last executing test programs: 311.45077ms ago: executing program 2 (id=3): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 310.3938ms ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) 203.084879ms ago: executing program 2 (id=6): lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d2e279f5d"], 0x0, 0x0, 0x3) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f00000001c0)=ANY=[], 0x4, 0x2dc, &(0x7f0000000bc0)="$eJzs3c1uG1UfBvBnEsf221fCXrBCSIwEC1ZV0ytwhFIJkRVVFsACIppKKI6QWikSH8Ltii0bFiy4AiQkLoQNd8AFILGjlSoNmvE4toubj6pu+fj9Nj45c54z/zMZJ5NFjj969fjoVpnb97/8Nf1+kY1RRnlQZJiNzNzLktE3AQD+yR5UVX6vplYdL+6tzhVJ+muuDQBYj/N+/7deOm391L52114aALAmN997/52dvb3dd8uynxvHX5/s13/Z16/T4zu380nGOcy1DPIoaR4UttI8LdTNG1VVTTrlw7Ish3njeHKyXyePP/y5nX/nt6TJb2eQYdN1+rTR5N/e290upxbyk7qOK+35R3X+egZ5+TS8lL++Ip/9bt58faH+qxnkl4/zaca51RQxzfeyt/vVdlm+VX37xxcf1OXV+WJyst9rxs1Vm8/5WwMAAAAAAAAAAAAAAAAAAAAAwL/Y1XbvnF6a/Xvqrnb/nc1H9RdbKWeGy/vzTPPFbKLF/YGqqppU+X62P8+1siyrduA838krnXRezKoBAAAAAAAAAAAAAAAAAADg7+XuZ58fHYzHh3eeSaPYmM7aSfLwZvK084wWel7L8phRstTTa1dyMB63Z8/4cLgwYafpaePZnI0pkjPLqBfxjC7LeY3/LVa42Pjhx8tO2D9/zNbqcz1V48rqazi7u44OitXXsJdZT7+9Sb7rJvMx3VywjO6TDlW5zO3XXVFhMrhIfLbW6Tz/bw5NzkileHJhm6fvy7aneHwV3eaqroxvtY089gaZ3xsXup/Tn8b/+rOisFsHAAAAAAAAAAAAAAAAAACs1fy/f1ccvH9mdKPqra0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiu5p//f4nGpA1fYHA3d+6+4CUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/BnAAAA//+lXFN6") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 0s ago: executing program 2 (id=7): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x2a060400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 34.654468][ T29] audit: type=1400 audit(1753820396.525:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.655833][ T3290] cgroup: Unknown subsys name 'net' [ 34.677347][ T29] audit: type=1400 audit(1753820396.525:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.705072][ T29] audit: type=1400 audit(1753820396.555:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.883178][ T3290] cgroup: Unknown subsys name 'cpuset' [ 34.889832][ T3290] cgroup: Unknown subsys name 'rlimit' [ 35.080805][ T29] audit: type=1400 audit(1753820396.945:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.104194][ T29] audit: type=1400 audit(1753820396.945:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.124698][ T29] audit: type=1400 audit(1753820396.955:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.145125][ T29] audit: type=1400 audit(1753820396.955:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.165503][ T29] audit: type=1400 audit(1753820396.955:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.175502][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.190360][ T29] audit: type=1400 audit(1753820396.955:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.222299][ T29] audit: type=1400 audit(1753820397.065:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.255067][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.405413][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 36.455293][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 36.488017][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 36.531957][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.539111][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.546444][ T3300] bridge_slave_0: entered allmulticast mode [ 36.553012][ T3300] bridge_slave_0: entered promiscuous mode [ 36.562208][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.569461][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.577281][ T3300] bridge_slave_1: entered allmulticast mode [ 36.584026][ T3300] bridge_slave_1: entered promiscuous mode [ 36.595197][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.659174][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.673875][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.692067][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.701501][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.708686][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.716102][ T3305] bridge_slave_0: entered allmulticast mode [ 36.722858][ T3305] bridge_slave_0: entered promiscuous mode [ 36.729742][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.736882][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.744160][ T3301] bridge_slave_0: entered allmulticast mode [ 36.750661][ T3301] bridge_slave_0: entered promiscuous mode [ 36.757485][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.764600][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.771771][ T3301] bridge_slave_1: entered allmulticast mode [ 36.778385][ T3301] bridge_slave_1: entered promiscuous mode [ 36.795439][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.802611][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.809825][ T3305] bridge_slave_1: entered allmulticast mode [ 36.816281][ T3305] bridge_slave_1: entered promiscuous mode [ 36.846769][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.876695][ T3300] team0: Port device team_slave_0 added [ 36.883742][ T3300] team0: Port device team_slave_1 added [ 36.890479][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.900683][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.917762][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.925014][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.932264][ T3306] bridge_slave_0: entered allmulticast mode [ 36.938811][ T3306] bridge_slave_0: entered promiscuous mode [ 36.951511][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.968638][ T3305] team0: Port device team_slave_0 added [ 36.974531][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.981678][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.989091][ T3306] bridge_slave_1: entered allmulticast mode [ 36.995733][ T3306] bridge_slave_1: entered promiscuous mode [ 37.015576][ T3305] team0: Port device team_slave_1 added [ 37.026722][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.033915][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.059904][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.091675][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.098723][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.124766][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.136285][ T3301] team0: Port device team_slave_0 added [ 37.156277][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.166964][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.177061][ T3301] team0: Port device team_slave_1 added [ 37.182967][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.190090][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.197361][ T3307] bridge_slave_0: entered allmulticast mode [ 37.205360][ T3307] bridge_slave_0: entered promiscuous mode [ 37.213512][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.221059][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.228791][ T3307] bridge_slave_1: entered allmulticast mode [ 37.235473][ T3307] bridge_slave_1: entered promiscuous mode [ 