last executing test programs: 1.249780042s ago: executing program 1 (id=493): setuid(0xee01) r0 = semget$private(0x0, 0x6, 0x3b1) semop(r0, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01, 0x0, 0x2, 0x1}, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffb}) 1.249620342s ago: executing program 3 (id=494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000070000000800000008000a0005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4c00, 0x0) 1.211866833s ago: executing program 3 (id=496): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xc2800, 0x0) r0 = syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/134, 0x86}], 0x1, &(0x7f0000001dc0)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1, 0x0) 1.094822524s ago: executing program 3 (id=500): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x48}, 0x104c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 709.22955ms ago: executing program 3 (id=515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 607.898701ms ago: executing program 3 (id=520): r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 583.832722ms ago: executing program 3 (id=522): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000b80)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x43b, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="821c", 0x2}], 0x1}}], 0x1, 0x20000000) 501.537573ms ago: executing program 2 (id=528): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) sendfile(r0, r1, 0x0, 0x9) 438.378564ms ago: executing program 2 (id=529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 438.172994ms ago: executing program 2 (id=530): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) 393.748555ms ago: executing program 4 (id=532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 381.846635ms ago: executing program 0 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000200001002abd7000fcdbdf250a80100000000001120001000800180008000000140001000000000000000000000000000000000108000f00ffffffff1400020000"], 0x5c}}, 0x4) 381.572775ms ago: executing program 1 (id=534): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 381.267575ms ago: executing program 2 (id=535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") 361.111835ms ago: executing program 1 (id=536): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) 342.715545ms ago: executing program 4 (id=538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 289.807156ms ago: executing program 0 (id=539): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r0, 0x1, 0x4070bd27, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 289.603976ms ago: executing program 1 (id=540): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) 289.493156ms ago: executing program 4 (id=541): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 289.383946ms ago: executing program 0 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) getrlimit(0x3, &(0x7f0000001080)) 272.614376ms ago: executing program 0 (id=543): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0x6}]}, 0x60}, 0x1, 0x7}, 0x0) 244.148417ms ago: executing program 4 (id=544): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 142.415098ms ago: executing program 4 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000938500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000240)) 142.155418ms ago: executing program 4 (id=546): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) 127.093419ms ago: executing program 1 (id=547): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@mb_optimize_scan}, {@data_journal}, {@noquota}, {@block_validity}, {@block_validity}, {@nombcache}]}, 0x1, 0x461, &(0x7f0000000c00)="$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") r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 90.294979ms ago: executing program 2 (id=548): r0 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) pwrite64(r0, &(0x7f00000004c0)='\f', 0x1, 0xff) fcntl$addseals(r0, 0x409, 0x2f) ftruncate(r0, 0x1) 26.31984ms ago: executing program 0 (id=549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 23.43489ms ago: executing program 0 (id=550): r0 = semget$private(0x0, 0x4000000009, 0x208) r1 = io_uring_setup(0x1781, &(0x7f00000002c0)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) semop(r0, &(0x7f0000000000)=[{0x0, 0xfffb}], 0x1) 1.84299ms ago: executing program 1 (id=551): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a81) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfffffffffffffefe, 0x400000009, 0x0, 0x9, 0x0, 0x8, "90214ac004004418c7aa4a41c28a760980c6f75fd78b4a086eef53d9b4af3edbb51a05dd714e44a1429d21fb92bdedde706b7ac59311d1c1a462b3a0a702d500", "eafd7d2b5efd77db35b426c2d0dd254d485cb67c01b4dc6a39b9f673dda0715b10ffff71a576e32aa2073100", "5198ca824fbab99e924a0b497a05000000000000c4d0553b137e8f4969821a00", [0xffffffffffdffffe]}) 0s ago: executing program 2 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.65' (ED25519) to the list of known hosts. [ 26.073621][ T29] audit: type=1400 audit(1753095009.129:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.074777][ T3292] cgroup: Unknown subsys name 'net' [ 26.096354][ T29] audit: type=1400 audit(1753095009.129:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.123739][ T29] audit: type=1400 audit(1753095009.159:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.282487][ T3292] cgroup: Unknown subsys name 'cpuset' [ 26.288639][ T3292] cgroup: Unknown subsys name 'rlimit' [ 26.400518][ T29] audit: type=1400 audit(1753095009.449:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.424089][ T29] audit: type=1400 audit(1753095009.449:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.444565][ T29] audit: type=1400 audit(1753095009.459:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.464925][ T29] audit: type=1400 audit(1753095009.459:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.485256][ T29] audit: type=1400 audit(1753095009.459:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.493694][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.510084][ T29] audit: type=1400 audit(1753095009.459:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.541937][ T29] audit: type=1400 