last executing test programs: 3.628466521s ago: executing program 4 (id=4618): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000240)) 3.346316918s ago: executing program 4 (id=4622): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 2.153636028s ago: executing program 2 (id=4639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x4b, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6517ab89, 0xffffffff, 0x2, 0x400401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000640)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000006c0)="05031c00d3fc140000", 0x9, 0x4, &(0x7f0000000700)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.926902233s ago: executing program 2 (id=4644): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) poll(&(0x7f0000000040)=[{r0, 0x4004}], 0x1, 0x1) 1.914561843s ago: executing program 2 (id=4647): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000001c0)=""/96, 0x0) 1.800233016s ago: executing program 2 (id=4649): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.597890191s ago: executing program 4 (id=4653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 1.495934544s ago: executing program 4 (id=4656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000, 0x20, 0x7}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0xfdef) 1.387682496s ago: executing program 4 (id=4659): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000012c0)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d2}}, {@auto_da_alloc}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbd0, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f0000000140)={0x37d4c024, 0x9efa, 0x1, 0x5}) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) tkill(0x0, 0x1b) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x404c004}, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="660a000000000000611020000000000018000000000000400000000000000000950000000000008b371f97fbb1f7445a8493f1806f96c5f5fe809925dc4e339ad49ede86284ed5900a209e22be175e68db46109280039c261745589c71314ac052da36d59c1768d8984b7602434d123d38aa3ef3176a6ba79877fe431f02979ca1a069fee19965e1143b52fca5d5080f9212935acf44035b071e9c1f431f6907e5cc27dbd3b9ffe3231f74d166687c82650658a966d14edd12c86a1f03a06c98265ae87b39a1c84fdb05eb3d22cd26e6143e2c7e86"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1.260176099s ago: executing program 1 (id=4662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x6, 0x4, 0x0, {0x9, 0x1, 0x529e, 0xff18, 0x6, 0x7fffffff}, {0x2, 0x2, 0x83b5, 0x9, 0x8, 0xfffff800}, 0x616, 0x100, 0x7}}]}]}}]}, 0x74}}, 0x0) 1.214744631s ago: executing program 0 (id=4666): syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), 0x0) r2 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) r4 = dup3(r0, r1, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8208010}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000153d3bbbc17960e3f99062ee5d6b49db1b79503dfd08e825148b728af0437104bb81faf1a2ff60f8531f6903da3b68f721ca020e11d9494d91b0345a3e6ac88bad9524c5ef2679390e834399a1d4d07e3ca9", @ANYRESHEX=r1, @ANYBLOB="000129bd7000fedbdf253100000008000100130000000800db00", @ANYRES32, @ANYRESDEC=r2, @ANYRES8=r3, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="080001006b0000000c009900ffffff7f7800000008005200", @ANYRESOCT, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800db00", @ANYRES32=r4], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0xc0) syz_clone(0x51001800, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000000fc0)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000019fc0)={0x0, 0x0, &(0x7f000001a000)={&(0x7f000001a040)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000100000114000400000000000000"], 0xb8}}, 0x0) r7 = inotify_init1(0x80000) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r7, 0x40186e8d, 0x0) r8 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r8, &(0x7f000001a100)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r8, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f000001a140)={'batadv_slave_0\x00'}) write(r2, &(0x7f000001a180)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r2, &(0x7f000001a1c0)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) syz_open_procfs(0x0, 0x0) syz_clone(0x8280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f000001a240)='ext4\x00', &(0x7f000001a280)='./file0\x00', 0xc0ed0044, &(0x7f000001a2c0)={[{@noblock_validity}, {@resuid}, {@nodioread_nolock}, {@noload}, {@nobarrier}, {@noinit_itable}]}, 0xfe, 0x47e, &(0x7f000001a340)="$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") 1.174024641s ago: executing program 1 (id=4667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x4b, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6517ab89, 0xffffffff, 0x2, 0x400401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000640)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000006c0)="05031c00d3fc140000", 0x9, 0x4, &(0x7f0000000700)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 833.24558ms ago: executing program 2 (id=4669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x1}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x63, 0x300, 0x40, 0x11, 0x0, @private=0xa010124, @broadcast}, {0x4e26, 0x4e22, 0x8}}}, 0x2a) 819.80174ms ago: executing program 0 (id=4670): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x38]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 762.459191ms ago: executing program 1 (id=4671): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="110086dd0000110000000000000060ec970000382c00fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) 746.832842ms ago: executing program 0 (id=4673): r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 688.319523ms ago: executing program 1 (id=4676): r0 = add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000740)='asymmetric\x00', 0x0, &(0x7f0000001b40)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000020c0)={r1}, &(0x7f0000002100)=ANY=[@ANYBLOB='enc=pkcs'], 0x0, 0x0) 687.644613ms ago: executing program 2 (id=4677): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f0000000380)={0x100000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) 660.191654ms ago: executing program 1 (id=4678): mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)="303132333a616263643a71bd39", 0xd) 638.370085ms ago: executing program 3 (id=4679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x5001}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x68, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x68}}, 0x0) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) 622.687665ms ago: executing program 1 (id=4680): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0x97170000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 494.355868ms ago: executing program 3 (id=4681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x4b, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x6517ab89, 0xffffffff, 0x2, 0x400401, 0x7, 0x0, 0x3, 0x79c43107}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000800) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000640)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000006c0)="05031c00d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000700)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 308.191173ms ago: executing program 3 (id=4682): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8935, &(0x7f00000008c0)={'pimreg\x00', @ifru_map={0x9, 0xfffffefa, 0x2e27, 0x4, 0xd, 0x5}}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000900)={'bridge0\x00', @ifru_ivalue=0xa}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000940)={'bridge0\x00', @ifru_ivalue=0xb}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) 263.308244ms ago: executing program 3 (id=4683): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x38]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 238.359814ms ago: executing program 0 (id=4684): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x114}}, 0x0) 190.334225ms ago: executing program 3 (id=4685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x20000044) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x8, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000680), 0x56) sendmsg$kcm(r5, &(0x7f00000006c0)={&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000780)=[{&(0x7f00000007c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 174.247976ms ago: executing program 0 (id=4686): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="110086dd0000110000000000000060ec970000382c00fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef) 63.140109ms ago: executing program 0 (id=4687): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x80) 61.261589ms ago: executing program 4 (id=4688): r0 = add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000740)='asymmetric\x00', 0x0, &(0x7f0000001b40)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000020c0)={r1}, &(0x7f0000002100)=ANY=[@ANYBLOB='enc=pkcs'], 0x0, 0x0) 0s ago: executing program 3 (id=4689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, r1, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x40000010) kernel console output (not intermixed with test programs): from 0 to 7 [ 307.194935][T12283] syzkaller1: entered promiscuous mode [ 307.194962][T12283] syzkaller1: entered allmulticast mode [ 307.297806][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 307.297838][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 307.529591][T12292] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3032'. [ 308.163376][T12267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.116382][T12325] loop4: detected capacity change from 0 to 512 [ 309.132116][T12325] EXT4-fs (loop4): Invalid log cluster size: 131073 [ 309.155566][T12325] loop4: detected capacity change from 0 to 128 [ 309.171207][T12325] EXT4-fs: Ignoring removed nobh option [ 309.173177][T12325] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 309.173473][T12325] ext4 filesystem being mounted at /560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.317298][T12328] syzkaller1: entered promiscuous mode [ 309.317337][T12328] syzkaller1: entered allmulticast mode [ 309.413027][T12335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3043'. [ 309.493688][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.508090][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.526497][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.526532][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.526622][T12276] bridge_slave_0: entered allmulticast mode [ 309.527265][T12276] bridge_slave_0: entered promiscuous mode [ 309.567175][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.567210][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.592389][T12276] bridge_slave_1: entered allmulticast mode [ 309.592939][T12276] bridge_slave_1: entered promiscuous mode [ 309.622442][T12276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.623683][T12276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.658461][T12276] team0: Port device team_slave_0 added [ 309.659709][T12276] team0: Port device team_slave_1 added [ 309.690874][T12276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.690894][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.691030][T12276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.692810][T12276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.692826][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.692862][T12276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.835168][T12276] hsr_slave_0: entered promiscuous mode [ 309.836758][T12276] hsr_slave_1: entered promiscuous mode [ 309.837050][T12276] debugfs: 'hsr0' already exists in 'hsr' [ 309.837069][T12276] Cannot create hsr debugfs directory [ 310.011919][T12359] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3049'. [ 310.063386][T12276] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.154235][T12276] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.226844][T12276] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.526623][T12371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3054'. [ 311.002621][T12276] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.384983][T12276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.397235][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.405628][T12276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.418978][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.422277][T12276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.446316][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.447305][T12276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.464222][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.651318][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.688114][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.712388][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.712430][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.734270][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.734308][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.084628][T12408] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3064'. [ 312.120673][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.082795][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 313.250713][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 313.250777][ T29] audit: type=1400 audit(2000000399.180:777): avc: denied { setopt } for pid=12432 comm="syz.1.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 313.319240][T12276] veth0_vlan: entered promiscuous mode [ 313.345399][T12276] veth1_vlan: entered promiscuous mode [ 313.446116][T12276] veth0_macvtap: entered promiscuous mode [ 313.462824][T12276] veth1_macvtap: entered promiscuous mode [ 313.485157][T12276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.497231][T12276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.569448][ T4435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.569568][ T4435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.569606][ T4435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.569730][ T4435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.608333][T12444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3074'. [ 313.816777][ T29] audit: type=1400 audit(2000000399.740:778): avc: denied { write } for pid=12460 comm="syz.2.