last executing test programs: 1.099081714s ago: executing program 4 (id=320): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) lseek(r0, 0x289e0cb5, 0x0) 512.177923ms ago: executing program 0 (id=357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="00100000350381", 0x7}], 0x2) 430.744386ms ago: executing program 0 (id=361): unshare(0x28000600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_wakeup_irq', 0x3a34c0, 0x1) copy_file_range(r0, 0x0, r0, 0x0, 0x4, 0x0) 396.744827ms ago: executing program 0 (id=364): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 386.508447ms ago: executing program 3 (id=365): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x48040, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 372.075827ms ago: executing program 2 (id=366): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) process_mrelease(r0, 0x0) 346.572668ms ago: executing program 2 (id=368): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0xf2, 0x0, 0x0, 0x21000000) 332.797039ms ago: executing program 3 (id=369): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) 293.07885ms ago: executing program 3 (id=371): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f00000002c0)}, 0x10) 273.827891ms ago: executing program 1 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000010800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 242.795531ms ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 236.937452ms ago: executing program 1 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000050000000000000080000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 236.685912ms ago: executing program 4 (id=375): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a"], 0x164}}, 0x0) 196.706933ms ago: executing program 1 (id=376): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000317359f5001c1400000002"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 189.099603ms ago: executing program 4 (id=377): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setsig(r0, 0xa, 0x24) 178.085424ms ago: executing program 2 (id=378): unshare(0x24060400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) 168.604924ms ago: executing program 0 (id=379): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) 158.461775ms ago: executing program 4 (id=380): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000007c0), 0x10) 146.849965ms ago: executing program 3 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) 142.704955ms ago: executing program 1 (id=382): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x81, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x5, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0xfffffffe}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x80000001, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x5, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000001, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x12, 0xfffffff8, 0x0, 0x4, 0xe, 0x4}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x5, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x40, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6a}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x9, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) 118.501806ms ago: executing program 2 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)={0x60, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) 102.492006ms ago: executing program 4 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) 88.932926ms ago: executing program 1 (id=385): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x46}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e23, 0x6, @private2, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000740)='O', 0x1}], 0x1}}], 0x2, 0x40408d1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x2, 0xe, 0xb, 0x1e, 0x1, 0x1, 0xcc, 0xf, 0x6, 0x2, 0x7, 0xc, 0x0, 0x1}, 0xe) 83.060157ms ago: executing program 0 (id=386): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0}, &(0x7f0000000f00)=0xc) setresuid(0xee00, r1, 0x0) 49.365878ms ago: executing program 3 (id=387): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e22, 0x1, 'none\x00', 0x12, 0x6}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x0, 0x1, 'lblcr\x00', 0x0, 0x0, 0x54}, 0x2c) 49.148888ms ago: executing program 4 (id=388): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 38.541128ms ago: executing program 0 (id=389): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x10000, 0x5b) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 35.895388ms ago: executing program 2 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x7}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000080900010073797a3000000000ec020000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000004a8020980c00002801c0001800800014000000006080001400000000e08000140000000062c0001800800014000000005080001405167e70f0800014000000004080001400000004008000140000000071c00018008000140000009d40800014000000fff080001400000c3ce0c0001800800014000000fff4c00018008000140ffffffff080001400000007f080001400000000708000140000a000008000140fffeffff08000140000000030800014000000003080001400000000808000140000000eb340102"], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 6.31135ms ago: executing program 1 (id=391): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x38, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0x4, 0x2, "748f154cab665eb67983943f855d"}]}}}}}}, 0x0) 0s ago: executing program 3 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): [ 18.680590][ T28] audit: type=1400 audit(1774910137.978:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.702606][ T28] audit: type=1400 audit(1774910137.978:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.725323][ T28] audit: type=1400 audit(1774910137.978:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.748570][ T28] audit: type=1400 audit(1774910137.978:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.771638][ T28] audit: type=1400 audit(1774910137.978:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 24.201618][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.201634][ T28] audit: type=1400 audit(1774910143.498:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.230823][ T28] audit: type=1400 audit(1774910143.528:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.231494][ T3298] cgroup: Unknown subsys name 'net' [ 24.259258][ T28] audit: type=1400 audit(1774910143.558:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.378270][ T3298] cgroup: Unknown subsys name 'cpuset' [ 24.384459][ T3298] cgroup: Unknown subsys name 'rlimit' [ 24.493688][ T28] audit: type=1400 audit(1774910143.788:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.516986][ T28] audit: type=1400 audit(1774910143.788:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.539582][ T28] audit: type=1400 audit(1774910143.788:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.560173][ T28] audit: type=1400 audit(1774910143.788:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.580467][ T28] audit: type=1400 audit(1774910143.818:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.583027][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.605580][ T28] audit: type=1400 audit(1774910143.818:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.637593][ T28] audit: type=1400 audit(1774910143.838:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.731644][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.807478][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 25.834548][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.856975][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.885911][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.935769][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.942916][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.950202][ T3310] bridge_slave_0: entered allmulticast mode [ 25.956545][ T3310] bridge_slave_0: entered promiscuous mode [ 25.965173][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.972278][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.979432][ T3310] bridge_slave_1: entered allmulticast mode [ 25.985961][ T3310] bridge_slave_1: entered promiscuous mode [ 26.014033][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.021378][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.028617][ T3311] bridge_slave_0: entered allmulticast mode [ 26.034844][ T3311] bridge_slave_0: entered promiscuous mode [ 26.050884][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.058125][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.065240][ T3313] bridge_slave_0: entered allmulticast mode [ 26.071725][ T3313] bridge_slave_0: entered promiscuous mode [ 26.078045][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.085105][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.092406][ T3311] bridge_slave_1: entered allmulticast mode [ 26.098795][ T3311] bridge_slave_1: entered promiscuous mode [ 26.108529][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.120363][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.127493][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.134773][ T3313] bridge_slave_1: entered allmulticast mode [ 26.141355][ T3313] bridge_slave_1: entered promiscuous mode [ 26.159344][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.194695][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.209527][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.218677][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.225868][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.233063][ T3312] bridge_slave_0: entered allmulticast mode [ 26.239378][ T3312] bridge_slave_0: entered promiscuous mode [ 26.248229][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.255288][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.262641][ T3312] bridge_slave_1: entered allmulticast mode [ 26.269434][ T3312] bridge_slave_1: entered promiscuous mode [ 26.276489][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.286409][ T3310] team0: Port device team_slave_0 added [ 26.293139][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.315323][ T3311] team0: Port device team_slave_0 added [ 26.325229][ T3310] team0: Port device team_slave_1 added [ 26.341902][ T3311] team0: Port device team_slave_1 added [ 26.351765][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.365690][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.375994][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.390738][ T3313] team0: Port device team_slave_0 added [ 26.403954][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.410928][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.436973][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.452389][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.459388][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.485458][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.496901][ T3313] team0: Port device team_slave_1 added [ 26.502770][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.509863][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.535932][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.560694][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.567896][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.593874][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.609356][ T3312] team0: Port device team_slave_0 added [ 26.630909][ T3312] team0: Port device team_slave_1 added [ 