last executing test programs: 552.300225ms ago: executing program 1 (id=884): syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x20000) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1}, &(0x7f00000002c0)=0x8) 480.729081ms ago: executing program 1 (id=899): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) shmdt(r1) 418.617236ms ago: executing program 1 (id=893): r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a400fe0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) 373.16049ms ago: executing program 2 (id=895): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x80000000}], 0x1) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000280)={0x80000000, 0xf1}, 0x1) 372.82727ms ago: executing program 1 (id=907): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 368.08202ms ago: executing program 0 (id=896): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 305.504285ms ago: executing program 2 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) fstat(0xffffffffffffffff, 0x0) 304.591995ms ago: executing program 0 (id=911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) open_by_handle_at(r1, &(0x7f0000000000)=@reiserfs_2={0x8, 0x2, {0x800, 0x9}}, 0x22800) 301.729626ms ago: executing program 3 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='rss_stat\x00', r1}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 221.667942ms ago: executing program 0 (id=902): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x615}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x1717, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 214.955803ms ago: executing program 2 (id=903): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 210.300263ms ago: executing program 3 (id=904): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400004007000000000080"], 0x30, 0x8000}, 0x28004001) r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e29, 0x0, 0x0, 0x28b, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 186.902335ms ago: executing program 3 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001800)=""/88, 0x58}, {&(0x7f0000001880)=""/172, 0xac}, {&(0x7f0000001940)=""/59, 0x3b}, {&(0x7f0000002c80)=""/4112, 0x1010}, {&(0x7f0000002980)=""/212, 0xd4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/210, 0xd2}], 0x7}, 0x1}], 0x1, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x22, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) 186.558785ms ago: executing program 0 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='rss_stat\x00', r1}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 154.547038ms ago: executing program 0 (id=906): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) shmdt(r1) 154.392758ms ago: executing program 1 (id=908): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffcec, 0x0, 0x0, 0x0, 0x0, 0x7fffffd, 0x0, 0xffffffffffffffd0, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0x24, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 144.509868ms ago: executing program 2 (id=909): r0 = fsopen(&(0x7f0000000280)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 144.376848ms ago: executing program 4 (id=910): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 123.28209ms ago: executing program 4 (id=912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) close(0x3) 97.468292ms ago: executing program 4 (id=913): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 96.975852ms ago: executing program 2 (id=914): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000000000000200000000000000000000000000000000000002"], 0x0, 0x42, 0x0, 0x1}, 0x28) 95.341082ms ago: executing program 3 (id=925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 78.851614ms ago: executing program 0 (id=915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x40000) 78.286714ms ago: executing program 1 (id=916): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 71.634594ms ago: executing program 4 (id=918): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ca0caf5d22000000181100"/28, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 34.388058ms ago: executing program 3 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) 21.634029ms ago: executing program 2 (id=920): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) fallocate(r0, 0x20, 0x4000, 0x4000) 21.545458ms ago: executing program 4 (id=921): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000007c0)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac14140d", @ANYRES32=r1], 0x28}}], 0x1, 0x810) 5.16502ms ago: executing program 4 (id=922): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x2004, @fd_index=0x7, 0xd1b, 0x0, 0x0, 0x0, 0x1, {0x66e8, r3}}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 0s ago: executing program 3 (id=923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.217133][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 17.217147][ T29] audit: type=1400 audit(1754048501.746:57): avc: denied { transition } for pid=3179 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.221283][ T29] audit: type=1400 audit(1754048501.746:58): avc: denied { noatsecure } for pid=3179 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.223911][ T29] audit: type=1400 audit(1754048501.756:59): avc: denied { write } for pid=3179 comm="sh" path="pipe:[1432]" dev="pipefs" ino=1432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.226960][ T29] audit: type=1400 audit(1754048501.756:60): avc: denied { rlimitinh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.229550][ T29] audit: type=1400 audit(1754048501.756:61): avc: denied { siginh } for pid=3179 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. [ 24.540283][ T29] audit: type=1400 audit(1754048509.076:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.541220][ T3291] cgroup: Unknown subsys name 'net' [ 24.563053][ T29] audit: type=1400 audit(1754048509.076:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.590371][ T29] audit: type=1400 audit(1754048509.106:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.689436][ T3291] cgroup: Unknown subsys name 'cpuset' [ 24.695554][ T3291] cgroup: Unknown subsys name 'rlimit' [ 24.864814][ T29] audit: type=1400 audit(1754048509.396:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.888075][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.898745][ T29] audit: type=1400 audit(1754048509.396:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.919190][ T29] audit: type=1400 audit(1754048509.396:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.939576][ T29] audit: type=1400 audit(1754048509.396:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.948924][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.959943][ T29] audit: type=1400 audit(1754048509.406:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.960070][ T29] audit: type=1400 audit(1754048509.406:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.016811][ T29] audit: type=1400 audit(1754048509.416:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.997626][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 26.092901][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.100051][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.107158][ T3301] bridge_slave_0: entered allmulticast mode [ 26.113635][ T3301] bridge_slave_0: entered promiscuous mode [ 26.121337][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.128485][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.135746][ T3301] bridge_slave_1: entered allmulticast mode [ 26.142072][ T3301] bridge_slave_1: entered promiscuous mode [ 26.152137][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.199837][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.208988][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.226182][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.257020][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.277932][ T3301] team0: Port device team_slave_0 added [ 26.290351][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.297404][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.304686][ T3309] bridge_slave_0: entered allmulticast mode [ 26.311110][ T3309] bridge_slave_0: entered promiscuous mode [ 26.318040][ T3301] team0: Port device team_slave_1 added [ 26.343907][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.351033][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.358128][ T3309] bridge_slave_1: entered allmulticast mode [ 26.364534][ T3309] bridge_slave_1: entered promiscuous mode [ 26.380701][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.387807][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.395055][ T3308] bridge_slave_0: entered allmulticast mode [ 26.401429][ T3308] bridge_slave_0: entered promiscuous mode [ 26.409892][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.416995][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.424186][ T3308] bridge_slave_1: entered allmulticast mode [ 26.430499][ T3308] bridge_slave_1: entered promiscuous mode [ 