last executing test programs: 1.380193666s ago: executing program 2 (id=1459): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e28, 0x7, @local, 0x5}, 0x1c) listen(r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd49921cdc21a4de6}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1465}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000006c0)="00000000000013ec6b4cf415802edf9edcf9e970e29e98280389d88759e8f84ae6", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x0, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0x964}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1c50) 1.266344646s ago: executing program 2 (id=1463): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 1.21803967s ago: executing program 2 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 1.194841552s ago: executing program 2 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0a85320, &(0x7f0000000900)={{0x80}}) tkill(r1, 0x7) sched_setscheduler(0x0, 0x0, 0x0) 847.57333ms ago: executing program 2 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat(0xffffffffffffff9c, 0x0, 0x2c040, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 609.75742ms ago: executing program 1 (id=1488): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 438.592204ms ago: executing program 1 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090106000000000001d76eeb360000000fad413ec40000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r1, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) 395.062737ms ago: executing program 1 (id=1493): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) 394.206008ms ago: executing program 0 (id=1495): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYBLOB="11fe8dcb928a75ca31f3310adde1c9"]) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180), 0x4) open(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x542f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x0, 0x803, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001380)=""/266, 0x10a}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}}], 0x1, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2c8) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000740)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000a00030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) syz_emit_ethernet(0xa9, &(0x7f0000000780)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0xc, 0x4, 0x0, 0x6, 0x9b, 0x67, 0x0, 0xfd, 0x21, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_addr={0x44, 0x14, 0x87, 0x1, 0xf, [{@multicast2, 0xe9}, {@multicast2, 0x7}]}, @rr={0x7, 0x7, 0xb0, [@loopback]}]}}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x4, 'MX%', 0x0, "3e96ed"}, "b45d2803a365c44890c3e995ae9c342651c0996018373337dbf41dde9773027517bd79aaf4dae4118ffc8c2ea5f66d03a5b2b1045124d2acde28f070222f79c29222d053bbb121d39975b451b33a3b0f10e280ca7e2c16e48cbdc5"}}}}}, 0x0) 393.988208ms ago: executing program 1 (id=1496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280)="90b4", &(0x7f0000000040)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000a80)="b5e0", &(0x7f00000001c0)=@udp6=r1}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x67d0, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xbbc, 0x4) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/21, 0x15}}], 0x1, 0x45833af92e4b39bd, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='block_bio_remap\x00', r3}, 0x10) write$cgroup_type(r4, &(0x7f0000000180), 0x40001) 356.770661ms ago: executing program 1 (id=1498): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100), r1, 0x0, 0x1, 0xfdf1}}, 0x20) 338.592992ms ago: executing program 1 (id=1499): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, 0x0, 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r2 = dup(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0xfffffff9, 0x3, 0xa98c, 0xc62, 0x2, 0x2, 0x80}, &(0x7f0000000080)=0x9c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000058c0)='/proc/locks\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x6, &(0x7f0000002000)) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x2}) syz_emit_ethernet(0x12f, &(0x7f0000000440)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x121, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xc2}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"003496addf2eaea30181016da2eb7f32ac0d301f58678ab0fe9c5598541137685152a6e2db16658e07a9764b6e483b7600ae44a09a0c3f343b8a197a2f9cd66fe83db0ec45a2115169b48ac900a89c0794c3eba1d2e902e67e12a294a8a0e915556124fc8920bfcb15ad4d06a417565712022e26cd8e26a1da5962f1240eb4d410687e651a96688f38051b4e412b839979c500a4b3a2b401520b261a8ea825bfc3350c8b0a91d951ce00e7972e4deeeb0da2f5f8b9d2b68f9b2ca70d6bd6f521fd23c227c5f6345c0b0100"/217}}}}}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r0, r5, 