audit(1753095009.579:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.576344][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.621559][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.632376][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.700032][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 27.743053][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.769959][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.777049][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.784249][ T3305] bridge_slave_0: entered allmulticast mode [ 27.790508][ T3305] bridge_slave_0: entered promiscuous mode [ 27.799482][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.806539][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.813650][ T3313] bridge_slave_0: entered allmulticast mode [ 27.820013][ T3313] bridge_slave_0: entered promiscuous mode [ 27.831577][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.838734][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.845954][ T3305] bridge_slave_1: entered allmulticast mode [ 27.852549][ T3305] bridge_slave_1: entered promiscuous mode [ 27.865365][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.872425][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.879468][ T3313] bridge_slave_1: entered allmulticast mode [ 27.885886][ T3313] bridge_slave_1: entered promiscuous mode [ 27.934019][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.946597][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.955805][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.962929][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.970172][ T3304] bridge_slave_0: entered allmulticast mode [ 27.976643][ T3304] bridge_slave_0: entered promiscuous mode [ 27.983297][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.990385][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.997661][ T3304] bridge_slave_1: entered allmulticast mode [ 28.004003][ T3304] bridge_slave_1: entered promiscuous mode [ 28.015928][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.036115][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.057125][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.075192][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.082323][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.089488][ T3316] bridge_slave_0: entered allmulticast mode [ 28.095963][ T3316] bridge_slave_0: entered promiscuous mode [ 28.102718][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.117002][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.126862][ T3313] team0: Port device team_slave_0 added [ 28.133202][ T3305] team0: Port device team_slave_0 added [ 28.139420][ T3313] team0: Port device team_slave_1 added [ 28.149682][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.156839][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.164073][ T3316] bridge_slave_1: entered allmulticast mode [ 28.170300][ T3316] bridge_slave_1: entered promiscuous mode [ 28.185283][ T3305] team0: Port device team_slave_1 added [ 28.219678][ T3304] team0: Port device team_slave_0 added [ 28.226337][ T3304] team0: Port device team_slave_1 added [ 28.232297][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.239249][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.265239][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.281889][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.300964][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.308016][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.334035][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.347875][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.357172][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.364208][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.390226][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.408311][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.415304][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.441273][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.458772][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.465832][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.491772][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.506705][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.513677][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.539633][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.558533][ T3316] team0: Port device team_slave_0 added [ 28.575617][ T3316] team0: Port device team_slave_1 added [ 28.598060][ T3313] hsr_slave_0: entered promiscuous mode [ 28.604141][ T3313] hsr_slave_1: entered promiscuous mode [ 28.614725][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.621822][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.628931][ T3310] bridge_slave_0: entered allmulticast mode [ 28.635378][ T3310] bridge_slave_0: entered promiscuous mode [ 28.649392][ T3305] hsr_slave_0: entered promiscuous mode [ 28.655445][ T3305] hsr_slave_1: entered promiscuous mode [ 28.661185][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.668770][ T3305] Cannot create hsr debugfs directory [ 28.693682][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.700741][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.707940][ T3310] bridge_slave_1: entered allmulticast mode [ 28.715391][ T3310] bridge_slave_1: entered promiscuous mode [ 28.727130][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.734130][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.760163][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.782725][ T3304] hsr_slave_0: entered promiscuous mode [ 28.788655][ T3304] hsr_slave_1: entered promiscuous mode [ 28.794821][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.802391][ T3304] Cannot create hsr debugfs directory [ 28.808124][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.815108][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.841088][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.885527][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.911927][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.923283][ T3316] hsr_slave_0: entered promiscuous mode [ 28.929442][ T3316] hsr_slave_1: entered promiscuous mode [ 28.935265][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.942850][ T3316] Cannot create hsr debugfs directory [ 28.991127][ T3310] team0: Port device team_slave_0 added [ 28.997798][ T3310] team0: Port device team_slave_1 added [ 29.036238][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.043308][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.069271][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.091761][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.098797][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.124758][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.185000][ T3310] hsr_slave_0: entered promiscuous mode [ 29.191078][ T3310] hsr_slave_1: entered promiscuous mode [ 29.196970][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.204575][ T3310] Cannot create hsr debugfs directory [ 29.240988][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.249445][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.260273][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.268995][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.309872][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.319693][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.330384][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.339119][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.366306][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.375655][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.387473][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.395964][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.420938][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.440511][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.449460][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.467699][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.486534][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.496728][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.513952][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.522872][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.545888][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.575569][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.585133][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.595200][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.613482][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.620584][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.629324][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.636445][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.647688][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.667573][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.678152][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.685267][ T1763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.695853][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.702913][ T1763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.711360][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.718492][ T1763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.737201][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.744428][ T1763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.763900][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.779574][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.817201][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.830322][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.840569][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.847647][ T1763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.875558][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.895787][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.902920][ T1763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.916307][ T1763] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.923433][ T1763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.931972][ T1763] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.939014][ T1763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.985130][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.003920][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.069591][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.086611][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.111588][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.137382][ T3313] veth0_vlan: entered promiscuous mode [ 30.157141][ T3304] veth0_vlan: entered promiscuous mode [ 30.173050][ T3313] veth1_vlan: entered promiscuous mode [ 30.187321][ T3304] veth1_vlan: entered promiscuous mode [ 30.209866][ T3304] veth0_macvtap: entered promiscuous mode [ 30.223033][ T3304] veth1_macvtap: entered promiscuous mode [ 30.238116][ T3313] veth0_macvtap: entered promiscuous mode [ 30.248362][ T3313] veth1_macvtap: entered promiscuous mode [ 30.276821][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.288906][ T3316] veth0_vlan: entered promiscuous mode [ 30.300019][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.315784][ T3316] veth1_vlan: entered promiscuous mode [ 30.322748][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.331572][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.340371][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.349204][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.365961][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.381497][ T3305] veth0_vlan: entered promiscuous mode [ 30.400111][ T3316] veth0_macvtap: entered promiscuous mode [ 30.408463][ T3305] veth1_vlan: entered promiscuous mode [ 30.416220][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.425819][ T3316] veth1_macvtap: entered promiscuous mode [ 30.437835][ T3305] veth0_macvtap: entered promiscuous mode [ 30.445650][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.453452][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.468973][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.477984][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.486746][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.518453][ T3305] veth1_macvtap: entered promiscuous mode [ 30.527834][ T3310] veth0_vlan: entered promiscuous mode [ 