26.441647][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.448682][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.474688][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.500105][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.507119][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.533044][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.554222][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.566615][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.580901][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.605760][ T3309] team0: Port device team_slave_0 added [ 26.613385][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.622900][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.631983][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.639056][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.646359][ T3307] bridge_slave_0: entered allmulticast mode [ 26.652944][ T3307] bridge_slave_0: entered promiscuous mode [ 26.659977][ T3309] team0: Port device team_slave_1 added [ 26.691019][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.698105][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.705324][ T3307] bridge_slave_1: entered allmulticast mode [ 26.711700][ T3307] bridge_slave_1: entered promiscuous mode [ 26.724515][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.731508][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.757384][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.768849][ T3308] team0: Port device team_slave_0 added [ 26.776615][ T3301] hsr_slave_0: entered promiscuous mode [ 26.782911][ T3301] hsr_slave_1: entered promiscuous mode [ 26.798091][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.805087][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.830977][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.842220][ T3308] team0: Port device team_slave_1 added [ 26.869432][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.876380][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.902293][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.913952][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.932767][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.939766][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.965680][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.977224][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.028041][ T3309] hsr_slave_0: entered promiscuous mode [ 27.034032][ T3309] hsr_slave_1: entered promiscuous mode [ 27.039854][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.045554][ T3309] Cannot create hsr debugfs directory [ 27.053317][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.060403][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.068193][ T3302] bridge_slave_0: entered allmulticast mode [ 27.074647][ T3302] bridge_slave_0: entered promiscuous mode [ 27.086935][ T3307] team0: Port device team_slave_0 added [ 27.095502][ T3307] team0: Port device team_slave_1 added [ 27.105949][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.113118][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.120350][ T3302] bridge_slave_1: entered allmulticast mode [ 27.126602][ T3302] bridge_slave_1: entered promiscuous mode [ 27.158679][ T3308] hsr_slave_0: entered promiscuous mode [ 27.164548][ T3308] hsr_slave_1: entered promiscuous mode [ 27.170390][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.176089][ T3308] Cannot create hsr debugfs directory [ 27.195039][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.202085][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.228244][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.239251][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.246193][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.272121][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.283803][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.293993][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.335319][ T3302] team0: Port device team_slave_0 added [ 27.343480][ T3302] team0: Port device team_slave_1 added [ 27.373195][ T3307] hsr_slave_0: entered promiscuous mode [ 27.379190][ T3307] hsr_slave_1: entered promiscuous mode [ 27.385009][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 27.390758][ T3307] Cannot create hsr debugfs directory [ 27.398748][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.405752][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.431682][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.445010][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.451977][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.477888][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.553766][ T3302] hsr_slave_0: entered promiscuous mode [ 27.559849][ T3302] hsr_slave_1: entered promiscuous mode [ 27.565669][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 27.571431][ T3302] Cannot create hsr debugfs directory [ 27.605840][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.614917][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.629792][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.645682][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.683045][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.699406][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.711116][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.726483][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.746999][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.757867][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.767958][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.776367][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.810300][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.821169][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.837634][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.847940][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.861723][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.892505][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.909758][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.918390][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.927190][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.936704][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.943818][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.952686][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.959826][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.976237][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.988238][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.013373][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.030590][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.037646][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.052123][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.066791][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.073935][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.094643][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.105035][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.130151][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.145734][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.152862][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.176004][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.183182][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.201473][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.217220][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.230417][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.243271][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.256935][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.279636][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.286782][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.309657][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.322265][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.329398][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.337570][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.344762][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.357716][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.364780][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.422648][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.511212][ T3301] veth0_vlan: entered promiscuous mode [ 28.532665][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.544925][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.581585][ T3301] veth1_vlan: entered promiscuous mode [ 28.594943][ T3308] veth0_vlan: entered promiscuous mode [ 28.605699][ T3309] veth0_vlan: entered promiscuous mode [ 28.618503][ T3308] veth1_vlan: entered promiscuous mode [ 28.626775][ T3309] veth1_vlan: entered promiscuous mode [ 28.655689][ T3301] veth0_macvtap: entered promiscuous mode [ 28.667036][ T3309] veth0_macvtap: entered promiscuous mode [ 28.677019][ T3307] veth0_vlan: entered promiscuous mode [ 28.689305][ T3301] veth1_macvtap: entered promiscuous mode [ 28.698082][ T3308] veth0_macvtap: entered promiscuous mode [ 28.706503][ T3309] veth1_macvtap: entered promiscuous mode [ 28.722462][ T3307] veth1_vlan: entered promiscuous mode [ 28.731911][ T3308] veth1_macvtap: entered promiscuous