0x0, 0x8001) pipe2$watch_queue(0x0, 0x80) 312.674554ms ago: executing program 0 (id=1500): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@minixdf}, {@delalloc}, {@resuid}, {@debug}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5f4, &(0x7f0000000bc0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='./bus\x00') 274.858827ms ago: executing program 4 (id=1503): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_io_uring_setup(0x1836, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@nfc={0x27, 0x0, 0xfffffffd}}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000cb001b000000000000000000000000000400000000000000000000000000000000ffffffff0000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd6361696630000000000000000000000076657468315f746f5f7465616d00000073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c20000000000000000000000e8000000e80000001801000069703600000000000000000009000000000000000000000000000000000000005000000000000000fe800000000000000000000004"]}, 0x1ad) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r5, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0) r7 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x1a, &(0x7f0000000e40)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xd8, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr, @remote, [0xff], [0xffffffff], '\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNMARK={0x0, 'CONNMARK\x00', 0x1, {0x9ae, 0x400, 0x6, 0x1}}}, {{@ipv6={@rand_addr, @rand_addr, [0xffffff00], [0x0, 0x0, 0x0, 0xff000000]}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x86, '\x00', 0x0, 0xd8}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @dev={0xfe, 0x80, '\x00', 0x26}, [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xff0000ff, 0xffffff00, 0x0, 0xffff00], 'dvmrp1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x1d, 0x81, 0x5, 0x10}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x401, {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffffa4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x4000000) mknodat$loop(r8, &(0x7f00000001c0)='./file0\x00', 0xc002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r7, 0x0, 0x0) r11 = dup2(r7, r10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x785f}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback}, 0x0, @in6=@local}}, 0xe8) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3000402, &(0x7f0000000ac0)={[], [{@euid_lt={'euid<', r12}}, {@subj_type={'subj_type', 0x3d, '/dev/vcs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'dvmrp1\x00k\xd2\xb4\xeemU\x90\b\xfd\xb9a\x16\xfd\x1d\xd1\x7fS}\xf1m\xf3-\x17\b![$O\xc1\xbb\x9d\x8f\xed\xae6U\x9d\xd2\xd3M\xf7{\xbd\xa3\xdc\xdf\xbb\xf96M\x8b\xfe\xd6\x1b\x01\xcb\xef\x10\xe2\x99\xbe\x8at\xf3\xe1g.\xe0\xa8@\xb7\x0eJ\x18z\x128N\x88PX\x9e\x12\xcb\xf1\x97sm\xf8\x03GJ\xf1\xa0\"\x18\xfa\xae\x1d\xd8%\x82\x16\xb7b\xa2 \xd1\xb4\r\xcfzj\x91\xc6%\xa4&\x83\xafz\x90q\x05k\xb0E){#\xf3\xcdLE\xd9s\xec\xb3iO\x14\xc0\xf3\x83hbU\x9c4\x81\x021\nu\xddD\xb5\xe01\xf5\xda+\xcf\xc4\n[\xdf\xb4\xc1\x19Z;w\x1d\xb6\xcdn\xc1KUx`\xde\x1f\x91\xa89\x92\xfe\x05\xab\xd3g\xf7\x1b\xfe\xa4\'\x9f\x82HsR_\xf5\xc5\xbb\xa3\xfc\xe2O\xbd\xdf\x95\xd1\xc9\xf1\xb9d\x9dP\xfa^\x99\x96\xb3\x05zZ[\xaf'}}, {@obj_role={'obj_role', 0x3d, 'broute\x00'}}, {@obj_type={'obj_type', 0x3d, '*\''}}, {@fowner_lt}]}, 0x6, 0x587, &(0x7f0000000300)="$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") r13 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r13, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r13, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000e7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ce11bc3008b071000900000000000000000000000000009444000000000000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r13, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/272], 0x110) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) 243.42888ms ago: executing program 0 (id=1504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_opts(r0, 0x11a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000040)=@can={{}, 0xa, 0x0, 0x0, 0x0, "0004020000000210"}, 0x10}, 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff5e) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) socket(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) 243.12774ms ago: executing program 3 (id=1505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}, 0x1, 0x6000000}, 0x0) 234.507821ms ago: executing program 3 (id=1506): iopl(0x3) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) 