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 315.019649][T12481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3086'. [ 315.561797][T12507] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3098'. [ 315.909034][T12515] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3100'. [ 316.722174][T12528] loop2: detected capacity change from 0 to 512 [ 316.738142][T12528] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3106: inode #2147418112: comm syz.2.3106: iget: illegal inode # [ 316.738236][T12528] loop2: lost filesystem error report for type 5 error -117 [ 316.738562][T12528] EXT4-fs (loop2): no journal found [ 316.738602][T12528] EXT4-fs (loop2): can't get journal size [ 316.747407][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 316.747447][ C1] EXT4-fs (loop2): initial error at time 2000000402: ext4_get_journal_inode:5928 [ 316.747468][ C1] EXT4-fs (loop2): last error at time 2000000402: ext4_get_journal_inode:5928 [ 316.789904][T12528] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 316.790613][T12528] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 316.791712][T12528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.006375][T12528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.277157][T12550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3115'. [ 317.340527][T12552] loop3: detected capacity change from 0 to 512 [ 317.340847][T12552] ext4: Unknown parameter 'obj_user' [ 317.783909][T12569] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3122'. [ 318.070769][T12579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3128'. [ 318.169579][T12594] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3134'. [ 318.343168][T12608] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3141'. [ 318.876174][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3153'. [ 318.990113][T12640] loop2: detected capacity change from 0 to 512 [ 319.011885][T12640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.012031][T12640] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.238775][ T29] audit: type=1400 audit(2000000405.170:779): avc: denied { write } for pid=12639 comm="syz.2.3154" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.239456][T12660] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3154: corrupted xattr block 33: invalid ea_ino [ 319.239593][ T29] audit: type=1400 audit(2000000405.170:780): avc: denied { write } for pid=12639 comm="syz.2.3154" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.239875][T12660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 319.239993][T12660] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3154: corrupted xattr block 33: invalid ea_ino [ 319.240165][T12660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 319.240213][T12660] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3154: corrupted xattr block 33: invalid ea_ino [ 319.240381][T12660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 319.863829][T12687] netlink: 'syz.0.3166': attribute type 4 has an invalid length. [ 319.863858][T12687] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3166'. [ 319.873886][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.901225][T12721] loop1: detected capacity change from 0 to 512 [ 320.904666][T12721] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.3185: inode #2147418112: comm syz.1.3185: iget: illegal inode # [ 320.904814][T12721] loop1: lost filesystem error report for type 5 error -117 [ 320.905173][T12721] EXT4-fs (loop1): no journal found [ 320.905198][T12721] EXT4-fs (loop1): can't get journal size [ 320.907389][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 320.907421][ C0] EXT4-fs (loop1): initial error at time 2000000406: ext4_get_journal_inode:5928 [ 320.907535][ C0] EXT4-fs (loop1): last error at time 2000000406: ext4_get_journal_inode:5928 [ 320.914400][T12721] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 320.914827][T12721] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 320.915864][T12721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.173731][T12721] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.289651][T12751] loop2: detected capacity change from 0 to 128 [ 321.698406][T12772] netlink: 'syz.2.3198': attribute type 4 has an invalid length. [ 321.698479][T12772] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3198'. [ 321.819621][T12784] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.3213'. [ 322.398491][T12817] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.3226'. [ 322.751324][T12808] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.751365][T12808] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.751582][T12808] bridge_slave_0: entered allmulticast mode [ 322.752104][T12808] bridge_slave_0: entered promiscuous mode [ 322.790795][T12808] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.790869][T12808] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.790937][T12808] bridge_slave_1: entered allmulticast mode [ 322.791429][T12808] bridge_slave_1: entered promiscuous mode [ 322.826628][T12808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.833354][T12808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.859377][T12808] team0: Port device team_slave_0 added [ 322.860323][T12808] team0: Port device team_slave_1 added [ 322.885399][T12808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.885419][T12808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.885476][T12808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.886327][T12808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.886344][T12808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.886382][T12808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.908389][T12857] loop3: detected capacity change from 0 to 512 [ 322.993236][T12808] hsr_slave_0: entered promiscuous mode [ 322.993703][T12808] hsr_slave_1: entered promiscuous mode [ 322.993989][T12808] debugfs: 'hsr0' already exists in 'hsr' [ 322.994004][T12808] Cannot create hsr debugfs directory [ 323.152274][T12860] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3240'. [ 323.210935][T12808] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.296065][T12808] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.376964][T12808] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.471036][T12808] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.738343][T12808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.745324][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.749702][T12808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.753504][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.763676][T12808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.769167][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.773104][T12808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 323.778096][T12808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.838405][T12889] netlink: 'syz.0.3241': attribute type 4 has an invalid length. [ 323.838430][T12889] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3241'. [ 323.938674][T12808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.966227][T12808] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.982119][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.982172][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.003974][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.004024][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.014128][T12808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.092409][T12918] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3254'. [ 325.149929][T12918] loop1: detected capacity change from 0 to 512 [ 325.159779][T12918] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.3254: inode #2147418112: comm syz.1.3254: iget: illegal inode # [ 325.159812][T12918] loop1: lost filesystem error report for type 5 error -117 [ 325.166634][T12918] EXT4-fs (loop1): no journal found [ 325.166735][T12918] EXT4-fs (loop1): can't get journal size [ 325.167392][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 325.167412][ C0] EXT4-fs (loop1): initial error at time 2000000411: ext4_get_journal_inode:5928 [ 325.167438][ C0] EXT4-fs (loop1): last error at time 2000000411: ext4_get_journal_inode:5928 [ 325.182663][T12918] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 325.190715][T12918] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 325.191845][T12918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.441504][T12918] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.494009][T12934] loop1: detected capacity change from 0 to 512 [ 325.494451][T12934] ext4: Unknown parameter 'obj_user' [ 325.607986][T12808] veth0_vlan: entered promiscuous mode [ 325.610733][T12808] veth1_vlan: entered promiscuous mode [ 325.639981][T12808] veth0_macvtap: entered promiscuous mode [ 325.643614][T12808] veth1_macvtap: entered promiscuous mode [ 325.671025][T12808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.688137][T12808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.795634][ T4438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.819143][ T4418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.819280][ T4418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.819348][ T4418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.915181][T12963] syzkaller1: entered promiscuous mode [ 325.915207][T12963] syzkaller1: entered allmulticast mode [ 326.087111][T12974] loop1: detected capacity change from 0 to 512 [ 326.324590][T12974] ext4: Unknown parameter 'obj_user' [ 326.669004][T12980] syzkaller0: entered promiscuous mode [ 326.669129][T12980] syzkaller0: entered allmulticast mode [ 326.993865][T13000] syzkaller1: entered promiscuous mode [ 326.993885][T13000] syzkaller1: entered allmulticast mode [ 327.183442][T13012] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3287'. [ 327.261732][T13012] loop2: detected capacity change from 0 to 512 [ 327.287707][T13012] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3287: inode #2147418112: comm syz.2.3287: iget: illegal inode # [ 327.287840][T13012] loop2: lost filesystem error report for type 5 error -117 [ 327.292968][T13012] EXT4-fs (loop2): no journal found [ 327.293003][T13012] EXT4-fs (loop2): can't get journal size [ 327.295165][T13012] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 327.296338][T13012] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 327.297258][T13012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.072096][T13012] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.326183][T13029] loop2: detected capacity change from 0 to 128 [ 328.537754][T13040] syzkaller1: entered promiscuous mode [ 328.537783][T13040] syzkaller1: entered allmulticast mode [ 329.397249][T13066] loop3: detected capacity change from 0 to 512 [ 329.406548][T13066] ext4: Unknown parameter 'obj_user' [ 329.449719][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.450368][T13068] bridge_slave_0: left allmulticast mode [ 329.450386][T13068] bridge_slave_0: left promiscuous mode [ 329.450553][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.462730][T13068] team0: Port device bridge_slave_0 added [ 329.909077][T13075] syzkaller1: entered promiscuous mode [ 329.909097][T13075] syzkaller1: entered allmulticast mode [ 330.221830][T13085] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3314'. [ 330.376102][T13087] loop1: detected capacity change from 0 to 512 [ 330.425999][T13087] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.3314: inode #2147418112: comm syz.1.3314: iget: illegal inode # [ 330.426095][T13087] loop1: lost filesystem error report for type 5 error -117 [ 330.426792][T13087] EXT4-fs (loop1): no journal found [ 330.426873][T13087] EXT4-fs (loop1): can't get journal size [ 330.427448][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 330.427468][ C1] EXT4-fs (loop1): initial error at time 2000000416: ext4_get_journal_inode:5928 [ 330.427496][ C1] EXT4-fs (loop1): last error at time 2000000416: ext4_get_journal_inode:5928 [ 330.484218][T13087] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 330.513808][T13087] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 330.514629][T13087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.608003][T11689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.773730][T13106] syzkaller1: entered promiscuous mode [ 330.773756][T13106] syzkaller1: entered allmulticast mode [ 330.781767][T13108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3322'. [ 330.824035][T13111] loop4: detected capacity change from 0 to 128 [ 332.411582][ T29] audit: type=1400 audit(2000000418.340:781): avc: denied { view } for pid=13155 comm="syz.3.3338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 333.500273][T13198] syzkaller1: entered promiscuous mode [ 333.500299][T13198] syzkaller1: entered allmulticast mode [ 334.184454][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 336.454451][T13317] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3398'. [ 336.500889][T13317] loop2: detected capacity change from 0 to 512 [ 336.506319][T13317] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3398: inode #2147418112: comm syz.2.3398: iget: illegal inode # [ 336.506423][T13317] loop2: lost filesystem error report for type 5 error -117 [ 336.506638][T13317] EXT4-fs (loop2): no journal found [ 336.506665][T13317] EXT4-fs (loop2): can't get journal size [ 336.507617][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 336.507635][ C0] EXT4-fs (loop2): initial error at time 2000000422: ext4_get_journal_inode:5928 [ 336.507688][ C0] EXT4-fs (loop2): last error at time 2000000422: ext4_get_journal_inode:5928 [ 336.538008][T13317] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 336.543435][T13317] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 336.544550][T13317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.785343][T13317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.820159][T13334] syzkaller1: entered promiscuous mode [ 336.820243][T13334] syzkaller1: entered allmulticast mode [ 337.027291][T13346] loop2: detected capacity change from 0 to 512 [ 337.058626][T13346] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3409: inode #2147418112: comm syz.2.3409: iget: illegal inode # [ 337.058664][T13346] loop2: lost filesystem error report for type 5 error -117 [ 337.059326][T13346] EXT4-fs (loop2): no journal found [ 337.059345][T13346] EXT4-fs (loop2): can't get journal size [ 337.060250][T13346] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 337.061916][T13346] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 337.062327][T13346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.332134][T13363] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3417'. [ 