last executing test programs: 1.266202501s ago: executing program 1 (id=162): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) 436.596164ms ago: executing program 0 (id=217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) copy_file_range(r0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0) 423.110414ms ago: executing program 0 (id=219): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000000c0)={0x76, 0x1, {0xffffffffffffffff, 0x2, 0x4, 0x2, 0x2}, 0x3}) 389.624494ms ago: executing program 0 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) 389.376454ms ago: executing program 1 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 364.477925ms ago: executing program 2 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_getnexthop={0x1c, 0x6a, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0) 343.533525ms ago: executing program 2 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}}, 0x0) 332.403575ms ago: executing program 0 (id=227): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 295.511086ms ago: executing program 1 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x1, @link_local}, 0x0, {0x2, 0x4e20, @multicast1=0xe000cc02}}) 295.365596ms ago: executing program 3 (id=229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) 290.895316ms ago: executing program 2 (id=230): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000e00000000000000000000000000ae16a3d071a1000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 269.170356ms ago: executing program 1 (id=231): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040), 0x4) 268.290916ms ago: executing program 0 (id=232): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001c00)={'vlan0\x00', 0x1000}) 254.006567ms ago: executing program 2 (id=233): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000140)=""/115, 0x73}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5, 0x3, 0x8) 242.569907ms ago: executing program 3 (id=235): r0 = socket(0x10, 0x2, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@random={'osx.', 'syzkal\x00'}, 0x0, 0x0) 216.174117ms ago: executing program 1 (id=236): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) 215.927387ms ago: executing program 4 (id=237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x702}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040041}, 0x24008854) 197.929408ms ago: executing program 3 (id=238): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240), 0x4) 197.591628ms ago: executing program 2 (id=239): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x4701, 0x13, 0x8, 0x0, 0x1, 0x42, 0x0, 0xfffffffffffffffd, 0x1}) 195.791848ms ago: executing program 0 (id=240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xf}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x495, 0x200, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 128.141058ms ago: executing program 4 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x20}, 0x14) 127.930298ms ago: executing program 3 (id=242): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) pwritev(r0, &(0x7f0000001280)=[{&(0x7f0000000180)='S', 0x1}], 0x1, 0x0, 0x4) 119.365219ms ago: executing program 4 (id=243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffdff}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 101.864209ms ago: executing program 3 (id=244): alarm(0x8) alarm(0x0) 86.528959ms ago: executing program 2 (id=245): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 56.49773ms ago: executing program 3 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x2810) 56.272979ms ago: executing program 4 (id=247): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}], 0x38}}], 0x1, 0x0) 56.10059ms ago: executing program 4 (id=248): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 33.43074ms ago: executing program 4 (id=249): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 0s ago: executing program 1 (id=250): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00', 0xfffff57c}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 23.078213][ T29] audit: type=1400 audit(1750943896.502:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.079089][ T3292] cgroup: Unknown subsys name 'net' [ 23.101020][ T29] audit: type=1400 audit(1750943896.502:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.128274][ T29] audit: type=1400 audit(1750943896.532:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.339499][ T3292] cgroup: Unknown subsys name 'cpuset' [ 23.345555][ T3292] cgroup: Unknown subsys name 'rlimit' [ 23.474473][ T29] audit: type=1400 audit(1750943896.902:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.497739][ T29] audit: type=1400 audit(1750943896.902:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.518203][ T29] audit: type=1400 audit(1750943896.902:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.538639][ T29] audit: type=1400 audit(1750943896.902:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.542226][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.559025][ T29] audit: type=1400 audit(1750943896.932:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.590066][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.592302][ T29] audit: type=1400 audit(1750943896.932:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.624328][ T29] audit: type=1400 audit(1750943896.992:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.654956][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.667381][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 24.685302][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 