37.248013][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.255203][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.281344][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.314194][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.323797][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.330871][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.357007][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.375371][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.382411][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.409062][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.426537][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.442015][ T3306] team0: Port device team_slave_0 added [ 37.448126][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.455304][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.481373][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.499802][ T3300] hsr_slave_0: entered promiscuous mode [ 37.505878][ T3300] hsr_slave_1: entered promiscuous mode [ 37.522015][ T3306] team0: Port device team_slave_1 added [ 37.541979][ T3307] team0: Port device team_slave_0 added [ 37.548739][ T3307] team0: Port device team_slave_1 added [ 37.560623][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.567727][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.593767][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.625185][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.632256][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.658349][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.671236][ T3305] hsr_slave_0: entered promiscuous mode [ 37.677384][ T3305] hsr_slave_1: entered promiscuous mode [ 37.683468][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 37.689221][ T3305] Cannot create hsr debugfs directory [ 37.714227][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.721226][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.747288][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.760008][ T3301] hsr_slave_0: entered promiscuous mode [ 37.767025][ T3301] hsr_slave_1: entered promiscuous mode [ 37.772893][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.778640][ T3301] Cannot create hsr debugfs directory [ 37.802828][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.809957][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.835978][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.870708][ T3306] hsr_slave_0: entered promiscuous mode [ 37.876915][ T3306] hsr_slave_1: entered promiscuous mode [ 37.882928][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 37.888690][ T3306] Cannot create hsr debugfs directory [ 37.939421][ T3307] hsr_slave_0: entered promiscuous mode [ 37.945650][ T3307] hsr_slave_1: entered promiscuous mode [ 37.951448][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 37.957321][ T3307] Cannot create hsr debugfs directory [ 38.106870][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.115849][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.125341][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.136618][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.160910][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.170864][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.180057][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.189144][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.220017][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.229252][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.238429][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.247858][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.293827][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.308139][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.321281][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.331171][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.356426][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.368589][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.387099][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.396786][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.409015][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.419571][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.437466][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.444681][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.463621][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.476145][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.483760][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.505903][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.530614][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.539963][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.562122][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.570551][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.590415][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.597626][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.606507][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.613660][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.625896][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.633114][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.658510][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.669040][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.697026][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.707643][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.753871][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.804977][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.819392][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.831144][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.843190][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.868388][ T2070] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.875836][ T2070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.887131][ T2070] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.894647][ T2070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.910581][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.928145][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.955688][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.962947][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.975114][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.982367][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.995153][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.005604][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.066930][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.077443][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.123717][ T3301] veth0_vlan: entered promiscuous mode [ 39.146024][ T3300] veth0_vlan: entered promiscuous mode [ 39.169280][ T3300] veth1_vlan: entered promiscuous mode [ 39.199244][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.209766][ T3301] veth1_vlan: entered promiscuous mode [ 39.219692][ T3300] veth0_macvtap: entered promiscuous mode [ 39.234296][ T3300] veth1_macvtap: entered promiscuous mode [ 39.263021][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.277721][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.294898][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.304912][ T3301] veth0_macvtap: entered promiscuous mode [ 39.313469][ T3305] veth0_vlan: entered promiscuous mode [ 39.324612][ T3301] veth1_macvtap: entered promiscuous mode [ 39.340816][ T3300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.349659][ T3300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.358455][ T3300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.367382][ T3300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.383944][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.394307][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.405004][ T3305] veth1_vlan: entered promiscuous mode [ 39.428841][ T3301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.437688][ T3301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.446652][ T3301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.455470][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.486153][ T3307] veth0_vlan: entered promiscuous mode [ 39.515410][ T3305] veth0_macvtap: entered promiscuous mode [ 39.527183][ T3305] veth1_macvtap: entered promiscuous mode [ 39.537407][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.548258][ T3307] veth1_vlan: entered promiscuous mode [ 39.600440][ T3471] loop1: detected capacity change from 0 to 2048 [ 39.611095][ T3306] veth0_vlan: entered promiscuous mode [ 39.620723][ T3471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.621999][ T3307] veth0_macvtap: entered promiscuous mode [ 39.640513][ T3471] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.659779][ T3307] veth1_macvtap: entered promiscuous mode [ 39.669980][ T3306] veth1_vlan: entered promiscuous mode [ 39.683572][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.704334][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.704869][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 39.704887][ T29] audit: type=1400 audit(1753820401.575:98): avc: denied { add_name } for pid=3469 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.715632][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.717842][ T29] audit: type=1400 audit(1753820401.575:99): avc: denied { create } for pid=3469 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.765581][ T29] audit: type=1400 audit(1753820401.575:100): avc: denied { read write } for pid=3469 comm="syz.1.2" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.767577][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.788230][ T29] audit: type=1400 audit(1753820401.575:101): avc: denied { open } for pid=3469 comm="syz.1.2" path="/0/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.822897][ T3306] veth0_macvtap: entered promiscuous mode [ 39.830238][ T3306] veth1_macvtap: entered promiscuous mode [ 39.842719][ T3477] loop2: detected capacity change from 0 to 256 [ 39.845400][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.858075][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.867698][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.876640][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.901364][ T29] audit: type=1400 audit(1753820401.735:102): avc: denied { mount } for pid=3476 comm="syz.2.6" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.923343][ T29] audit: type=1400 audit(1753820401.745:103): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.948414][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.973597][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.982421][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.991370][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.000284][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.013482][ T29] audit: type=1400 audit(1753820401.885:104): avc: denied { create } for pid=3479 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.044098][ T3478] ================================================================== [ 40.052784][ T3478] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 40.060237][ T3478] [ 40.062601][ T3478] read-write to 0xffff888108108470 of 8 bytes by task 3471 on cpu 0: [ 40.071239][ T3478] __xa_set_mark+0xd2/0x1a0 [ 40.075804][ T3478] __folio_mark_dirty+0x3af/0x4d0 [ 40.080882][ T3478] mark_buffer_dirty+0x11e/0x210 [ 40.085986][ T3478] folio_zero_new_buffers+0x28c/0x2e0 [ 40.091584][ T3478] block_write_end+0x200/0x210 [ 40.096402][ T3478] ext4_da_write_end+0x1d3/0x800 [ 40.101411][ T3478] generic_perform_write+0x30f/0x490 [ 40.106733][ T3478] ext4_buffered_write_iter+0x1ee/0x3c0 [ 40.112380][ T3478] ext4_file_write_iter+0x383/0xf00 [ 40.117636][ T3478] vfs_write+0x49d/0x8e0 [ 40.121954][ T3478] ksys_write+0xda/0x1a0 [ 40.126265][ T3478] __x64_sys_write+0x40/0x50 [ 40.130948][ T3478] x64_sys_call+0x27fe/0x2ff0 [ 40.135665][ T3478] do_syscall_64+0xd2/0x200 [ 40.140219][ T3478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.146196][ T3478] [ 40.148560][ T3478] read to 0xffff888108108470 of 8 bytes by task 3478 on cpu 1: [ 40.156147][ T3478] xas_find_marked+0x218/0x620 [ 40.160958][ T3478] find_get_entry+0x5d/0x380 [ 40.165637][ T3478] filemap_get_folios_tag+0x13b/0x210 [ 40.171106][ T3478] mpage_prepare_extent_to_map+0x320/0xaa0 [ 40.177010][ T3478] ext4_do_writepages+0xa1a/0x21c0 [ 40.182438][ T3478] ext4_writepages+0x176/0x300 [ 40.187266][ T3478] do_writepages+0x1c3/0x310 [ 40.192014][ T3478] __filemap_fdatawrite_range+0xfb/0x140 [ 40.197724][ T3478] generic_fadvise+0x312/0x430 [ 40.202542][ T3478] __x64_sys_fadvise64+0xcb/0x110 [ 40.207812][ T3478] x64_sys_call+0x29c1/0x2ff0 [ 40.212542][ T3478] do_syscall_64+0xd2/0x200 [ 40.217110][ T3478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.223062][ T3478] [ 40.225408][ T3478] value changed: 0x0000003fffffffff -> 0x000000ffffffffff [ 40.232532][ T3478] [ 40.234871][ T3478] Reported by Kernel Concurrency Sanitizer on: [ 40.241061][ T3478] CPU: 1 UID: 0 PID: 3478 Comm: syz.1.2 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 40.252891][ T3478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 40.262988][ T3478] ================================================================== [ 40.289601][ T3478] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 345: padding at end of block bitmap is not set [ 40.304976][ T3478] EXT4-fs (loop1): Remounting filesystem read-only [ 40.311589][ T154] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 40.318530][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.342962][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.351761][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.360597][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.369460][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.481704][ T3478] syz.1.2 (3478) used greatest stack depth: 10216 bytes left [ 40.535521][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.