196.343494ms ago: executing program 3 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000e5000085000000860000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000004850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000180)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, r4) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000740)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, &(0x7f0000000780)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) keyctl$update(0x2, r4, &(0x7f0000000a40)="3ccfe4c7573d173c35a0c14efd66af605cf770c514ff097080825691b0fc83ddc896acbbafb6a5e376f47a64ed91a64ccb86272fd90808a152cc86b8ae3d6029e2088a5d5da102f62037ee839dd589ff5ed99c1710bf57cab43be1fae1f31dafaac99092c267fde2a5f3a00b073bb79a7d008902949b63c247fd904d49611ee03310ede7f56986addbac4cad299eceb10561cbb7a6a890441afe323a954f0deafeb55ce5bfa8fbbd38c118cd0efc17a6c9ad197a373bb34f9f42c738df7dfb1f676e2ec7c6224b7699ae4552a6d8405d72cd267fe09ea5", 0xd7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x2, 0x2, 0x1) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x1d4}}, 0x0) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5ad, &(0x7f0000000180)="$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") 136.051549ms ago: executing program 4 (id=1508): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='u', 0xa792a, 0x801, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/128, 0xfffffce3, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)='g', 0x1}], 0x1) 135.815689ms ago: executing program 4 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280)="90b4", &(0x7f0000000040)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000a80)="b5e0", &(0x7f00000001c0)=@udp6=r1}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x67d0, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xbbc, 0x4) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/21, 0x15}}], 0x1, 0x45833af92e4b39bd, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000000)='block_bio_remap\x00', r3}, 0x10) write$cgroup_type(r4, &(0x7f0000000180), 0x40001) 135.518399ms ago: executing program 0 (id=1510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = io_uring_setup(0x0, &(0x7f0000000000)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x15, 0x0, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x10, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r5}, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r6, @ANYRES64=r6], 0x20000600}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6}]}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x144000, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r9, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r9, &(0x7f0000000440), 0x0}, 0x20) 135.110429ms ago: executing program 4 (id=1511): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 80.758873ms ago: executing program 4 (id=1512): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(r2, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40286608, &(0x7f0000000180)={@id={0x19, 0x0, @b}}) 80.539834ms ago: executing program 3 (id=1513): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5bda988000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08001a00", @ANYRES32=r2], 0x4c}}, 0x0) 80.256414ms ago: executing program 0 (id=1514): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@minixdf}, {@delalloc}, {@resuid}, {@debug}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5f4, &(0x7f0000000bc0)="$eJzs3c9vVNUeAPDvmf6gpbzXQl7ee7zFo8nLCyTv0dIChhgXsDWkwR9x48ZKCyIFGlqjRRNKghsT48YYE1cuxP9CiWxZ6cqFG1eGhKhhaeKYmd5bOu2d/m4vcj+fZOi998zt+Q7T75wzZ865E0BlDTb+qUUcjIjpFNGf5hfLOiMrHFy436Nf3zvfuKWo11/6OUXKjuX3T9nPvuzknoj49psUBzpW1jszd+Py+NTU5PVsf3j2yvTwzNyNo5eujF+cvDh5dfSZ0VMnT5w8NXJsU4/rZsGxs7fffLv/g7FXv/jstzTy5Q9jKU7H89kdlz6O7TIYg83/k7SyqO/UdldWko7s72TpU5w6SwyIDcmfv66I+Ef0R0c8fvL64/0XSg0O2FH1FFEHKirJf6iovB+Qv7df/j64VkqvBNgND88sDACszP/OhbHB6GmODex9lGLpsE6KiM2NzLXaFxH3743dvnBv7Hbs0DgcUGz+VkT8syj/UzP/B6InBpr5X2vJ/0a/4Fz2s3H8xU3Wv3yoWP7D7lnI/55V8z/a5P9rS/L/9U3WP/h4843elvzvXf3Egs8UAQAAAAAAoOrunomI/xd9/l9bnP8TBfN/+iLi9DbUP7hsf+Xn/7UH21ANUODhmYjnCuf/1vLZvwMd2dZfmvMButKFS1OTxyLirxFxJLr2NPZHVqnj6IcHPm1XNpjN/8tvjfrvZ3MBszgedO5pPWdifHZ8q48biHh4K+JfhfN/02L7nwra/8brwfQ66zjw3zvn2pWtnf/ATql/HnG4sP1/fNWKtPr1OYab/YHhvFew0r/f/eirdvVvNv9dYgK2rtH+7109/wfS0uv1zGy8juNznfV2ZZvt/3enl5szgLuzY++Mz85eH4noTmc7Gkdbjo9uPGZ4GuX5kOdLI/+P/Ge18b96vaj/3xsR88t+d/qldU1x7u+/9/3YLh79fyhPI/8nNtT+b3xj9M7A1+3qX1/7f6LZ1h/Jjhj/gwWf5Gna3Xq8IB07i4p2O14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBrUImJfpNrQ4natNjQU0RcRf4u9talrM7P/u3DtrasTjbLm9//X8m/67V/YT/n3/w8s2R9dtn88IvZHxMcdvc39ofPXpibKfvAAAAAAAAAAAAAAAAAAAADwhOhrs/6/4aeOsqMDdlxn2QEApSnI/+/KiAPYfdp/qC75D9Ul/6G65D9Ul/yH6pL/UF3yH6pro/nfs0NxAAAAAAAA22L/obvfp4iYf7a3eWvozsq6So0M2Gm1sgMASrPWJX7qrgEETy1T/6C6vMcH0hrlhVN+03rOXM30+S2cDAAAAAAAAAAAAACVc/ig9f9QVdb/Q3VZ3g/Vla//P1RyHMDu8x4fiDVW8rf/yq+trP8HAAAAAAAAAAAAADZiZu7G5fGpqcnrNl4pKqo9AYHt3Ea9Xr/Z+Ct4UuL5k2/kU+G38zeniPltijBf67e+s8p7TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr9EQAA//+krCYm") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='./bus\x00') 