last executing test programs: 715.821472ms ago: executing program 1 (id=9): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000010}) 694.967354ms ago: executing program 1 (id=10): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000080)={[{@fat=@check_strict}, {@dots}, {@dots}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x6}}]}, 0x1, 0x242, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x28600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 593.422752ms ago: executing program 2 (id=11): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a00020000000000020000000500010001"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000001040102000000000000000000000000080004400000006d0a000200000000b280"], 0x28}}, 0x0) 533.436737ms ago: executing program 2 (id=12): r0 = msgget$private(0x0, 0x3ac) msgsnd(r0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x228, 0x0) msgctl$IPC_RMID(r0, 0x0) 529.898817ms ago: executing program 1 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x4000000}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x8001}]}}]}, 0x40}}, 0x0) 477.320931ms ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004a00030027bd7000040000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 462.569293ms ago: executing program 1 (id=15): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 402.695247ms ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x2000000, "67daf28d9a372f44ab9869aa26764d12"}) 372.87208ms ago: executing program 2 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) 347.945132ms ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000300)) 295.189336ms ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x11, 0x4, 0x4, 0x38b, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 282.337067ms ago: executing program 2 (id=20): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x4, 0x9, 0x3ff, 0x20000000008412, 0x4, 0x6, 0x1000, 0xfffffffffffffff8, 0x3}) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) 241.819901ms ago: executing program 0 (id=21): r0 = io_uring_setup(0x63e7, &(0x7f0000000940)={0x0, 0x18e5, 0x40, 0x2, 0xf0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 238.19219ms ago: executing program 4 (id=22): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r0}, 0x18) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080)) 211.619883ms ago: executing program 3 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000043000000080a05000000000000000010020000060c00034000000000000000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) 183.565065ms ago: executing program 0 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) 138.216528ms ago: executing program 0 (id=25): r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000100)="b9ff03", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 108.533071ms ago: executing program 0 (id=26): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x305) keyctl$unlink(0x9, r0, 0xfffffffffffffffb) 93.361512ms ago: executing program 3 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 77.316544ms ago: executing program 3 (id=28): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1, 0x0, 0xfffffffffffffffc}) 56.630775ms ago: executing program 0 (id=29): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 51.637126ms ago: executing program 1 (id=30): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0x0, 0xee01) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 44.248956ms ago: executing program 2 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000000}, 0x20000010) 25.237788ms ago: executing program 4 (id=32): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0xd, 0x100, 0xffffffffffffffff, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000080000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 13.381789ms ago: executing program 0 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbdefc71fa6744718dd000018000180140002006261746164765f736c6176655f31"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 0s ago: executing program 3 (id=34): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 25.306931][ T29] audit: type=1400 audit(1754770246.478:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.307782][ T3289] cgroup: Unknown subsys name 'net' [ 25.329640][ T29] audit: type=1400 audit(1754770246.478:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.356960][ T29] audit: type=1400 audit(1754770246.518:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.480699][ T3289] cgroup: Unknown subsys name 'cpuset' [ 25.486828][ T3289] cgroup: Unknown subsys name 'rlimit' [ 25.595323][ T29] audit: type=1400 audit(1754770246.768:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.618561][ T29] audit: type=1400 audit(1754770246.768:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.639079][ T29] audit: type=1400 audit(1754770246.768:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.659528][ T29] audit: type=1400 audit(1754770246.768:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.666591][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.679865][ T29] audit: type=1400 audit(1754770246.778:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.713186][ T29] audit: type=1400 audit(1754770246.778:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.736504][ T29] audit: type=1400 audit(1754770246.868:71): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.763758][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.442776][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 27.493278][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.500407][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.507501][ T3300] bridge_slave_0: entered allmulticast mode [ 27.513914][ T3300] bridge_slave_0: entered promiscuous mode [ 27.522331][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.529382][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.536706][ T3300] bridge_slave_1: entered allmulticast mode [ 27.543114][ T3300] bridge_slave_1: entered promiscuous mode [ 27.571159][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.597820][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.642479][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 