26.641833][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.648793][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.674691][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.703811][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.710859][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.737123][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.762322][ T3310] hsr_slave_0: entered promiscuous mode [ 26.768504][ T3310] hsr_slave_1: entered promiscuous mode [ 26.774629][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.781994][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.789150][ T3317] bridge_slave_0: entered allmulticast mode [ 26.796596][ T3317] bridge_slave_0: entered promiscuous mode [ 26.805604][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.812666][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.838746][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.851542][ T3311] hsr_slave_0: entered promiscuous mode [ 26.857480][ T3311] hsr_slave_1: entered promiscuous mode [ 26.863327][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.869182][ T3311] Cannot create hsr debugfs directory [ 26.883777][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.891000][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.898129][ T3317] bridge_slave_1: entered allmulticast mode [ 26.904409][ T3317] bridge_slave_1: entered promiscuous mode [ 26.916638][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.923603][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.949761][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.985476][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.001668][ T3313] hsr_slave_0: entered promiscuous mode [ 27.007887][ T3313] hsr_slave_1: entered promiscuous mode [ 27.013633][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.019396][ T3313] Cannot create hsr debugfs directory [ 27.030183][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.073381][ T3317] team0: Port device team_slave_0 added [ 27.090697][ T3317] team0: Port device team_slave_1 added [ 27.098601][ T3312] hsr_slave_0: entered promiscuous mode [ 27.104735][ T3312] hsr_slave_1: entered promiscuous mode [ 27.110657][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.116388][ T3312] Cannot create hsr debugfs directory [ 27.162278][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.169352][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.195471][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.229103][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.236066][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.262122][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.327456][ T3317] hsr_slave_0: entered promiscuous mode [ 27.333308][ T3317] hsr_slave_1: entered promiscuous mode [ 27.339228][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 27.344956][ T3317] Cannot create hsr debugfs directory [ 27.371489][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.385111][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.402256][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.410801][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.471802][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.483184][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.497676][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.506670][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.531826][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.540835][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.549483][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.558623][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.598303][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.615119][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.625711][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.634457][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.648987][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.675516][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.694274][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.701425][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.713241][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.723576][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.735991][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.744054][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.754385][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.761727][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.770766][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.789010][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.812482][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.819595][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.829133][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.836168][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.895214][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.918653][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.930981][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.949338][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.971336][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.978497][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.988422][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.995481][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.006881][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.022395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.029644][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.040361][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.050065][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.062307][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.069360][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.082204][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.098833][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.105986][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.119870][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.127020][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.272381][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.296160][ T3311] veth0_vlan: entered promiscuous mode [ 28.315003][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.356878][ T3311] veth1_vlan: entered promiscuous mode [ 28.372223][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.386603][ T3311] veth0_macvtap: entered promiscuous mode [ 28.412031][ T3311] veth1_macvtap: entered promiscuous mode [ 28.430959][ T3313] veth0_vlan: entered promiscuous mode [ 28.441050][ T3313] veth1_vlan: entered promiscuous mode [ 28.455926][ T3313] veth0_macvtap: entered promiscuous mode [ 28.463969][ T3313] veth1_macvtap: entered promiscuous mode [ 28.493052][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.501974][ T3312] veth0_vlan: entered promiscuous mode [ 28.513736][ T3312] veth1_vlan: entered promiscuous mode [ 28.526220][ T3317] veth0_vlan: entered promiscuous mode [ 28.534920][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.551199][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.566800][ T3317] veth1_vlan: entered promiscuous mode [ 28.573309][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.582174][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.596261][ T3312] veth0_macvtap: entered promiscuous mode [ 28.604799][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.612549][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.622635][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.636503][ T3312] veth1_macvtap: entered promiscuous mode [ 28.649625][ T3310] veth0_vlan: entered promiscuous mode [ 28.660443][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.670940][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.679958][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.696265][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.703579][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.713193][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.726685][ T3310] veth1_vlan: entered promiscuous mode [ 28.727649][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.736520][ T3317] veth0_macvtap: entered promiscuous mode [ 28.756888][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.765836][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.783851][ T3317] veth1_macvtap: entered promiscuous mode [ 28.800222][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.812328][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.827531][ C0] hrtimer: interrupt took 30079 ns [ 28.840803][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.855291][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.886814][ T3310] veth0_macvtap: entered promiscuous mode [ 28.901833][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.925716][ T3485] Cannot find add_set index 0 as target [ 28.935763][ T3310] veth1_macvtap: entered promiscuous mode [ 28.949328][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.965128][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.994412][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.001966][ T3492] loop4: detected capacity change from 0 to 512 [ 29.017203][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.026514][ T3494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8'. [ 29.043435][ T3492] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 29.053529][ T3494] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8'. [ 29.063397][ T3492] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 29.075068][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.088624][ T3492] EXT4-fs (loop4): 1 truncate cleaned up [ 29.102181][ T3492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.129245][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.143862][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.155216][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.163384][ T3492] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 4: comm syz.4.9: lblock 0 mapped to illegal pblock 4 (length 1) [ 29.203528][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.226649][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 29.226704][ T28] audit: type=1400 audit(1774910148.518:121): avc: denied { write } for pid=3507 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.273571][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.299575][ T28] audit: type=1400 audit(1774910148.598:122): avc: denied { create } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.334761][ T28] audit: type=1400 audit(1774910148.618:123): avc: denied { setopt } for pid=3514 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.338411][ T3517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 29.401882][ T3517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 29.439941][ T28] audit: type=1400 audit(1774910148.738:124): avc: denied { create } for pid=3527 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.450301][ T3517] netlink: 'syz.2.17': attribute type 15 has an invalid length. [ 29.498496][ T3517] netlink: 'syz.2.17': attribute type 18 has an invalid length. [ 29.505729][ T28] audit: type=1400 audit(1774910148.738:125): avc: denied { write } for pid=3527 comm="syz.3.