337.611390][T13346] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.548365][T13392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3429'. [ 338.591327][T13392] loop3: detected capacity change from 0 to 512 [ 338.615921][T13392] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.3429: inode #2147418112: comm syz.3.3429: iget: illegal inode # [ 338.615971][T13392] loop3: lost filesystem error report for type 5 error -117 [ 338.616258][T13392] EXT4-fs (loop3): no journal found [ 338.616294][T13392] EXT4-fs (loop3): can't get journal size [ 338.617471][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 338.617507][ C0] EXT4-fs (loop3): initial error at time 2000000424: ext4_get_journal_inode:5928 [ 338.617558][ C0] EXT4-fs (loop3): last error at time 2000000424: ext4_get_journal_inode:5928 [ 338.858988][T13392] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 338.896358][T13392] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 338.896755][T13392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.932112][T13392] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.042426][ T29] audit: type=1400 audit(2000000424.970:782): avc: denied { read append } for pid=13412 comm="syz.2.3438" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.042471][ T29] audit: type=1400 audit(2000000424.970:783): avc: denied { open } for pid=13412 comm="syz.2.3438" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.044778][ T29] audit: type=1400 audit(2000000424.970:784): avc: denied { ioctl } for pid=13412 comm="syz.2.3438" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.141746][ T29] audit: type=1400 audit(2000000425.070:785): avc: denied { create } for pid=13417 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.143224][ T29] audit: type=1400 audit(2000000425.070:786): avc: denied { ioctl } for pid=13417 comm="syz.1.3439" path="socket:[39963]" dev="sockfs" ino=39963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.143267][ T29] audit: type=1400 audit(2000000425.070:787): avc: denied { bind } for pid=13417 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 339.276950][T13428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3443'. [ 339.315954][T13428] loop1: detected capacity change from 0 to 512 [ 339.356158][T13428] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.3443: inode #2147418112: comm syz.1.3443: iget: illegal inode # [ 339.356206][T13428] loop1: lost filesystem error report for type 5 error -117 [ 339.357385][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 339.357412][ C0] EXT4-fs (loop1): initial error at time 2000000425: ext4_get_journal_inode:5928 [ 339.357459][ C0] EXT4-fs (loop1): last error at time 2000000425: ext4_get_journal_inode:5928 [ 339.598324][T13428] EXT4-fs (loop1): no journal found [ 339.598344][T13428] EXT4-fs (loop1): can't get journal size [ 339.629876][T13428] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 339.630391][T13428] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 339.630852][T13428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.309186][T13428] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.520344][ T29] audit: type=1400 audit(2000000426.450:788): avc: denied { sys_module } for pid=13453 comm="syz.0.3458" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 340.662345][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3459'. [ 340.821711][T13471] loop1: detected capacity change from 0 to 512 [ 340.823283][T13471] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.3454: inode #2147418112: comm syz.1.3454: iget: illegal inode # [ 340.823351][T13471] loop1: lost filesystem error report for type 5 error -117 [ 340.823466][T13471] EXT4-fs (loop1): no journal found [ 340.823481][T13471] EXT4-fs (loop1): can't get journal size [ 340.824158][T13471] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 340.824427][T13471] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 340.824989][T13471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.221515][T13493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3466'. [ 341.266191][T13493] loop2: detected capacity change from 0 to 512 [ 341.352859][T13493] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3466: inode #2147418112: comm syz.2.3466: iget: illegal inode # [ 341.352957][T13493] loop2: lost filesystem error report for type 5 error -117 [ 341.359422][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 341.359458][ C0] EXT4-fs (loop2): initial error at time 2000000427: ext4_get_journal_inode:5928 [ 341.359502][ C0] EXT4-fs (loop2): last error at time 2000000427: ext4_get_journal_inode:5928 [ 341.359632][T13493] EXT4-fs (loop2): no journal found [ 341.359715][T13493] EXT4-fs (loop2): can't get journal size [ 341.360823][T13493] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 341.367103][T13493] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 341.368265][T13493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.943028][T13471] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.958838][T13493] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.002709][T13507] loop3: detected capacity change from 0 to 512 [ 342.014061][T13507] ext4: Unknown parameter 'obj_user' [ 342.142220][T13523] syzkaller0: entered promiscuous mode [ 342.142240][T13523] syzkaller0: entered allmulticast mode [ 342.358059][T13538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3485'. [ 342.446243][T13538] loop2: detected capacity change from 0 to 512 [ 342.541513][T13538] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3485: inode #2147418112: comm syz.2.3485: iget: illegal inode # [ 342.541641][T13538] loop2: lost filesystem error report for type 5 error -117 [ 342.542036][T13538] EXT4-fs (loop2): no journal found [ 342.542050][T13538] EXT4-fs (loop2): can't get journal size [ 342.543778][T13538] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 342.546071][T13538] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 342.547117][T13538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.677706][T13538] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.785148][T13555] usb usb7: usbfs: process 13555 (syz.3.3493) did not claim interface 0 before use [ 342.967656][T13560] syzkaller0: entered promiscuous mode [ 342.967683][T13560] syzkaller0: entered allmulticast mode [ 343.446217][T13579] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3501'. [ 343.626966][ T29] audit: type=1400 audit(2000000429.550:789): avc: denied { create } for pid=13581 comm="syz.1.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 343.654166][T13583] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3503'. [ 343.793217][ T29] audit: type=1400 audit(2000000429.720:790): avc: denied { ioctl } for pid=13595 comm="syz.4.3509" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 343.818883][T13583] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.822762][T13583] EXT4-fs: test_dummy_encryption option not supported [ 343.832342][T13583] EXT4-fs: test_dummy_encryption option not supported [ 344.035180][T13605] syzkaller0: entered promiscuous mode [ 344.035206][T13605] syzkaller0: entered allmulticast mode [ 344.564673][T13619] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3517'. [ 344.631429][T13619] loop1: detected capacity change from 0 to 512 [ 344.635890][T13619] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.3517: inode #2147418112: comm syz.1.3517: iget: illegal inode # [ 344.635939][T13619] loop1: lost filesystem error report for type 5 error -117 [ 344.636210][T13619] EXT4-fs (loop1): no journal found [ 344.636258][T13619] EXT4-fs (loop1): can't get journal size [ 344.637379][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 344.637401][ C0] EXT4-fs (loop1): initial error at time 2000000430: ext4_get_journal_inode:5928 [ 344.637440][ C0] EXT4-fs (loop1): last error at time 2000000430: ext4_get_journal_inode:5928 [ 344.642324][T13619] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 344.642870][T13619] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 344.723274][T13619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.901328][ T29] audit: type=1400 audit(2000000430.830:791): avc: denied { setopt } for pid=13622 comm="syz.4.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.902090][ T29] audit: type=1400 audit(2000000430.830:792): avc: denied { write } for pid=13622 comm="syz.4.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 344.903449][ T29] audit: type=1400 audit(2000000430.830:793): avc: denied { read } for pid=13622 comm="syz.4.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 345.010097][T13619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.895874][T13652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3532'. [ 346.054000][T13665] loop2: detected capacity change from 0 to 512 [ 346.064699][T13665] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3532: inode #2147418112: comm syz.2.3532: iget: illegal inode # [ 346.064767][T13665] loop2: lost filesystem error report for type 5 error -117 [ 346.064963][T13665] EXT4-fs (loop2): no journal found [ 346.065005][T13665] EXT4-fs (loop2): can't get journal size [ 346.067338][T13665] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 346.084098][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 346.084146][ C0] EXT4-fs (loop2): initial error at time 2000000431: ext4_get_journal_inode:5928 [ 346.084174][ C0] EXT4-fs (loop2): last error at time 2000000431: ext4_get_journal_inode:5928 [ 346.187757][T13665] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 346.188801][T13665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.369395][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.573207][ T29] audit: type=1400 audit(2000000432.500:794): avc: denied { setopt } for pid=13689 comm="syz.2.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 346.573470][ T29] audit: type=1400 audit(2000000432.500:795): avc: denied { write } for pid=13689 comm="syz.2.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 346.792317][T13697] syzkaller1: entered promiscuous mode [ 346.792405][T13697] syzkaller1: entered allmulticast mode [ 347.288578][T13705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3546'. [ 347.341063][T13707] syzkaller0: entered promiscuous mode [ 347.341092][T13707] syzkaller0: entered allmulticast mode [ 347.410995][T13705] loop3: detected capacity change from 0 to 512 [ 347.435904][T13705] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.3546: inode #2147418112: comm syz.3.3546: iget: illegal inode # [ 347.436035][T13705] loop3: lost filesystem error report for type 5 error -117 [ 347.436195][T13705] EXT4-fs (loop3): no journal found [ 347.436257][T13705] EXT4-fs (loop3): can't get journal size [ 347.437386][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 347.437409][ C1] EXT4-fs (loop3): initial error at time 2000000433: ext4_get_journal_inode:5928 [ 347.437445][ C1] EXT4-fs (loop3): last error at time 2000000433: ext4_get_journal_inode:5928 [ 347.437965][T13705] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 347.440729][T13705] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 347.454159][T13705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.608443][T13721] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3555'. [ 347.679246][T13705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.800653][T13729] loop5: detected capacity change from 0 to 7 [ 347.912366][T13733] syzkaller1: entered promiscuous mode [ 347.912392][T13733] syzkaller1: entered allmulticast mode [ 347.941396][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3562'. [ 347.941502][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 348.760822][T13754] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3569'. [ 348.943092][T13763] loop5: detected capacity change from 0 to 7 [ 349.045138][T13769] syzkaller1: entered promiscuous mode [ 349.045168][T13769] syzkaller1: entered allmulticast mode [ 349.156192][T13773] loop2: detected capacity change from 0 to 512 [ 349.158896][T13773] ext4: Unknown parameter 'obj_user' [ 349.450771][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3585'. [ 350.379903][T13816] syzkaller1: entered promiscuous mode [ 350.379930][T13816] syzkaller1: entered allmulticast mode [ 350.441065][T13818] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3597'. [ 351.225512][T13829] bridge_slave_0: left allmulticast mode [ 351.225543][T13829] bridge_slave_0: left promiscuous mode [ 351.225649][T13829] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.267320][T13829] bridge_slave_1: left allmulticast mode [ 351.267578][T13829] bridge_slave_1: left promiscuous mode [ 351.268665][T13829] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.329591][T13829] bond0: (slave bond_slave_0): Releasing backup interface [ 351.380861][T13829] bond0: (slave bond_slave_1): Releasing backup interface [ 351.443339][T13829] team0: Port device team_slave_0 removed [ 351.481328][T13829] team0: Port device team_slave_1 removed [ 351.482431][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.482499][T13829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.486903][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.494986][T13829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.534507][T13829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.592337][T13830] team0: Port device xfrm0 added [ 351.598418][T13831] tipc: Started in network mode [ 351.598538][T13831] tipc: Node identity 3af9b15d5bac, cluster identity 4711 [ 351.598599][T13831] tipc: Enabled bearer , priority 0 [ 351.721828][T13850] syzkaller1: entered promiscuous mode [ 351.721853][T13850] syzkaller1: entered allmulticast mode [ 351.846595][T13855] loop2: detected capacity change from 0 to 512 [ 351.856086][T13855] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3610: inode #2147418112: comm syz.2.3610: iget: illegal inode # [ 351.856150][T13855] loop2: lost filesystem error report for type 5 error -117 [ 351.856897][T13855] EXT4-fs (loop2): no journal found [ 351.856916][T13855] EXT4-fs (loop2): can't get journal size [ 351.872984][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 351.873016][ C0] EXT4-fs (loop2): initial error at time 2000000437: ext4_get_journal_inode:5928 [ 351.873057][ C0] EXT4-fs (loop2): last error at time 2000000437: ext4_get_journal_inode:5928 [ 351.881551][T13855] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 351.932180][T13855] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 