last executing test programs: 1.031102287s ago: executing program 4 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000010200ffff400004803c0001800b00010065787468647200002c000280050002008900000008000340000000d50800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x8000) 948.380535ms ago: executing program 4 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 948.029755ms ago: executing program 4 (id=692): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x2) 927.105298ms ago: executing program 4 (id=694): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) fallocate(r0, 0x8, 0x100000001, 0x9) 876.510333ms ago: executing program 4 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad00c5fce2b5cbaaadc5829fda", 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 572.983373ms ago: executing program 0 (id=714): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) 524.752358ms ago: executing program 0 (id=716): r0 = socket$inet6(0xa, 0x80002, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000600)=0x18000, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 524.607208ms ago: executing program 0 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 515.011129ms ago: executing program 0 (id=719): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0xb, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) 498.36908ms ago: executing program 2 (id=720): unshare(0x22020600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x19, 0x0, &(0x7f0000000000)) 420.890538ms ago: executing program 0 (id=721): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 420.522678ms ago: executing program 2 (id=723): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) 420.246648ms ago: executing program 2 (id=725): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 243.827726ms ago: executing program 1 (id=728): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000024c0), r1}}, 0x18) 243.464376ms ago: executing program 2 (id=729): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x2000000) syz_io_uring_submit(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 230.077307ms ago: executing program 3 (id=730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x5c, r1, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}]}, 0x5c}}, 0x0) 217.608769ms ago: executing program 1 (id=731): r0 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) 140.840396ms ago: executing program 2 (id=732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 140.706816ms ago: executing program 3 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) 140.608606ms ago: executing program 2 (id=734): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000040)='\x00', 0x1, 0x3, 0x0, 0x2}]) 121.114968ms ago: executing program 1 (id=735): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000011c0)=""/105, 0x69}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f0000000340)=""/169, 0xa9}], 0x7}, 0x12002) 106.497949ms ago: executing program 3 (id=736): r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300), &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000)={0x5}, 0x1) 72.576963ms ago: executing program 3 (id=737): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) wait4(r0, 0x0, 0x80000000, 0x0) 72.474553ms ago: executing program 1 (id=738): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c010}, 0x20000800) 862.76µs ago: executing program 3 (id=739): r0 = socket(0x10, 0x80002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpeername$netlink(r0, 0x0, &(0x7f00000001c0)) 594.65µs ago: executing program 1 (id=740): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x160}], 0x1, 0x0, 0x0, 0x0) 447.64µs ago: executing program 4 (id=741): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) 264.57µs ago: executing program 0 (id=742): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) 167.76µs ago: executing program 3 (id=743): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f0000000580)="2b2043b397737ea4eb59ef3a97aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=744): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 22.267486][ T29] audit: type=1400 audit(1762953523.857:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.290510][ T29] audit: type=1400 audit(1762953523.877:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.291239][ T3300] cgroup: Unknown subsys name 'net' [ 22.318166][ T29] audit: type=1400 audit(1762953523.907:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.473079][ T3300] cgroup: Unknown subsys name 'cpuset' [ 22.479250][ T3300] cgroup: Unknown subsys name 'rlimit' [ 22.627964][ T29] audit: type=1400 audit(1762953524.217:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.651228][ T29] audit: type=1400 audit(1762953524.217:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.671797][ T29] audit: type=1400 audit(1762953524.217:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.692147][ T29] audit: type=1400 audit(1762953524.217:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.697645][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.712500][ T29] audit: type=1400 audit(1762953524.217:69): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.746040][ T29] audit: type=1400 audit(1762953524.217:70): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.765122][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.769271][ T29] audit: type=1400 audit(1762953524.307:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.791528][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 23.879244][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.886479][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.893806][ T3320] bridge_slave_0: entered allmulticast mode [ 23.900266][ T3320] bridge_slave_0: entered promiscuous mode [ 23.907084][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.914231][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.921334][ T3320] bridge_slave_1: entered allmulticast mode [ 23.927912][ T3320] bridge_slave_1: entered promiscuous mode [ 23.961517][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 23.971471][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.981628][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.010106][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 24.050217][ T3320] team0: Port device team_slave_0 added [ 24.071325][ T3320] team0: Port device team_slave_1 added [ 24.104715][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.111981][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.119772][ T3314] bridge_slave_0: entered allmulticast mode [ 24.126310][ T3314] bridge_slave_0: entered promiscuous mode [ 24.146838][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 24.155557][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.162873][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.169995][ T3314] bridge_slave_1: entered allmulticast mode [ 24.176439][ T3314] bridge_slave_1: entered promiscuous mode [ 24.182948][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.189885][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.215804][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.248618][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.255629][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.281552][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.295321][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.302418][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.309569][ T3323] bridge_slave_0: entered allmulticast mode [ 24.316188][ T3323] bridge_slave_0: entered promiscuous mode [ 24.322912][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.330666][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.337886][ T3323] bridge_slave_1: entered allmulticast mode [ 24.344145][ T3323] bridge_slave_1: entered promiscuous mode [ 24.350321][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.366471][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.377299][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.424168][ T3314] team0: Port device team_slave_0 added [ 24.432017][ T3320] hsr_slave_0: entered promiscuous mode [ 24.438366][ T3320] hsr_slave_1: entered promiscuous mode [ 24.445326][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.465341][ T3314] team0: Port device team_slave_1 added [ 24.476936][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.497271][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.504386][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.511771][ T3315] bridge_slave_0: entered allmulticast mode [ 24.518170][ T3315] bridge_slave_0: entered promiscuous mode [ 24.524936][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.532076][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.539725][ T3315] bridge_slave_1: entered allmulticast mode [ 24.546143][ T3315] bridge_slave_1: entered promiscuous mode [ 24.579280][ T3323] team0: Port device team_slave_0 added [ 24.589589][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.596603][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.622504][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.639140][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.648971][ T3323] team0: Port device team_slave_1 added [ 24.660113][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.667231][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.693159][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.710964][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.725092][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.732254][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.739544][ T3313] bridge_slave_0: entered allmulticast mode [ 24.746206][ T3313] bridge_slave_0: entered promiscuous mode [ 24.752733][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.759863][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.767037][ T3313] bridge_slave_1: entered allmulticast mode [ 24.773485][ T3313] bridge_slave_1: entered promiscuous mode [ 24.808054][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.826146][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.833145][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.859181][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.874391][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.888892][ T3315] team0: Port device team_slave_0 added [ 24.894982][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.901976][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.928057][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.949267][ T3314] hsr_slave_0: entered promiscuous mode [ 24.955384][ T3314] hsr_slave_1: entered promiscuous mode [ 24.961084][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 24.966887][ T3314] Cannot create hsr debugfs directory [ 24.973042][ T3315] team0: Port device team_slave_1 added [ 24.992049][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.999111][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.025061][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.040952][ T3313] team0: Port device team_slave_0 added [ 25.061081][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.068078][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.094000][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.105289][ T3313] team0: Port device team_slave_1 added [ 25.134921][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.141905][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.167890][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.180971][ T3323] hsr_slave_0: entered promiscuous mode [ 25.186914][ T3323] hsr_slave_1: entered promiscuous mode [ 25.192812][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 25.198529][ T3323] Cannot create hsr debugfs directory [ 25.209074][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.216065][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.241989][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.273657][ T3315] hsr_slave_0: entered promiscuous mode [ 25.279773][ T3315] hsr_slave_1: entered promiscuous mode [ 25.285616][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 25.291335][ T3315] Cannot create hsr debugfs directory [ 25.320634][ T3313] hsr_slave_0: entered promiscuous mode [ 25.326674][ T3313] hsr_slave_1: entered promiscuous mode [ 25.332587][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 25.338330][ T3313] Cannot create hsr debugfs directory [ 