27.651710][ T3300] team0: Port device team_slave_0 added [ 27.675593][ T3300] team0: Port device team_slave_1 added [ 27.718663][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.725656][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.751582][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.771412][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.782614][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.789551][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.815523][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.849032][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.888476][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.895551][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.902688][ T3299] bridge_slave_0: entered allmulticast mode [ 27.909033][ T3299] bridge_slave_0: entered promiscuous mode [ 27.917454][ T3300] hsr_slave_0: entered promiscuous mode [ 27.923511][ T3300] hsr_slave_1: entered promiscuous mode [ 27.935492][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.942544][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.949618][ T3299] bridge_slave_1: entered allmulticast mode [ 27.956476][ T3299] bridge_slave_1: entered promiscuous mode [ 27.967421][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.990629][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.013189][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.022331][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.029386][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.037346][ T3307] bridge_slave_0: entered allmulticast mode [ 28.043810][ T3307] bridge_slave_0: entered promiscuous mode [ 28.053316][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.060397][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.067506][ T3307] bridge_slave_1: entered allmulticast mode [ 28.074057][ T3307] bridge_slave_1: entered promiscuous mode [ 28.111158][ T3299] team0: Port device team_slave_0 added [ 28.117607][ T3299] team0: Port device team_slave_1 added [ 28.132159][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.139195][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.146339][ T3309] bridge_slave_0: entered allmulticast mode [ 28.152688][ T3309] bridge_slave_0: entered promiscuous mode [ 28.173963][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.183064][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.190136][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.198073][ T3309] bridge_slave_1: entered allmulticast mode [ 28.204484][ T3309] bridge_slave_1: entered promiscuous mode [ 28.217760][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.224729][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.250734][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.264171][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.281083][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.288141][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.314072][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.337081][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.349323][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.384964][ T3309] team0: Port device team_slave_0 added [ 28.391572][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.398621][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.405909][ T3305] bridge_slave_0: entered allmulticast mode [ 28.412898][ T3305] bridge_slave_0: entered promiscuous mode [ 28.419852][ T3307] team0: Port device team_slave_0 added [ 28.438632][ T3309] team0: Port device team_slave_1 added [ 28.449589][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.456651][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.463849][ T3305] bridge_slave_1: entered allmulticast mode [ 28.470203][ T3305] bridge_slave_1: entered promiscuous mode [ 28.477048][ T3307] team0: Port device team_slave_1 added [ 28.489589][ T3299] hsr_slave_0: entered promiscuous mode [ 28.495558][ T3299] hsr_slave_1: entered promiscuous mode [ 28.501616][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 28.507400][ T3299] Cannot create hsr debugfs directory [ 28.539581][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.546574][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.572505][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.588437][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.595438][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.621345][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.639232][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.646256][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.672182][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.683936][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.695609][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.702633][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.728536][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.746586][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.794184][ T3309] hsr_slave_0: entered promiscuous mode [ 28.800967][ T3309] hsr_slave_1: entered promiscuous mode [ 28.806708][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.812443][ T3309] Cannot create hsr debugfs directory [ 28.829843][ T3307] hsr_slave_0: entered promiscuous mode [ 28.835745][ T3307] hsr_slave_1: entered promiscuous mode [ 28.841615][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 28.847319][ T3307] Cannot create hsr debugfs directory [ 28.853371][ T3305] team0: Port device team_slave_0 added [ 28.862213][ T3305] team0: Port device team_slave_1 added [ 28.879736][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.886769][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.912725][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.923738][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.934793][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.943390][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.950356][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.976255][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.998712][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.011922][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.081596][ T3305] hsr_slave_0: entered promiscuous mode [ 29.087514][ T3305] hsr_slave_1: entered promiscuous mode [ 29.093357][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 29.099067][ T3305] Cannot create hsr debugfs directory [ 29.173666][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.191158][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.204796][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.215720][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.247183][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.260669][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.269177][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.277582][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.303547][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.326952][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.339015][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.346708][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.356001][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.364424][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.386177][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.393263][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.406305][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.413367][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.431514][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.440527][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.450065][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.458793][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.503329][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.530055][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.540800][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.563585][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.585088][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.592217][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.612242][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.619379][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.634102][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.641137][ T511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.652461][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.663379][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.673824][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.695290][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.705018][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.714106][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.721193][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.743313][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.757495][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.772729][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.779834][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.788590][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.795665][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.804799][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.811917][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.828751][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.835813][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.875429][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.891573][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.909400][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.961328][ T3300] veth0_vlan: entered promiscuous mode [ 29.982862][ T3300] veth1_vlan: entered promiscuous mode [ 30.021638][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.050751][ T3300] veth0_macvtap: entered promiscuous mode [ 30.059487][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.068960][ T3299] veth0_vlan: entered promiscuous mode [ 30.076064][ T3300] veth1_macvtap: entered promiscuous mode [ 30.085365][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.112156][ T3299] veth1_vlan: entered promiscuous mode [ 30.130754][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.147868][ T3299] veth0_macvtap: entered promiscuous mode [ 30.158065][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.169314][ T3299] veth1_macvtap: entered promiscuous mode [ 30.190647][ T511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.204958][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.212723][ T511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.248662][ T3307] veth0_vlan: entered promiscuous mode [ 30.262721][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.270463][ T511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.283972][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.302842][ T511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.312040][ T511] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.322164][ T511] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.332574][ T3307] veth1_vlan: entered promiscuous mode [ 30.339391][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 30.339403][ T29] audit: type=1400 audit(1754770251.508:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.345014][ T3305] veth0_vlan: entered promiscuous mode [ 30.345528][ T29] audit: type=1400 audit(1754770251.508:91): avc: denied { open } for pid=3300 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.410514][ T29] audit: type=1400 audit(1754770251.548:92): avc: denied { ioctl } for pid=3300 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.440593][ T511] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.444162][ T3472] loop2: detected capacity change from 0 to 128 [ 30.449342][ T511] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.457129][ T29] audit: type=1400 audit(1754770251.638:93): avc: denied { mounton } for pid=3471 comm="syz.2.6" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.489376][ T29] audit: type=1400 audit(1754770251.648:94): avc: denied { mount } for pid=3471 comm="syz.2.6" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.498848][ T3307] veth0_macvtap: entered promiscuous mode [ 30.542352][ T29] audit: type=1400 audit(1754770251.708:95): avc: denied { prog_load } for pid=3474 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.561110][ T29] audit: type=1400 audit(1754770251.708:96): avc: denied { bpf } for pid=3474 comm="syz.2.