351.932845][T13855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.259082][T13868] loop3: detected capacity change from 0 to 512 [ 352.269974][T13868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.270175][T13868] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.531917][T13855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.595170][ T29] audit: type=1400 audit(2000000438.520:796): avc: denied { write } for pid=13867 comm="syz.3.3615" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.596078][T13872] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3615: corrupted xattr block 33: invalid ea_ino [ 352.596201][ T29] audit: type=1400 audit(2000000438.520:797): avc: denied { write } for pid=13867 comm="syz.3.3615" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.596336][T13872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 352.596428][T13872] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3615: corrupted xattr block 33: invalid ea_ino [ 352.596578][T13872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 352.596740][T13872] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3615: corrupted xattr block 33: invalid ea_ino [ 352.596832][ T29] audit: type=1400 audit(2000000438.520:798): avc: denied { read write } for pid=13867 comm="syz.3.3615" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 352.596932][T13872] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 352.597049][ T29] audit: type=1400 audit(2000000438.520:799): avc: denied { open } for pid=13867 comm="syz.3.3615" path="/105/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 352.727509][ T3379] tipc: Node number set to 1633005917 [ 353.697559][T13883] loop2: detected capacity change from 0 to 512 [ 353.701199][T13883] ext4: Unknown parameter 'obj_user' [ 353.796160][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3623'. [ 353.900692][T13891] syzkaller1: entered promiscuous mode [ 353.900714][T13891] syzkaller1: entered allmulticast mode [ 355.231515][T13916] netlink: 'syz.0.3631': attribute type 4 has an invalid length. [ 355.231562][T13916] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3631'. [ 355.768892][T12024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.081096][T13937] macvtap1: entered promiscuous mode [ 356.082463][T13937] macvtap1: entered allmulticast mode [ 356.082479][T13937] veth1_vlan: entered allmulticast mode [ 356.972008][T13946] loop3: detected capacity change from 0 to 512 [ 356.975120][T13946] ext4: Unknown parameter 'obj_user' [ 357.045329][T13949] bridge_slave_0: left allmulticast mode [ 357.045381][T13949] bridge_slave_0: left promiscuous mode [ 357.046749][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.092272][T13951] loop1: detected capacity change from 0 to 512 [ 357.095768][T13949] bridge_slave_1: left allmulticast mode [ 357.095791][T13949] bridge_slave_1: left promiscuous mode [ 357.095993][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.135503][T13949] bond0: (slave bond_slave_0): Releasing backup interface [ 357.138195][T13951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.138276][T13951] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.182166][T13949] bond0: (slave bond_slave_1): Releasing backup interface [ 357.204752][T13949] team0: Port device team_slave_0 removed [ 357.225235][T13956] loop3: detected capacity change from 0 to 128 [ 357.226412][T13949] team0: Port device team_slave_1 removed [ 357.260976][T13949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.261009][T13949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.264919][T13949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.264966][T13949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.297286][ T29] audit: type=1400 audit(2000000443.230:800): avc: denied { write } for pid=13950 comm="syz.1.3649" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.305519][T13951] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.3649: corrupted xattr block 33: invalid ea_ino [ 357.306189][T13951] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 357.306231][T13951] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.3649: corrupted xattr block 33: invalid ea_ino [ 357.306353][ T29] audit: type=1400 audit(2000000443.230:801): avc: denied { write } for pid=13950 comm="syz.1.3649" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.306887][T13951] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 357.306976][T13951] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.3649: corrupted xattr block 33: invalid ea_ino [ 357.307251][T13951] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 357.427137][T13949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.430513][T11689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.639581][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3655'. [ 357.736161][T13973] netlink: 'syz.3.3650': attribute type 4 has an invalid length. [ 357.736214][T13973] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3650'. [ 358.177255][T13963] team0: Port device xfrm0 removed [ 358.179062][T13963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.215880][ T1904] tipc: Resetting bearer [ 358.282155][T13974] tipc: Enabling of bearer rejected, already enabled [ 358.355792][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3656'. [ 358.698880][T14001] geneve1: entered promiscuous mode [ 358.699797][T14001] batadv_slave_0: entered promiscuous mode [ 358.699881][T14001] batadv_slave_0: left promiscuous mode [ 358.727396][T14001] geneve1: left promiscuous mode [ 358.816483][T14003] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.852326][T14011] bridge_slave_0: left allmulticast mode [ 358.852367][T14011] bridge_slave_0: left promiscuous mode [ 358.852543][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.879559][T14011] bridge_slave_1: left allmulticast mode [ 358.879608][T14011] bridge_slave_1: left promiscuous mode [ 358.879753][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.922381][T14011] bond0: (slave bond_slave_0): Releasing backup interface [ 358.959411][T14011] bond0: (slave bond_slave_1): Releasing backup interface [ 359.312444][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'. [ 359.317200][T14011] team0: Port device team_slave_0 removed [ 359.335568][T14011] team0: Port device team_slave_1 removed [ 359.337710][T14011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.337732][T14011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.356837][T14011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.356898][T14011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.368810][T14011] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.392663][T14020] loop2: detected capacity change from 0 to 512 [ 359.409447][T14012] team0: Port device xfrm0 added [ 359.409647][T14017] tipc: Started in network mode [ 359.409816][T14017] tipc: Node identity 8653196ec607, cluster identity 4711 [ 359.409862][T14017] tipc: Enabled bearer , priority 0 [ 359.433271][T14020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.433594][T14020] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.556184][T14029] syzkaller0: entered promiscuous mode [ 359.556204][T14029] syzkaller0: entered allmulticast mode [ 359.650280][ T29] audit: type=1400 audit(2000000445.580:802): avc: denied { write } for pid=14019 comm="syz.2.3675" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.671745][ T29] audit: type=1400 audit(2000000445.600:803): avc: denied { write } for pid=14019 comm="syz.2.3675" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.671903][T14020] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3675: corrupted xattr block 33: invalid ea_ino [ 359.672271][T14020] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 359.672323][T14020] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3675: corrupted xattr block 33: invalid ea_ino [ 359.672587][T14020] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 359.672691][T14020] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3675: corrupted xattr block 33: invalid ea_ino [ 359.673214][T14020] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 360.164236][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.211655][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3683'. [ 360.674202][T14051] team0: Port device xfrm0 removed [ 360.676844][T14051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.688253][ T37] tipc: Node number set to 1079253358 [ 360.692981][ T79] tipc: Resetting bearer [ 360.738765][T14056] team0: Port device xfrm0 added [ 360.742601][T14057] tipc: Enabling of bearer rejected, already enabled [ 360.970581][T14063] loop3: detected capacity change from 0 to 512 [ 360.989698][T14063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.990715][T14063] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.167338][T14072] syzkaller1: entered promiscuous mode [ 361.167444][T14072] syzkaller1: entered allmulticast mode [ 361.179389][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 361.190248][ T29] audit: type=1400 audit(2000000447.130:804): avc: denied { write } for pid=14061 comm="syz.3.3692" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.221463][ T29] audit: type=1400 audit(2000000447.160:805): avc: denied { write } for pid=14061 comm="syz.3.3692" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.221549][T14068] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3692: corrupted xattr block 33: invalid ea_ino [ 361.222739][T14068] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 361.222840][T14068] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3692: corrupted xattr block 33: invalid ea_ino [ 361.223281][T14068] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 361.223357][T14068] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3692: corrupted xattr block 33: invalid ea_ino [ 361.223886][T14068] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 361.312971][T14079] netlink: 'syz.2.3698': attribute type 1 has an invalid length. [ 361.323232][ T29] audit: type=1400 audit(2000000447.260:806): avc: denied { create } for pid=14077 comm="syz.0.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 361.336070][T14079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.359946][T14082] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 361.372044][T14079] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 361.390021][T13954] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 361.629827][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'. [ 362.121321][T12024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.156969][T14109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3706'. [ 362.158373][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 362.863150][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3718'. [ 362.865123][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3719'. [ 362.870522][T14141] loop2: detected capacity change from 0 to 512 [ 362.874524][T14141] ext4: Unknown parameter 'obj_user' [ 362.998053][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'. [ 363.132133][T14171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3732'. [ 363.309608][T14186] loop3: detected capacity change from 0 to 512 [ 363.311888][T14186] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.3738: inode #2147418112: comm syz.3.3738: iget: illegal inode # [ 363.312044][T14186] loop3: lost filesystem error report for type 5 error -117 [ 363.312299][T14186] EXT4-fs (loop3): no journal found [ 363.312326][T14186] EXT4-fs (loop3): can't get journal size [ 363.314041][T14186] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 363.327405][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 363.327475][ C0] EXT4-fs (loop3): initial error at time 2000000449: ext4_get_journal_inode:5928 [ 363.327567][ C0] EXT4-fs (loop3): last error at time 2000000449: ext4_get_journal_inode:5928 [ 363.366171][T14186] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 363.367262][T14186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.632011][T14186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.717823][T14214] sctp: [Deprecated]: syz.0.3747 (pid 14214) Use of int in max_burst socket option deprecated. [ 363.717823][T14214] Use struct sctp_assoc_value instead [ 364.228426][ T29] audit: type=1400 audit(2000000450.160:807): avc: denied { listen } for pid=14234 comm="syz.4.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.228747][ T29] audit: type=1400 audit(2000000450.160:808): avc: denied { accept } for pid=14234 comm="syz.4.