30.536090][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.555311][ T3310] veth1_vlan: entered promiscuous mode [ 30.569812][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.578656][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.606737][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.615602][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.624369][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.633140][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.644748][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.652913][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.661667][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.670435][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.679271][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.716547][ T3310] veth0_macvtap: entered promiscuous mode [ 30.736874][ T3481] netlink: 'syz.3.4': attribute type 5 has an invalid length. [ 30.745558][ T3310] veth1_macvtap: entered promiscuous mode [ 30.761788][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.773251][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.796680][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.805434][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.814186][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.823021][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019530][ T3516] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 31.051343][ T3518] openvswitch: netlink: Message has 6 unknown bytes. [ 31.116852][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 31.116866][ T29] audit: type=1400 audit(1753095014.169:115): avc: denied { read } for pid=3526 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.158583][ T29] audit: type=1400 audit(1753095014.199:116): avc: denied { ioctl } for pid=3526 comm="syz.3.26" path="socket:[3869]" dev="sockfs" ino=3869 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.183962][ T29] audit: type=1400 audit(1753095014.199:117): avc: denied { create } for pid=3531 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.203149][ T29] audit: type=1400 audit(1753095014.209:118): avc: denied { connect } for pid=3531 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.222544][ T29] audit: type=1400 audit(1753095014.209:119): avc: denied { write } for pid=3531 comm="syz.2.27" path="socket:[4639]" dev="sockfs" ino=4639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 31.270979][ T29] audit: type=1400 audit(1753095014.319:120): avc: denied { create } for pid=3539 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.329122][ T3542] program syz.4.33 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.340552][ T29] audit: type=1400 audit(1753095014.349:121): avc: denied { write } for pid=3539 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.340580][ T29] audit: type=1400 audit(1753095014.379:122): avc: denied { append } for pid=3541 comm="syz.4.33" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 31.340672][ T29] audit: type=1400 audit(1753095014.379:123): avc: denied { open } for pid=3541 comm="syz.4.33" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 31.398408][ T29] audit: type=1400 audit(1753095014.419:124): avc: denied { write } for pid=3543 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.399957][ T3553] SELinux: failed to load policy [ 31.448580][ T3557] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 31.506549][ T3561] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.519817][ T3563] loop3: detected capacity change from 0 to 128 [ 31.529605][ T3563] vfat: Unknown parameter '' [ 31.606731][ T3573] team0: No ports can be present during mode change [ 31.758843][ T3589] program syz.0.55 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.972392][ T3618] loop1: detected capacity change from 0 to 512 [ 32.001990][ T3618] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.71: casefold flag without casefold feature [ 32.016243][ T3618] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.71: couldn't read orphan inode 15 (err -117) [ 32.029140][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.034455][ T3624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3624 comm=syz.3.72 [ 32.098647][ T3628] loop3: detected capacity change from 0 to 512 [ 32.106457][ T3628] EXT4-fs: Ignoring removed orlov option [ 32.112854][ T3628] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 32.122525][ T3628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 32.130670][ T3628] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.74: corrupted in-inode xattr: e_value size too large [ 32.145607][ T3628] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.74: couldn't read orphan inode 15 (err -117) [ 32.158780][ T3628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.160152][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.195182][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.205456][ T3631] loop1: detected capacity change from 0 to 512 [ 32.237819][ T3631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.250484][ T3631] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.264686][ T3380] kernel write not supported for file /input/event2 (pid: 3380 comm: kworker/1:3) [ 32.290539][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.356229][ T3645] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 32.408246][ T3649] syz.1.83 (3649) used greatest stack depth: 9384 bytes left [ 32.421544][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.430499][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.440924][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.464965][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.474013][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.485100][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.510432][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.519332][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.529451][ T3651] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 32.645848][ T3668] loop4: detected capacity change from 0 to 512 [ 32.673155][ T3668] ======================================================= [ 32.673155][ T3668] WARNING: The mand mount option