mode [ 28.738043][ T3302] veth0_vlan: entered promiscuous mode [ 28.749295][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.761304][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.771305][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.780184][ T3302] veth1_vlan: entered promiscuous mode [ 28.788846][ T2288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.798024][ T2288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.808602][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.821110][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.830956][ T2288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.842609][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.850081][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.868849][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.882605][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.899319][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.908036][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.930122][ T3302] veth0_macvtap: entered promiscuous mode [ 28.943464][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.953122][ T3302] veth1_macvtap: entered promiscuous mode [ 28.965787][ T3307] veth0_macvtap: entered promiscuous mode [ 28.974213][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.993542][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.003258][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.012735][ T3307] veth1_macvtap: entered promiscuous mode [ 29.029066][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.050495][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.065685][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.081772][ T413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.124038][ T413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.141243][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.160529][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.236262][ T3484] loop0: detected capacity change from 0 to 512 [ 29.236220][ T413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.246067][ T3484] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.263257][ T2288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.285927][ T2288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.310140][ T2288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.327471][ T2288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.349019][ T2288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.464576][ T3495] capability: warning: `syz.2.10' uses 32-bit capabilities (legacy support in use) [ 29.485635][ T3493] Falling back ldisc for ttyS3. [ 29.499755][ T3502] netem: change failed [ 29.528481][ T3507] Zero length message leads to an empty skb [ 29.535637][ T3508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 29.544475][ T3508] netlink: 'syz.2.15': attribute type 21 has an invalid length. [ 29.578277][ T3512] syz.2.18 (3512) used greatest stack depth: 10960 bytes left [ 29.617973][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 29.617987][ T29] audit: type=1400 audit(1754048514.146:98): avc: denied { read } for pid=3031 comm="dhcpcd" name="n26" dev="tmpfs" ino=628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.645894][ T29] audit: type=1400 audit(1754048514.146:99): avc: denied { open } for pid=3031 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.706454][ T29] audit: type=1400 audit(1754048514.206:100): avc: denied { getattr } for pid=3031 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.738281][ T3529] C: renamed from team_slave_0 (while UP) [ 29.752343][ T3529] netlink: 'syz.2.23': attribute type 8 has an invalid length. [ 29.768872][ T3529] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 29.805267][ T29] audit: type=1400 audit(1754048514.336:101): avc: denied { mount } for pid=3535 comm="syz.1.25" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.873426][ T29] audit: type=1400 audit(1754048514.406:102): avc: denied { create } for pid=3543 comm="syz.2.28" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.909735][ T29] audit: type=1400 audit(1754048514.406:103): avc: denied { setattr } for pid=3543 comm="syz.2.28" name="bus" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.931853][ T29] audit: type=1400 audit(1754048514.406:104): avc: denied { write } for pid=3543 comm="syz.2.28" name="bus" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 29.953724][ T29] audit: type=1400 audit(1754048514.406:105): avc: denied { open } for pid=3543 comm="syz.2.28" path="/6/file0/bus" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.006600][ T29] audit: type=1400 audit(1754048514.446:106): avc: denied { unlink } for pid=3307 comm="syz-executor" name="bus" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 30.029005][ T29] audit: type=1400 audit(1754048514.526:107): avc: denied { create } for pid=3522 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 30.155210][ T3568] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 30.564115][ T3591] loop1: detected capacity change from 0 to 512 [ 30.580152][ T3591] ======================================================= [ 30.580152][ T3591] WARNING: The mand mount option has been deprecated and [ 30.580152][ T3591] and is ignored by this kernel. Remove the mand [ 30.580152][ T3591] option from the mount to silence this warning. [ 30.580152][ T3591] ======================================================= [ 30.649062][ T3591] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.655545][ T3591] EXT4-fs: Ignoring removed orlov option [ 30.700718][ T3594] netlink: 'syz.3.43': attribute type 58 has an invalid length. [ 30.708478][ T3594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.43'. [ 30.736352][ T3591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.799707][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.908339][ T3610] bridge0: entered promiscuous mode [ 30.918712][ T3610] macvlan2: entered promiscuous mode [ 31.168810][ T3307] syz-executor (3307) used greatest stack depth: 10712 bytes left [ 31.180872][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.285344][ T3629] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.380927][ T3645] netlink: 'syz.0.63': attribute type 8 has an invalid length. [ 31.476202][ T3657] loop3: detected capacity change from 0 to 128 [ 31.510125][ T3657] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.560637][ T3657] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.611009][ T3630] chnl_net:caif_netlink_parms(): no params data found [ 31.759626][ T1861] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.795276][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.802429][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.809884][ T3630] bridge_slave_0: entered allmulticast mode [ 31.822742][ T3630] bridge_slave_0: entered promiscuous mode [ 31.848002][ T3690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.79'. [ 31.849657][ T3688] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 31.857126][ T3690] unsupported nlmsg_type 40 [ 31.865807][ T3688] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 31.888860][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.895966][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.903434][ T3630] bridge_slave_1: entered allmulticast mode [ 31.909798][ T3630] bridge_slave_1: entered promiscuous mode [ 31.943920][ T3630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.954455][ T3630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.002757][ T3630] team0: Port device team_slave_0 added [ 32.029588][ T3630] team0: Port device team_slave_1 added [ 32.062180][ T3630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.069244][ T3630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.095244][ T3630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.110733][ T3630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.117754][ T3630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.143691][ T3630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.201957][ T3630] hsr_slave_0: entered promiscuous mode [ 32.219436][ T3630] hsr_slave_1: entered promiscuous mode [ 32.226715][ T3630] debugfs: 'hsr0' already exists in 'hsr' [ 32.232521][ T3630] Cannot create hsr debugfs directory [ 32.272160][ T3713] netlink: 104 bytes leftover after parsing attributes in process `syz.3.89'. [ 32.346974][ T3718] loop3: detected capacity change from 0 to 512 [ 32.358361][ T3718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.399902][ T3718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.414022][ T3718] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.461301][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.470603][ T3722] netlink: 60 bytes leftover after parsing attributes in process `syz.1.92'. [ 32.482003][ T3722] netem: invalid attributes len -17 [ 32.487241][ T3722] netem: change failed [ 32.582263][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.632156][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.673144][ T3740] team0: Device gtp0 is of different type [ 32.692299][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.793483][ T3743] Invalid ELF header magic: != ELF [ 32.818416][ T41] bridge_slave_1: left allmulticast mode [ 32.824114][ T41] bridge_slave_1: left promiscuous mode [ 32.829882][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.870437][ T41] bridge_slave_0: left allmulticast mode [ 32.876129][ T41] bridge_slave_0: left promiscuous mode [ 32.882066][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.902699][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 32.911624][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 33.010802][ T3767] mmap: syz.1.109 (3767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.092397][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.116063][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.146243][ T41] bond0 (unregistering): Released all slaves [ 33.180926][ T3773] loop0: detected capacity change from 0 to 512 [ 33.256875][ T41] hsr_slave_0: left promiscuous mode [ 33.292522][ T41] hsr_slave_1: left promiscuous mode [ 33.301697][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.309380][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.326270][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.326270][ T3773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.333708][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.368662][ T41] veth1_macvtap: left promiscuous mode [ 33.374182][ T41] veth0_macvtap: left promiscuous mode [ 33.381110][ T3773] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.425696][ T41] veth1_vlan: left promiscuous mode [ 33.435714][ T41] veth0_vlan: left promiscuous mode [ 33.529243][ T3773] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.110: Failed to acquire dquot type 0 [ 33.616207][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.684022][ T41] team0 (unregistering): Port device team_slave_1 removed [ 33.722689][ T41] team0 (unregistering): Port device C removed [ 33.737666][ T3821] Illegal XDP return value 4294967294 on prog (id 37) dev N/A, expect packet loss! [ 33.796101][ T3813] netlink: 'syz.0.127': attribute type 31 has an invalid length. [ 33.803889][ T3813] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 33.847862][ T3830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 33.856870][ T3830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 33.916831][ T3630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.940558][ T3843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.134'. [ 33.940714][ T3630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.979323][ T3848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.991952][ T3630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.999400][ T3848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.029555][ T3630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.076351][ T3861] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 34.119525][ T3630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.144183][ T3630] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.170409][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.177604][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.197065][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.204172][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.248791][ T3882] capability: warning: `syz.3.149' uses deprecated v2 capabilities in a way that may be insecure [ 34.265938][ T3881] syz_tun: entered promiscuous mode [ 34.277287][ T3881] syz_tun: left promiscuous mode [ 34.370684][ T3630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.496287][ T3630] veth0_vlan: entered promiscuous mode [ 34.512082][ T3630] veth1_vlan: entered promiscuous mode [ 34.545581][ T3630] veth0_macvtap: entered promiscuous mode [ 34.555811][ T3630] veth1_macvtap: entered promiscuous mode [ 34.571751][ T3630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.583813][ T3630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.595570][ T1861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.620005][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 34.620019][ T29] audit: type=1400 audit(1754048519.156:205): avc: denied { mounton } for pid=3630 comm="syz-executor" path="/root/syzkaller.ibAuzL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.653967][ T1861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.670858][ T1861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.681516][ T1861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.706048][ T29] audit: type=1400 audit(1754048519.236:206): avc: denied { read } for pid=3946 comm="syz.4.176" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.728945][ T29] audit: type=1400 audit(1754048519.236:207): avc: denied { open } for pid=3946 comm="syz.4.176" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.746706][ T3952] loop3: detected capacity change from 0 to 128 [ 34.770064][ T3952] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 34.777902][ T3952] FAT-fs (loop3): Filesystem has been set read-only [ 34.784710][ T3952] syz.3.179: attempt to access beyond end of device [ 34.784710][ T3952] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 34.799039][ T3952] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 34.806989][ T3952] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 34.809072][ T29] audit: type=1400 audit(1754048519.336:208): avc: denied { create } for pid=3955 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.822342][ T3952] syz.3.179: attempt to access beyond end of device [ 34.822342][ T3952] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 34.849617][ T3959] syz.3.179: attempt to access beyond end of device [ 34.849617][ T3959] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 34.862930][ T3959] Buffer I/O error on dev loop3, logical block 2065, async page read [ 34.911997][ T29] audit: type=1400 audit(1754048519.346:209): avc: denied { create } for pid=3956 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 34.931587][ T29] audit: type=1400 audit(1754048519.346:210): avc: denied { ioctl } for pid=3956 comm="syz.2.181" path="socket:[6627]" dev="sockfs" ino=6627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 34.938559][ T3959] syz.3.179: attempt to access beyond end of device [ 34.938559][ T3959] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 34.956151][ T29] audit: type=1400 audit(1754048519.356:211): avc: denied { ioctl } for pid=3955 comm="syz.4.182" path="socket:[6628]" dev="sockfs" ino=6628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.969368][ T3959] Buffer I/O error on dev loop3, logical block 2066, async page read [ 34.993599][ T29] audit: type=1400 audit(1754048519.356:212): avc: denied { connect } for pid=3955 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.013716][ T3959] syz.3.179: attempt to access beyond end of device [ 35.013716][ T3959] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 35.021020][ T29] audit: type=1400 audit(1754048519.356:213): avc: denied { write } for pid=3955 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.034034][ T3959] Buffer I/O error on dev loop3, logical block 2067, async page read [ 35.053148][ T29] audit: type=1400 audit(1754048519.416:214): avc: denied { allowed } for pid=3962 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.063572][ T3959] syz.3.179: attempt to access beyond end of device [ 35.063572][ T3959] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 35.093745][ T3959] Buffer I/O error on dev loop3, logical block 2068, async page read [ 35.102205][ T3959] syz.3.179: attempt to access beyond end of device [ 35.102205][ T3959] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 35.115520][ T3959] Buffer I/O error on dev loop3, logical block 2069, async page read [ 35.126565][ T3959] syz.3.179: attempt to access beyond end of device [ 35.126565][ T3959] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 35.139877][ T3959] Buffer I/O error on dev loop3, logical block 2070, async page read [ 35.150524][ T3959] syz.3.179: attempt to access beyond end of device [ 35.150524][ T3959] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 35.163759][ T3959] Buffer I/O error on dev loop3, logical block 2071, async page read [ 35.173260][ T3959] syz.3.179: attempt to access beyond end of device [ 35.173260][ T3959] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 35.186493][ T3959] Buffer I/O error on dev loop3, logical block 2072, async page read [ 35.195888][ T3959] Buffer I/O error on dev loop3, logical block 2065, async page read [ 35.204177][ T3959] Buffer I/O error on dev loop3, logical block 2066, async page read [ 35.204351][ T3980] netlink: 'syz.0.191': attribute type 7 has an invalid length. [ 35.652675][ T4008] loop4: detected capacity change from 0 to 512 [ 35.671354][ T4008] EXT4-fs: Ignoring removed orlov option [ 35.685019][ T4008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.704074][ T4008] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.726035][ T4008] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.204: bg 0: block 248: padding at end of block bitmap is not set [ 35.749524][ T4008] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.204: Failed