25.437411][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.459046][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.469607][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.484055][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.531298][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.539960][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.551216][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.561528][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.593685][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.603293][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.617340][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.626082][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.651542][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.660426][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.669727][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.679337][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.703828][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.733899][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.741001][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.763394][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.770782][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.780041][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.787106][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.798450][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.809698][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.820128][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.839523][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.848008][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.861718][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.895897][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.929852][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.938358][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.945530][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.956793][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.969178][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.976271][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.992455][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.018990][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.032769][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.046910][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.055902][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.063207][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.076886][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.084144][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.101602][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.116155][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.123316][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.132216][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.139592][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.156102][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.163203][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.174297][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.181436][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.211683][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.235034][ T3320] veth0_vlan: entered promiscuous mode [ 26.255555][ T3320] veth1_vlan: entered promiscuous mode [ 26.269374][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.283793][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.321920][ T3320] veth0_macvtap: entered promiscuous mode [ 26.349826][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.364389][ T3320] veth1_macvtap: entered promiscuous mode [ 26.397296][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.421258][ T3314] veth0_vlan: entered promiscuous mode [ 26.430133][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.438599][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.450976][ T3314] veth1_vlan: entered promiscuous mode [ 26.464211][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.479838][ T385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.494342][ T3314] veth0_macvtap: entered promiscuous mode [ 26.508721][ T3314] veth1_macvtap: entered promiscuous mode [ 26.515340][ T385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.534535][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.549706][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.557156][ T406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.567863][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.590195][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.607592][ T3323] veth0_vlan: entered promiscuous mode [ 26.617482][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.640169][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.640634][ T3323] veth1_vlan: entered promiscuous mode [ 26.664253][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.682106][ T3315] veth0_vlan: entered promiscuous mode [ 26.700037][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.720073][ T3323] veth0_macvtap: entered promiscuous mode [ 26.733221][ T3313] veth0_vlan: entered promiscuous mode [ 26.758122][ T3323] veth1_macvtap: entered promiscuous mode [ 26.777491][ T3315] veth1_vlan: entered promiscuous mode [ 26.793928][ T3313] veth1_vlan: entered promiscuous mode [ 26.806632][ T3490] loop3: detected capacity change from 0 to 128 [ 26.817252][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.839671][ T3490] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 26.852915][ T3313] veth0_macvtap: entered promiscuous mode [ 26.863579][ T3313] veth1_macvtap: entered promiscuous mode [ 26.873851][ T3496] loop4: detected capacity change from 0 to 256 [ 26.880264][ T3490] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.881457][ T3315] veth0_macvtap: entered promiscuous mode [ 26.930175][ T3496] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 26.933407][ T3315] veth1_macvtap: entered promiscuous mode [ 26.939052][ T3496] FAT-fs (loop4): Filesystem has been set read-only [ 26.949463][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.965048][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.974481][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.986984][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.000045][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.017121][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.026430][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.064240][ T3498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'. [ 27.075769][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.085900][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.122712][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.141711][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.182478][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.198872][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.235101][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.272567][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 27.272582][ T29] audit: type=1400 audit(1762953528.867:120): avc: denied { create } for pid=3517 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.301772][ T3523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 27.302518][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.319592][ T3523] IPVS: Error connecting to the multicast addr [ 27.331908][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.343578][ T29] audit: type=1400 audit(1762953528.867:121): avc: denied { name_bind } for pid=3519 comm="syz.2.