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.541051][ T28] audit: type=1400 audit(1774910148.798:126): avc: denied { create } for pid=3538 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.570580][ T28] audit: type=1400 audit(1774910148.818:127): avc: denied { setopt } for pid=3538 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.649053][ T28] audit: type=1400 audit(1774910148.938:128): avc: denied { tracepoint } for pid=3549 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.700558][ T28] audit: type=1400 audit(1774910148.948:129): avc: denied { write } for pid=3552 comm="syz.1.23" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.784917][ T28] audit: type=1400 audit(1774910149.018:130): avc: denied { create } for pid=3557 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.816171][ T3575] netlink: 165 bytes leftover after parsing attributes in process `syz.3.35'. [ 29.833240][ T3580] capability: warning: `syz.2.36' uses 32-bit capabilities (legacy support in use) [ 29.846485][ T3578] mmap: syz.1.33 (3578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.950836][ T3594] loop3: detected capacity change from 0 to 128 [ 30.005016][ T3594] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 30.022341][ T3594] FAT-fs (loop3): Filesystem has been set read-only [ 30.104235][ T3611] loop3: detected capacity change from 0 to 164 [ 30.117710][ T3611] ======================================================= [ 30.117710][ T3611] WARNING: The mand mount option has been deprecated and [ 30.117710][ T3611] and is ignored by this kernel. Remove the mand [ 30.117710][ T3611] option from the mount to silence this warning. [ 30.117710][ T3611] ======================================================= [ 30.179108][ T3611] rock: directory entry would overflow storage [ 30.185407][ T3617] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 30.191933][ T3617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 30.202736][ T3611] rock: sig=0x4f50, size=4, remaining=3 [ 30.208443][ T3611] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 30.216107][ T3615] loop2: detected capacity change from 0 to 2048 [ 30.223543][ T3617] vhci_hcd vhci_hcd.0: Device attached [ 30.244571][ T3621] loop1: detected capacity change from 0 to 256 [ 30.272320][ T3618] vhci_hcd: connection closed [ 30.275475][ T70] vhci_hcd vhci_hcd.4: stop threads [ 30.298680][ T3623] loop2: p3 < > p4 < > [ 30.301367][ T70] vhci_hcd vhci_hcd.4: release socket [ 30.313020][ T3623] loop2: partition table partially beyond EOD, truncated [ 30.329209][ T70] vhci_hcd vhci_hcd.4: disconnect device [ 30.335462][ T3623] loop2: p3 start 4284289 is beyond EOD, truncated [ 30.365806][ T3632] netlink: 'syz.1.56': attribute type 21 has an invalid length. [ 30.380459][ T3632] netlink: 156 bytes leftover after parsing attributes in process `syz.1.56'. [ 30.402549][ T3615] loop2: p3 < > p4 < > [ 30.406737][ T3615] loop2: partition table partially beyond EOD, truncated [ 30.422923][ T3615] loop2: p3 start 4284289 is beyond EOD, truncated [ 30.539850][ T3649] netlink: 'syz.0.64': attribute type 14 has an invalid length. [ 30.572585][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.64'. [ 30.705536][ T3672] loop2: detected capacity change from 0 to 1024 [ 30.763281][ T3672] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.786129][ T3672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.809665][ T3672] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 30.837031][ T3691] loop3: detected capacity change from 0 to 164 [ 30.886689][ T3672] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.72: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 30.919918][ T3672] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 30.923093][ T3672] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.72: couldn't read orphan inode 11 (err -117) [ 30.932316][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 30.932343][ C0] EXT4-fs (loop2): initial error at time 1774910150: ext4_ext_check_inode:521: inode 11 [ 30.932373][ C0] EXT4-fs (loop2): last error at time 1774910150: ext4_ext_check_inode:521: inode 11 [ 30.972009][ T3672] loop2: lost filesystem error report for type 5 error -117 [ 30.972540][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.022631][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.131011][ T3725] loop2: detected capacity change from 0 to 2048 [ 31.150417][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.247925][ T3723] loop0: detected capacity change from 0 to 4096 [ 31.264076][ T3723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.282592][ T3740] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 31.283802][ T3743] loop4: detected capacity change from 0 to 512 [ 31.310105][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.378564][ T3743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.410368][ T3757] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 31.422144][ T3743] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.477664][ T3761] SELinux: Context › is not valid (left unmapped). [ 31.527636][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.541072][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.790778][ T3806] EXT4-fs: Ignoring removed oldalloc option [ 31.852972][ T3806] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.884874][ T3806] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.125: iget: bad i_size value: 38620345925642 [ 31.923379][ T3806] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 31.923639][ T3806] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.125: couldn't read orphan inode 15 (err -117) [ 31.932844][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 31.932866][ C0] EXT4-fs (loop2): initial error at time 1774910151: ext4_orphan_get:1397: inode 15 [ 31.932897][ C0] EXT4-fs (loop2): last error at time 1774910151: ext4_orphan_get:1397: inode 15 [ 32.015782][ T3821] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.039050][ T3806] loop2: lost filesystem error report for type 5 error -117 [ 32.039630][ T3806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.065391][ T3821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.080252][ T3821] EXT4-fs (loop0): orphan file too big: 4294967295 [ 32.086857][ T3821] EXT4-fs (loop0): mount