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 364.231363][T14228] team0: Port device xfrm0 removed [ 364.233108][T14228] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.234862][T14231] team0: Port device xfrm0 added [ 364.269705][T14235] tipc: Enabling of bearer rejected, already enabled [ 364.324911][T14232] syzkaller0: entered promiscuous mode [ 364.324939][T14232] syzkaller0: entered allmulticast mode [ 364.687596][T14280] syzkaller0: entered promiscuous mode [ 364.687616][T14280] syzkaller0: entered allmulticast mode [ 365.350710][T14299] loop2: detected capacity change from 0 to 512 [ 365.354134][T14299] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3783: inode #2147418112: comm syz.2.3783: iget: illegal inode # [ 365.354216][T14299] loop2: lost filesystem error report for type 5 error -117 [ 365.360640][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 365.360661][ C1] EXT4-fs (loop2): initial error at time 2000000451: ext4_get_journal_inode:5928 [ 365.360683][ C1] EXT4-fs (loop2): last error at time 2000000451: ext4_get_journal_inode:5928 [ 365.374777][T14299] EXT4-fs (loop2): no journal found [ 365.374802][T14299] EXT4-fs (loop2): can't get journal size [ 365.420438][T14299] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 365.449497][T14299] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 365.449963][T14299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.503894][T14299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.566019][T14310] tipc: Resetting bearer [ 365.606336][T14310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 365.616134][T14315] team0: Port device xfrm0 added [ 365.633437][T14317] loop5: detected capacity change from 0 to 7 [ 365.643708][T14310] tipc: Enabling of bearer rejected, already enabled [ 365.751954][T14328] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3793'. [ 365.811143][T14328] loop2: detected capacity change from 0 to 512 [ 365.814646][T14328] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3793: inode #2147418112: comm syz.2.3793: iget: illegal inode # [ 365.814696][T14328] loop2: lost filesystem error report for type 5 error -117 [ 365.814860][T14328] EXT4-fs (loop2): no journal found [ 365.814886][T14328] EXT4-fs (loop2): can't get journal size [ 365.816824][T14328] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 365.817148][T14328] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 365.826095][T14328] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.912981][T14327] syzkaller0: entered promiscuous mode [ 365.913024][T14327] syzkaller0: entered allmulticast mode [ 366.212120][T14328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.325736][T14352] loop5: detected capacity change from 0 to 7 [ 366.641461][T14366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'. [ 366.864603][T14389] loop2: detected capacity change from 0 to 128 [ 366.873804][T14386] loop5: detected capacity change from 0 to 7 [ 367.111018][T14402] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3820'. [ 367.240111][T14402] loop4: detected capacity change from 0 to 512 [ 367.262131][T14402] EXT4-fs error (device loop4): ext4_get_journal_inode:5928: comm syz.4.3820: inode #2147418112: comm syz.4.3820: iget: illegal inode # [ 367.262196][T14402] loop4: lost filesystem error report for type 5 error -117 [ 367.264066][T14402] EXT4-fs (loop4): no journal found [ 367.264080][T14402] EXT4-fs (loop4): can't get journal size [ 367.267384][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 367.267400][ C1] EXT4-fs (loop4): initial error at time 2000000453: ext4_get_journal_inode:5928 [ 367.267422][ C1] EXT4-fs (loop4): last error at time 2000000453: ext4_get_journal_inode:5928 [ 367.272072][T14402] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 367.273269][T14402] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 367.275316][T14402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.689030][T14402] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.916066][T14425] team0: Port device bridge_slave_0 removed [ 367.933799][T14425] bridge_slave_1: left allmulticast mode [ 367.933858][T14425] bridge_slave_1: left promiscuous mode [ 367.934047][T14425] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.966122][T14425] bond0: (slave bond_slave_0): Releasing backup interface [ 367.975056][T14425] bond0: (slave bond_slave_1): Releasing backup interface [ 368.331369][T14425] team0: Port device team_slave_0 removed [ 368.343645][T14425] team0: Port device team_slave_1 removed [ 368.345581][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.345597][T14425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.378167][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.378191][T14425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.405324][T14425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 368.442936][T14430] team0: Port device xfrm0 added [ 368.444223][T14435] tipc: Started in network mode [ 368.444261][T14435] tipc: Node identity 6667d5285689, cluster identity 4711 [ 368.444390][T14435] tipc: Enabled bearer , priority 0 [ 368.568460][T14446] syzkaller0: entered promiscuous mode [ 368.568486][T14446] syzkaller0: entered allmulticast mode [ 368.615525][T14448] loop4: detected capacity change from 0 to 512 [ 368.616752][T14448] EXT4-fs error (device loop4): ext4_get_journal_inode:5928: comm syz.4.3836: inode #2147418112: comm syz.4.3836: iget: illegal inode # [ 368.616804][T14448] loop4: lost filesystem error report for type 5 error -117 [ 368.617378][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 368.617522][ C1] EXT4-fs (loop4): initial error at time 2000000454: ext4_get_journal_inode:5928 [ 368.617549][ C1] EXT4-fs (loop4): last error at time 2000000454: ext4_get_journal_inode:5928 [ 368.619330][T14448] EXT4-fs (loop4): no journal found [ 368.619382][T14448] EXT4-fs (loop4): can't get journal size [ 368.622102][T14448] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 368.622577][T14448] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 368.623637][T14448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.664336][T14448] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.839031][ T29] audit: type=1400 audit(2000000454.770:809): avc: denied { write } for pid=14463 comm="syz.0.3842" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 369.284300][T14485] syzkaller0: entered promiscuous mode [ 369.284329][T14485] syzkaller0: entered allmulticast mode [ 369.703851][ T24] tipc: Node number set to 820958504 [ 370.037804][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3858'. [ 370.201374][T14525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3861'. [ 370.294670][T14525] loop2: detected capacity change from 0 to 512 [ 370.301543][T14525] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3861: inode #2147418112: comm syz.2.3861: iget: illegal inode # [ 370.301614][T14525] loop2: lost filesystem error report for type 5 error -117 [ 370.302146][T14525] EXT4-fs (loop2): no journal found [ 370.302185][T14525] EXT4-fs (loop2): can't get journal size [ 370.311838][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 370.311884][ C1] EXT4-fs (loop2): initial error at time 2000000456: ext4_get_journal_inode:5928 [ 370.311914][ C1] EXT4-fs (loop2): last error at time 2000000456: ext4_get_journal_inode:5928 [ 370.374283][T14525] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 370.393656][T14525] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 370.394686][T14525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.572973][T14527] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 370.646602][T14525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.699242][T14536] team0: Port device xfrm0 removed [ 370.702637][T14536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.702824][T14542] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 370.766264][T14541] team0: Port device xfrm0 removed [ 370.769261][T14541] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.771717][ T4419] tipc: Resetting bearer [ 370.773641][ T4419] tipc: Resetting bearer [ 370.779690][T14544] team0: Port device xfrm0 added [ 370.790480][T14536] team0: Port device xfrm0 added [ 370.793814][T14536] tipc: Enabling of bearer rejected, already enabled [ 370.822670][T14541] tipc: Enabling of bearer rejected, already enabled [ 370.845204][T14547] loop2: detected capacity change from 0 to 512 [ 370.852805][T14547] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3870: inode #2147418112: comm syz.2.3870: iget: illegal inode # [ 370.852909][T14547] loop2: lost filesystem error report for type 5 error -117 [ 370.853070][T14547] EXT4-fs (loop2): no journal found [ 370.853089][T14547] EXT4-fs (loop2): can't get journal size [ 370.855135][T14547] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 370.855571][T14547] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 370.856031][T14547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.920154][T14552] netlink: 35 bytes leftover after parsing attributes in process `syz.4.3872'. [ 370.920442][T14547] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.956591][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3873'. [ 371.071333][T14572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.153185][T14572] team0: Port device xfrm0 added [ 371.179000][T14572] tipc: Started in network mode [ 371.179106][T14572] tipc: Node identity 5efe5fca4d98, cluster identity 4711 [ 371.179460][T14572] tipc: Enabled bearer , priority 0 [ 371.352764][T14583] bridge_slave_0: left allmulticast mode [ 371.353014][T14583] bridge_slave_0: left promiscuous mode [ 371.353656][T14583] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.381611][T14583] bridge_slave_1: left allmulticast mode [ 371.382073][T14583] bridge_slave_1: left promiscuous mode [ 371.382180][T14583] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.418399][T14583] bond0: (slave bond_slave_0): Releasing backup interface [ 371.448201][T14583] bond0: (slave bond_slave_1): Releasing backup interface [ 371.603203][T14591] loop2: detected capacity change from 0 to 512 [ 371.605850][T14591] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3884: inode #2147418112: comm syz.2.3884: iget: illegal inode # [ 371.605882][T14591] loop2: lost filesystem error report for type 5 error -117 [ 371.606014][T14591] EXT4-fs (loop2): no journal found [ 371.606028][T14591] EXT4-fs (loop2): can't get journal size [ 371.607370][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 371.607403][ C0] EXT4-fs (loop2): initial error at time 2000000457: ext4_get_journal_inode:5928 [ 371.607512][ C0] EXT4-fs (loop2): last error at time 2000000457: ext4_get_journal_inode:5928 [ 371.607644][T14591] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 371.630131][T14591] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 371.631017][T14591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.791999][T14583] team0: Port device team_slave_0 removed [ 371.816675][T14583] team0: Port device team_slave_1 removed [ 371.824541][T14583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.824612][T14583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.830301][T14583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.830368][T14583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.858651][T14583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.863414][T14584] team0: Port device xfrm0 added [ 371.889469][T14587] tipc: Started in network mode [ 371.889655][T14587] tipc: Node identity ea4f00df4fb5, cluster identity 4711 [ 371.889779][T14587] tipc: Enabled bearer , priority 0 [ 371.932959][T14597] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3886'. [ 371.949009][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.971463][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3887'. [ 372.064468][T14605] bridge0: port 1(ip6gretap0) entered blocking state [ 372.064500][T14605] bridge0: port 1(ip6gretap0) entered disabled state [ 372.064669][T14605] ip6gretap0: entered allmulticast mode [ 372.065330][T14605] ip6gretap0: entered promiscuous mode [ 372.065617][T14605] bridge0: port 1(ip6gretap0) entered blocking state [ 372.065690][T14605] bridge0: port 1(ip6gretap0) entered forwarding state [ 372.083744][T14605] bridge0: port 2(bond0) entered blocking state [ 372.083849][T14605] bridge0: port 2(bond0) entered disabled state [ 372.084130][T14605] bond0: entered allmulticast mode [ 372.093859][T14605] bond0: entered promiscuous mode [ 372.110883][T14605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44456 sclass=netlink_route_socket pid=14605 comm=syz.1.3890 [ 372.183180][T14605] futex_wake_op: syz.1.3890 tries to shift op by 144; fix this program [ 372.297620][ T24] tipc: Node number set to 325476298 [ 372.334520][T14650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3903'. [ 372.352603][T14653] loop3: detected capacity change from 0 to 512 [ 372.379714][T14653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.379833][T14653] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.556040][ T29] audit: type=1400 audit(2000000458.480:810): avc: denied { write } for pid=14651 comm="syz.3.3905" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.557034][ T29] audit: type=1400 audit(2000000458.480:811): avc: denied { write } for pid=14651 comm="syz.3.3905" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.557104][T14663] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3905: corrupted xattr block 33: invalid ea_ino [ 372.557304][T14663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 372.557443][T14663] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3905: corrupted xattr block 33: invalid ea_ino [ 372.557882][T14663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 372.558016][T14663] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.3905: corrupted xattr block 33: invalid ea_ino [ 372.558413][T14663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 372.680876][T14669] loop2: detected capacity change from 0 to 512 [ 372.681202][T14669] ext4: Unknown parameter 'obj_user' [ 373.007435][ T11] tipc: Node number set to 2784624863 [ 373.093247][T14711] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3925'. [ 373.116910][T14711] loop2: detected capacity change from 0 to 512 [ 373.181966][T14711] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.3925: inode #2147418112: comm syz.2.3925: iget: illegal inode # [ 373.182008][T14711] loop2: lost filesystem error report for type 5 error -117 [ 373.185936][T14711] EXT4-fs (loop2): no journal found [ 373.185972][T14711] EXT4-fs (loop2): can't get journal size [ 373.187372][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 373.187392][ C1] EXT4-fs (loop2): initial error at time 2000000459: ext4_get_journal_inode:5928 [ 373.187427][ C1] EXT4-fs (loop2): last error at time 2000000459: ext4_get_journal_inode:5928 [ 373.189104][T14711] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 373.192417][T14711] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 373.192945][T14711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.279992][T14725] netlink: 'syz.0.3930': attribute type 3 has an invalid length. [ 373.295231][T12024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.343907][T14711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.383265][T14734] syzkaller0: entered promiscuous mode [ 373.383291][T14734] syzkaller0: entered allmulticast mode [ 373.603585][T14757] loop2: detected capacity change from 0 to 512 [ 373.621090][T14757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.621189][T14757] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.820682][T14762] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3939: corrupted xattr block 33: invalid ea_ino [ 373.820881][T14762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 373.821008][T14762] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3939: corrupted xattr block 33: invalid ea_ino [ 373.821211][T14762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 373.821237][T14762] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.3939: corrupted xattr block 33: invalid ea_ino [ 373.821376][T14762] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 373.822533][ T29] audit: type=1400 audit(2000000459.750:812): avc: denied { write } for pid=14756 comm="syz.2.3939" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.822689][ T29] audit: type=1400 audit(2000000459.750:813): avc: denied { write } for