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.364911][ T29] audit: type=1400 audit(1762953528.867:122): avc: denied { node_bind } for pid=3519 comm="syz.2.3" saddr=ff05::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.386507][ T29] audit: type=1400 audit(1762953528.887:123): avc: denied { write } for pid=3517 comm="syz.3.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.407407][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.416867][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.427982][ T29] audit: type=1400 audit(1762953528.937:124): avc: denied { create } for pid=3524 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.447787][ T29] audit: type=1400 audit(1762953528.977:125): avc: denied { accept } for pid=3524 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.474213][ T29] audit: type=1400 audit(1762953529.067:126): avc: denied { prog_run } for pid=3529 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.528515][ T3535] loop3: detected capacity change from 0 to 1024 [ 27.531178][ T3539] loop2: detected capacity change from 0 to 1024 [ 27.550692][ T29] audit: type=1400 audit(1762953529.137:127): avc: denied { kernel } for pid=3542 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.559526][ T3539] ======================================================= [ 27.559526][ T3539] WARNING: The mand mount option has been deprecated and [ 27.559526][ T3539] and is ignored by this kernel. Remove the mand [ 27.559526][ T3539] option from the mount to silence this warning. [ 27.559526][ T3539] ======================================================= [ 27.570046][ T29] audit: type=1400 audit(1762953529.137:128): avc: denied { tracepoint } for pid=3542 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 27.606092][ T3539] EXT4-fs: Ignoring removed bh option [ 27.648958][ T29] audit: type=1400 audit(1762953529.237:129): avc: denied { create } for pid=3546 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 27.681015][ T3535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.708430][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.717408][ T3554] capability: warning: `syz.4.32' uses 32-bit capabilities (legacy support in use) [ 27.736831][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.822780][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.910431][ T3572] loop4: detected capacity change from 0 to 128 [ 27.935231][ T3574] loop3: detected capacity change from 0 to 764 [ 27.988174][ T3578] loop4: detected capacity change from 0 to 512 [ 27.997521][ T3576] loop1: detected capacity change from 0 to 2048 [ 28.007702][ T3578] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.020890][ T3578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 28.033199][ T3576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.072901][ T3578] EXT4-fs (loop4): 1 truncate cleaned up [ 28.083864][ T3578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.127187][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.275439][ T3611] loop2: detected capacity change from 0 to 512 [ 28.296088][ T3611] EXT4-fs: Ignoring removed nobh option [ 28.306200][ T3611] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.331282][ T3611] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.58: iget: bad i_size value: 38620345925642 [ 28.354190][ T3611] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.58: couldn't read orphan inode 15 (err -117) [ 28.372979][ T3611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.453172][ T3622] x_tables: duplicate underflow at hook 1 [ 28.460532][ T3611] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.58: invalid indirect mapped block 3973251072 (level 0) [ 28.460996][ T3611] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.58: bg 0: block 5: invalid block bitmap [ 28.482729][ T3611] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 3 with error 28 [ 28.482781][ T3611] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.482781][ T3611] [ 28.482794][ T3611] EXT4-fs (loop2): Total free blocks count 0 [ 28.482807][ T3611] EXT4-fs (loop2): Free/Dirty block details [ 28.482819][ T3611] EXT4-fs (loop2): free_blocks=0 [ 28.482878][ T3611] EXT4-fs (loop2): dirty_blocks=3 [ 28.482893][ T3611] EXT4-fs (loop2): Block reservation details [ 28.482904][ T3611] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 28.484233][ T3611] syz.2.58 (3611) used greatest stack depth: 10248 bytes left [ 28.516502][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.609253][ T3633] loop4: detected capacity change from 0 to 1024 [ 28.615577][ T52] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 28.617381][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 28.642918][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.642918][ T52] [ 28.652680][ T52] EXT4-fs (loop1): Total free blocks count 0 [ 28.659134][ T52] EXT4-fs (loop1): Free/Dirty block details [ 28.664860][ T3637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.665138][ T52] EXT4-fs (loop1): free_blocks=2415919504 [ 28.682597][ T52] EXT4-fs (loop1): dirty_blocks=8192 [ 28.687938][ T52] EXT4-fs (loop1): Block reservation details [ 28.694043][ T52] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 28.707857][ T3633] EXT4-fs: Ignoring removed nobh option [ 28.713582][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 28.778345][ T3633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.831208][ T3633] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 28.920357][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.952150][ T3655] bridge0: entered promiscuous mode [ 28.958999][ T3655] bridge0: port 3(macsec1) entered blocking state [ 28.965541][ T3655] bridge0: port 3(macsec1) entered disabled state [ 28.972709][ T3655] macsec1: entered allmulticast mode [ 28.978016][ T3655] bridge0: entered allmulticast mode [ 28.989653][ T3655] macsec1: left allmulticast mode [ 28.994741][ T3655] bridge0: left allmulticast mode [ 29.010941][ T3655] bridge0: left promiscuous mode [ 29.039024][ T3665] 9pnet_fd: Insufficient options for proto=fd [ 29.114812][ T3675] loop1: detected capacity change from 0 to 128 [ 29.132134][ T3677] loop0: detected capacity change from 0 to 512 [ 29.153941][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.169535][ T3679] loop3: detected capacity change from 0 to 2048 [ 29.179702][ T3677] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.194126][ T3679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.206534][ T3677] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 29.228312][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.249416][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.294681][ T3694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 29.376043][ T3705] IPVS: set_ctl: invalid protocol: 27402 10.1.1.1:20003 [ 29.384412][ T3687] loop1: detected capacity change from 0 to 32768 [ 29.423004][ T3687] loop1: p1 p2 p3 < p5 p6 > [ 29.432216][ T3687] loop1: p2 size 16775168 extends beyond EOD, truncated [ 29.442802][ T3687] loop1: p5 start 4294970168 is beyond EOD, truncated [ 29.499271][ T3721] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure [ 29.586477][ T3735] loop0: detected capacity change from 0 to 512 [ 29.595978][ T3735] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.613051][ T3735] EXT4-fs (loop0): 1 truncate cleaned up [ 29.619480][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.640132][ T3742] loop1: detected capacity change from 0 to 512 [ 29.647678][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.648025][ T3742] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.119: inode has both inline data and extents flags [ 29.670231][ T3742] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.119: couldn't read orphan inode 15 (err -117) [ 29.683015][ T3742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.749418][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.786075][ T3761] loop1: detected capacity change from 0 to 128 [ 29.792858][ T3761] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.804984][ T3761] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.827233][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.862219][ T3767] loop3: detected capacity change from 0 to 1024 [ 29.869087][ T3767] EXT4-fs: Ignoring removed nobh option [ 29.874741][ T3767] EXT4-fs: Ignoring removed bh option [ 29.906752][ T3767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.998850][ T3801] syz.2.141 (3801): /proc/3799/oom_adj is deprecated, please use /proc/3799/oom_score_adj instead. [ 30.028036][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.059203][ T3809] loop0: detected capacity change from 0 to 256 [ 30.131493][ T3828] program syz.1.154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 30.152592][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 30.195088][ T3837] gretap0: entered promiscuous mode [ 30.200458][ T3837] vlan2: entered promiscuous mode [ 30.236210][ T3843] loop1: detected capacity change from 0 to 4096 [ 30.252771][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.293357][ T3858] netlink: 44 bytes leftover after parsing attributes in process `syz.3.169'. [ 30.325281][ T3861] loop2: detected capacity change from 0 to 512 [ 30.338343][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.388078][ T3870] loop3: detected capacity change from 0 to 164 [ 30.396856][ T3870] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.420600][ T3877] loop4: detected capacity change from 0 to 512 [ 30.449136][ T3880] loop1: detected capacity change from 0 to 512 [ 30.458150][ T3877] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: comm syz.4.179: inode #1792: comm syz.4.179: iget: illegal inode # [ 30.471894][ T3877] EXT4-fs (loop4): Remounting filesystem read-only [ 30.478720][ T3877] EXT4-fs (loop4): no journal found [ 30.484060][ T3877] EXT4-fs (loop4): can't get journal size [ 30.491182][ T3877] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 30.501252][ T3877] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 30.510054][ T3880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.525480][ T3877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.538372][ T3880] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.573638][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.607420][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.658465][ T3884] loop3: detected capacity change from 0 to 32768 [ 30.688146][ T3907] loop2: detected capacity change from 0 to 128 [ 30.694956][ T3884] loop3: p1 p2 p3 < p5 p6 > [ 30.700441][ T3884] loop3: p2 size 16775168 extends beyond EOD, truncated [ 30.708944][ T3884] loop3: p5 start 4294970168 is beyond EOD, truncated [ 30.717060][ T3907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.745263][ T3910] loop4: detected capacity change from 0 to 164 [ 30.766472][ T3910] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 30.769025][ T3907] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.816648][ T3323] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.935390][ T3941] loop3: detected capacity change from 0 to 128 [ 30.951396][ T3941] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.964407][ T3941] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.006859][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.239710][ T4000] loop3: detected capacity change from 0 to 2048 [ 31.275206][ T4000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.537720][ T4050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 31.548801][ T4050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.238'. [ 31.631115][ T4062] loop4: detected capacity change from 0 to 512 [ 31.656849][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.681123][ T4062] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.720708][ T4074] loop2: detected capacity change from 0 to 512 [ 31.743649][ T4074] EXT4-fs: Ignoring removed oldalloc option [ 31.744518][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.759335][ T4074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.784162][ T4074] EXT4-fs (loop2): too many log groups per flexible block group [ 31.801757][ T4074] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 31.815983][ T4074] EXT4-fs (loop2): mount failed [ 31.850266][ T406] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 31.881705][ T406] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 31.894536][ T406] EXT4-fs (loop3): This should not happen!! Data will be lost [ 31.894536][ T406] [ 31.904383][ T406] EXT4-fs (loop3): Total free blocks count 0 [ 31.910506][ T406] EXT4-fs (loop3): Free/Dirty block details [ 31.916428][ T406] EXT4-fs (loop3): free_blocks=2415919504 [ 31.923202][ T406] EXT4-fs (loop3): dirty_blocks=8192 [ 31.928562][ T406] EXT4-fs (loop3): Block reservation details [ 31.934636][ T406] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 31.966471][ T406] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 32.014621][ T4103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'. [ 32.034339][ T4106] netlink: 108 bytes leftover after parsing attributes in process `syz.0.248'. [ 