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.565975][ T3305] veth1_vlan: entered promiscuous mode [ 30.581309][ T29] audit: type=1400 audit(1754770251.708:97): avc: denied { perfmon } for pid=3474 comm="syz.2.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.594731][ T3305] veth0_macvtap: entered promiscuous mode [ 30.607166][ T29] audit: type=1400 audit(1754770251.708:98): avc: denied { prog_run } for pid=3474 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.617705][ T3305] veth1_macvtap: entered promiscuous mode [ 30.637543][ T3477] loop2: detected capacity change from 0 to 256 [ 30.644654][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.666897][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.674395][ T3477] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 30.678850][ T29] audit: type=1400 audit(1754770251.858:99): avc: denied { create } for pid=3478 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.682307][ T3477] FAT-fs (loop2): Filesystem has been set read-only [ 30.714390][ T3307] veth1_macvtap: entered promiscuous mode [ 30.735408][ T3309] veth0_vlan: entered promiscuous mode [ 30.745782][ T3309] veth1_vlan: entered promiscuous mode [ 30.752530][ T3483] loop1: detected capacity change from 0 to 512 [ 30.758273][ T3309] veth0_macvtap: entered promiscuous mode [ 30.758943][ T3483] ======================================================= [ 30.758943][ T3483] WARNING: The mand mount option has been deprecated and [ 30.758943][ T3483] and is ignored by this kernel. Remove the mand [ 30.758943][ T3483] option from the mount to silence this warning. [ 30.758943][ T3483] ======================================================= [ 30.766458][ T3309] veth1_macvtap: entered promiscuous mode [ 30.832565][ T3460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.849382][ T3460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.866580][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.884710][ T3460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.894811][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.906190][ T3460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.927194][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.951968][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.959705][ T3460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.986742][ T3460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.022727][ T3460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.050573][ T3460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.066314][ T3499] loop1: detected capacity change from 0 to 512 [ 31.079170][ T3502] Zero length message leads to an empty skb [ 31.097177][ T3460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.116704][ T3460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.161862][ T3499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.170613][ T3460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.176586][ T3512] loop2: detected capacity change from 0 to 512 [ 31.179314][ T3460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.208741][ T3499] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16: invalid indirect mapped block 4294967295 (level 1) [ 31.242537][ T3520] netlink: 11 bytes leftover after parsing attributes in process `syz.3.23'. [ 31.256854][ T3499] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.16: invalid indirect mapped block 4294967295 (level 1) [ 31.282133][ T3512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.298183][ T3499] EXT4-fs (loop1): 2 truncates cleaned up [ 31.305291][ T3512] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.324970][ T3499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.385477][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.399168][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.440867][ T3300] ================================================================== [ 31.448968][ T3300] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 31.456703][ T3300] [ 31.459020][ T3300] read-write to 0xffff888237d26f50 of 8 bytes by task 3538 on cpu 1: [ 31.467073][ T3300] find_get_block_common+0x4f0/0x960 [ 31.472498][ T3300] bdev_getblk+0x83/0x3b0 [ 31.476822][ T3300] __ext4_get_inode_loc+0x303/0x930 [ 31.482022][ T3300] ext4_reserve_inode_write+0xd7/0x250 [ 31.487469][ T3300] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 31.492848][ T3300] ext4_dirty_inode+0x92/0xc0 [ 31.497514][ T3300] __mark_inode_dirty+0x15f/0x760 [ 31.502535][ T3300] file_update_time+0x288/0x2b0 [ 31.507388][ T3300] ext4_page_mkwrite+0x18c/0xb90 [ 31.512312][ T3300] handle_mm_fault+0x15cb/0x2c20 [ 31.517238][ T3300] do_user_addr_fault+0x636/0x1090 [ 31.522349][ T3300] exc_page_fault+0x62/0xa0 [ 31.526844][ T3300] asm_exc_page_fault+0x26/0x30 [ 31.531683][ T3300] [ 31.533993][ T3300] read to 0xffff888237d26f50 of 8 bytes by task 3300 on cpu 0: [ 31.541522][ T3300] has_bh_in_lru+0x35/0x1f0 [ 31.546019][ T3300] smp_call_function_many_cond+0x2a6/0xc60 [ 31.551814][ T3300] on_each_cpu_cond_mask+0x3c/0x80 [ 31.556911][ T3300] invalidate_bh_lrus+0x2a/0x30 [ 31.561753][ T3300] blkdev_flush_mapping+0x9a/0x1a0 [ 31.566861][ T3300] bdev_release+0x2bf/0x3d0 [ 31.571356][ T3300] blkdev_release+0x15/0x20 [ 31.575853][ T3300] __fput+0x298/0x650 [ 31.579832][ T3300] ____fput+0x1c/0x30 [ 31.583812][ T3300] task_work_run+0x131/0x1a0 [ 31.588396][ T3300] exit_to_user_mode_loop+0xe4/0x100 [ 31.593669][ T3300] do_syscall_64+0x1d6/0x200 [ 31.598254][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.604138][ T3300] [ 31.606443][ T3300] value changed: 0x0000000000000000 -> 0xffff888106d92e38 [ 31.613541][ T3300] [ 31.615846][ T3300] Reported by Kernel Concurrency Sanitizer on: [ 31.621990][ T3300] CPU: 0 UID: 0 PID: 3300 Comm: syz-executor Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(voluntary) [ 31.634217][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 31.644258][ T3300] ==================================================================