pid=14756 comm="syz.2.3939" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.538669][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.550698][T14766] team0: Port device xfrm0 removed [ 374.554306][T14766] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 374.584514][T14771] team0: Port device xfrm0 added [ 374.584699][T14772] tipc: Enabling of bearer rejected, already enabled [ 374.938715][T14813] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3954'. [ 375.039689][T14813] loop3: detected capacity change from 0 to 512 [ 375.043359][T14813] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.3954: inode #2147418112: comm syz.3.3954: iget: illegal inode # [ 375.043444][T14813] loop3: lost filesystem error report for type 5 error -117 [ 375.043533][T14813] EXT4-fs (loop3): no journal found [ 375.043551][T14813] EXT4-fs (loop3): can't get journal size [ 375.047381][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 375.047399][ C0] EXT4-fs (loop3): initial error at time 2000000460: ext4_get_journal_inode:5928 [ 375.047432][ C0] EXT4-fs (loop3): last error at time 2000000460: ext4_get_journal_inode:5928 [ 375.180587][T14813] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 375.180942][T14813] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 375.181351][T14813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.194462][T14812] loop4: detected capacity change from 0 to 512 [ 375.196793][T14812] ext4: Unknown parameter 'obj_user' [ 375.671018][T14813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.559878][T14849] loop4: detected capacity change from 0 to 128 [ 376.799745][T14858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3970'. [ 376.857549][T14858] loop1: detected capacity change from 0 to 512 [ 376.866941][T14858] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.3970: inode #2147418112: comm syz.1.3970: iget: illegal inode # [ 376.866971][T14858] loop1: lost filesystem error report for type 5 error -117 [ 376.867323][T14858] EXT4-fs (loop1): no journal found [ 376.867367][T14858] EXT4-fs (loop1): can't get journal size [ 376.877360][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 376.877379][ C0] EXT4-fs (loop1): initial error at time 2000000462: ext4_get_journal_inode:5928 [ 376.877403][ C0] EXT4-fs (loop1): last error at time 2000000462: ext4_get_journal_inode:5928 [ 376.965716][T14858] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 376.977472][T14858] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 376.978015][T14858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.639413][T14858] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.833212][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'. [ 377.977793][T14894] loop4: detected capacity change from 0 to 512 [ 377.987858][T14894] ext4: Unknown parameter 'obj_user' [ 378.090625][T14900] loop5: detected capacity change from 0 to 7 [ 378.247231][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3993'. [ 378.503526][T14929] loop4: detected capacity change from 0 to 512 [ 378.504852][T14929] ext4: Unknown parameter 'obj_user' [ 378.566933][T14930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3978'. [ 379.236821][T14975] ip6gretap0: left allmulticast mode [ 379.236915][T14975] ip6gretap0: left promiscuous mode [ 379.237146][T14975] bridge0: port 1(ip6gretap0) entered disabled state [ 379.285499][T14975] bond0: left allmulticast mode [ 379.285571][T14975] bond0: left promiscuous mode [ 379.285765][T14975] bridge0: port 2(bond0) entered disabled state [ 379.337525][T14975] team0: Port device xfrm0 removed [ 379.342081][T14975] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 379.348783][T14979] team0: Port device xfrm0 added [ 379.400163][T14975] tipc: Enabling of bearer rejected, already enabled [ 379.686085][T14989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4014'. [ 380.893474][T15012] loop1: detected capacity change from 0 to 512 [ 380.897995][T15012] ext4: Unknown parameter 'obj_user' [ 381.051818][T15026] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4039'. [ 381.155643][T15032] team0: Port device xfrm0 removed [ 381.166528][T15032] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.168243][ T79] tipc: Resetting bearer [ 381.221687][T15032] team0: Port device xfrm0 added [ 381.226123][T15032] tipc: Enabling of bearer rejected, already enabled [ 381.246199][T15040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4044'. [ 381.286256][T15040] loop3: detected capacity change from 0 to 512 [ 381.296069][T15040] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.4044: inode #2147418112: comm syz.3.4044: iget: illegal inode # [ 381.296169][T15040] loop3: lost filesystem error report for type 5 error -117 [ 381.296327][T15040] EXT4-fs (loop3): no journal found [ 381.296399][T15040] EXT4-fs (loop3): can't get journal size [ 381.297471][T15040] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 381.297806][T15040] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 381.300320][T15040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.613224][T15040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.652348][T15060] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4053'. [ 381.931431][T15071] team0: Port device xfrm0 removed [ 381.951749][T15071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 381.978991][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4057'. [ 382.021798][T15073] team0: Port device xfrm0 added [ 382.271681][T15071] tipc: Enabling of bearer rejected, already enabled [ 382.339214][T15076] team0: Port device xfrm0 removed [ 382.341673][T15076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 382.346932][T15080] team0: Port device xfrm0 added [ 382.378700][ T79] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 382.378741][ T79] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 382.378817][ T79] bond1: active interface up! [ 382.385066][T15076] tipc: Enabling of bearer rejected, already enabled [ 382.424891][T15095] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4065'. [ 382.525029][T15105] loop4: detected capacity change from 0 to 512 [ 382.528357][T15105] EXT4-fs (loop4): Invalid log cluster size: 131073 [ 382.843205][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4073'. [ 383.268633][T15135] team0: Port device xfrm0 removed [ 383.271780][T15135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.273718][ T79] tipc: Resetting bearer [ 383.316137][T15135] team0: Port device xfrm0 added [ 383.327138][T15135] tipc: Enabling of bearer rejected, already enabled [ 383.446480][T15153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4083'. [ 383.533236][T15162] syzkaller0: entered promiscuous mode [ 383.533256][T15162] syzkaller0: entered allmulticast mode [ 383.742580][T15171] loop2: detected capacity change from 0 to 512 [ 383.746285][T15171] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.4088: inode #2147418112: comm syz.2.4088: iget: illegal inode # [ 383.746383][T15171] loop2: lost filesystem error report for type 5 error -117 [ 383.746571][T15171] EXT4-fs (loop2): no journal found [ 383.746599][T15171] EXT4-fs (loop2): can't get journal size [ 383.757400][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 383.757462][ C0] EXT4-fs (loop2): initial error at time 2000000469: ext4_get_journal_inode:5928 [ 383.757537][ C0] EXT4-fs (loop2): last error at time 2000000469: ext4_get_journal_inode:5928 [ 383.786589][T15171] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 383.812059][T15171] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 383.813229][T15171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.973123][T15177] team0: Port device xfrm0 removed [ 383.987493][T15177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.990803][ T38] tipc: Resetting bearer [ 384.008888][T15177] team0: Port device xfrm0 added [ 384.014995][T15177] tipc: Enabling of bearer rejected, already enabled [ 384.168951][T15173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 384.472133][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.773316][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4097'. [ 384.821149][T15204] bridge0: port 1(ip6gretap0) entered blocking state [ 384.821191][T15204] bridge0: port 1(ip6gretap0) entered disabled state [ 384.821302][T15204] ip6gretap0: entered allmulticast mode [ 384.821826][T15204] ip6gretap0: entered promiscuous mode [ 384.822151][T15204] bridge0: port 1(ip6gretap0) entered blocking state [ 384.822189][T15204] bridge0: port 1(ip6gretap0) entered forwarding state [ 384.844697][T15204] bridge0: port 2(bond0) entered blocking state [ 384.844903][T15204] bridge0: port 2(bond0) entered disabled state [ 384.845231][T15204] bond0: entered allmulticast mode [ 384.882986][T15204] bond0: entered promiscuous mode [ 384.893872][T15204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44456 sclass=netlink_route_socket pid=15204 comm=syz.4.4099 [ 385.317041][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4108'. [ 385.411620][T15239] loop4: detected capacity change from 0 to 512 [ 385.415658][T15239] EXT4-fs (loop4): Invalid log cluster size: 131073 [ 386.036692][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4120'. [ 386.048928][T15249] team0: Port device xfrm0 removed [ 386.064245][T15249] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.086886][T15250] team0: Port device xfrm0 added [ 386.092281][T15255] tipc: Enabling of bearer rejected, already enabled [ 386.192372][T15266] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4121'. [ 386.271044][T15266] loop2: detected capacity change from 0 to 512 [ 386.300775][T15266] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.4121: inode #2147418112: comm syz.2.4121: iget: illegal inode # [ 386.300807][T15266] loop2: lost filesystem error report for type 5 error -117 [ 386.300984][T15266] EXT4-fs (loop2): no journal found [ 386.301038][T15266] EXT4-fs (loop2): can't get journal size [ 386.303496][T15266] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 386.304630][T15266] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 386.305679][T15266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.536145][T15266] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.621612][T15280] loop5: detected capacity change from 0 to 7 [ 386.845180][T15283] syzkaller0: entered promiscuous mode [ 386.845234][T15283] syzkaller0: entered allmulticast mode [ 387.005583][T15297] loop4: detected capacity change from 0 to 512 [ 387.015016][T15297] ext4: Unknown parameter 'obj_user' [ 387.085470][T15295] team0: Port device xfrm0 removed [ 387.096249][T15295] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.116308][T15298] team0: Port device xfrm0 added [ 387.119226][T15300] tipc: Enabling of bearer rejected, already enabled [ 387.230541][T15306] 0: reclassify loop, rule prio 0, protocol 03 [ 387.335089][T15312] loop2: detected capacity change from 0 to 128 [ 387.400564][T15310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4138'. [ 387.665231][T15320] netlink: 'syz.2.4139': attribute type 4 has an invalid length. [ 387.665277][T15320] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4139'. [ 388.243837][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4145'. [ 388.571305][T15330] team0: Port device xfrm0 removed [ 388.621955][T15330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.644994][T15331] team0: Port device xfrm0 added [ 388.649102][T15332] tipc: Enabling of bearer rejected, already enabled [ 389.514586][T15340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4150'. [ 389.609587][T15350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4154'. [ 389.686183][T15359] raw_sendmsg: syz.2.4157 forgot to set AF_INET. Fix it! [ 390.848454][T15380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4165'. [ 390.920932][ T29] audit: type=1400 audit(2000000476.850:814): avc: denied { ioctl } for pid=15382 comm="syz.2.4167" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=47299 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.924874][T15386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.925058][T15386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.226916][T15403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.241763][T15403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.278928][T15406] loop1: detected capacity change from 0 to 512 [ 391.279301][T15406] ext4: Unknown parameter 'obj_user' [ 392.136010][T15417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4178'. [ 392.482082][T15423] batman_adv: batadv0: Adding interface: syzkaller0 [ 392.482103][T15423] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.482318][T15423] batman_adv: batadv0: Interface activated: syzkaller0 [ 392.486073][T15423] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 392.497522][T15423] batman_adv: batadv0: Removing interface: syzkaller0 [ 392.661485][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4181'. [ 392.741730][T15434] loop3: detected capacity change from 0 to 512 [ 392.743545][T15434] ext4: Unknown parameter 'obj_user' [ 393.007047][T15443] loop1: detected capacity change from 0 to 512 [ 393.101651][T15443] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.4186: inode #2147418112: comm syz.1.4186: iget: illegal inode # [ 393.101742][T15443] loop1: lost filesystem error report for type 5 error -117 [ 393.102077][T15443] EXT4-fs (loop1): no journal found [ 393.102091][T15443] EXT4-fs (loop1): can't get journal size [ 393.107366][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 393.107387][ C1] EXT4-fs (loop1): initial error at time 2000000479: ext4_get_journal_inode:5928 [ 393.107418][ C1] EXT4-fs (loop1): last error at time 2000000479: ext4_get_journal_inode:5928 [ 393.146020][T15443] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 393.164354][T15443] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 393.165254][T15443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.286724][T11689] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.552352][T15487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4198'. [ 394.597937][T15487] loop4: detected capacity change from 0 to 512 [ 394.600651][T15487] EXT4-fs error (device loop4): ext4_get_journal_inode:5928: comm syz.4.4198: inode #2147418112: comm syz.4.4198: iget: illegal inode # [ 394.600699][T15487] loop4: lost filesystem error report for type 5 error -117 [ 394.601093][T15487] EXT4-fs (loop4): no journal found [ 394.601119][T15487] EXT4-fs (loop4): can't get journal size [ 