32.243479][ T4147] loop3: detected capacity change from 0 to 164 [ 32.263827][ T4147] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 32.402188][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 32.402204][ T29] audit: type=1400 audit(1762953533.987:257): avc: denied { append } for pid=4176 comm="syz.0.268" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.436046][ T4178] usb usb1: usbfs: process 4178 (syz.0.268) did not claim interface 63 before use [ 32.483287][ T4185] loop0: detected capacity change from 0 to 512 [ 32.501227][ T4185] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.516914][ T4175] loop3: detected capacity change from 0 to 8192 [ 32.528186][ T4185] binfmt_misc: register: failed to install interpreter file ./file0 [ 32.549957][ T29] audit: type=1400 audit(1762953534.137:258): avc: denied { cpu } for pid=4174 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.552826][ T4195] tipc: Started in network mode [ 32.573951][ T4195] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 32.583600][ T4195] tipc: Enabled bearer , priority 10 [ 32.599473][ T3315] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 32.621202][ T29] audit: type=1400 audit(1762953534.207:259): avc: denied { sqpoll } for pid=4199 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.647403][ T4206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 32.727624][ T29] audit: type=1400 audit(1762953534.317:260): avc: denied { read } for pid=4224 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.756074][ T4230] netlink: 48 bytes leftover after parsing attributes in process `syz.2.280'. [ 32.773760][ T4230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 32.804762][ T4236] veth1_macvtap: left promiscuous mode [ 32.810291][ T4236] macsec0: entered promiscuous mode [ 32.830237][ T4241] netlink: 131712 bytes leftover after parsing attributes in process `syz.2.285'. [ 32.830927][ T29] audit: type=1326 audit(1762953534.417:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a300f6c9 code=0x7ffc0000 [ 32.845912][ T4241] netlink: del zone limit has 4 unknown bytes [ 32.863036][ T29] audit: type=1326 audit(1762953534.417:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a300f6c9 code=0x7ffc0000 [ 32.892374][ T29] audit: type=1326 audit(1762953534.417:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa1a300f6c9 code=0x7ffc0000 [ 32.915751][ T29] audit: type=1326 audit(1762953534.417:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a300f6c9 code=0x7ffc0000 [ 32.915809][ T29] audit: type=1326 audit(1762953534.417:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1a300f6c9 code=0x7ffc0000 [ 32.915833][ T29] audit: type=1326 audit(1762953534.417:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fa1a300f6c9 code=0x7ffc0000 [ 32.987396][ T4236] veth1_macvtap: entered promiscuous mode [ 32.998934][ T4236] macsec0: left promiscuous mode [ 33.099907][ T4256] loop2: detected capacity change from 0 to 512 [ 33.113125][ T4256] EXT4-fs: Ignoring removed nobh option [ 33.134002][ T4256] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.292: corrupted inode contents [ 33.156791][ T4256] EXT4-fs (loop2): Remounting filesystem read-only [ 33.166570][ T4256] EXT4-fs (loop2): 1 truncate cleaned up [ 33.172764][ T4256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.185831][ T4256] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.209494][ T4283] loop0: detected capacity change from 0 to 512 [ 33.216421][ T4256] syz.2.292 (4256) used greatest stack depth: 9696 bytes left [ 33.216649][ T4283] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.234775][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.250280][ T4283] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.269389][ T4283] EXT4-fs (loop0): 1 truncate cleaned up [ 33.275702][ T4283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.305172][ T4294] netlink: 165 bytes leftover after parsing attributes in process `syz.2.309'. [ 33.326397][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.448020][ T4321] loop2: detected capacity change from 0 to 512 [ 33.478900][ T4326] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 33.486632][ T4326] netlink: 244 bytes leftover after parsing attributes in process `syz.3.321'. [ 33.502759][ T4321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.516112][ T4321] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.537254][ T4321] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.592425][ T9] tipc: Node number set to 4269801488 [ 33.607382][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.608260][ T4351] loop3: detected capacity change from 0 to 128 [ 33.645189][ T4351] FAT-fs (loop3): Directory bread(block 32) failed [ 33.652263][ T4351] FAT-fs (loop3): Directory bread(block 33) failed [ 33.677152][ T4351] FAT-fs (loop3): Directory bread(block 34) failed [ 33.687247][ T4351] FAT-fs (loop3): Directory bread(block 35) failed [ 33.702286][ T4351] FAT-fs (loop3): Directory bread(block 36) failed [ 33.713497][ T4354] loop1: detected capacity change from 0 to 8192 [ 33.720534][ T4351] FAT-fs (loop3): Directory bread(block 37) failed [ 33.727701][ T4351] FAT-fs (loop3): Directory bread(block 38) failed [ 33.735097][ T4351] FAT-fs (loop3): Directory bread(block 39) failed [ 33.741846][ T4351] FAT-fs (loop3): Directory bread(block 40) failed [ 33.748446][ T4351] FAT-fs (loop3): Directory bread(block 41) failed [ 33.774328][ T4368] netlink: 136 bytes leftover after parsing attributes in process `syz.4.340'. [ 33.827965][ T4378] netlink: 'syz.0.346': attribute type 3 has an invalid length. [ 34.043409][ T4424] netlink: 165 bytes leftover after parsing attributes in process `syz.4.368'. [ 34.065919][ T4428] loop0: detected capacity change from 0 to 128 [ 34.091713][ T4428] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.105150][ T4428] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.154481][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.218768][ T4451] mmap: syz.4.380 (4451) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.230740][ T4457] tipc: Started in network mode [ 34.235764][ T4457] tipc: Node identity ac14140f, cluster identity 4711 [ 34.243205][ T4457] tipc: New replicast peer: 255.255.255.255 [ 34.249378][ T4457] tipc: Enabled bearer , priority 10 [ 34.260508][ T4459] netlink: 56 bytes leftover after parsing attributes in process `syz.0.384'. [ 34.284998][ T4465] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 34.292731][ T4465] netlink: 244 bytes leftover after parsing attributes in process `syz.4.387'. [ 34.306268][ T4467] loop1: detected capacity change from 0 to 128 [ 