has been deprecated and [ 32.673155][ T3668] and is ignored by this kernel. Remove the mand [ 32.673155][ T3668] option from the mount to silence this warning. [ 32.673155][ T3668] ======================================================= [ 32.733891][ T3668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 32.741969][ T3668] System zones: 0-2, 18-18, 34-34 [ 32.742283][ T3672] loop1: detected capacity change from 0 to 512 [ 32.747786][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.767422][ T3668] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.794076][ T3676] atomic_op ffff88811987e128 conn xmit_atomic 0000000000000000 [ 32.804844][ T3672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.817921][ T3672] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.820764][ T3668] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.89: Failed to acquire dquot type 1 [ 32.858565][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.877848][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.912944][ T3687] sg_read: process 53 (syz.1.94) changed security contexts after opening file descriptor, this is not allowed. [ 33.136633][ T3721] capability: warning: `syz.0.111' uses deprecated v2 capabilities in a way that may be insecure [ 33.305061][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.331398][ T3746] loop3: detected capacity change from 0 to 512 [ 33.338276][ T3746] EXT4-fs: Ignoring removed orlov option [ 33.350449][ T3746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.363663][ T3746] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.390311][ T3746] EXT4-fs (loop3): 1 orphan inode deleted [ 33.396148][ T3746] EXT4-fs (loop3): 1 truncate cleaned up [ 33.415167][ T3746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.451356][ T3764] loop1: detected capacity change from 0 to 128 [ 33.456588][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.496035][ T3764] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.537947][ T3764] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.564621][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 33.583359][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.601389][ T3738] chnl_net:caif_netlink_parms(): no params data found [ 33.608770][ T3782] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.692200][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.699309][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.712884][ T3738] bridge_slave_0: entered allmulticast mode [ 33.719513][ T3738] bridge_slave_0: entered promiscuous mode [ 33.726674][ T3738] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.733950][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.742678][ T3738] bridge_slave_1: entered allmulticast mode [ 33.749034][ T3738] bridge_slave_1: entered promiscuous mode [ 33.766025][ T3738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.776644][ T3738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.798634][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.810058][ T3738] team0: Port device team_slave_0 added [ 33.816754][ T3738] team0: Port device team_slave_1 added [ 33.832267][ T3738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.839209][ T3738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.865342][ T3738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.876785][ T3738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.883856][ T3738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.909857][ T3738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.923662][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.949920][ T3738] hsr_slave_0: entered promiscuous mode [ 33.955971][ T3738] hsr_slave_1: entered promiscuous mode [ 33.962075][ T3738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.969645][ T3738] Cannot create hsr debugfs directory [ 33.977757][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.110241][ T31] bridge_slave_1: left allmulticast mode [ 34.116051][ T31] bridge_slave_1: left promiscuous mode [ 34.121850][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.131416][ T31] bridge_slave_0: left allmulticast mode [ 34.137131][ T31] bridge_slave_0: left promiscuous mode [ 34.143019][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.204874][ T3821] loop0: detected capacity change from 0 to 4096 [ 34.214168][ T3821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.229023][ T3821] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #15: comm syz.0.148: corrupted inode contents [ 34.241151][ T3821] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #15: comm syz.0.148: mark_inode_dirty error [ 34.253679][ T3821] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #15: comm syz.0.148: corrupted inode contents [ 34.265886][ T3821] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.148: mark_inode_dirty error [ 34.265971][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.277342][ T3821] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #15: comm syz.0.148: corrupted inode contents [ 34.298216][ T3821] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.148: mark_inode_dirty error [ 34.309565][ T3821] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #15: comm syz.0.148: corrupted inode contents [ 34.309677][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.330906][ T31] bond0 (unregistering): Released all slaves [ 34.332810][ T3821] EXT4-fs error (device loop0): ext4_truncate:4597: inode #15: comm syz.0.148: mark_inode_dirty error [ 34.349230][ T3821] EXT4-fs error (device loop0) in ext4_setattr:5986: Corrupt filesystem [ 34.378856][ T3821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.409986][ T31] hsr_slave_0: left promiscuous mode [ 34.432340][ T31] hsr_slave_1: left promiscuous mode [ 34.439005][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.446472][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.462090][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.469574][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.501159][ T31] veth1_macvtap: left promiscuous mode [ 34.516052][ T31] veth0_macvtap: left promiscuous mode [ 34.521681][ T31] veth1_vlan: left promiscuous mode [ 34.531934][ T31] veth0_vlan: left promiscuous mode [ 34.657714][ T31] team0 (unregistering): Port device team_slave_1 removed [ 34.678245][ T31] team0 (unregistering): Port device team_slave_0 removed [ 34.679768][ T3852] mmap: syz.1.155 (3852) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.735227][ T3848] sch_tbf: peakrate 1 is lower than or equals to rate 6 ! [ 34.897730][ T3738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.919709][ T3738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.947612][ T3738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.968369][ T3738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.970859][ T3888] loop1: detected capacity change from 0 to 128 [ 35.154299][ T3738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.197020][ T3738] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.224138][ T2656] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.231214][ T2656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.247937][ T3930] loop0: detected capacity change from 0 to 256 [ 35.300571][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.307709][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.344504][ T3944] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 35.370595][ T3738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.501664][ T3738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.704695][ T3738] veth0_vlan: entered promiscuous mode [ 35.723951][ T3738] veth1_vlan: entered promiscuous mode [ 35.764628][ T3738] veth0_macvtap: entered promiscuous mode [ 35.777601][ T3738] veth1_macvtap: entered promiscuous mode [ 35.820349][ T3738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.866521][ T3738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.884747][ T3738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.893709][ T3738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.902459][ T3738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.911218][ T3738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.127110][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 36.127189][ T29] audit: type=1400 audit(1753095019.179:324): avc: denied { watch } for pid=4008 comm="syz.2.202" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.158155][ T4010] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 36.158155][ T4010] The task syz.1.199 (4010) triggered the difference, watch for misbehavior. [ 36.288582][ T29] audit: type=1400 audit(1753095019.339:325): avc: denied { ioctl } for pid=4019 comm="syz.0.206" path="socket:[6515]" dev="sockfs" ino=6515 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.350168][ T4022] SELinux: Context system_u:object_r:ksm_device_t:s0 is not valid (left unmapped). [ 36.350518][ T29] audit: type=1400 audit(1753095019.399:326): avc: denied { relabelfrom } for pid=4021 comm="syz.0.207" name="" dev="pipefs" ino=6520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 36.381876][ T29] audit: type=1400 audit(1753095019.399:327): avc: denied { mac_admin } for pid=4021 comm="syz.0.207" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.405254][ T29] audit: type=1400 audit(1753095019.419:328): avc: denied { relabelto } for pid=4021 comm="syz.0.207" name="" dev="pipefs" ino=6520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:ksm_device_t:s0" [ 36.516329][ T29] audit: type=1400 audit(1753095019.569:329): avc: denied { create } for pid=4031 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 36.539065][ T29] audit: type=1400 audit(1753095019.569:330): avc: denied { write } for pid=4031 comm="syz.2.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 36.591926][ T29] audit: type=1400 audit(1753095019.639:331): avc: denied { listen } for pid=4036 comm="syz.0.214" lport=52946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.673055][ T4047] No such timeout policy "syz1" [ 36.719353][ T4058] vhci_hcd: invalid port number 12 [ 36.721926][ T29] audit: type=1400 audit(1753095019.769:332): avc: denied { write } for pid=4057 comm="syz.0.222" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.724536][ T4058] vhci_hcd: default hub control req: 8031 v000d i000c l0 [ 36.769542][ T29] audit: type=1400 audit(1753095019.819:333): avc: denied { create } for pid=4060 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.836505][ T4070] openvswitch: netlink: Message has 8 unknown bytes. [ 36.868298][ T4077] loop0: detected capacity change from 0 to 512 [ 36.885845][ T4077] EXT4-fs: Ignoring removed orlov option [ 36.893929][ T4077] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 36.904691][ T4077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 36.915007][ T4077] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.232: corrupted in-inode xattr: e_value size too large [ 36.940895][ T4077] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.232: couldn't read orphan inode 15 (err -117) [ 36.959274][ T4077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.992612][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.493788][ T4168] loop0: detected capacity change from 0 to 128 [ 37.530110][ T4168] FAT-fs (loop0): error, corrupted directory (invalid i_start) [ 37.537803][ T4168] FAT-fs (loop0): Filesystem has been set read-only [ 37.667559][ T4185] ALSA: seq fatal error: cannot create timer (-19) [ 37.716240][ T4198] loop4: detected capacity change from 0 to 128 [ 37.958819][ T4235] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 37.965064][ T4237] netlink: 'syz.3.307': attribute type 11 has an invalid length. [ 37.972845][ T4237] __nla_validate_parse: 10 callbacks suppressed [ 37.972855][ T4237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.307'. [ 38.039773][ T4245] program syz.3.