394.605393][T15487] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 394.606916][T15487] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 394.608011][T15487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.671551][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 394.922468][T15487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.000567][T15502] loop3: detected capacity change from 0 to 4096 [ 395.001051][T15502] EXT4-fs: Ignoring removed orlov option [ 395.027046][T15502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.045114][ T29] audit: type=1400 audit(2000000480.980:815): avc: denied { write } for pid=15501 comm="syz.3.4206" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.061627][T15500] team0: Port device xfrm0 removed [ 395.081629][T15500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.088785][ T4418] tipc: Resetting bearer [ 395.114467][T15500] tipc: Enabling of bearer rejected, already enabled [ 395.347449][ T29] audit: type=1400 audit(2000000481.260:816): avc: denied { write } for pid=15501 comm="syz.3.4206" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 395.347491][ T29] audit: type=1400 audit(2000000481.260:817): avc: denied { create } for pid=15501 comm="syz.3.4206" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 395.566814][T15521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.577067][T15521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.865839][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4217'. [ 395.896770][T15533] ip6gretap0: left allmulticast mode [ 395.896794][T15533] ip6gretap0: left promiscuous mode [ 395.896986][T15533] bridge0: port 1(ip6gretap0) entered disabled state [ 395.919786][T12024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.933785][T15533] bond0: left allmulticast mode [ 395.933897][T15533] bond0: left promiscuous mode [ 395.934506][T15533] bridge0: port 2(bond0) entered disabled state [ 395.993828][T15533] team0: Port device xfrm0 removed [ 395.995254][T15533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 396.036062][ T38] tipc: Resetting bearer [ 396.036322][T15533] tipc: Enabling of bearer rejected, already enabled [ 396.053612][T15541] batman_adv: batadv0: Adding interface: syzkaller0 [ 396.053634][T15541] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.053774][T15541] batman_adv: batadv0: Interface activated: syzkaller0 [ 396.103574][T15541] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 396.125709][T15541] batman_adv: batadv0: Removing interface: syzkaller0 [ 396.463060][T15566] loop4: detected capacity change from 0 to 512 [ 396.483481][T15566] EXT4-fs error (device loop4): ext4_get_journal_inode:5928: comm syz.4.4228: inode #2147418112: comm syz.4.4228: iget: illegal inode # [ 396.483551][T15566] loop4: lost filesystem error report for type 5 error -117 [ 396.483816][T15566] EXT4-fs (loop4): no journal found [ 396.483857][T15566] EXT4-fs (loop4): can't get journal size [ 396.485561][T15566] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 396.486238][T15566] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 396.488808][T15566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.252544][T12808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.428827][T15585] syzkaller0: entered promiscuous mode [ 397.428853][T15585] syzkaller0: entered allmulticast mode [ 398.499318][T15614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4247'. [ 398.667892][T15623] syzkaller0: entered promiscuous mode [ 398.667922][T15623] syzkaller0: entered allmulticast mode [ 398.831119][T15640] team0: Port device xfrm0 removed [ 398.835744][T15640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 398.836679][ T4419] tipc: Resetting bearer [ 398.922026][T15642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4260'. [ 398.970384][T15642] loop2: detected capacity change from 0 to 512 [ 398.974649][T15642] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.4260: inode #2147418112: comm syz.2.4260: iget: illegal inode # [ 398.974689][T15642] loop2: lost filesystem error report for type 5 error -117 [ 398.975944][T15642] EXT4-fs (loop2): no journal found [ 398.975962][T15642] EXT4-fs (loop2): can't get journal size [ 398.976648][T15642] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 398.977246][T15642] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 398.977383][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 398.977406][ C1] EXT4-fs (loop2): initial error at time 2000000484: ext4_get_journal_inode:5928 [ 398.977437][ C1] EXT4-fs (loop2): last error at time 2000000484: ext4_get_journal_inode:5928 [ 398.991670][T15640] tipc: Enabling of bearer rejected, already enabled [ 398.996598][T15642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.210505][T15653] syzkaller1: entered promiscuous mode [ 399.210527][T15653] syzkaller1: entered allmulticast mode [ 399.534586][T15642] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.711521][ T29] audit: type=1400 audit(2000000485.640:818): avc: denied { setopt } for pid=15668 comm="syz.2.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 399.715338][T15665] syzkaller0: entered promiscuous mode [ 399.715374][T15665] syzkaller0: entered allmulticast mode [ 399.726573][T15671] loop3: detected capacity change from 0 to 128 [ 399.926340][T15680] netlink: 464 bytes leftover after parsing attributes in process `syz.0.4274'. [ 399.952406][T15681] syzkaller1: entered promiscuous mode [ 399.952435][T15681] syzkaller1: entered allmulticast mode [ 400.086826][T15686] netlink: 'syz.3.4271': attribute type 4 has an invalid length. [ 400.086918][T15686] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4271'. [ 400.249363][T15687] loop4: detected capacity change from 0 to 512 [ 400.252149][T15687] ext4: Unknown parameter 'obj_user' [ 400.840772][T15706] netlink: 464 bytes leftover after parsing attributes in process `syz.0.4286'. [ 401.409950][T15731] netlink: 464 bytes leftover after parsing attributes in process `syz.4.4297'. [ 402.006385][ T29] audit: type=1400 audit(2000000487.620:819): avc: denied { bind } for pid=15738 comm="syz.3.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.006480][ T29] audit: type=1400 audit(2000000487.620:820): avc: denied { listen } for pid=15738 comm="syz.3.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.006504][ T29] audit: type=1400 audit(2000000487.640:821): avc: denied { getopt } for pid=15738 comm="syz.3.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.085778][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4304'. [ 402.160810][ T4435] tipc: Resetting bearer [ 402.162915][T15761] tipc: Enabling of bearer rejected, already enabled [ 402.197309][T15765] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4311'. [ 402.456634][T15782] loop4: detected capacity change from 0 to 128 [ 403.011522][T15786] netlink: 'syz.4.4317': attribute type 4 has an invalid length. [ 403.011658][T15786] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4317'. [ 403.443110][T15798] loop3: detected capacity change from 0 to 512 [ 403.457102][T15798] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.4320: inode #2147418112: comm syz.3.4320: iget: illegal inode # [ 403.457140][T15798] loop3: lost filesystem error report for type 5 error -117 [ 403.457359][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 403.457384][ C0] EXT4-fs (loop3): initial error at time 2000000489: ext4_get_journal_inode:5928 [ 403.457415][ C0] EXT4-fs (loop3): last error at time 2000000489: ext4_get_journal_inode:5928 [ 403.476699][T15798] EXT4-fs (loop3): no journal found [ 403.476733][T15798] EXT4-fs (loop3): can't get journal size [ 403.488431][T15798] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 403.494930][T15798] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 403.496267][T15798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.680783][T15804] team0: Port device xfrm0 added [ 403.701987][T15804] tipc: Enabling of bearer rejected, already enabled [ 403.800427][T15806] batman_adv: batadv0: Adding interface: syzkaller0 [ 403.800447][T15806] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.801162][T15806] batman_adv: batadv0: Interface activated: syzkaller0 [ 403.805520][T15806] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 403.864155][T15806] batman_adv: batadv0: Removing interface: syzkaller0 [ 404.419763][T15833] loop2: detected capacity change from 0 to 128 [ 404.523114][T12024] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.855319][T15847] netlink: 'syz.2.4333': attribute type 4 has an invalid length. [ 404.855341][T15847] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4333'. [ 405.111417][T15848] team0: Port device xfrm0 removed [ 405.131654][T15848] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.158627][ T79] tipc: Resetting bearer [ 405.292878][T15853] tipc: Resetting bearer [ 405.330455][T15853] team0: Port device xfrm0 removed [ 405.332881][T15853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.385423][T15856] team0: Port device xfrm0 added [ 405.634174][T15870] loop2: detected capacity change from 0 to 512 [ 405.648309][T15870] EXT4-fs error (device loop2): ext4_get_journal_inode:5928: comm syz.2.4342: inode #2147418112: comm syz.2.4342: iget: illegal inode # [ 405.648347][T15870] loop2: lost filesystem error report for type 5 error -117 [ 405.648470][T15870] EXT4-fs (loop2): no journal found [ 405.648498][T15870] EXT4-fs (loop2): can't get journal size [ 405.651006][T15870] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 405.665250][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 405.665296][ C0] EXT4-fs (loop2): initial error at time 2000000491: ext4_get_journal_inode:5928 [ 405.665361][ C0] EXT4-fs (loop2): last error at time 2000000491: ext4_get_journal_inode:5928 [ 405.679628][T15870] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 405.680291][T15870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.082965][T15896] tipc: Resetting bearer [ 406.103342][T15896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.130961][T15896] team0: Port device xfrm0 added [ 406.269225][T15800] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 406.334447][T12276] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.725113][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4367'. [ 406.725491][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4367'. [ 407.288557][T15979] tipc: Resetting bearer [ 407.310572][T15979] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.368810][T16033] loop1: detected capacity change from 0 to 512 [ 408.384754][T16033] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.4393: inode #2147418112: comm syz.1.4393: iget: illegal inode # [ 408.384825][T16033] loop1: lost filesystem error report for type 5 error -117 [ 408.385816][T16033] EXT4-fs (loop1): no journal found [ 408.385844][T16033] EXT4-fs (loop1): can't get journal size [ 408.387379][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 408.387398][ C0] EXT4-fs (loop1): initial error at time 2000000494: ext4_get_journal_inode:5928 [ 408.387436][ C0] EXT4-fs (loop1): last error at time 2000000494: ext4_get_journal_inode:5928 [ 408.402745][T16033] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 408.412513][T16033] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 408.425303][T16033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.745192][T16033] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.812353][T16059] bridge0: port 1(ip6gretap0) entered blocking state [ 408.812397][T16059] bridge0: port 1(ip6gretap0) entered disabled state [ 408.812590][T16059] ip6gretap0: entered allmulticast mode [ 408.813099][T16059] ip6gretap0: entered promiscuous mode [ 408.813316][T16059] bridge0: port 1(ip6gretap0) entered blocking state [ 408.813435][T16059] bridge0: port 1(ip6gretap0) entered forwarding state [ 408.826888][T16059] bridge0: port 2(bond0) entered blocking state [ 408.826990][T16059] bridge0: port 2(bond0) entered disabled state [ 408.827242][T16059] bond0: entered allmulticast mode [ 408.831015][T16059] bond0: entered promiscuous mode [ 408.839459][T16059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44456 sclass=netlink_route_socket pid=16059 comm=syz.0.4402 [ 408.908788][T16066] futex_wake_op: syz.0.4402 tries to shift op by 144; fix this program [ 409.971623][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4421'. [ 409.993853][T16113] ip6gretap0: left allmulticast mode [ 409.993882][T16113] ip6gretap0: left promiscuous mode [ 409.994007][T16113] bridge0: port 1(ip6gretap0) entered disabled state [ 409.997259][T16113] bond0: left allmulticast mode [ 409.997306][T16113] bond0: left promiscuous mode [ 409.998183][T16113] bridge0: port 2(bond0) entered disabled state [ 410.037762][T16113] tipc: Resetting bearer [ 410.059327][T16113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.060201][T16122] tipc: Enabling of bearer rejected, already enabled [ 410.241796][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4434'. [ 410.673708][T16163] team0: Port device xfrm0 removed [ 410.713115][T16163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 410.716535][T16166] tipc: Enabling of bearer rejected, already enabled [ 410.760004][ T1904] tipc: Resetting bearer [ 411.052895][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4446'. [ 411.186475][ T29] audit: type=1400 audit(2000000497.110:822): avc: denied { connect } for pid=16199 comm="syz.2.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.212258][ T29] audit: type=1400 audit(2000000497.150:823): avc: denied { read } for pid=16199 comm="syz.2.