70.281924ms ago: executing program 3 (id=1515): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000069120e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 69.819104ms ago: executing program 4 (id=1516): creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000740)) ioprio_set$pid(0x1, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0}]) 23.622929ms ago: executing program 3 (id=1517): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) close(r0) 356.8µs ago: executing program 0 (id=1518): ioperm(0x0, 0x6, 0x2da3b9f3) setreuid(0x0, 0xee00) clock_adjtime(0x0, &(0x7f00000009c0)={0x564e984b}) 0s ago: executing program 2 (id=1519): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): syscall=202 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.521983][ T29] audit: type=1326 audit(1721004175.670:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.545518][ T29] audit: type=1326 audit(1721004175.670:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.568802][ T29] audit: type=1326 audit(1721004175.670:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.592011][ T29] audit: type=1326 audit(1721004175.670:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.615534][ T29] audit: type=1326 audit(1721004175.670:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.639280][ T29] audit: type=1326 audit(1721004175.670:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.662514][ T29] audit: type=1326 audit(1721004175.670:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.688592][ T29] audit: type=1326 audit(1721004175.670:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.712205][ T29] audit: type=1326 audit(1721004175.670:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5349 comm="syz.1.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcae9a26bd9 code=0x7ffc0000 [ 54.718588][ T5352] loop2: detected capacity change from 0 to 512 [ 54.761845][ T5352] EXT4-fs: Ignoring removed nobh option [ 54.768774][ T5352] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 54.778345][ T5352] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #13: comm syz.2.660: casefold flag without casefold feature [ 54.791019][ T5352] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.660: couldn't read orphan inode 13 (err -117) [ 54.822002][ T5357] nftables ruleset with unbound chain [ 54.839785][ T5357] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 55.139225][ T5386] loop0: detected capacity change from 0 to 256 [ 55.194917][ T5388] netlink: 'syz.1.674': attribute type 1 has an invalid length. [ 55.220914][ T5388] bond1: entered promiscuous mode [ 55.266264][ T5388] bond1: (slave veth3): Enslaving as an active interface with a down link [ 55.300057][ T5388] __nla_validate_parse: 1 callbacks suppressed [ 55.300071][ T5388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 55.332317][ T5388] bond1: entered allmulticast mode [ 55.343888][ T5388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.536650][ T5396] delete_channel: no stack [ 55.879617][ T5408] loop3: detected capacity change from 0 to 512 [ 55.919388][ T5408] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.051885][ T5422] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 56.085495][ T5422] bond2: entered promiscuous mode [ 56.094653][ T5426] loop2: detected capacity change from 0 to 512 [ 56.105374][ T5426] EXT4-fs: Ignoring removed oldalloc option [ 56.115331][ T5426] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.123238][ T5426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=84fc01c, mo2=0002] [ 56.146481][ T5422] bond2: (slave veth3): Enslaving as an active interface with a down link [ 56.170345][ T5426] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 56.180273][ T5426] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 56.192186][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 56.209632][ T5422] bond2: entered allmulticast mode [ 56.224565][ T5422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.236847][ T5426] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 56.316013][ T5432] ALSA: seq fatal error: cannot create timer (-19) [ 56.379364][ T5435] loop3: detected capacity change from 0 to 512 [ 56.402979][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.403504][ T5435] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.410205][ T5437] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.436500][ T5435] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.453920][ T5435] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 56.455048][ T5437] bridge0: entered promiscuous mode [ 56.472082][ T5435] System zones: 1-12 [ 56.482129][ T5435] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.692: corrupted in-inode xattr: e_value size too large [ 56.503957][ T5435] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.692: couldn't read orphan inode 15 (err -117) [ 56.622265][ T5447] loop1: detected capacity change from 0 to 512 [ 56.666342][ T5447] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.700241][ T35] kernel write not supported for file /vcsa1 (pid: 35 comm: kworker/1:1) [ 56.771901][ T5461] loop1: detected capacity change from 0 to 512 [ 56.787550][ T5461] EXT4-fs: Ignoring removed nobh option [ 56.801734][ T5461] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 56.809751][ T5464] loop3: detected capacity change from 0 to 512 [ 56.810047][ T5461] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #13: comm syz.1.701: casefold flag without casefold feature [ 56.831047][ T5461] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.701: couldn't read orphan inode 13 (err -117) [ 56.867222][ T5464] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.886517][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.893735][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.907155][ T5468] bridge0: entered promiscuous mode [ 56.921811][ T5470] delete_channel: no stack [ 57.009056][ T5476] loop3: detected capacity change from 0 to 512 [ 57.024152][ T5476] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.031380][ T5476] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 57.054541][ T5476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 57.062499][ T5476] System zones: 1-12 [ 57.075797][ T5476] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.706: corrupted in-inode xattr: e_value size too large [ 57.100146][ T5476] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.706: couldn't read orphan inode 15 (err -117) [ 57.289354][ T5488] loop3: detected capacity change from 0 to 512 [ 57.326072][ T5488] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.553967][ T5506] loop2: detected capacity change from 0 to 1024 [ 57.575294][ T5506] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.677291][ T5512] loop3: detected capacity change from 0 to 256 [ 57.742844][ T5514] loop2: detected capacity change from 0 to 512 [ 57.756633][ T5514] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.776091][ T5512] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.720' sets config #941611508 [ 57.859103][ T5518] ALSA: seq fatal error: cannot create timer (-19) [ 57.896900][ T5520] loop1: detected capacity change from 0 to 2048 [ 57.925555][ T5528] netlink: 'syz.2.726': attribute type 16 has an invalid length. [ 57.933505][ T5528] netlink: 'syz.2.726': attribute type 4 has an invalid length. [ 57.941214][ T5528] netlink: 132 bytes leftover after parsing attributes in process `syz.2.726'. [ 58.007340][ T5537] netlink: 'syz.2.729': attribute type 21 has an invalid length. [ 58.018161][ T69] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.036283][ T69] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 58.048479][ T69] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.048479][ T69] [ 58.058155][ T69] EXT4-fs (loop1): Total free blocks count 0 [ 58.064296][ T69] EXT4-fs (loop1): Free/Dirty block details [ 58.070233][ T69] EXT4-fs (loop1): free_blocks=2415919104 [ 58.076525][ T69] EXT4-fs (loop1): dirty_blocks=16 [ 58.081622][ T69] EXT4-fs (loop1): Block reservation details [ 58.087789][ T69] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 58.138553][ T5544] loop2: detected capacity change from 0 to 512 [ 58.158365][ T5544] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.271936][ T5555] SELinux: security_context_str_to_sid (N:ُB GړbEkc{'\x.p0Txb\< JF) failed with errno=-22 [ 58.353111][ T5567] netlink: 'syz.2.740': attribute type 19 has an invalid length. [ 58.391722][ T5567] loop2: detected capacity change from 0 to 1024 [ 58.408234][ T5567] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 58.419323][ T5567] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 58.431566][ T5571] netlink: 'syz.1.741': attribute type 21 has an invalid length. [ 58.455287][ T5567] EXT4-fs (loop2): invalid