24.766885][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.774044][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.781433][ T3311] bridge_slave_0: entered allmulticast mode [ 24.787925][ T3311] bridge_slave_0: entered promiscuous mode [ 24.803496][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.810622][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.817730][ T3303] bridge_slave_0: entered allmulticast mode [ 24.824220][ T3303] bridge_slave_0: entered promiscuous mode [ 24.830674][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.837719][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.844955][ T3304] bridge_slave_0: entered allmulticast mode [ 24.851378][ T3304] bridge_slave_0: entered promiscuous mode [ 24.857825][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.864949][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.872109][ T3311] bridge_slave_1: entered allmulticast mode [ 24.878400][ T3311] bridge_slave_1: entered promiscuous mode [ 24.897111][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.904231][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.911522][ T3303] bridge_slave_1: entered allmulticast mode [ 24.917803][ T3303] bridge_slave_1: entered promiscuous mode [ 24.928438][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.935550][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.942873][ T3304] bridge_slave_1: entered allmulticast mode [ 24.949431][ T3304] bridge_slave_1: entered promiscuous mode [ 24.968098][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.988139][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.998180][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.008226][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.017390][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 25.026978][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.061212][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.074098][ T3304] team0: Port device team_slave_0 added [ 25.083235][ T3304] team0: Port device team_slave_1 added [ 25.089402][ T3311] team0: Port device team_slave_0 added [ 25.111185][ T3311] team0: Port device team_slave_1 added [ 25.125924][ T3303] team0: Port device team_slave_0 added [ 25.139190][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.146125][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.172114][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.183221][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.190246][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.216160][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.227438][ T3303] team0: Port device team_slave_1 added [ 25.243607][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.250606][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.276541][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.291263][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.302898][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.309925][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.335930][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.366557][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.373631][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.399547][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.410794][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.417739][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.443655][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.466325][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.473419][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.480574][ T3309] bridge_slave_0: entered allmulticast mode [ 25.486870][ T3309] bridge_slave_0: entered promiscuous mode [ 25.494264][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.501379][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.508502][ T3309] bridge_slave_1: entered allmulticast mode [ 25.514849][ T3309] bridge_slave_1: entered promiscuous mode [ 25.534012][ T3304] hsr_slave_0: entered promiscuous mode [ 25.539939][ T3304] hsr_slave_1: entered promiscuous mode [ 25.562678][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.578529][ T3311] hsr_slave_0: entered promiscuous mode [ 25.584593][ T3311] hsr_slave_1: entered promiscuous mode [ 25.590400][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.597934][ T3311] Cannot create hsr debugfs directory [ 25.609345][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.638288][ T3303] hsr_slave_0: entered promiscuous mode [ 25.644277][ T3303] hsr_slave_1: entered promiscuous mode [ 25.650033][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.657584][ T3303] Cannot create hsr debugfs directory [ 25.675043][ T3309] team0: Port device team_slave_0 added [ 25.706039][ T3309] team0: Port device team_slave_1 added [ 25.716002][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.723144][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.730341][ T3312] bridge_slave_0: entered allmulticast mode [ 25.736736][ T3312] bridge_slave_0: entered promiscuous mode [ 25.759745][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.766910][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.774160][ T3312] bridge_slave_1: entered allmulticast mode [ 25.780602][ T3312] bridge_slave_1: entered promiscuous mode [ 25.797806][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.804807][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.830901][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.857328][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.864309][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.890327][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.904043][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.921990][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.965148][ T3312] team0: Port device team_slave_0 added [ 25.971637][ T3312] team0: Port device team_slave_1 added [ 26.002977][ T3309] hsr_slave_0: entered promiscuous mode [ 26.009192][ T3309] hsr_slave_1: entered promiscuous mode [ 26.015036][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.022608][ T3309] Cannot create hsr debugfs directory [ 26.039385][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.046342][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.072352][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.092795][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.099826][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.125860][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.168281][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.178796][ T3312] hsr_slave_0: entered promiscuous mode [ 26.184834][ T3312] hsr_slave_1: entered promiscuous mode [ 26.190711][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.198294][ T3312] Cannot create hsr debugfs directory [ 26.206084][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.217145][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.235600][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.278170][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.286681][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.295181][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.305839][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.359958][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.368268][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.377007][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.394410][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.415219][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.424790][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.433598][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.442369][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.477321][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.486617][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.495968][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.507975][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.543283][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.552569][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.559706][ T3312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.566978][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.574051][ T3312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.609885][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.623279][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.634085][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.646012][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.654480][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.662590][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.674346][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.687631][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.694702][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.707461][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.717626][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.724710][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.734481][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.741591][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.751385][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.758497][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.770932][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.781623][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.792362][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.799432][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.808400][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.815485][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.830742][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.837795][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.847249][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.854312][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.872447][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.898707][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.914008][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.921093][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.937461][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.944563][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.998163][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.008685][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.030812][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.060722][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.100995][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.143268][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.207173][ T3303] veth0_vlan: entered promiscuous mode [ 27.228138][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.242457][ T3303] veth1_vlan: entered promiscuous mode [ 27.254599][ T3312] veth0_vlan: entered promiscuous mode [ 27.279418][ T3312] veth1_vlan: entered promiscuous mode [ 27.293736][ T3304] veth0_vlan: entered promiscuous mode [ 27.324668][ T3312] veth0_macvtap: entered promiscuous mode [ 27.331937][ T3304] veth1_vlan: entered promiscuous mode [ 27.338115][ T3303] veth0_macvtap: entered promiscuous mode [ 27.348105][ T3312] veth1_macvtap: entered promiscuous mode [ 