to acquire dquot type 1 [ 35.762576][ T4008] EXT4-fs (loop4): 1 truncate cleaned up [ 35.768983][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.791049][ T4008] syz.4.204 (4008) used greatest stack depth: 9280 bytes left [ 35.809237][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.822434][ T4006] __nla_validate_parse: 1 callbacks suppressed [ 35.822446][ T4006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 35.851280][ T4011] loop3: detected capacity change from 0 to 2048 [ 35.860947][ T4015] loop4: detected capacity change from 0 to 128 [ 35.870168][ T4015] EXT4-fs: Ignoring removed nobh option [ 35.896618][ T4021] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.209'. [ 35.963343][ T4015] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.999691][ T4011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.012548][ T4015] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.050337][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.096616][ T4041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'. [ 36.105520][ T4041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.219'. [ 36.128231][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.153090][ T4041] ip6gretap1: entered allmulticast mode [ 36.251338][ T4063] pim6reg: entered allmulticast mode [ 36.270731][ T4063] pim6reg: left allmulticast mode [ 36.416163][ T4089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.239'. [ 36.643035][ T4125] loop4: detected capacity change from 0 to 256 [ 36.659482][ T4125] FAT-fs (loop4): codepage cp864 not found [ 36.758104][ T4134] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.855884][ T4145] loop4: detected capacity change from 0 to 512 [ 36.890589][ T4145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.903235][ T4145] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.938856][ T4145] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 18: comm syz.4.259: lblock 23 mapped to illegal pblock 18 (length 1) [ 36.967816][ T4155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'. [ 36.972121][ T4145] EXT4-fs (loop4): Remounting filesystem read-only [ 37.013606][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.036842][ T4168] syz.1.270 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.101253][ T4183] netlink: 'syz.1.276': attribute type 15 has an invalid length. [ 37.146747][ T4188] netlink: 'syz.1.279': attribute type 13 has an invalid length. [ 37.207805][ T4188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.259095][ T4201] loop2: detected capacity change from 0 to 512 [ 37.276303][ T4201] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 24 [ 37.295540][ T4201] loop2: detected capacity change from 0 to 544 [ 37.311093][ T4201] EXT4-fs (loop2): failed to parse options in superblock: [ 37.322556][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.323933][ T4201] EXT4-fs (loop2): Invalid default hash set in the superblock [ 37.359544][ T4212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.290'. [ 37.423469][ T4222] loop4: detected capacity change from 0 to 2048 [ 37.460049][ T4222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.472805][ T4222] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.485795][ T4222] EXT4-fs (loop4): shut down requested (1) [ 37.492242][ T4222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 37.501137][ T4222] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 37.522341][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.531674][ T4240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.301'. [ 37.540647][ T4240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.301'. [ 37.609304][ T4254] netlink: 'syz.4.302': attribute type 1 has an invalid length. [ 37.769517][ T4291] loop3: detected capacity change from 0 to 512 [ 37.775851][ T4293] bridge0: entered promiscuous mode [ 37.782119][ T4293] macvlan3: entered promiscuous mode [ 37.792425][ T4291] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.817030][ T4298] SELinux: failed to load policy [ 37.823536][ T4299] loop4: detected capacity change from 0 to 764 [ 37.831381][ T4291] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.321: corrupted inode contents [ 37.894098][ T4291] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.321: mark_inode_dirty error [ 37.925596][ T4291] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.321: corrupted inode contents [ 37.945105][ T4291] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.321: mark_inode_dirty error [ 37.961993][ T4291] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.321: corrupted inode contents [ 37.978602][ T4291] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 37.993834][ T4291] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.321: corrupted inode contents [ 38.021805][ T4328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'. [ 38.033602][ T4291] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.321: mark_inode_dirty error [ 38.048062][ T4291] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 38.073396][ T4291] EXT4-fs (loop3): 1 truncate cleaned up [ 38.073849][ T4336] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 38.089019][ T4291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.102326][ T413] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 38.122211][ T4291] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.204379][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.317466][ T4377] loop4: detected capacity change from 0 to 1024 [ 38.352096][ T4377] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.362: Failed to acquire dquot type 0 [ 38.371751][ T4377] EXT4-fs (loop4): 1 truncate cleaned up [ 38.377875][ T4377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.716236][ T4447] netlink: 'syz.0.395': attribute type 10 has an invalid length. [ 38.735027][ T4447] team0: Device hsr_slave_0 failed to register rx_handler [ 38.760569][ T4455] loop1: detected capacity change from 0 to 1024 [ 38.771061][ T4457] netlink: 'syz.3.400': attribute type 6 has an invalid length. [ 38.779043][ T4455] EXT4-fs: inline encryption not supported [ 38.784893][ T4455] EXT4-fs: Ignoring removed i_version option [ 38.796572][ T4455] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.809605][ T4455] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.399: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.824462][ T4455] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.399: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.841529][ T4455] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.399: Failed to acquire dquot type 0 [ 38.859945][ T4455] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 38.872077][ T4455] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.399: mark_inode_dirty error [ 38.889637][ T4455] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 38.905361][ T4455] EXT4-fs (loop1): 1 orphan inode deleted [ 38.911674][ T4455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.926608][ T2288] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.956654][ T2288] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 38.983587][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.006015][ T3302] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 39.028268][ T3302] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 39.048022][ T3302] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 39.110886][ T4501] loop3: detected capacity change from 0 to 128 [ 39.121723][ T4501] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 39.129586][ T4501] FAT-fs (loop3): Filesystem has been set read-only [ 39.138713][ T4501] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 39.138734][ T4501] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 39.167549][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.249659][ T4513] loop0: detected capacity change from 0 to 512 [ 39.294283][ T4513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.324650][ T4513] EXT4-fs (loop0): 1 truncate cleaned up [ 39.332805][ T4513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.370650][ T4513] EXT4-fs error (device loop0): __ext4_iget:5464: inode #12: block 2: comm syz.0.426: invalid block [ 39.402899][ T4513] EXT4-fs (loop0): Remounting filesystem read-only [ 39.451846][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.705331][ T4552] loop2: detected capacity change from 0 to 1024 [ 39.722477][ T4552] EXT4-fs: inline encryption not supported [ 39.728462][ T4552] EXT4-fs: Ignoring removed i_version option [ 39.735686][ T4552] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.752722][ T4552] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.453: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.769461][ T4552] __quota_error: 90 callbacks suppressed [ 39.769566][ T4552] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 39.788563][ T4501] bio_check_eod: 42572 callbacks suppressed [ 39.788651][ T4501] syz.3.421: attempt to access beyond end of device [ 39.788651][ T4501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.810807][ T4552] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.453: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.819932][ T4563] netlink: 'syz.4.447': attribute type 10 has an invalid length. [ 39.825419][ T4501] syz.3.421: attempt to access beyond end of device [ 39.825419][ T4501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.834568][ T4552] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 39.845960][ T4501] syz.3.421: attempt to access beyond end of device [ 39.845960][ T4501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.854527][ T4552] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.453: Failed to acquire dquot type 0 [ 39.855937][ T4552] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 39.867770][ T4501] syz.3.421: attempt to access beyond end of device [ 39.867770][ T4501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.891972][ T4563] team0: Device hsr_slave_0 failed to register rx_handler [ 39.902036][ T4501] syz.3.421: attempt to access beyond end of device [ 39.902036][ T4501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.937019][ T4552] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.453: mark_inode_dirty error [ 39.958926][ T4552] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.988507][ T4501] syz.3.421: attempt to access beyond end of device [ 39.988507][ T4501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.014450][ T4552] EXT4-fs (loop2): 1 orphan inode deleted [ 40.020673][ T4552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.034367][ T41] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.034403][ T4501] syz.3.421: attempt to access beyond end of device [ 40.034403][ T4501] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.062167][ T41] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 40.070639][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 40.114332][ T4581] loop0: detected capacity change from 0 to 128 [ 40.136966][ T4587] loop4: detected capacity change from 0 to 512 [ 40.144141][ T3630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.149094][ T4587] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.163517][ T4581] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.171465][ T4581] FAT-fs (loop0): Filesystem has been set read-only [ 40.172151][ T4587] EXT4-fs (loop4): 1 truncate cleaned up [ 40.182237][ T3630] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 40.184102][ T4587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.201153][ T4581] syz.0.468: attempt to access beyond end of device [ 40.201153][ T4581] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 40.228584][ T4581] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.233686][ T4587] EXT4-fs error (device loop4): __ext4_iget:5464: inode #12: block 2: comm syz.4.461: invalid block [ 40.236509][ T4581] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 40.248296][ T4587] EXT4-fs (loop4): Remounting filesystem read-only [ 40.255201][ T3630] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 40.262881][ T4581] syz.0.468: attempt to access beyond end of device [ 40.262881][ T4581] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.284430][ T4581] syz.0.468: attempt to access beyond end of device [ 40.284430][ T4581] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 40.285553][ T3630] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 40.376460][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.419828][ T4606] netlink: 'syz.1.467': attribute type 10 has an invalid length. [ 40.431107][ T4606] team0: Device hsr_slave_0 failed to register rx_handler [ 40.627389][ T29] audit: type=1400 audit(1754048525.156:297): avc: denied { ioctl } for pid=4624 comm="syz.4.477" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.657514][ T4623] loop1: detected capacity change from 0 to 4096 [ 40.667869][ T4623] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.680399][ T4623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.695649][ T29] audit: type=1400 audit(1754048525.226:298): avc: denied { setattr } for pid=4622 comm="syz.1.476" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.720469][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.898425][ T4644] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 41.106652][ T4668] loop4: detected capacity change from 0 to 512 [ 41.145164][ T4668] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #12: comm syz.4.499: corrupted in-inode xattr: invalid ea_ino [ 41.163339][ T4668] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.499: couldn't read orphan inode 12 (err -117) [ 41.175899][ T4668] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.204004][ T4668] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.499: Directory hole found for htree leaf block 0 [ 41.234132][ T29] audit: type=1400 audit(1754048525.766:299): avc: denied { connect } for pid=4679 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.256558][ T29] audit: type=1400 audit(1754048525.766:300): avc: denied { getopt } for pid=4679 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.281123][ T3301] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 41.323466][ T4682] netlink: 'syz.3.505': attribute type 1 has an invalid length. [ 41.355777][ T4692] __nla_validate_parse: 7 callbacks suppressed [ 41.355793][ T4692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.510'. [ 41.496483][ T4714] loop0: detected capacity change from 0 to 512 [ 41.509866][ T4713] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 41.520003][ T4714] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #12: comm syz.0.519: corrupted in-inode xattr: invalid ea_ino [ 41.543210][ T4714] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.519: couldn't read orphan inode 12 (err -117) [ 41.556153][ T4714] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.585488][ T4714] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.519: Directory hole found for htree leaf block 0 [ 41.614214][ T3308] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 41.650584][ T4735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.526'. [ 41.686902][ T4739] loop1: detected capacity change from 0 to 1024 [ 41.706042][ T4739] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 41.716628][ T4739] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 41.726093][ T4739] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.527: Failed to acquire dquot type 0 [ 41.771773][ T4739] EXT4-fs (loop1): 1 truncate cleaned up [ 41.777945][ T4748] loop4: detected capacity change from 0 to 256 [ 41.785046][ T4739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.805629][ T4748] FAT-fs (loop4): Directory bread(block 64) failed [ 41.805696][ T4752] loop3: detected capacity change from 0 to 512 [ 41.812236][ T4748] FAT-fs (loop4): Directory bread(block 65) failed [ 41.820512][ T4752] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #12: comm syz.3.537: corrupted in-inode xattr: invalid ea_ino [ 41.826204][ T4748] FAT-fs (loop4): Directory bread(block 66) failed [ 41.838935][ T4752] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.537: couldn't read orphan inode 12 (err -117) [ 41.857005][ T4752] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.866650][ T4748] FAT-fs (loop4): Directory bread(block 67) failed [ 41.880026][ T4748] FAT-fs (loop4): Directory bread(block 68) failed [ 41.887776][ T4748] FAT-fs (loop4): Directory bread(block 69) failed [ 41.889754][ T4752] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.537: Directory hole found for htree leaf block 0 [ 41.908087][ T4748] FAT-fs (loop4): Directory bread(block 70) failed [ 41.919419][ T4748] FAT-fs (loop4): Directory bread(block 71) failed [ 41.926001][ T4748] FAT-fs (loop4): Directory bread(block 72) failed [ 41.934167][ T4748] FAT-fs (loop4): Directory bread(block 73) failed [ 41.943741][ T3309] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 41.973885][ T29] audit: type=1326 audit(1754048526.506:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba3d0eb69 code=0x7ffc0000 [ 42.012547][ T4763] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 42.524490][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.580044][ T4777] loop4: detected capacity change from 0 to 8192 [ 42.629312][ T4789] loop2: detected capacity change from 0 to 256 [ 42.661586][ T4795] SELinux: policydb version 0 does not match my version range 15-35 [ 42.679842][ T4795] SELinux: failed to load policy [ 42.684349][ T4789] FAT-fs (loop2): Directory bread(block 64) failed [ 42.696384][ T4789] FAT-fs (loop2): Directory bread(block 65) failed [ 42.703749][ T4789] FAT-fs (loop2): Directory bread(block 66) failed [ 42.714951][ T4789] FAT-fs (loop2): Directory bread(block 67) failed [ 42.721996][ T4789] FAT-fs (loop2): Directory bread(block 68) failed [ 42.729842][ T4789] FAT-fs (loop2): Directory bread(block 69) failed [ 42.747642][ T4789] FAT-fs (loop2): Directory bread(block 70) failed [ 42.755992][ T4789] FAT-fs (loop2): Directory bread(block 71) failed [ 42.762619][ T4789] FAT-fs (loop2): Directory bread(block 72) failed [ 42.782156][ T4789] FAT-fs (loop2): Directory bread(block 73) failed [ 42.790271][ T4811] netlink: 'syz.0.576': attribute type 58 has an invalid