34.324986][ T4467] FAT-fs (loop1): Directory bread(block 32) failed [ 34.332210][ T4467] FAT-fs (loop1): Directory bread(block 33) failed [ 34.339262][ T4467] FAT-fs (loop1): Directory bread(block 34) failed [ 34.346118][ T4467] FAT-fs (loop1): Directory bread(block 35) failed [ 34.352944][ T4467] FAT-fs (loop1): Directory bread(block 36) failed [ 34.365918][ T4467] FAT-fs (loop1): Directory bread(block 37) failed [ 34.372621][ T4467] FAT-fs (loop1): Directory bread(block 38) failed [ 34.383388][ T4467] FAT-fs (loop1): Directory bread(block 39) failed [ 34.394161][ T4467] FAT-fs (loop1): Directory bread(block 40) failed [ 34.400880][ T4467] FAT-fs (loop1): Directory bread(block 41) failed [ 34.444761][ T4486] netlink: 'syz.4.398': attribute type 3 has an invalid length. [ 34.686570][ T4540] tipc: Started in network mode [ 34.691556][ T4540] tipc: Node identity ac14140f, cluster identity 4711 [ 34.699067][ T4540] tipc: New replicast peer: 255.255.255.255 [ 34.705859][ T4540] tipc: Enabled bearer , priority 10 [ 34.795701][ T4559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.804335][ T4559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.935923][ T4566] loop3: detected capacity change from 0 to 256 [ 34.987954][ T4572] loop3: detected capacity change from 0 to 2048 [ 35.027524][ T4572] loop3: p2 p3 p7 [ 35.087778][ T4580] loop3: detected capacity change from 0 to 512 [ 35.094778][ T4580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.106020][ T4580] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.443: invalid indirect mapped block 4294967295 (level 0) [ 35.120696][ T4580] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.443: invalid indirect mapped block 4294967295 (level 1) [ 35.135069][ T4580] EXT4-fs (loop3): 1 orphan inode deleted [ 35.140842][ T4580] EXT4-fs (loop3): 1 truncate cleaned up [ 35.147417][ T4580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.160974][ T4580] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.443: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 35.190097][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.214257][ T4585] tipc: Enabling of bearer rejected, failed to enable media [ 35.258225][ T4591] Zero length message leads to an empty skb [ 35.362416][ T1040] tipc: Node number set to 2886997007 [ 35.441621][ T4623] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 35.450306][ T4623] netlink: 'syz.2.463': attribute type 2 has an invalid length. [ 35.484430][ T4627] loop4: detected capacity change from 0 to 2048 [ 35.491149][ T4627] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.497671][ T4627] EXT4-fs: Ignoring removed i_version option [ 35.514905][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.565539][ T4639] loop3: detected capacity change from 0 to 1024 [ 35.573546][ T4639] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 35.584760][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.606895][ T4639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.641179][ T4639] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.471: missing EA_INODE flag [ 35.671361][ T4639] EXT4-fs (loop3): Remounting filesystem read-only [ 35.675686][ T4659] program syz.2.480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.698696][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.713041][ T9] tipc: Node number set to 2886997007 [ 35.719622][ T4665] loop1: detected capacity change from 0 to 256 [ 35.885762][ T4706] tipc: Enabling of bearer rejected, failed to enable media [ 35.886587][ T4704] loop2: detected capacity change from 0 to 1024 [ 35.900912][ T4704] EXT4-fs: Ignoring removed orlov option [ 35.914746][ T4704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.982981][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.004558][ T4724] loop4: detected capacity change from 0 to 512 [ 36.019207][ T4724] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.038135][ T4724] EXT4-fs (loop4): 1 truncate cleaned up [ 36.048465][ T4724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.095995][ T4739] loop3: detected capacity change from 0 to 128 [ 36.132342][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.193753][ T4751] loop1: detected capacity change from 0 to 512 [ 36.204158][ T4755] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 36.235473][ T4751] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 36.250710][ T4751] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.259368][ T4767] tipc: Enabling of bearer rejected, already enabled [ 36.269594][ T4751] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.524: corrupted inode contents [ 36.300936][ T4751] EXT4-fs (loop1): Remounting filesystem read-only [ 36.313164][ T4751] EXT4-fs (loop1): 1 truncate cleaned up [ 36.320697][ T406] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.331300][ T406] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 36.341878][ T406] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 36.352881][ T4751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.384412][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.574154][ T4824] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.602783][ T4830] syz.2.562 uses obsolete (PF_INET,SOCK_PACKET) [ 36.776262][ T4864] loop0: detected capacity change from 0 to 1024 [ 36.797524][ T4871] random: crng reseeded on system resumption [ 36.804044][ T4864] EXT4-fs: Ignoring removed bh option [ 36.824330][ T4864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.863645][ T4882] loop2: detected capacity change from 0 to 512 [ 36.873998][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.883330][ T4882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.898088][ T4882] EXT4-fs (loop2): 1 orphan inode deleted [ 36.904776][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.930403][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.988464][ T4904] netlink: 'syz.2.596': attribute type 5 has an invalid length. [ 37.032098][ T4911] SELinux: Context system_u:object_r:cpu_online_t:s0 is not valid (left unmapped). [ 37.109432][ T4918] loop3: detected capacity change from 0 to 512 [ 37.117733][ T4922] loop2: detected capacity change from 0 to 128 [ 37.156512][ T4918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.190662][ T4918] ext4 filesystem being mounted at /129/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.263869][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.389571][ T4973] sit0: entered promiscuous mode [ 37.398055][ T4973] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 37.466036][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 37.466079][ T29] audit: type=1326 