27.362161][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.371175][ T3303] veth1_macvtap: entered promiscuous mode [ 27.383795][ T3304] veth0_macvtap: entered promiscuous mode [ 27.399302][ T3304] veth1_macvtap: entered promiscuous mode [ 27.408878][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.422162][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.431304][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.440123][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.448877][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.457719][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.475138][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.483382][ T3309] veth0_vlan: entered promiscuous mode [ 27.497599][ T3311] veth0_vlan: entered promiscuous mode [ 27.506932][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.515801][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.524638][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.533510][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.552098][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.560013][ T3311] veth1_vlan: entered promiscuous mode [ 27.567233][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.575032][ T3309] veth1_vlan: entered promiscuous mode [ 27.593639][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.602525][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.611292][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.620047][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.645921][ T3309] veth0_macvtap: entered promiscuous mode [ 27.654874][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.676328][ T3309] veth1_macvtap: entered promiscuous mode [ 27.688474][ T3311] veth0_macvtap: entered promiscuous mode [ 27.696819][ T3311] veth1_macvtap: entered promiscuous mode [ 27.713430][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.733194][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.743851][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.752641][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.780206][ T3311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.789092][ T3311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.797978][ T3311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.806756][ T3311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.820422][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.829255][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.838107][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.843539][ T3483] loop3: detected capacity change from 0 to 760 [ 27.846841][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.928948][ T3489] loop3: detected capacity change from 0 to 764 [ 27.971773][ T3492] loop2: detected capacity change from 0 to 160 [ 28.246966][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 28.246981][ T29] audit: type=1400 audit(1750943901.672:102): avc: denied { create } for pid=3526 comm="syz.0.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.322774][ T29] audit: type=1400 audit(1750943901.722:103): avc: denied { write } for pid=3526 comm="syz.0.26" path="socket:[5139]" dev="sockfs" ino=5139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.345930][ T29] audit: type=1326 audit(1750943901.732:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3529 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4447e929 code=0x7ffc0000 [ 28.369090][ T29] audit: type=1326 audit(1750943901.732:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3529 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4447e929 code=0x7ffc0000 [ 28.392355][ T29] audit: type=1326 audit(1750943901.732:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3529 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1c4447e929 code=0x7ffc0000 [ 28.405431][ T3538] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 28.415674][ T29] audit: type=1326 audit(1750943901.732:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3529 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4447e929 code=0x7ffc0000 [ 28.448724][ T29] audit: type=1326 audit(1750943901.732:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3529 comm="syz.3.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4447e929 code=0x7ffc0000 [ 28.471913][ T29] audit: type=1400 audit(1750943901.732:109): avc: denied { append } for pid=3531 comm="syz.1.28" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.494565][ T29] audit: type=1400 audit(1750943901.742:110): avc: denied { create } for pid=3533 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.514282][ T29] audit: type=1400 audit(1750943901.742:111): avc: denied { setopt } for pid=3533 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.600912][ T3557] xt_l2tp: invalid flags combination: 8 [ 28.782714][ T3580] loop4: detected capacity change from 0 to 512 [ 28.809309][ T3580] EXT4-fs: Ignoring removed i_version option [ 28.815372][ T3580] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.871376][ T3580] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.50: inode #13: comm syz.4.50: iget: illegal inode # [ 29.003351][ T3580] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.50: couldn't read orphan inode 13 (err -117) [ 29.073752][ T3580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.101510][ T3607] loop1: detected capacity change from 0 to 512 [ 29.133516][ T3607] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.63: bg 0: block 393: padding at end of block bitmap is not set [ 29.158119][ T3607] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 