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.291819][ T4267] netlink: 'syz.2.322': attribute type 1 has an invalid length. [ 38.375896][ T4276] autofs4:pid:4276:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(24.11), cmd(0xc018937e) [ 38.389202][ T4276] autofs4:pid:4276:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 38.564146][ T4294] loop0: detected capacity change from 0 to 1764 [ 38.679634][ T4303] loop2: detected capacity change from 0 to 2048 [ 38.726029][ T4308] loop1: detected capacity change from 0 to 512 [ 38.732931][ T4303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.746836][ T4312] SELinux: syz.4.342 (4312) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 38.760527][ T2996] udevd[2996]: worker [3298] terminated by signal 33 (Unknown signal 33) [ 38.778886][ T4308] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.821636][ T4308] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.836168][ T3738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.851000][ T4308] EXT4-fs (loop1): 1 truncate cleaned up [ 38.869010][ T4308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.886903][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 38.923136][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.928073][ T4336] netlink: 192 bytes leftover after parsing attributes in process `syz.4.353'. [ 38.944604][ T4338] loop2: detected capacity change from 0 to 512 [ 38.970320][ T4342] loop4: detected capacity change from 0 to 1764 [ 38.987353][ T4338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.046604][ T3738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.214066][ T4381] loop1: detected capacity change from 0 to 512 [ 39.233999][ T4381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.257929][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.385358][ T4415] SELinux: syz.2.388 (4415) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 39.424108][ T4423] loop2: detected capacity change from 0 to 1024 [ 39.448535][ T4423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.485982][ T3738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.611197][ T4454] loop4: detected capacity change from 0 to 512 [ 39.620280][ T4458] netlink: 'syz.1.406': attribute type 11 has an invalid length. [ 39.628046][ T4458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.406'. [ 39.631495][ T4454] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.652928][ T4454] EXT4-fs (loop4): 1 truncate cleaned up [ 39.659027][ T4454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.675994][ T4464] loop1: detected capacity change from 0 to 1024 [ 39.693596][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.730512][ T4464] loop1: detected capacity change from 0 to 8192 [ 39.813782][ T4481] netlink: 64 bytes leftover after parsing attributes in process `syz.1.417'. [ 39.862121][ T4489] SELinux: syz.1.419 (4489) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 39.976504][ T4510] process 'syz.1.429' launched './file0' with NULL argv: empty string added [ 40.036437][ T4522] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 40.063307][ T4527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 40.107601][ T4535] loop3: detected capacity change from 0 to 512 [ 40.114833][ T4535] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.124811][ T4535] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 40.133783][ T4535] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.441: attempt to clear invalid blocks 2 len 1 [ 40.165043][ T4535] EXT4-fs (loop3): Remounting filesystem read-only [ 40.173311][ T4535] EXT4-fs (loop3): 1 truncate cleaned up [ 40.179580][ T4535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.195527][ T4535] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 40.235097][ T4547] loop0: detected capacity change from 0 to 2048 [ 40.246443][ T4551] loop4: detected capacity change from 0 to 512 [ 40.260535][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.269731][ T4553] loop1: detected capacity change from 0 to 1024 [ 40.278387][ T4551] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.292885][ T4553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.302226][ T4551] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 40.305803][ T4553] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.326820][ T4553] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 40.336085][ T4553] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.450: lblock 2 mapped to illegal pblock 2 (length 1) [ 40.352917][ T4553] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.450: lblock 0 mapped to illegal pblock 48 (length 1) [ 40.367473][ T4553] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.450: Failed to acquire dquot type 0 [ 40.380857][ T4553] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 40.392061][ T4564] netlink: 'syz.0.453': attribute type 11 has an invalid length. [ 40.399881][ T4564] netlink: 44 bytes leftover after parsing attributes in process `syz.0.453'. [ 40.410569][ T4553] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.450: mark_inode_dirty error [ 40.428200][ T4553] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 40.461930][ T4553] EXT4-fs (loop1): 1 orphan inode deleted [ 40.468197][ T4553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.482208][ T31] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.509139][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 40.559916][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.571377][ T3316] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.584789][ T3316] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 40.602826][ T4579] loop0: detected capacity change from 0 to 512 [ 40.609366][ T4579] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.615072][ T3316] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 40.628442][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.461'. [ 40.648381][ T4579] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 40.672799][ T4579] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.460: attempt to clear invalid blocks 2 len 1 [ 40.725362][ T4579] EXT4-fs (loop0): Remounting filesystem read-only [ 40.732304][ T4592] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 40.746506][ T4579] EXT4-fs (loop0): 1 truncate cleaned up [ 40.752560][ T4579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.772275][ T4596] loop1: detected capacity change from 0 to 1756 [ 40.789089][ T4579] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 40.823187][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.851631][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 41.099516][ C0] hrtimer: interrupt took 47892 ns [ 41.167469][ T4659] loop4: detected capacity change from 0 to 512 [ 41.176855][ T4659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.203383][ T4659] EXT4-fs (loop4): 1 truncate cleaned up [ 41.212021][ T4659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.257799][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 41.257814][ T29] audit: type=1400 audit(1753095024.309:441): avc: denied { sqpoll } for pid=4658 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.295574][ T4675] netlink: 44 bytes leftover after parsing attributes in process `syz.0.504'. [ 41.331968][ T29] audit: type=1400 audit(1753095024.319:442): avc: denied { firmware_load } for pid=4666 comm="syz.3.500" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 41.356714][ T29] audit: type=1400 audit(1753095024.349:443): avc: denied { create } for pid=4674 comm="syz.0.