audit(1762953539.057:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9fbdf6c9 code=0x7ffc0000 [ 37.498345][ T29] audit: type=1326 audit(1762953539.087:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b9fbdf6c9 code=0x7ffc0000 [ 37.528118][ T29] audit: type=1400 audit(1762953539.117:368): avc: denied { mount } for pid=4989 comm="syz.4.637" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.550616][ T29] audit: type=1400 audit(1762953539.147:369): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.581970][ T4996] netlink: 'syz.4.640': attribute type 2 has an invalid length. [ 37.592067][ T29] audit: type=1326 audit(1762953539.187:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9fbdf6c9 code=0x7ffc0000 [ 37.616065][ T29] audit: type=1326 audit(1762953539.187:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.3.638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9fbdf6c9 code=0x7ffc0000 [ 37.680478][ T29] audit: type=1400 audit(1762953539.267:372): avc: denied { read } for pid=5007 comm="syz.4.645" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.704294][ T29] audit: type=1400 audit(1762953539.267:373): avc: denied { open } for pid=5007 comm="syz.4.645" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.751154][ T29] audit: type=1400 audit(1762953539.317:374): avc: denied { ioctl } for pid=5007 comm="syz.4.645" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 37.823978][ T5028] loop4: detected capacity change from 0 to 512 [ 37.835194][ T5028] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 37.847850][ T5028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.863081][ T29] audit: type=1326 audit(1762953539.447:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ac12f6c9 code=0x7ffc0000 [ 37.880005][ T5028] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 37.906874][ T5028] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 37.917186][ T5028] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.653: inode has both inline data and extents flags [ 37.931713][ T5044] __nla_validate_parse: 16 callbacks suppressed [ 37.931727][ T5044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.663'. [ 37.947809][ T5028] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.653: couldn't read orphan inode 16 (err -117) [ 37.960244][ T5028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.019891][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.078210][ T5062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.673'. [ 38.103500][ T5069] Driver unsupported XDP return value 0 on prog (id 98) dev N/A, expect packet loss! [ 38.116670][ T5062] batadv0: entered promiscuous mode [ 38.121928][ T5062] batadv0: entered allmulticast mode [ 38.122146][ T5068] loop2: detected capacity change from 0 to 1024 [ 38.129072][ T5062] bridge0: port 3(batadv0) entered blocking state [ 38.140162][ T5062] bridge0: port 3(batadv0) entered disabled state [ 38.147980][ T5062] bridge0: port 3(batadv0) entered blocking state [ 38.154530][ T5062] bridge0: port 3(batadv0) entered forwarding state [ 38.177173][ T5077] loop0: detected capacity change from 0 to 128 [ 38.184703][ T5077] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.207400][ T5077] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.217045][ T5068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.244263][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.342554][ T406] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 38.351812][ T406] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 38.483980][ T5129] loop3: detected capacity change from 0 to 1024 [ 38.491187][ T5129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.506738][ T5129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.531988][ T5129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.569901][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.838985][ T5173] loop2: detected capacity change from 0 to 128 [ 38.854734][ T5169] loop0: detected capacity change from 0 to 4096 [ 38.861831][ T5173] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.876123][ T5169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.934973][ T5173] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.996163][ T406] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.251231][ T3315] ================================================================== [ 39.259355][ T3315] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 39.266737][ T3315] [ 39.269052][ T3315] read-write to 0xffff888119903d90 of 8 bytes by task 406 on cpu 0: [ 39.277021][ T3315] __xa_clear_mark+0xf5/0x1e0 [ 39.281714][ T3315] __folio_end_writeback+0xf7/0x3b0 [ 39.286909][ T3315] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 39.293154][ T3315] folio_end_writeback+0x1c/0x70 [ 39.298092][ T3315] ext4_finish_bio+0x459/0x8c0 [ 39.302861][ T3315] ext4_release_io_end+0x9f/0x1f0 [ 39.307887][ T3315] ext4_end_io_end+0x18d/0x240 [ 39.312655][ T3315] ext4_end_io_rsv_work+0x151/0x1e0 [ 39.317856][ T3315] process_scheduled_works+0x4ce/0x9d0 [ 39.323325][ T3315] worker_thread+0x582/0x770 [ 39.327900][ T3315] kthread+0x489/0x510 [ 39.331962][ T3315] ret_from_fork+0x122/0x1b0 [ 39.336547][ T3315] ret_from_fork_asm+0x1a/0x30 [ 39.341306][ T3315] [ 39.343618][ T3315] read to 0xffff888119903d90 of 8 bytes by task 3315 on cpu 1: [ 39.351153][ T3315] xas_find_marked+0x218/0x620 [ 39.355915][ T3315] find_get_entry+0x5d/0x380 [ 39.360510][ T3315] filemap_get_folios_tag+0x13b/0x210 [ 39.365887][ T3315] filemap_fdatawait_keep_errors+0x6c/0x180 [ 39.371799][ T3315] sync_inodes_sb+0x39c/0x440 [ 39.376477][ T3315] sync_filesystem+0x102/0x190 [ 39.381239][ T3315] generic_shutdown_super+0x44/0x210 [ 39.386529][ T3315] kill_block_super+0x2a/0x70 [ 39.391205][ T3315] ext4_kill_sb+0x42/0x80 [ 39.395525][ T3315] deactivate_locked_super+0x75/0x1c0 [ 39.400889][ T3315] deactivate_super+0x97/0xa0 [ 39.405553][ T3315] cleanup_mnt+0x269/0x2e0 [ 39.409969][ T3315] __cleanup_mnt+0x19/0x20 [ 39.414389][ T3315] task_work_run+0x131/0x1a0 [ 39.418981][ T3315] exit_to_user_mode_loop+0xed/0x110 [ 39.424266][ T3315] do_syscall_64+0x1d6/0x200 [ 39.428849][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.434734][ T3315] [ 39.437044][ T3315] value changed: 0xffffffffe0000000 -> 0xfffffc0000000000 [ 39.444139][ T3315] [ 39.446453][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 39.452596][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.462487][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.472533][ T3315] ================================================================== [ 39.532746][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.