failed [ 32.171312][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.177225][ T3831] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 32.321274][ T3848] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 32.321844][ T3849] netlink: 'syz.4.144': attribute type 93 has an invalid length. [ 32.347834][ T3842] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 32.373365][ T3853] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.411590][ T3842] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 32.424965][ T3853] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 32.433301][ T3853] FAT-fs (loop3): Filesystem has been set read-only [ 32.441698][ T3842] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.143: Corrupt directory, running e2fsck is recommended [ 32.456762][ T3842] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 32.493367][ T3842] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.143: corrupted in-inode xattr: invalid ea_ino [ 32.512502][ T3842] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.517266][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 32.532913][ C1] EXT4-fs (loop0): initial error at time 1774910151: ext4_iget_extra_inode:5040: inode 15 [ 32.532984][ T3842] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.143: couldn't read orphan inode 15 (err -117) [ 32.542868][ C1] EXT4-fs (loop0): last error at time 1774910151: ext4_iget_extra_inode:5040: inode 15 [ 32.582610][ T3842] loop0: lost filesystem error report for type 5 error -117 [ 32.583261][ T3842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.688158][ T3890] EXT4-fs: Ignoring removed orlov option [ 32.718975][ T3890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.743196][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.758055][ T3890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.165'. [ 32.902543][ T3915] EXT4-fs: Ignoring removed bh option [ 32.920538][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.940262][ T3921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 32.955606][ T3915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 32.973966][ T3920] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 32.986359][ T3920] EXT4-fs (loop0): invalid journal inode [ 32.992541][ T3920] EXT4-fs (loop0): can't get journal size [ 33.003579][ T3920] EXT4-fs (loop0): 1 truncate cleaned up [ 33.015832][ T3920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.043633][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.059362][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 33.244469][ T1749] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.772156][ T4009] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 33.798183][ T4006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.811302][ T4006] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 33.830907][ T4006] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 33.840541][ T4006] System zones: 0-5 [ 33.850517][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.854346][ T4012] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.220: bg 0: block 5: invalid block bitmap [ 33.875849][ T4012] loop1: lost filesystem error report for type 5 error -117 [ 33.876017][ T4012] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 33.883334][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 33.883358][ C0] EXT4-fs (loop1): initial error at time 1774910153: ext4_validate_block_bitmap:432 [ 33.883382][ C0] EXT4-fs (loop1): last error at time 1774910153: ext4_validate_block_bitmap:432 [ 33.918472][ T4012] loop1: lost filesystem error report for type 5 error -117 [ 33.918786][ T4012] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.220: invalid indirect mapped block 3 (level 2) [ 33.939502][ T4012] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.939891][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.939957][ T4012] EXT4-fs (loop1): 1 orphan inode deleted [ 33.964492][ T4012] EXT4-fs (loop1): 1 truncate cleaned up [ 33.971168][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.059142][ T3931] syz.3.185 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 34.070643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 34.094977][ T3931] CPU: 0 UID: 0 PID: 3931 Comm: syz.3.185 Not tainted syzkaller #0 PREEMPT(full) [ 34.095066][ T3931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 34.095080][ T3931] Call Trace: [ 34.095139][ T3931] [ 34.095146][ T3931] __dump_stack+0x1d/0x30 [ 34.095171][ T3931] dump_stack_lvl+0x95/0xd0 [ 34.095196][ T3931] dump_stack+0x15/0x1b [ 34.095260][ T3931] dump_header+0x80/0x240 [ 34.095281][ T3931] oom_kill_process+0x295/0x350 [ 34.095304][ T3931] out_of_memory+0x97d/0xb80 [ 34.095325][ T3931] try_charge_memcg+0x62e/0xa10 [ 34.095430][ T3931] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 34.095465][ T3931] __swap_cache_prepare_and_add+0x67/0x460 [ 34.095499][ T3931] ? alloc_pages_mpol+0x217/0x260 [ 34.095677][ T3931] swap_cache_alloc_folio+0xa2/0x120 [ 34.095708][ T3931] swap_cluster_readahead+0x26e/0x3d0 [ 34.095744][ T3931] swapin_readahead+0xde/0x840 [ 34.095814][ T3931] ? __rcu_read_unlock+0x4e/0x70 [ 34.095839][ T3931] ? swap_cache_get_folio+0x26f/0x280 [ 34.095946][ T3931] do_swap_page+0x2fe/0x21e0 [ 34.095972][ T3931] ? update_curr+0x2c/0x140 [ 34.096000][ T3931] ? wakeup_preempt_fair+0x249/0x2e0 [ 34.096022][ T3931] ? __rcu_read_lock+0x36/0x50 [ 34.096047][ T3931] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 34.096075][ T3931] handle_mm_fault+0xb46/0x3020 [ 34.096110][ T3931] ? vma_start_read+0x1c7/0x2c0 [ 34.096165][ T3931] do_user_addr_fault+0x62f/0x1050 [ 34.096197][ T3931] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 34.096325][ T3931] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 34.096352][ T3931] ? trace_page_fault_user+0x1f/0xe0 [ 34.096408][ T3931] exc_page_fault+0x62/0xa0 [ 34.096428][ T3931] asm_exc_page_fault+0x26/0x30 [ 34.096447][ T3931] RIP: 0033:0x7f99ac2e1610 [ 34.096466][ T3931] Code: 49 89 f5 41 54 55 53 48 89 fb 48 83 ec 18 4c 8b 76 38 4c 03 76 18 80 3d cf 40 ed 00 00 8b 6e 04 4c 89 34 24 0f 85 73 02 00 00 <80> 7b 60 00 8b 53 50 89 e8 0f 85 1b 04 00 00 85 d2 0f 85 0e 04 00 [ 34.096482][ T3931] RSP: 002b:00007ffea5717d60 EFLAGS: 00010202 [ 34.096519][ T3931] RAX: 00007f99abe6f008 RBX: 00007f99ad1b5720 RCX: ffffffff859cedec [ 34.096534][ T3931] RDX: 0000000000003b10 RSI: ffffffff8127a7ed RDI: 00007f99abe6f008 [ 34.096548][ T3931] RBP: 0000000000000762 R08: 00007f99ac670000 R09: 00007f99ac686038 [ 34.096561][ T3931] R10: 0000000000000001 R11: 0000000000000002 R12: 00007f99ac26f000 [ 34.096575][ T3931] R13: 00007f99ac686038 R14: 00007f99abe6f008 R15: 0000000000000001 [ 34.096592][ T3931] ? xa_load+0xac/0xe0 [ 34.096616][ T3931] ? get_gate_vma+0xd/0x90 [ 34.096688][ T3931] [ 34.096850][ T3931] memory: usage 307200kB, limit 307200kB, failcnt 178 [ 34.191724][ T4023] batadv0: entered promiscuous mode [ 34.208378][ T3931] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 34.214180][ T4023] macvtap1: entered promiscuous mode [ 34.217985][ T3931] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 34.225101][ T4023] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 34.228700][ T3931] Memory cgroup stats for [ 34.234450][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.239840][ T3931] /syz3 [ 34.402598][ T4023] batadv0: left promiscuous mode [ 34.421533][ T4025] set_capacity_and_notify: 11 callbacks suppressed [ 34.421550][ T4025] loop1: detected capacity change from 0 to 2048 [ 34.424261][ T3931] : [ 34.434648][ T3931] cache 0 [ 34.440649][ T3931] rss 0 [ 34.443424][ T3931] shmem 0 [ 34.446437][ T3931] mapped_file 0 [ 34.450337][ T3931] dirty 0 [ 34.453371][ T3931] writeback 4096 [ 34.457027][ T3931] workingset_refault_anon 23 [ 34.461688][ T3931] workingset_refault_file 3 [ 34.462851][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.466635][ T3931] swap 172032 [ 34.466647][ T3931] swapcached 282624 [ 34.485978][ T3931] pgpgin 2259 [ 34.489372][ T3931] pgpgout 2255 [ 34.492761][ T3931] pgfault 5118 [ 34.496196][ T3931] pgmajfault 7 [ 34.499616][ T3931] inactive_anon 4096 [ 34.503531][ T3931] active_anon 12288 [ 34.507695][ T3931] inactive_file 0 [ 34.511350][ T3931] active_file 0 [ 34.514840][ T3931] unevictable 0 [ 34.518455][ T3931] hierarchical_memory_limit 314572800 [ 34.523840][ T3931] hierarchical_memsw_limit 9223372036854771712 [ 34.525132][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 34.525146][ T28] audit: type=1400 audit(1774910153.818:223): avc: denied { ioctl } for pid=4024 comm="syz.1.226" path="/58/file0/file1" dev="loop1" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.530062][ T3931] total_cache 0 [ 34.530076][ T3931] total_rss 0 [ 34.530083][ T3931] total_shmem 0 [ 34.530092][ T3931] total_mapped_file 0 [ 34.530099][ T3931] total_dirty 0 [ 34.530107][ T3931] total_writeback 4096 [ 34.530116][ T3931] total_workingset_refault_anon 23 [ 34.530198][ T3931] total_workingset_refault_file 3 [ 34.593024][ T3931] total_swap 172032 [ 34.596844][ T3931] total_swapcached 282624 [ 34.602602][ T3931] total_pgpgin 2259 [ 34.603344][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.606487][ T3931] total_pgpgout 2255 [ 34.606497][ T3931] total_pgfault 5118 [ 34.606505][ T3931] total_pgmajfault 7 [ 34.606513][ T3931] total_inactive_anon 4096 [ 34.632025][ T3931] total_active_anon 12288 [ 34.632050][ T28] audit: type=1400 audit(1774910153.918:224): avc: denied { getopt } for pid=4030 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.636358][ T3931] total_inactive_file 0 [ 34.636369][ T3931] total_active_file 0 [ 34.664127][ T3931] total_unevictable 0 [ 34.668260][ T3931] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.185,pid=3931,uid=0 [ 34.725369][ T3931] Memory cgroup out of memory: Killed process 3931 (syz.3.185) total-vm:96080kB, anon-rss:1236kB, file-rss:21956kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 34.814458][ T4049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 34.884903][ T28] audit: type=1400 audit(1774910154.168:225): avc: denied { getopt } for pid=4053 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.907922][ T3931] syz.3.185 (3931) used greatest stack depth: 9960 bytes left [ 34.923563][ T28] audit: type=1326 audit(1774910154.218:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2c8c819 code=0x7ffc0000 [ 34.959966][ T28] audit: type=1326 audit(1774910154.218:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2c8c819 code=0x7ffc0000 [ 34.971868][ T3932] syz.3.185 (3932) used greatest stack depth: 9600 bytes left [ 34.987923][ T28] audit: type=1326 audit(1774910154.218:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ad2c8c819 code=0x7ffc0000 [ 35.067365][ T28] audit: type=1326 audit(1774910154.218:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2c8c819 code=0x7ffc0000 [ 35.095850][ T28] audit: type=1326 audit(1774910154.218:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2c8c819 code=0x7ffc0000 [ 35.132567][ T4071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 35.156964][ T28] audit: type=1326 audit(1774910154.258:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f0ad2c8c819 code=0x7ffc0000 [ 35.181536][ T4071] gretap0: entered promiscuous mode [ 35.186890][ T28] audit: type=1326 audit(1774910154.258:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.2.