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.296956][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4460'. [ 411.437069][T16222] bridge0: port 1(ip6gretap0) entered blocking state [ 411.437108][T16222] bridge0: port 1(ip6gretap0) entered disabled state [ 411.437353][T16222] ip6gretap0: entered allmulticast mode [ 411.437974][T16222] ip6gretap0: entered promiscuous mode [ 411.438144][T16222] bridge0: port 1(ip6gretap0) entered blocking state [ 411.438288][T16222] bridge0: port 1(ip6gretap0) entered forwarding state [ 412.411982][T16222] bridge0: port 2(bond0) entered blocking state [ 412.412016][T16222] bridge0: port 2(bond0) entered disabled state [ 412.412437][T16222] bond0: entered allmulticast mode [ 412.443275][T16222] bond0: entered promiscuous mode [ 412.564399][T16222] futex_wake_op: syz.2.4463 tries to shift op by 144; fix this program [ 412.603456][T16236] syzkaller0: entered promiscuous mode [ 412.603478][T16236] syzkaller0: entered allmulticast mode [ 412.933353][T16247] tipc: Resetting bearer [ 412.935300][T16252] loop2: detected capacity change from 0 to 128 [ 412.964604][T16247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.009603][T16250] team0: Port device xfrm0 added [ 413.506923][T16260] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4476'. [ 413.583956][T16261] netlink: 'syz.2.4471': attribute type 4 has an invalid length. [ 413.583999][T16261] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4471'. [ 413.740561][T16263] xt_l2tp: missing protocol rule (udp|l2tpip) [ 413.995949][T16281] syzkaller0: entered promiscuous mode [ 413.995984][T16281] syzkaller0: entered allmulticast mode [ 414.304658][T16293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.304778][T16293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.443579][T16309] syzkaller0: entered promiscuous mode [ 414.443604][T16309] syzkaller0: entered allmulticast mode [ 414.559045][ T29] audit: type=1400 audit(2000000500.460:824): avc: denied { create } for pid=16296 comm="syz.0.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 414.559200][ T29] audit: type=1400 audit(2000000500.460:825): avc: denied { setopt } for pid=16296 comm="syz.0.4491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 415.056102][T16326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4502'. [ 415.162419][T16326] loop1: detected capacity change from 0 to 512 [ 415.169048][T16326] EXT4-fs error (device loop1): ext4_get_journal_inode:5928: comm syz.1.4502: inode #2147418112: comm syz.1.4502: iget: illegal inode # [ 415.169116][T16326] loop1: lost filesystem error report for type 5 error -117 [ 415.170730][T16326] EXT4-fs (loop1): no journal found [ 415.170748][T16326] EXT4-fs (loop1): can't get journal size [ 415.181726][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 415.181750][ C1] EXT4-fs (loop1): initial error at time 2000000501: ext4_get_journal_inode:5928 [ 415.181793][ C1] EXT4-fs (loop1): last error at time 2000000501: ext4_get_journal_inode:5928 [ 415.184990][T16326] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 415.186012][T16326] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 415.189330][T16326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.513802][T16326] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.590877][T16331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4504'. [ 415.900235][T16341] tipc: Resetting bearer [ 415.925598][T16341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 415.933833][T16346] tipc: Enabling of bearer rejected, already enabled [ 416.014718][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4515'. [ 416.014853][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 416.091840][T16361] loop3: detected capacity change from 0 to 128 [ 416.102991][T16359] FAULT_INJECTION: forcing a failure. [ 416.102991][T16359] name failslab, interval 1, probability 0, space 0, times 0 [ 416.103098][T16359] CPU: 0 UID: 0 PID: 16359 Comm: syz.0.4517 Not tainted syzkaller #0 PREEMPT(lazy) [ 416.103286][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.103320][T16359] Call Trace: [ 416.103330][T16359] [ 416.103341][T16359] __dump_stack+0x1d/0x30 [ 416.103376][T16359] dump_stack_lvl+0x95/0xd0 [ 416.103407][T16359] dump_stack+0x15/0x1b [ 416.103511][T16359] should_fail_ex+0x262/0x280 [ 416.103551][T16359] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 416.103585][T16359] should_failslab+0x8c/0xb0 [ 416.103628][T16359] __kmalloc_cache_noprof+0x7a/0x400 [ 416.103736][T16359] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 416.103767][T16359] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 416.103802][T16359] bpf_prog_alloc_no_stats+0xc4/0x390 [ 416.103834][T16359] bpf_prog_alloc+0x3c/0x150 [ 416.103983][T16359] bpf_prog_create_from_user+0x80/0x260 [ 416.104102][T16359] ? __pfx_seccomp_check_filter+0x10/0x10 [ 416.104225][T16359] do_seccomp+0x5ef/0xa40 [ 416.104262][T16359] ? restore_fpregs_from_fpstate+0x61/0x110 [ 416.104304][T16359] __x64_sys_seccomp+0x40/0x50 [ 416.104347][T16359] x64_sys_call+0x3f0/0x2550 [ 416.104374][T16359] do_syscall_64+0x112/0x360 [ 416.104430][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.104474][T16359] RIP: 0033:0x7ff5dff7e1d9 [ 416.104500][T16359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.104527][T16359] RSP: 002b:00007ff5de9d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 416.104635][T16359] RAX: ffffffffffffffda RBX: 00007ff5e0205fa0 RCX: 00007ff5dff7e1d9 [ 416.104655][T16359] RDX: 0000200000000080 RSI: 0000000000000008 RDI: 0000000000000001 [ 416.104675][T16359] RBP: 00007ff5e0015888 R08: 0000000000000000 R09: 0000000000000000 [ 416.104693][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.104708][T16359] R13: 00007ff5e0206038 R14: 00007ff5e0205fa0 R15: 00007ffc016c2848 [ 416.104741][T16359] [ 417.205172][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4528'. [ 417.205519][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4528'. [ 417.804051][T16427] syzkaller1: entered promiscuous mode [ 417.804072][T16427] syzkaller1: entered allmulticast mode [ 418.148990][T16433] team0: Port device xfrm0 removed [ 418.156954][T16433] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 418.157023][T16434] tipc: Enabling of bearer rejected, already enabled [ 418.369768][ T4438] tipc: Resetting bearer [ 418.554309][T16451] FAULT_INJECTION: forcing a failure. [ 418.554309][T16451] name failslab, interval 1, probability 0, space 0, times 0 [ 418.554387][T16451] CPU: 0 UID: 0 PID: 16451 Comm: syz.1.4553 Not tainted syzkaller #0 PREEMPT(lazy) [ 418.554421][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.554436][T16451] Call Trace: [ 418.554444][T16451] [ 418.554452][T16451] __dump_stack+0x1d/0x30 [ 418.554486][T16451] dump_stack_lvl+0x95/0xd0 [ 418.554515][T16451] dump_stack+0x15/0x1b [ 418.554537][T16451] should_fail_ex+0x262/0x280 [ 418.554566][T16451] ? security_prepare_creds+0x52/0x120 [ 418.554669][T16451] should_failslab+0x8c/0xb0 [ 418.554709][T16451] __kmalloc_noprof+0xd0/0x4d0 [ 418.554803][T16451] ? security_prepare_creds+0x52/0x120 [ 418.554830][T16451] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 418.554903][T16451] security_prepare_creds+0x52/0x120 [ 418.554939][T16451] prepare_creds+0x385/0x550 [ 418.555025][T16451] lookup_user_key+0x136/0xd60 [ 418.555075][T16451] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 418.555203][T16451] __se_sys_add_key+0x272/0x360 [ 418.555244][T16451] __x64_sys_add_key+0x67/0x80 [ 418.555278][T16451] x64_sys_call+0x1fa9/0x2550 [ 418.555322][T16451] do_syscall_64+0x112/0x360 [ 418.555513][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.555556][T16451] RIP: 0033:0x7fcbfb4ee1d9 [ 418.555625][T16451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.555653][T16451] RSP: 002b:00007fcbf9f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 418.555688][T16451] RAX: ffffffffffffffda RBX: 00007fcbfb775fa0 RCX: 00007fcbfb4ee1d9 [ 418.555712][T16451] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 418.555809][T16451] RBP: 00007fcbfb585888 R08: ffffffffffffffff R09: 0000000000000000 [ 418.555833][T16451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.555923][T16451] R13: 00007fcbfb776038 R14: 00007fcbfb775fa0 R15: 00007ffca9c20bd8 [ 418.555962][T16451] [ 418.960643][T16470] tipc: Resetting bearer [ 419.038673][T16470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.108867][T16475] tipc: Enabling of bearer rejected, already enabled [ 419.732781][T16488] loop2: detected capacity change from 0 to 128 [ 419.750729][T16489] syzkaller1: entered promiscuous mode [ 419.750752][T16489] syzkaller1: entered allmulticast mode [ 419.976902][T16499] syzkaller0: entered promiscuous mode [ 419.976931][T16499] syzkaller0: entered allmulticast mode [ 420.113602][T16511] netlink: 'syz.2.4564': attribute type 4 has an invalid length. [ 420.113630][T16511] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.4564'. [ 420.275794][T16521] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4577'. [ 420.632325][T16526] bond0: invalid ARP target specified [ 420.632713][ T29] audit: type=1400 audit(2000000506.560:826): avc: denied { mount } for pid=16522 comm="syz.1.4578" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 420.896918][T16539] tipc: Resetting bearer [ 420.925890][T16539] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 420.960754][T16539] team0: Port device xfrm0 added [ 420.963041][T16539] tipc: Enabling of bearer rejected, already enabled [ 421.035647][T16550] bridge0: port 1(ip6gretap0) entered blocking state [ 421.035741][T16550] bridge0: port 1(ip6gretap0) entered disabled state [ 421.035920][T16550] ip6gretap0: entered allmulticast mode [ 421.036523][T16550] ip6gretap0: entered promiscuous mode [ 421.036731][T16550] bridge0: port 1(ip6gretap0) entered blocking state [ 421.036836][T16550] bridge0: port 1(ip6gretap0) entered forwarding state [ 421.123658][T16546] futex_wake_op: syz.0.4589 tries to shift op by 144; fix this program [ 421.129537][T16554] team0: Port device xfrm0 removed [ 421.143703][T16554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 421.147521][ T4438] tipc: Resetting bearer [ 421.154948][T16560] tipc: Enabling of bearer rejected, already enabled [ 421.220501][T16564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.239328][T16564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.278590][T16568] loop3: detected capacity change from 0 to 128 [ 421.533165][T16578] syzkaller0: entered promiscuous mode [ 421.533194][T16578] syzkaller0: entered allmulticast mode [ 421.613108][ T29] audit: type=1400 audit(2000000507.540:827): avc: denied { create } for pid=16567 comm="syz.3.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 421.627789][T16580] netlink: 'syz.3.4597': attribute type 4 has an invalid length. [ 421.627921][T16580] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4597'. [ 421.736644][T16584] syzkaller1: entered promiscuous mode [ 421.736666][T16584] syzkaller1: entered allmulticast mode [ 421.879055][T16590] ip6gretap0: left allmulticast mode [ 421.879101][T16590] ip6gretap0: left promiscuous mode [ 421.879270][T16590] bridge0: port 1(ip6gretap0) entered disabled state [ 422.026725][T16590] team0: Port device xfrm0 removed [ 422.036647][T16590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.036914][T16593] tipc: Enabling of bearer rejected, already enabled [ 422.065466][ T4434] tipc: Resetting bearer [ 422.221615][T16607] syzkaller0: entered promiscuous mode [ 422.221645][T16607] syzkaller0: entered allmulticast mode [ 422.676378][T16633] syzkaller0: entered promiscuous mode [ 422.676398][T16633] syzkaller0: entered allmulticast mode [ 423.828125][T16673] syzkaller0: entered promiscuous mode [ 423.828149][T16673] syzkaller0: entered allmulticast mode [ 424.226627][T16699] tipc: Resetting bearer [ 424.296248][T16699] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 424.298112][T16700] tipc: Enabling of bearer rejected, already enabled [ 424.384345][T16708] syzkaller0: entered promiscuous mode [ 424.384419][T16708] syzkaller0: entered allmulticast mode [ 424.553248][T16715] loop3: detected capacity change from 0 to 512 [ 424.553610][T16715] ext4: Unknown parameter 'obj_user' [ 424.579702][T16719] loop4: detected capacity change from 0 to 128 [ 424.722406][T16731] syzkaller1: entered promiscuous mode [ 424.722432][T16731] syzkaller1: entered allmulticast mode [ 424.796341][T16734] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4666'. [ 424.966799][T16737] syzkaller0: entered promiscuous mode [ 424.966841][T16737] syzkaller0: entered allmulticast mode [ 425.328864][T16765] syzkaller1: entered promiscuous mode [ 425.328889][T16765] syzkaller1: entered allmulticast mode [ 425.461827][T16771] syzkaller0: entered promiscuous mode [ 425.461847][T16771] syzkaller0: entered allmulticast mode [ 425.640148][T16777] futex_wake_op: syz.3.4682 tries to shift op by 144; fix this program [ 425.767109][T16785] syzkaller0: entered promiscuous mode [ 425.767211][T16785] syzkaller0: entered allmulticast mode [ 425.879721][T12808] ================================================================== [ 425.879766][T12808] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 425.879965][T12808] [ 425.879971][T12808] read-write to 0xffff88811940b6b8 of 8 bytes by interrupt on cpu 0: [ 425.879994][T12808] __xa_clear_mark+0xf5/0x1e0 [ 425.880030][T12808] __folio_end_writeback+0xe7/0x530 [ 425.880073][T12808] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 425.880103][T12808] folio_end_writeback+0x1c/0x70 [ 425.880132][T12808] bh_end_async_write+0x1a6/0x250 [ 425.880164][T12808] bio_endio+0x390/0x570 [ 425.880193][T12808] blk_update_request+0x33a/0x710 [ 425.880231][T12808] blk_mq_end_request+0x26/0x50 [ 425.880269][T12808] lo_complete_rq+0x98/0x130 [ 425.880300][T12808] blk_done_softirq+0x77/0xb0 [ 425.880329][T12808] handle_softirqs+0xcc/0x2a0 [ 425.880350][T12808] run_ksoftirqd+0x1c/0x30 [ 425.880379][T12808] smpboot_thread_fn+0x32f/0x520 [ 425.880405][T12808] kthread+0x223/0x270 [ 425.880431][T12808] ret_from_fork+0x146/0x330 [ 425.880481][T12808] ret_from_fork_asm+0x1a/0x30 [ 425.880517][T12808] [ 425.880523][T12808] read to 0xffff88811940b6b8 of 8 bytes by task 12808 on cpu 1: [ 425.880541][T12808] xas_find_marked+0x211/0x650 [ 425.880568][T12808] filemap_get_folios_tag+0xf7/0x400 [ 425.880607][T12808] filemap_write_and_wait_range+0x1f5/0x370 [ 425.880639][T12808] sync_blockdev+0x35/0x50 [ 425.880681][T12808] sync_filesystem+0x168/0x190 [ 425.880709][T12808] generic_shutdown_super+0x4c/0x220 [ 425.880741][T12808] kill_block_super+0x2d/0xb0 [ 425.880777][T12808] deactivate_locked_super+0x73/0x180 [ 425.880811][T12808] deactivate_super+0x9a/0xb0 [ 425.880844][T12808] cleanup_mnt+0x143/0x1c0 [ 425.880876][T12808] __cleanup_mnt+0x19/0x20 [ 425.880901][T12808] task_work_run+0x130/0x1a0 [ 425.880926][T12808] exit_to_user_mode_loop+0x1e4/0x8c0 [ 425.880970][T12808] do_syscall_64+0x212/0x360 [ 425.880996][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.881020][T12808] [ 425.881024][T12808] value changed: 0x0000000000003010 -> 0x0000000000000000 [ 425.881037][T12808] [ 425.881042][T12808] Reported by Kernel Concurrency Sanitizer on: [ 425.881057][T12808] CPU: 1 UID: 0 PID: 12808 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 425.881093][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 425.881110][T12808] ==================================================================