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.376751][ T29] audit: type=1400 audit(1753095024.349:444): avc: denied { ioctl } for pid=4674 comm="syz.0.504" path="socket:[8576]" dev="sockfs" ino=8576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.403433][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.475620][ T29] audit: type=1400 audit(1753095024.529:445): avc: denied { create } for pid=4684 comm="syz.4.509" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.509955][ T29] audit: type=1400 audit(1753095024.559:446): avc: denied { write } for pid=4684 comm="syz.4.509" name="file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.532216][ T29] audit: type=1400 audit(1753095024.559:447): avc: denied { open } for pid=4684 comm="syz.4.509" path="/96/file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.595604][ T29] audit: type=1400 audit(1753095024.609:448): avc: denied { ioctl } for pid=4684 comm="syz.4.509" path="/96/file0" dev="tmpfs" ino=511 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.619552][ T29] audit: type=1400 audit(1753095024.629:449): avc: denied { unlink } for pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.642069][ T29] audit: type=1400 audit(1753095024.639:450): avc: denied { write } for pid=4690 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.686784][ T4701] netlink: 'syz.2.517': attribute type 3 has an invalid length. [ 41.834516][ T4723] ieee802154 phy0 wpan0: encryption failed: -22 [ 41.873182][ T4726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.880512][ T4726] IPv6: NLM_F_CREATE should be set when creating new route [ 41.887724][ T4726] IPv6: NLM_F_CREATE should be set when creating new route [ 41.897427][ T4726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.904853][ T4726] Zero length message leads to an empty skb [ 41.974261][ T4735] loop2: detected capacity change from 0 to 512 [ 41.995463][ T4744] smc: net device bond0 applied user defined pnetid SYZ2 [ 42.011896][ T4744] smc: net device bond0 erased user defined pnetid SYZ2 [ 42.028202][ T4735] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.535: Failed to acquire dquot type 1 [ 42.063142][ T4735] EXT4-fs (loop2): 1 truncate cleaned up [ 42.112107][ T4762] vhci_hcd: invalid port number 23 [ 42.117801][ T4735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.151594][ T4735] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.220798][ T3738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.240372][ T4774] loop1: detected capacity change from 0 to 512 [ 42.247679][ T4774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.258569][ T4774] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #17: comm syz.1.547: iget: bad extra_isize 1568 (inode size 256) [ 42.272713][ T4774] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.547: couldn't read orphan inode 17 (err -117) [ 42.303706][ T4774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.329554][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.343284][ T3316] ================================================================== [ 42.351409][ T3316] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 42.359018][ T3316] [ 42.361362][ T3316] read-write to 0xffff888237d25e68 of 1 bytes by task 4657 on cpu 1: [ 42.369447][ T3316] folio_add_lru+0xa5/0x1f0 [ 42.374009][ T3316] shmem_get_folio_gfp+0x7ab/0xd60 [ 42.379150][ T3316] shmem_write_begin+0xa8/0x190 [ 42.384066][ T3316] generic_perform_write+0x181/0x490 [ 42.389390][ T3316] shmem_file_write_iter+0xc5/0xf0 [ 42.394524][ T3316] __kernel_write_iter+0x253/0x4c0 [ 42.399681][ T3316] dump_user_range+0x407/0x8c0 [ 42.404471][ T3316] elf_core_dump+0x1dc2/0x1f80 [ 42.409253][ T3316] do_coredump+0x1dfa/0x27b0 [ 42.413862][ T3316] get_signal+0xd85/0xf70 [ 42.418219][ T3316] arch_do_signal_or_restart+0x96/0x480 [ 42.423778][ T3316] irqentry_exit_to_user_mode+0x5e/0xa0 [ 42.429346][ T3316] irqentry_exit+0x12/0x50 [ 42.433777][ T3316] asm_exc_page_fault+0x26/0x30 [ 42.438643][ T3316] [ 42.440968][ T3316] read to 0xffff888237d25e68 of 1 bytes by task 3316 on cpu 0: [ 42.448514][ T3316] __lru_add_drain_all+0x12b/0x3f0 [ 42.453655][ T3316] lru_add_drain_all+0x10/0x20 [ 42.458443][ T3316] invalidate_bdev+0x47/0x70 [ 42.463045][ T3316] ext4_put_super+0x624/0x7d0 [ 42.467756][ T3316] generic_shutdown_super+0xe6/0x210 [ 42.473063][ T3316] kill_block_super+0x2a/0x70 [ 42.477764][ T3316] ext4_kill_sb+0x42/0x80 [ 42.482103][ T3316] deactivate_locked_super+0x75/0x1c0 [ 42.487493][ T3316] deactivate_super+0x97/0xa0 [ 42.492189][ T3316] cleanup_mnt+0x269/0x2e0 [ 42.496620][ T3316] __cleanup_mnt+0x19/0x20 [ 42.501046][ T3316] task_work_run+0x131/0x1a0 [ 42.505652][ T3316] exit_to_user_mode_loop+0xe4/0x100 [ 42.510948][ T3316] do_syscall_64+0x1d6/0x200 [ 42.515547][ T3316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.521452][ T3316] [ 42.523777][ T3316] value changed: 0x01 -> 0x04 [ 42.528453][ T3316] [ 42.530779][ T3316] Reported by Kernel Concurrency Sanitizer on: [ 42.536949][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 42.547810][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.557874][ T3316] ================================================================== [ 42.576023][ T4770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.589798][ T4770] misc raw-gadget: fail, usb_gadget_register_driver returned -16