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad2c8c819 code=0x7ffc0000 [ 35.191013][ T4071] vlan2: entered promiscuous mode [ 35.225080][ T4077] loop1: detected capacity change from 0 to 1024 [ 35.233576][ T4077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.261588][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.267287][ T3729] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.303782][ T4083] capability: warning: `syz.4.252' uses deprecated v2 capabilities in a way that may be insecure [ 35.316415][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.350988][ T4089] netlink: 988 bytes leftover after parsing attributes in process `syz.4.255'. [ 35.484001][ T4103] loop2: detected capacity change from 0 to 1024 [ 35.508642][ T4109] xt_hashlimit: size too large, truncated to 1048576 [ 35.537166][ T4103] EXT4-fs: dax option not supported [ 35.645294][ T4119] loop2: detected capacity change from 0 to 1024 [ 35.712495][ T4119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.790506][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.051311][ T4120] syz.4.270 (4120) used greatest stack depth: 9336 bytes left [ 36.066275][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 36.066726][ T4176] netlink: 'syz.0.289': attribute type 3 has an invalid length. [ 36.086902][ T4173] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.287'. [ 36.099166][ T4176] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.289'. [ 36.116599][ T4181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.291'. [ 36.298862][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 36.326435][ T4212] loop4: detected capacity change from 0 to 136 [ 36.404515][ T4222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.311'. [ 36.428517][ T4226] loop3: detected capacity change from 0 to 256 [ 36.447106][ T4226] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.495760][ T4226] FAT-fs (loop3): Directory bread(block 64) failed [ 36.502794][ T4226] FAT-fs (loop3): Directory bread(block 65) failed [ 36.512927][ T4226] FAT-fs (loop3): Directory bread(block 66) failed [ 36.528424][ T4226] FAT-fs (loop3): Directory bread(block 67) failed [ 36.546961][ T4226] FAT-fs (loop3): Directory bread(block 68) failed [ 36.562281][ T4226] FAT-fs (loop3): Directory bread(block 69) failed [ 36.573671][ T4226] FAT-fs (loop3): Directory bread(block 70) failed [ 36.580552][ T4226] FAT-fs (loop3): Directory bread(block 71) failed [ 36.591165][ T4226] FAT-fs (loop3): Directory bread(block 72) failed [ 36.599017][ T4226] FAT-fs (loop3): Directory bread(block 73) failed [ 36.746339][ T4270] loop3: detected capacity change from 0 to 2048 [ 36.763356][ T4270] EXT4-fs: Ignoring removed i_version option [ 36.790511][ T4270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.802820][ T4270] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.816307][ T4270] netlink: zone id is out of range [ 36.821500][ T4270] netlink: zone id is out of range [ 36.826724][ T4270] netlink: zone id is out of range [ 36.831926][ T4270] netlink: zone id is out of range [ 36.837094][ T4270] netlink: zone id is out of range [ 36.842348][ T4270] netlink: zone id is out of range [ 36.847719][ T4282] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 36.857633][ T4270] netlink: zone id is out of range [ 36.862918][ T4270] netlink: zone id is out of range [ 36.868654][ T4270] netlink: zone id is out of range [ 36.890258][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.930662][ T4288] netlink: 'syz.2.341': attribute type 11 has an invalid length. [ 36.951131][ T4288] netlink: 32 bytes leftover after parsing attributes in process `syz.2.341'. [ 37.064501][ T4309] loop3: detected capacity change from 0 to 512 [ 37.104348][ T4309] EXT4-fs (loop3): 1 truncate cleaned up [ 37.130048][ T4309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.153597][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.170310][ T4324] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 37.362502][ T4352] loop3: detected capacity change from 0 to 256 [ 37.538399][ T4376] tipc: Enabling of bearer rejected, failed to enable media [ 37.613722][ T1033] IPVS: starting estimator thread 0... [ 37.620581][ T3000] ================================================================== [ 37.628704][ T3000] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 37.636106][ T3000] [ 37.638466][ T3000] write to 0xffff88811a860240 of 4 bytes by task 3293 on cpu 0: [ 37.646195][ T3000] d_make_discardable+0x4f/0xa0 [ 37.651059][ T3000] simple_unlink+0x68/0x80 [ 37.655494][ T3000] shmem_unlink+0x12d/0x140 [ 37.660017][ T3000] vfs_unlink+0x1c7/0x490 [ 37.664404][ T3000] filename_unlinkat+0x1e2/0x410 [ 37.669347][ T3000] __se_sys_unlink+0x2b/0xe0 [ 37.673948][ T3000] __x64_sys_unlink+0x1f/0x30 [ 37.678627][ T3000] x64_sys_call+0x2eb6/0x3020 [ 37.683313][ T3000] do_syscall_64+0x12c/0x370 [ 37.687912][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.694068][ T3000] [ 37.696389][ T3000] read to 0xffff88811a860240 of 4 bytes by task 3000 on cpu 1: [ 37.703937][ T3000] lookup_fast+0xf0/0x320 [ 37.708279][ T3000] path_lookupat+0x15c/0x500 [ 37.712891][ T3000] filename_lookup+0x190/0x390 [ 37.717668][ T3000] do_readlinkat+0x74/0x2f0 [ 37.722191][ T3000] __x64_sys_readlink+0x47/0x60 [ 37.727051][ T3000] x64_sys_call+0x2b51/0x3020 [ 37.731732][ T3000] do_syscall_64+0x12c/0x370 [ 37.736329][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.742297][ T3000] [ 37.744620][ T3000] value changed: 0x08300080 -> 0x00004080 [ 37.750349][ T3000] [ 37.752754][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 37.758901][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 37.767758][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.777814][ T3000] ================================================================== [ 37.792953][ T4397] xt_hashlimit: size too large, truncated to 1048576 [ 37.867313][ T4389] IPVS: using max 2688 ests per chain, 134400 per kthread [ 41.989482][ C0] net_ratelimit: 54 callbacks suppressed [ 41.989497][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)