945760][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.983526][ T3304] team0: Port device team_slave_0 added [ 32.000873][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.015774][ T3304] team0: Port device team_slave_1 added [ 32.023738][ T3295] hsr_slave_0: entered promiscuous mode [ 32.029984][ T3295] hsr_slave_1: entered promiscuous mode [ 32.044727][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.082013][ T3296] hsr_slave_0: entered promiscuous mode [ 32.088122][ T3296] hsr_slave_1: entered promiscuous mode [ 32.093968][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.099772][ T3296] Cannot create hsr debugfs directory [ 32.107144][ T3299] hsr_slave_0: entered promiscuous mode [ 32.113279][ T3299] hsr_slave_1: entered promiscuous mode [ 32.119217][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 32.124939][ T3299] Cannot create hsr debugfs directory [ 32.136170][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.143153][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.169257][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.190774][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.197756][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.223784][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.235330][ T3300] team0: Port device team_slave_0 added [ 32.267929][ T3300] team0: Port device team_slave_1 added [ 32.327968][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.334992][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.361034][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.382596][ T3304] hsr_slave_0: entered promiscuous mode [ 32.388668][ T3304] hsr_slave_1: entered promiscuous mode [ 32.394492][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.400511][ T3304] Cannot create hsr debugfs directory [ 32.408610][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.415637][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.441569][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.521369][ T3300] hsr_slave_0: entered promiscuous mode [ 32.527399][ T3300] hsr_slave_1: entered promiscuous mode [ 32.533355][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.539175][ T3300] Cannot create hsr debugfs directory [ 32.607894][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.623300][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.642600][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.659354][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.688373][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.700939][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.713330][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.726656][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.744445][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.753634][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.762833][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.771885][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.815255][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.837257][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.846211][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.862295][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.899630][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.908233][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.917459][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.930991][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.942491][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.951568][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.966846][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.975264][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.989255][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.996353][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.011332][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.019519][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.027831][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.054969][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.065357][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.072538][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.081542][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.088646][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.124903][ T273] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.132446][ T273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.141328][ T273] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.148426][ T273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.170884][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.188801][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.206111][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.239225][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.267345][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.290797][ T273] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.297999][ T273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.334006][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.343084][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.350198][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.368285][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.401148][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.413560][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.455745][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.496671][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.503831][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.520620][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.557016][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.564236][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.587963][ T3295] veth0_vlan: entered promiscuous mode [ 33.616211][ T3296] veth0_vlan: entered promiscuous mode [ 33.630081][ T3296] veth1_vlan: entered promiscuous mode [ 33.648636][ T3299] veth0_vlan: entered promiscuous mode [ 33.655064][ T3295] veth1_vlan: entered promiscuous mode [ 33.665777][ T3299] veth1_vlan: entered promiscuous mode [ 33.696392][ T3299] veth0_macvtap: entered promiscuous mode [ 33.706746][ T3295] veth0_macvtap: entered promiscuous mode [ 33.722862][ T3299] veth1_macvtap: entered promiscuous mode [ 33.731186][ T3296] veth0_macvtap: entered promiscuous mode [ 33.739196][ T3295] veth1_macvtap: entered promiscuous mode [ 33.754335][ T3296] veth1_macvtap: entered promiscuous mode [ 33.765290][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.773858][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.788331][ T3304] veth0_vlan: entered promiscuous mode [ 33.795306][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.811511][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.822032][ T3304] veth1_vlan: entered promiscuous mode [ 33.829012][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.849353][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.858764][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.867591][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.882612][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.890228][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.899162][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.916850][ T3304] veth0_macvtap: entered promiscuous mode [ 33.926012][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.940656][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.952905][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.969902][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.980962][ T3304] veth1_macvtap: entered promiscuous mode [ 33.990418][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.014635][ T3460] loop4: detected capacity change from 0 to 256 [ 34.036193][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.047126][ T3460] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 34.055911][ T3460] FAT-fs (loop4): Filesystem has been set read-only [ 34.067921][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.082121][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.099966][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.117217][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.152319][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.173361][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.201352][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.211524][ T3300] veth0_vlan: entered promiscuous mode [ 34.224570][ T2420] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.238899][ T3300] veth1_vlan: entered promiscuous mode [ 34.256560][ T2420] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.279831][ T1033] kernel write not supported for file /4/net/psched (pid: 1033 comm: kworker/1:2) [ 34.282271][ T3300] veth0_macvtap: entered promiscuous mode [ 34.302070][ T3300] veth1_macvtap: entered promiscuous mode [ 34.334107][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.348916][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.367262][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.376262][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 34.376278][ T29] audit: type=1400 audit(1759519466.914:99): avc: denied { create } for pid=3481 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.410831][ T29] audit: type=1400 audit(1759519466.924:100): avc: denied { setopt } for pid=3481 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.430355][ T29] audit: type=1400 audit(1759519466.924:101): avc: denied { read } for pid=3481 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.453898][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.469148][ T2420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.487178][ T29] audit: type=1400 audit(1759519467.004:102): avc: denied { create } for pid=3485 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.505017][ T2420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.519730][ T29] audit: type=1400 audit(1759519467.034:103): avc: denied { connect } for pid=3485 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.539131][ T29] audit: type=1400 audit(1759519467.044:104): avc: denied { write } for pid=3485 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.558442][ T29] audit: type=1400 audit(1759519467.044:105): avc: denied { prog_load } for pid=3487 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.577349][ T29] audit: type=1400 audit(1759519467.044:106): avc: denied { perfmon } for pid=3487 comm="syz.2.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.598071][ T29] audit: type=1400 audit(1759519467.044:107): avc: denied { prog_run } for pid=3487 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.616889][ T29] audit: type=1400 audit(1759519467.044:108): avc: denied { allowed } for pid=3488 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.685864][ T3498] team0: Cannot enslave team device to itself [ 34.692052][ T3498] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 34.815940][ T3509] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.010937][ T3532] netlink: 256 bytes leftover after parsing attributes in process `syz.4.31'. [ 35.100177][ T3542] loop1: detected capacity change from 0 to 2048 [ 35.153234][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.167198][ T3551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.39'. [ 35.214141][ T3542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'. [ 35.230467][ T3556] loop4: detected capacity change from 0 to 1024 [ 35.245265][ T3556] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.41: Failed to acquire dquot type 0 [ 35.263511][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.277419][ T3556] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 