length. [ 42.798148][ T4811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.576'. [ 43.035380][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 43.044324][ T4838] netlink: 'syz.1.587': attribute type 21 has an invalid length. [ 43.056313][ T4840] loop2: detected capacity change from 0 to 512 [ 43.099594][ T4840] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.106056][ T4840] EXT4-fs: Ignoring removed orlov option [ 43.122135][ T4840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.158290][ T4847] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 43.200656][ T3630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.317908][ T4859] C: renamed from team_slave_0 (while UP) [ 43.327664][ T4859] netlink: 'syz.1.586': attribute type 8 has an invalid length. [ 43.347388][ T4859] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 43.535824][ T4886] loop2: detected capacity change from 0 to 128 [ 43.543847][ T4886] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.557470][ T4886] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.581403][ T58] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 43.617947][ T4903] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 43.627082][ T4903] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 43.749509][ T4914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.609'. [ 43.759566][ T4914] netem: invalid attributes len -17 [ 43.764863][ T4914] netem: change failed [ 43.810994][ T4924] team0: Device gtp0 is of different type [ 43.929570][ T4932] Invalid ELF header magic: != ELF [ 44.624420][ T4973] loop1: detected capacity change from 0 to 128 [ 44.640596][ T4973] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.652896][ T4973] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.707130][ T2288] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.737421][ T4982] netlink: 'syz.4.642': attribute type 58 has an invalid length. [ 44.745367][ T4982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.642'. [ 44.921123][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 44.921138][ T29] audit: type=1326 audit(1754048529.456:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 45.009623][ T29] audit: type=1326 audit(1754048529.456:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 45.017223][ T4993] loop4: detected capacity change from 0 to 512 [ 45.092583][ T29] audit: type=1326 audit(1754048529.626:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 45.157954][ T29] audit: type=1326 audit(1754048529.656:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 45.162288][ T4993] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.187648][ T4993] EXT4-fs: Ignoring removed orlov option [ 45.229078][ T4993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.296072][ T29] audit: type=1326 audit(1754048529.826:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 45.319600][ T29] audit: type=1326 audit(1754048529.826:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 45.342992][ T29] audit: type=1326 audit(1754048529.826:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.4.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 45.405293][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.560767][ T5028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'. [ 45.569662][ T5028] netlink: 'syz.0.669': attribute type 21 has an invalid length. [ 45.618271][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 45.627239][ T5033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 45.659416][ T5037] C: renamed from team_slave_0 (while UP) [ 45.690357][ T5037] netlink: 'syz.0.659': attribute type 8 has an invalid length. [ 45.718844][ T5037] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 45.736587][ T5043] syz_tun: entered promiscuous mode [ 45.746828][ T5043] syz_tun: left promiscuous mode [ 45.918986][ T5059] netem: change failed [ 46.123757][ T5096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.132493][ T5096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.686602][ T5163] loop3: detected capacity change from 0 to 512 [ 46.699148][ T5163] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.758890][ T5164] Falling back ldisc for ttyS3. [ 46.780451][ T5168] loop2: detected capacity change from 0 to 512 [ 46.798259][ T5168] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.171640][ T5206] netlink: 'syz.2.739': attribute type 7 has an invalid length. [ 47.205558][ T5214] Invalid ELF header magic: != ELF [ 47.403431][ T5243] loop4: detected capacity change from 0 to 512 [ 47.423649][ T5243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.464387][ T5243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.465182][ T5246] loop1: detected capacity change from 0 to 512 [ 47.497550][ T5243] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.522937][ T5246] EXT4-fs: Ignoring removed orlov option [ 47.631224][ T5246] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.691340][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.709080][ T5246] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.878611][ T5246] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.756: bg 0: block 248: padding at end of block bitmap is not set [ 47.898707][ T5246] Quota error (device loop1): write_blk: dquota write failed [ 47.906112][ T5246] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 47.916108][ T5246] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.756: Failed to acquire dquot type 1 [ 47.937025][ T5246] EXT4-fs (loop1): 1 truncate cleaned up [ 47.943133][ T29] audit: type=1326 audit(1754048532.466:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5255 comm="syz.4.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f3f8eb69 code=0x7ffc0000 [ 47.943315][ T5246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.132547][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.530226][ T5313] pim6reg: entered allmulticast mode [ 48.557307][ T5312] __nla_validate_parse: 2 callbacks suppressed [ 48.557324][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'. [ 48.582359][ T5313] pim6reg: left allmulticast mode [ 48.609158][ T5319] loop1: detected capacity change from 0 to 128 [ 48.660565][ T5319] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.668499][ T5319] FAT-fs (loop1): Filesystem has been set read-only [ 48.702906][ T5319] bio_check_eod: 18619 callbacks suppressed [ 48.702923][ T5319] syz.1.789: attempt to access beyond end of device [ 48.702923][ T5319] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 48.774896][ T5319] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.782828][ T5319] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.853707][ T5321] syz.1.789: attempt to access beyond end of device [ 48.853707][ T5321] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 48.867038][ T5321] buffer_io_error: 25182 callbacks suppressed [ 48.867055][ T5321] Buffer I/O error on dev loop1, logical block 2065, async page read [ 48.950632][ T5321] syz.1.789: attempt to access beyond end of device [ 48.950632][ T5321] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 48.963821][ T5321] Buffer I/O error on dev loop1, logical block 2066, async page read [ 49.065471][ T5321] syz.1.789: attempt to access beyond end of device [ 49.065471][ T5321] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 49.078764][ T5321] Buffer I/O error on dev loop1, logical block 2067, async page read [ 49.108606][ T5321] syz.1.789: attempt to access beyond end of device [ 49.108606][ T5321] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 49.121821][ T5321] Buffer I/O error on dev loop1, logical block 2068, async page read [ 49.157072][ T5321] syz.1.789: attempt to access beyond end of device [ 49.157072][ T5321] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 49.170324][ T5321] Buffer I/O error on dev loop1, logical block 2069, async page read [ 49.254595][ T5349] loop2: detected capacity change from 0 to 256 [ 49.281621][ T5321] syz.1.789: attempt to access beyond end of device [ 49.281621][ T5321] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 49.294849][ T5321] Buffer I/O error on dev loop1, logical block 2070, async page read [ 49.346937][ T5321] syz.1.789: attempt to access beyond end of device [ 49.346937][ T5321] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 49.360170][ T5321] Buffer I/O error on dev loop1, logical block 2071, async page read [ 49.387712][ T5321] syz.1.789: attempt to access beyond end of device [ 49.387712][ T5321] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 49.400991][ T5321] Buffer I/O error on dev loop1, logical block 2072, async page read [ 49.409207][ T5319] syz.1.789: attempt to access beyond end of device [ 49.409207][ T5319] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 49.410714][ T5349] FAT-fs (loop2): codepage cp864 not found [ 49.422433][ T5319] Buffer I/O error on dev loop1, logical block 2065, async page read [ 49.422584][ T5319] Buffer I/O error on dev loop1, logical block 2066, async page read [ 49.619979][ T5368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 49.714438][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.746834][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.849669][ T5382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.828'. [ 49.890330][ T5384] loop4: detected capacity change from 0 to 128 [ 49.909797][ T5384] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 49.917652][ T5384] FAT-fs (loop4): Filesystem has been set read-only [ 49.926391][ T5384] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 49.934451][ T5384] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 49.991849][ T5399] loop3: detected capacity change from 0 to 512 [ 50.038767][ T5399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.053117][ T5399] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.096061][ T5399] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.824: lblock 23 mapped to illegal pblock 18 (length 1) [ 50.111328][ T5399] EXT4-fs (loop3): Remounting filesystem read-only [ 50.241164][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.327470][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.399860][ T5423] loop1: detected capacity change from 0 to 256 [ 50.408680][ T5418] loop3: detected capacity change from 0 to 512 [ 50.429149][ T5418] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 24 [ 50.439496][ T5424] netlink: 'syz.0.837': attribute type 1 has an invalid length. [ 50.454294][ T5418] loop3: detected capacity change from 0 to 544 [ 50.473857][ T5423] FAT-fs (loop1): codepage cp864 not found [ 50.479780][ T5418] EXT4-fs (loop3): failed to parse options in superblock: [ 50.492617][ T5418] EXT4-fs (loop3): Invalid default hash set in the superblock [ 50.583108][ T5441] loop1: detected capacity change from 0 to 2048 [ 50.591346][ T5439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 50.600324][ T5439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'. [ 50.730291][ T5441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.746642][ T5453] netlink: 'syz.3.855': attribute type 1 has an invalid length. [ 50.782203][ T5441] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.804498][ T5441] EXT4-fs (loop1): shut down requested (1) [ 50.814765][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.839939][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.852488][ T5466] loop3: detected capacity change from 0 to 256 [ 50.859606][ T5441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.868492][ T5441] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 50.888341][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.903920][ T5466] FAT-fs (loop3): codepage cp864 not found [ 50.912451][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 50.912465][ T29] audit: type=1326 audit(1754048535.446:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 50.942846][ T29] audit: type=1326 audit(1754048535.446:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 50.966166][ T29] audit: type=1326 audit(1754048535.446:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 50.989679][ T29] audit: type=1326 audit(1754048535.446:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 51.026951][ T29] audit: type=1326 audit(1754048535.496:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 51.034413][ T5475] loop1: detected capacity change from 0 to 512 [ 51.050303][ T29] audit: type=1326 audit(1754048535.496:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 51.050329][ T29] audit: type=1326 audit(1754048535.516:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 51.060741][ T5475] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 24 [ 51.080003][ T29] audit: type=1326 audit(1754048535.516:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 51.080030][ T29] audit: type=1326 audit(1754048535.546:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.2.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 51.196319][ T5475] loop1: detected capacity change from 0 to 544 [ 51.204036][ T5475] EXT4-fs (loop1): failed to parse options in superblock: [ 51.217075][ T5475] EXT4-fs (loop1): Invalid default hash set in the superblock [ 51.256377][ T5493] bridge0: entered promiscuous mode [ 51.264642][ T5493] macvlan2: entered promiscuous mode [ 51.286686][ T5499] SELinux: failed to load policy [ 51.321258][ T29] audit: type=1326 audit(1754048535.856:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b709aeb69 code=0x7ffc0000 [ 51.402700][ T5519] loop0: detected capacity change from 0 to 512 [ 51.413341][ T5519] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 24 [ 51.451507][ T5519] loop0: detected capacity change from 0 to 544 [ 51.460276][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 51.478733][ T5519] EXT4-fs (loop0): failed to parse options in superblock: [ 51.491625][ T5519] EXT4-fs (loop0): Invalid default hash set in the superblock [ 51.501580][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 51.505872][ T5532] loop4: detected capacity change from 0 to 512 [ 51.541751][ T5532] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.897: corrupted inode contents [ 51.554381][ T5543] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 51.570228][ T5546] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.887'. [ 51.585903][ T5532] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.897: mark_inode_dirty error [ 51.599828][ T5532] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.897: corrupted inode contents [ 51.617081][ T5532] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.897: mark_inode_dirty error [ 51.644001][ T5532] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.897: corrupted inode contents [ 51.656593][ T5532] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 51.666774][ T5532] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.897: corrupted inode contents [ 51.679640][ T5532] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.897: mark_inode_dirty error [ 51.698567][ T5532] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 51.709079][ T5532] EXT4-fs (loop4): 1 truncate cleaned up [ 51.715159][ T5532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.731094][ T2288] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 51.752743][ T5532] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.841329][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.944625][ T5600] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.918'. [ 51.967472][ T5601] syz_tun: entered promiscuous mode [ 51.982775][ T5601] syz_tun: left promiscuous mode [ 52.018301][ T5611] loop2: detected capacity change from 0 to 128 [ 52.031896][ T5611] EXT4-fs: Ignoring removed nobh option [ 52.190411][ T5611] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.203033][ T5611] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.248603][ T3630] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.393060][ T3630] ================================================================== [ 52.401163][ T3630] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 52.408884][ T3630] [ 52.411217][ T3630] write to 0xffff888237d25ea8 of 1 bytes by task 5564 on cpu 1: [ 52.418845][ T3630] folios_put_refs+0x285/0x2d0 [ 52.423615][ T3630] folio_batch_move_lru+0x1fd/0x230 [ 52.428825][ T3630] folio_add_lru+0x14a/0x1f0 [ 52.433455][ T3630] shmem_get_folio_gfp+0x7ab/0xd60 [ 52.438579][ T3630] shmem_write_begin+0xa8/0x190 [ 52.443425][ T3630] generic_perform_write+0x181/0x490 [ 52.448709][ T3630] shmem_file_write_iter+0xc5/0xf0 [ 52.453823][ T3630] __kernel_write_iter+0x256/0x4c0 [ 52.458952][ T3630] dump_user_range+0x61e/0x8f0 [ 52.463719][ T3630] elf_core_dump+0x1e00/0x1f90 [ 52.468543][ T3630] coredump_write+0xb0d/0xe30 [ 52.473219][ T3630] vfs_coredump+0x142f/0x20c0 [ 52.477890][ T3630] get_signal+0xd85/0xf70 [ 52.482236][ T3630] arch_do_signal_or_restart+0x96/0x480 [ 52.487780][ T3630] irqentry_exit_to_user_mode+0x5e/0xa0 [ 52.493324][ T3630] irqentry_exit+0x12/0x50 [ 52.497742][ T3630] asm_exc_page_fault+0x26/0x30 [ 52.502670][ T3630] [ 52.504982][ T3630] read to 0xffff888237d25ea8 of 1 bytes by task 3630 on cpu 0: [ 52.512511][ T3630] __lru_add_drain_all+0x12b/0x3f0 [ 52.517623][ T3630] lru_add_drain_all+0x10/0x20 [ 52.522383][ T3630] invalidate_bdev+0x47/0x70 [ 52.526973][ T3630] ext4_put_super+0x624/0x7d0 [ 52.531644][ T3630] generic_shutdown_super+0xe3/0x210 [ 52.536934][ T3630] kill_block_super+0x2a/0x70 [ 52.541604][ T3630] ext4_kill_sb+0x42/0x80 [ 52.545952][ T3630] deactivate_locked_super+0x75/0x1c0 [ 52.551342][ T3630] deactivate_super+0x97/0xa0 [ 52.556027][ T3630] cleanup_mnt+0x269/0x2e0 [ 52.560445][ T3630] __cleanup_mnt+0x19/0x20 [ 52.564861][ T3630] task_work_run+0x131/0x1a0 [ 52.569451][ T3630] exit_to_user_mode_loop+0xe4/0x100 [ 52.574732][ T3630] do_syscall_64+0x1d6/0x200 [ 52.579319][ T3630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.585207][ T3630] [ 52.587516][ T3630] value changed: 0x1f -> 0x00 [ 52.592177][ T3630] [ 52.594490][ T3630] Reported by Kernel Concurrency Sanitizer on: [ 52.600651][ T3630] CPU: 0 UID: 0 PID: 3630 Comm: syz-executor Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 52.612889][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 52.622949][ T3630] ==================================================================