29.168258][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.175348][ T3616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.67'. [ 29.186078][ T3616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 29.200485][ T3607] EXT4-fs (loop1): 2 truncates cleaned up [ 29.227997][ T3620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.71'. [ 29.239573][ T3607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.333338][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.342557][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 29.401176][ T3641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.81'. [ 29.514897][ T3658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.88'. [ 29.523845][ T3658] tc_dump_action: action bad kind [ 29.588596][ T3671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 29.651465][ T3678] Cannot find add_set index 0 as target [ 29.749822][ T3694] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 29.840426][ T3702] netlink: 'syz.2.107': attribute type 3 has an invalid length. [ 29.865454][ T3708] loop4: detected capacity change from 0 to 512 [ 29.913680][ T3714] lo: entered promiscuous mode [ 29.916112][ T3715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.114'. [ 29.927571][ T3715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'. [ 29.928786][ T3714] tunl0: entered promiscuous mode [ 29.947861][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.964439][ T3714] gre0: entered promiscuous mode [ 29.973710][ T3708] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.984400][ T3714] gretap0: entered promiscuous mode [ 29.991514][ T3714] erspan0: entered promiscuous mode [ 29.997372][ T3708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.000809][ T3714] ip_vti0: entered promiscuous mode [ 30.014041][ T3714] ip6_vti0: entered promiscuous mode [ 30.027680][ T3714] sit0: entered promiscuous mode [ 30.045837][ T3714] ip6tnl0: entered promiscuous mode [ 30.063009][ T3714] ip6gre0: entered promiscuous mode [ 30.074365][ T3714] syz_tun: entered promiscuous mode [ 30.082901][ T3714] ip6gretap0: entered promiscuous mode [ 30.102339][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.109735][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.122908][ T3714] bridge0: entered promiscuous mode [ 30.129939][ T3714] vcan0: entered promiscuous mode [ 30.136134][ T3714] bond0: entered promiscuous mode [ 30.141226][ T3714] bond_slave_0: entered promiscuous mode [ 30.147008][ T3714] bond_slave_1: entered promiscuous mode [ 30.167215][ T3740] xt_hashlimit: max too large, truncated to 1048576 [ 30.178094][ T3714] team0: entered promiscuous mode [ 30.184363][ T3714] team_slave_0: entered promiscuous mode [ 30.190193][ T3714] team_slave_1: entered promiscuous mode [ 30.212609][ T3714] dummy0: entered promiscuous mode [ 30.220327][ T3714] nlmon0: entered promiscuous mode [ 30.247517][ T3714] caif0: entered promiscuous mode [ 30.252952][ T3714] batadv0: entered promiscuous mode [ 30.263212][ T3714] vxcan0: entered promiscuous mode [ 30.269434][ T3714] vxcan1: entered promiscuous mode [ 30.282904][ T3714] veth0: entered promiscuous mode [ 30.293646][ T3714] veth1: entered promiscuous mode [ 30.301560][ T3714] wg0: entered promiscuous mode [ 30.307679][ T3714] wg1: entered promiscuous mode [ 30.313825][ T3714] wg2: entered promiscuous mode [ 30.320042][ T3714] veth0_to_bridge: entered promiscuous mode [ 30.328226][ T3714] veth1_to_bridge: entered promiscuous mode [ 30.336514][ T3714] veth0_to_bond: entered promiscuous mode [ 30.344142][ T3714] veth1_to_bond: entered promiscuous mode [ 30.351922][ T3714] veth0_to_team: entered promiscuous mode [ 30.360006][ T3714] veth1_to_team: entered promiscuous mode [ 30.367787][ T3714] veth0_to_batadv: entered promiscuous mode [ 30.375071][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.382665][ T3714] batadv_slave_0: entered promiscuous mode [ 30.389952][ T3714] veth1_to_batadv: entered promiscuous mode [ 30.396864][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.404559][ T3714] batadv_slave_1: entered promiscuous mode [ 30.411848][ T3714] xfrm0: entered promiscuous mode [ 30.417874][ T3714] veth0_to_hsr: entered promiscuous mode [ 30.425687][ T3714] veth1_to_hsr: entered promiscuous mode [ 30.433702][ T3714] hsr0: entered promiscuous mode [ 30.440021][ T3714] veth1_virt_wifi: entered promiscuous mode [ 30.447065][ T3714] veth0_virt_wifi: entered promiscuous mode [ 30.457878][ T3714] vlan0: entered promiscuous mode [ 30.463279][ T3714] vlan1: entered promiscuous mode [ 30.468698][ T3714] macvlan0: entered promiscuous mode [ 30.475089][ T3714] macvlan1: entered promiscuous mode [ 30.481159][ T3714] ipvlan0: entered promiscuous mode [ 30.486486][ T3714] ipvlan1: entered promiscuous mode [ 30.493748][ T3714] macvtap0: entered promiscuous mode [ 30.500024][ T3714] macsec0: entered promiscuous mode [ 30.506055][ T3714] geneve0: entered promiscuous mode [ 30.512485][ T3714] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.521454][ T3714] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.530407][ T3714] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.539276][ T3714] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.548293][ T3714] geneve1: entered promiscuous mode [ 30.554656][ T3714] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 30.562638][ T3714] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 30.570481][ T3714] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 30.578457][ T3714] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 30.586794][ T3715] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 30.606183][ T3715] bond1: entered allmulticast mode [ 30.608062][ T3714] syz.3.111 (3714) used greatest stack depth: 10824 bytes left [ 30.619090][ T3715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 30.629213][ T3756] netlink: 516 bytes leftover after parsing attributes in process `syz.0.133'. [ 30.699793][ T3767] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3767 comm=syz.1.138 [ 30.794516][ T3786] loop4: detected capacity change from 0 to 512 [ 30.801149][ T3785] netlink: 14 bytes leftover after parsing attributes in process `syz.2.145'. [ 30.823901][ T3785] hsr_slave_0: left promiscuous mode [ 30.829332][ T3785] hsr_slave_1: left promiscuous mode [ 30.865961][ C1] hrtimer: interrupt took 57925 ns [ 30.872738][ T3796] ip6t_srh: unknown srh invflags 7D00 [ 31.147716][ T3841] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 31.173019][ T3847] netlink: 'syz.2.176': attribute type 1 has an invalid length. [ 31.180743][ T3847] netlink: 'syz.2.176': attribute type 2 has an invalid length. [ 31.199859][ T3841] bond1: entered allmulticast mode [ 31.205226][ T3841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 31.241624][ T3856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.328421][ T3872] loop3: detected capacity change from 0 to 512 [ 31.339079][ T3872] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 31.363507][ T3872] EXT4-fs (loop3): invalid journal inode [ 31.385514][ T3872] EXT4-fs (loop3): can't get journal size [ 31.405433][ T3872] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 31.423795][ T3872] System zones: 1-12, 13-13 [ 31.438835][ T3872] EXT4-fs (loop3): 1 truncate cleaned up [ 31.456178][ T3872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.479880][ T3872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.635027][ T3901] netdevsim netdevsim0 5Â: renamed from netdevsim0 (while UP) [ 31.804172][ T3932] netlink: 'syz.2.216': attribute type 21 has an invalid length. [ 31.812350][ T3932] netlink: 'syz.2.216': attribute type 5 has an invalid length. [ 31.812366][ T3932] netlink: 'syz.2.216': attribute type 6 has an invalid length. [ 31.831635][ T3936] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 32.074938][ T3980] netlink: 'syz.0.240': attribute type 13 has an invalid length. [ 32.088241][ T3981] loop2: detected capacity change from 0 to 512 [ 32.114366][ T3981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.142845][ T3981] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.231124][ T3304] ================================================================== [ 32.239237][ T3304] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 32.246629][ T3304] [ 32.248960][ T3304] read-write to 0xffff888106aed228 of 8 bytes by interrupt on cpu 0: [ 32.257034][ T3304] __xa_clear_mark+0xf5/0x1e0 [ 32.261720][ T3304] __folio_end_writeback+0x177/0x470 [ 32.267001][ T3304] folio_end_writeback+0x71/0x3d0 [ 32.272020][ T3304] end_buffer_async_write+0x156/0x1f0 [ 32.277391][ T3304] end_bio_bh_io_sync+0x76/0xa0 [ 32.282232][ T3304] bio_endio+0x374/0x410 [ 32.286471][ T3304] blk_update_request+0x336/0x730 [ 32.291490][ T3304] blk_mq_end_request+0x26/0x50 [ 32.296335][ T3304] lo_complete_rq+0x98/0x140 [ 32.300920][ T3304] blk_done_softirq+0x77/0xb0 [ 32.305591][ T3304] handle_softirqs+0xba/0x290 [ 32.310256][ T3304] run_ksoftirqd+0x1c/0x30 [ 32.314662][ T3304] smpboot_thread_fn+0x32b/0x530 [ 32.319598][ T3304] kthread+0x486/0x510 [ 32.323655][ T3304] ret_from_fork+0xda/0x150 [ 32.328150][ T3304] ret_from_fork_asm+0x1a/0x30 [ 32.332903][ T3304] [ 32.335216][ T3304] read to 0xffff888106aed228 of 8 bytes by task 3304 on cpu 1: [ 32.342745][ T3304] xas_find_marked+0x218/0x620 [ 32.347496][ T3304] find_get_entry+0x5d/0x380 [ 32.352082][ T3304] filemap_get_folios_tag+0x13b/0x210 [ 32.357449][ T3304] filemap_write_and_wait_range+0x1d3/0x340 [ 32.363344][ T3304] sync_blockdev+0x35/0x50 [ 32.367747][ T3304] sync_filesystem+0x162/0x190 [ 32.372508][ T3304] generic_shutdown_super+0x44/0x210 [ 32.377786][ T3304] kill_block_super+0x2a/0x70 [ 32.382459][ T3304] ext4_kill_sb+0x42/0x80 [ 32.386775][ T3304] deactivate_locked_super+0x72/0x1c0 [ 32.392140][ T3304] deactivate_super+0x97/0xa0 [ 32.396810][ T3304] cleanup_mnt+0x269/0x2e0 [ 32.401220][ T3304] __cleanup_mnt+0x19/0x20 [ 32.405625][ T3304] task_work_run+0x12e/0x1a0 [ 32.410205][ T3304] exit_to_user_mode_loop+0xe4/0x100 [ 32.415485][ T3304] do_syscall_64+0x1d6/0x200 [ 32.420061][ T3304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.425943][ T3304] [ 32.428253][ T3304] value changed: 0x0000000000020402 -> 0x0000000000000000 [ 32.435344][ T3304] [ 32.437653][ T3304] Reported by Kernel Concurrency Sanitizer on: [ 32.443802][ T3304] CPU: 1 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(voluntary) [ 32.456375][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.466420][ T3304] ================================================================== [ 32.478873][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.609732][ T3980] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.617110][ T3980] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.726634][ T3980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.751373][ T3980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.823642][ T3980] netdevsim netdevsim0 5Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.831992][ T3980] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.841086][ T3980] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.850085][ T3980] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.930464][ T3980] syz.0.240 (3980) used greatest stack depth: 10768 bytes left