35.323758][ T3556] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 35.361815][ T3556] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.41: mark_inode_dirty error [ 35.399751][ T3556] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 35.448343][ T3556] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.41: mark_inode_dirty error [ 35.471933][ T3578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 35.480825][ T3578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.51'. [ 35.498118][ T3556] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 35.516135][ T3556] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 35.524934][ T3556] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.41: corrupted inode contents [ 35.542225][ T3556] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.41: mark_inode_dirty error [ 35.555264][ T3556] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 35.565833][ T3556] EXT4-fs (loop4): 1 truncate cleaned up [ 35.572224][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.605997][ T3556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.636427][ T3596] sock: sock_set_timeout: `syz.0.59' (pid 3596) tries to set negative timeout [ 35.854603][ T3628] loop3: detected capacity change from 0 to 512 [ 35.889357][ T3628] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 35.905074][ T3628] System zones: 0-2, 18-18, 34-35 [ 35.907885][ T3638] capability: warning: `syz.4.78' uses deprecated v2 capabilities in a way that may be insecure [ 35.917201][ T3628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.936691][ T3628] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.023802][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.219629][ T3671] loop2: detected capacity change from 0 to 1024 [ 36.238137][ T3671] ======================================================= [ 36.238137][ T3671] WARNING: The mand mount option has been deprecated and [ 36.238137][ T3671] and is ignored by this kernel. Remove the mand [ 36.238137][ T3671] option from the mount to silence this warning. [ 36.238137][ T3671] ======================================================= [ 36.282502][ T3671] EXT4-fs: Ignoring removed nobh option [ 36.295947][ T3671] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.312505][ T3677] loop4: detected capacity change from 0 to 512 [ 36.319563][ T3681] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 36.331820][ T3671] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.94: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 36.354511][ T3677] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.376160][ T3671] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.94: couldn't read orphan inode 11 (err -117) [ 36.436796][ T3671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.453496][ T3671] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.94: Invalid block bitmap block 0 in block_group 0 [ 36.467120][ T3671] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.94: Failed to acquire dquot type 0 [ 36.494484][ T3671] syz.2.94 (3671) used greatest stack depth: 10128 bytes left [ 36.512725][ T3688] netlink: 8460 bytes leftover after parsing attributes in process `syz.4.104'. [ 36.529547][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 36.557655][ T3690] veth0_macvtap: left promiscuous mode [ 36.585642][ T273] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm kworker/u8:5: Invalid inode table block 51539607553 in block_group 0 [ 36.608814][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.694389][ T3696] loop3: detected capacity change from 0 to 764 [ 36.871635][ T3708] capability: warning: `syz.3.112' uses 32-bit capabilities (legacy support in use) [ 36.887164][ T3711] loop0: detected capacity change from 0 to 128 [ 36.896555][ T3714] loop2: detected capacity change from 0 to 256 [ 36.941759][ T3711] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 36.949781][ T3711] FAT-fs (loop0): Filesystem has been set read-only [ 36.984476][ T3711] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 37.058865][ T3721] loop2: detected capacity change from 0 to 2048 [ 37.113646][ T3731] netlink: 224 bytes leftover after parsing attributes in process `syz.4.122'. [ 37.131390][ T3629] Alternate GPT is invalid, using primary GPT. [ 37.137727][ T3629] loop2: p1 p2 p3 [ 37.153494][ T3731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.122'. [ 37.162478][ T3731] tipc: Started in network mode [ 37.167365][ T3731] tipc: Node identity 1, cluster identity 64 [ 37.173402][ T3731] tipc: Node number set to 1 [ 37.210024][ T3721] Alternate GPT is invalid, using primary GPT. [ 37.216336][ T3721] loop2: p1 p2 p3 [ 37.249320][ T3744] loop3: detected capacity change from 0 to 128 [ 37.286370][ T3744] syz.3.129: attempt to access beyond end of device [ 37.286370][ T3744] loop3: rw=2049, sector=138, nr_sectors = 80 limit=128 [ 37.337990][ T3744] syz.3.129: attempt to access beyond end of device [ 37.337990][ T3744] loop3: rw=2049, sector=234, nr_sectors = 6 limit=128 [ 37.357073][ T3749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 37.383661][ T3715] udevd[3715]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 37.386071][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 37.397481][ T3744] syz.3.129: attempt to access beyond end of device [ 37.397481][ T3744] loop3: rw=2049, sector=240, nr_sectors = 2 limit=128 [ 37.404749][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 37.416699][ T3744] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 37.468043][ T3744] syz.3.129: attempt to access beyond end of device [ 37.468043][ T3744] loop3: rw=2049, sector=242, nr_sectors = 6 limit=128 [ 37.510926][ T3763] loop2: detected capacity change from 0 to 512 [ 37.518732][ T3744] syz.3.129: attempt to access beyond end of device [ 37.518732][ T3744] loop3: rw=2049, sector=248, nr_sectors = 2 limit=128 [ 37.532184][ T3744] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 37.542265][ T3744] syz.3.129: attempt to access beyond end of device [ 37.542265][ T3744] loop3: rw=2049, sector=218, nr_sectors = 6 limit=128 [ 37.562484][ T3744] syz.3.129: attempt to access beyond end of device [ 37.562484][ T3744] loop3: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 37.575956][ T3744] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 37.585941][ T3744] syz.3.129: attempt to access beyond end of device [ 37.585941][ T3744] loop3: rw=2049, sector=226, nr_sectors = 6 limit=128 [ 37.605818][ T3763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.629312][ T3744] syz.3.129: attempt to access beyond end of device [ 37.629312][ T3744] loop3: rw=2049, sector=232, nr_sectors = 2 limit=128 [ 37.642713][ T3744] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 37.654669][ T3763] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.688907][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.804977][ T3799] loop4: detected capacity change from 0 to 128 [ 37.815653][ T3799] FAT-fs (loop4): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 37.861935][ T3799] FAT-fs (loop4): Directory bread(block 162) failed [ 37.882513][ T3799] FAT-fs (loop4): Directory bread(block 163) failed [ 37.900932][ T3799] FAT-fs (loop4): Directory bread(block 164) failed [ 37.907570][ T3799] FAT-fs (loop4): Directory bread(block 165) failed [ 37.908053][ T3810] loop0: detected capacity change from 0 to 4096 [ 37.950769][ T3799] FAT-fs (loop4): Directory bread(block 166) failed [ 37.959274][ T3810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.967589][ T3799] FAT-fs (loop4): Directory bread(block 167) failed [ 37.974668][ T3799] FAT-fs (loop4): Directory bread(block 168) failed [ 37.988172][ T3799] FAT-fs (loop4): Directory bread(block 169) failed [ 38.014338][ T3799] FAT-fs (loop4): Directory bread(block 162) failed [ 38.021388][ T3810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.036269][ T3823] sch_fq: defrate 4294967295 ignored. [ 38.042355][ T3799] FAT-fs (loop4): Directory bread(block 163) failed [ 38.064988][ T3799] syz.4.154: attempt to access beyond end of device [ 38.064988][ T3799] loop4: rw=3, sector=210, nr_sectors = 6 limit=128 [ 38.087393][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.110947][ T52] FAT-fs (loop4): Invalid FSINFO signature: 0x41610000, 0x61417272 (sector = 1) [ 38.163093][ T3836] loop0: detected capacity change from 0 to 512 [ 38.196053][ T3839] loop2: detected capacity change from 0 to 512 [ 38.225459][ T3839] journal_path: Non-blockdev passed as './bus' [ 38.226313][ T3836] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.168: corrupted in-inode xattr: invalid ea_ino [ 38.231954][ T3839] EXT4-fs: error: could not find journal device path [ 38.271893][ T3836] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.168: couldn't read orphan inode 15 (err -117) [ 38.315563][ T3836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.407590][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.549906][ T3875] loop3: detected capacity change from 0 to 2048 [ 38.600062][ T3776] GPT:first_usable_lbas don't match. [ 38.605438][ T3776] GPT:34 != 290 [ 38.608944][ T3776] GPT: Use GNU Parted to correct GPT errors. [ 38.615118][ T3776] loop3: p1 p2 p3 [ 38.754150][ T3899] loop2: detected capacity change from 0 to 1024 [ 38.780477][ T3875] GPT:first_usable_lbas don't match. [ 38.785896][ T3875] GPT:34 != 290 [ 38.789801][ T3875] GPT: Use GNU Parted to correct GPT errors. [ 38.795975][ T3875] loop3: p1 p2 p3 [ 38.807276][ T3899] EXT4-fs: Ignoring removed orlov option [ 38.869179][ T3899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.972614][ T3913] loop1: detected capacity change from 0 to 512 [ 39.021335][ T3913] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 39.041342][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.041695][ T3776] udevd[3776]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.062201][ T3715] udevd[3715]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.079691][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.090147][ T3913] EXT4-fs (loop1): orphan cleanup on readonly fs [ 39.107839][ T3913] EXT4-fs warning (device loop1): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.108143][ T3913] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 39.108575][ T3913] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.196: bg 0: block 40: padding at end of block bitmap is not set [ 39.109158][ T3913] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 39.109577][ T3913] EXT4-fs (loop1): 1 truncate cleaned up [ 39.110326][ T3913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.205553][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.301398][ T3935] hugetlbfs: Bad value '[' for mount option 'size' [ 39.301398][ T3935] [ 39.606220][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 39.606236][ T29] audit: type=1400 audit(1759519472.144:215): avc: denied { append } for pid=3948 comm="syz.1.212" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.949068][ T3959] tipc: Can't bind to reserved service type 1 [ 39.949072][ T29] audit: type=1400 audit(1759519472.494:216): avc: denied { bind } for pid=3958 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.204540][ T3984] loop1: detected capacity change from 0 to 512 [ 40.227443][ T3987] xt_l2tp: invalid flags combination: 0 [ 40.235722][ T3984] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.258562][ T3988] SELinux: security_context_str_to_sid (Ö) failed with errno=-22 [ 40.292024][ T3984] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 40.309882][ T3984] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.346990][ T29] audit: type=1400 audit(1759519472.864:217): avc: denied { bind } for pid=3991 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.366660][ T29] audit: type=1400 audit(1759519472.874:218): avc: denied { connect } for pid=3991 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.422004][ T3994] loop4: detected capacity change from 0 to 512 [ 40.450455][ T3994] FAT-fs (loop4): error, corrupted file size (i_pos 51, 9216) [ 40.477166][ T3984] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.229: corrupted inode contents [ 40.522603][ T3984] EXT4-fs (loop1): Remounting filesystem read-only [ 40.541667][ T3984] EXT4-fs (loop1): 1 truncate cleaned up [ 40.547498][ T2420] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.558155][ T2420] Quota error (device loop1): write_blk: dquota write failed [ 40.565546][ T2420] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 40.575689][ T2420] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.586253][ T2420] Quota error (device loop1): write_blk: dquota write failed [ 40.593674][ T2420] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 40.690410][ T2420] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.700677][ T2420] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 40.745268][ T2420] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 40.780210][ T3984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.817240][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.850097][ T4021] loop4: detected capacity change from 0 to 512 [ 40.873695][ T4021] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.881860][ T4021] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.897166][ T4021] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.244: corrupted inode contents [ 40.910968][ T4021] EXT4-fs (loop4): Remounting filesystem read-only [ 40.917613][ T4021] EXT4-fs (loop4): 1 truncate cleaned up [ 40.926470][ T273] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.937051][ T273] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.937247][ T4029] loop1: detected capacity change from 0 to 2048 [ 40.961329][ T273] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.972004][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.988041][ T4029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.001842][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.016924][ T4029] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.104752][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.373635][ T4059] loop4: detected capacity change from 0 to 128 [ 41.417398][ T4059] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 41.425117][ T4059] FAT-fs (loop4): Filesystem has been set read-only [ 41.492496][ T4066] __nla_validate_parse: 5 callbacks suppressed [ 41.492587][ T4066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'. [ 41.521838][ T4071] netlink: 'syz.0.259': attribute type 2 has an invalid length. [ 41.529741][ T4071] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.259'. [ 41.564979][ T4077] Invalid logical block size (-3) [ 41.696368][ T4095] tracefs: Bad value for 'uid' [ 41.701273][ T4095] tracefs: Bad value for 'uid' [ 41.715534][ T4096] loop2: detected capacity change from 0 to 512 [ 41.723472][ T4101] tmpfs: Cannot disable swap on remount [ 41.768362][ T4096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.791082][ T4096] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.830436][ T4119] loop0: detected capacity change from 0 to 1024 [ 41.854076][ T4119] EXT4-fs: Ignoring removed nobh option [ 41.859822][ T4119] EXT4-fs: Ignoring removed bh option [ 41.873213][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.910710][ T4119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.000827][ T4135] loop4: detected capacity change from 0 to 512 [ 42.011571][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.035702][ T4135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.049140][ T4141] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.291'. [ 42.067478][ T4135] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.202925][ T4155] bridge_slave_1: default FDB implementation only supports local addresses [ 42.236493][ T3288] ================================================================== [ 42.244629][ T3288] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 42.251625][ T3288] [ 42.253971][ T3288] write to 0xffff888104129264 of 4 bytes by task 3776 on cpu 0: [ 42.261707][ T3288] shmem_mknod+0x137/0x180 [ 42.266159][ T3288] shmem_create+0x34/0x50 [ 42.270524][ T3288] path_openat+0x1105/0x2170 [ 42.275155][ T3288] do_filp_open+0x109/0x230 [ 42.279693][ T3288] do_sys_openat2+0xa6/0x110 [ 42.284323][ T3288] __x64_sys_openat+0xf2/0x120 [ 42.289104][ T3288] x64_sys_call+0x2eab/0x3000 [ 42.293796][ T3288] do_syscall_64+0xd2/0x200 [ 42.298308][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.304215][ T3288] [ 42.306627][ T3288] read to 0xffff888104129264 of 4 bytes by task 3288 on cpu 1: [ 42.314174][ T3288] fill_mg_cmtime+0x5b/0x260 [ 42.318814][ T3288] generic_fillattr+0x24a/0x340 [ 42.323701][ T3288] shmem_getattr+0x181/0x200 [ 42.328297][ T3288] vfs_getattr_nosec+0x146/0x1e0 [ 42.333250][ T3288] vfs_statx+0x113/0x390 [ 42.337506][ T3288] vfs_fstatat+0x115/0x170 [ 42.341935][ T3288] __se_sys_newfstatat+0x55/0x260 [ 42.346983][ T3288] __x64_sys_newfstatat+0x55/0x70 [ 42.352024][ T3288] x64_sys_call+0x135a/0x3000 [ 42.356710][ T3288] do_syscall_64+0xd2/0x200 [ 42.361242][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.367153][ T3288] [ 42.369487][ T3288] value changed: 0x2e02943f -> 0x2e2ba232 [ 42.375210][ T3288] [ 42.377717][ T3288] Reported by Kernel Concurrency Sanitizer on: [ 42.383886][ T3288] CPU: 1 UID: 0 PID: 3288 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.393176][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 42.403239][ T3288] ================================================================== [ 42.446012][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.