journal inode [ 58.475458][ T5567] EXT4-fs (loop2): can't get journal size [ 58.497360][ T5556] chnl_net:caif_netlink_parms(): no params data found [ 58.577785][ T5556] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.584901][ T5556] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.593086][ T5556] bridge_slave_0: entered allmulticast mode [ 58.599808][ T5556] bridge_slave_0: entered promiscuous mode [ 58.606634][ T5556] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.613773][ T5556] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.621648][ T5556] bridge_slave_1: entered allmulticast mode [ 58.628095][ T5556] bridge_slave_1: entered promiscuous mode [ 58.646311][ T5556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.658305][ T5556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.680420][ T5556] team0: Port device team_slave_0 added [ 58.687026][ T5556] team0: Port device team_slave_1 added [ 58.726324][ T5556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.733298][ T5556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.759267][ T5556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.770546][ T5591] loop3: detected capacity change from 0 to 512 [ 58.787851][ T5556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.794872][ T5556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.820941][ T5556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.833071][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 58.842340][ T5591] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.881982][ T5556] hsr_slave_0: entered promiscuous mode [ 58.891990][ T5556] hsr_slave_1: entered promiscuous mode [ 58.932911][ T5605] SELinux: security_context_str_to_sid (N:ُB GړbEkc{'\x.p0Txb\< JF) failed with errno=-22 [ 58.933796][ T5603] loop1: detected capacity change from 0 to 512 [ 59.015354][ T5603] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.036607][ T5556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.104543][ T5556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.133838][ T5612] loop1: detected capacity change from 0 to 512 [ 59.148954][ T5612] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.173007][ T5612] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 59.184004][ T5612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 59.194634][ T5612] System zones: 1-12 [ 59.200917][ T5556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.216595][ T5612] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.751: corrupted in-inode xattr: e_value size too large [ 59.251457][ T5612] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.751: couldn't read orphan inode 15 (err -117) [ 59.290990][ T5556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.376391][ T5617] loop2: detected capacity change from 0 to 256 [ 59.385108][ T5617] FAT-fs (loop2): Unrecognized mount option "errs=remount-ro" or missing value [ 59.411385][ T5556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.426956][ T3529] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 59.446255][ T5556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.471817][ T5556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.485945][ T5621] loop1: detected capacity change from 0 to 512 [ 59.486907][ T5556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.538731][ T5621] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.594100][ T5556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.622873][ T5556] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.658531][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.665653][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.693593][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.700695][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.733597][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.740920][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.765428][ T5629] bridge0: entered promiscuous mode [ 59.866022][ T5556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.961437][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.992309][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 59.992383][ T29] audit: type=1400 audit(1721004181.200:596): avc: denied { read } for pid=5650 comm="syz.3.759" path="socket:[12075]" dev="sockfs" ino=12075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.040178][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.063845][ T5556] veth0_vlan: entered promiscuous mode [ 60.073090][ T29] audit: type=1400 audit(1721004181.280:597): avc: denied { create } for pid=5655 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.105126][ T5657] xt_limit: Overflow, try lower: 16384/524288 [ 60.114864][ T29] audit: type=1400 audit(1721004181.280:598): avc: denied { bind } for pid=5655 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.121792][ T5657] loop1: detected capacity change from 0 to 1024 [ 60.145258][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.169415][ T5556] veth1_vlan: entered promiscuous mode [ 60.181808][ T29] audit: type=1400 audit(1721004181.390:599): avc: denied { link } for pid=5655 comm="syz.1.761" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.203775][ T29] audit: type=1400 audit(1721004181.390:600): avc: denied { rename } for pid=5655 comm="syz.1.761" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.211317][ T5556] veth0_macvtap: entered promiscuous mode [ 60.260761][ T5630] chnl_net:caif_netlink_parms(): no params data found [ 60.279316][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.293737][ T5670] loop3: detected capacity change from 0 to 512 [ 60.294492][ T5556] veth1_macvtap: entered promiscuous mode [ 60.312062][ T5622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.754'. [ 60.338052][ T5670] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.342337][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.358959][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.368814][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.379227][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.389110][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.399625][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.409464][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.419894][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.430484][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.440979][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.453090][ T5556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.472204][ T5678] futex_wake_op: syz.1.767 tries to shift op by 144; fix this program [ 60.512246][ T5678] loop1: detected capacity change from 0 to 2048 [ 60.530417][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.540984][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.551063][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.561525][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.571356][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.581795][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.591662][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.602084][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.611975][ T5556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.617492][ T5678] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.767: bg 0: block 234: padding at end of block bitmap is not set [ 60.622397][ T5556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.647593][ T5556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.656310][ T5678] EXT4-fs (loop1): Remounting filesystem read-only [ 60.664213][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.671421][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.679025][ T5630] bridge_slave_0: entered allmulticast mode [ 60.686429][ T5630] bridge_slave_0: entered promiscuous mode [ 60.698095][ T5556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706855][ T5556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.715630][ T5556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.724366][ T5556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.756994][ T5685] loop3: detected capacity change from 0 to 512 [ 60.778950][ T5685] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.796514][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.803582][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.819291][ T29] audit: type=1400 audit(1721004182.020:601): avc: denied { search } for pid=2768 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.856106][ T5695] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5695 comm=syz.2.771 [ 60.861505][ T5630] bridge_slave_1: entered allmulticast mode [ 60.875587][ T5630] bridge_slave_1: entered promiscuous mode [ 60.876514][ T29] audit: type=1400 audit(1721004182.080:602): avc: denied { name_bind } for pid=5694 comm="syz.1.772" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.902158][ T29] audit: type=1400 audit(1721004182.080:603): avc: denied { read } for pid=5694 comm="syz.1.772" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.924003][ T29] audit: type=1400 audit(1721004182.100:604): avc: denied { read } for pid=5693 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 60.984939][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.005408][ T11] bridge_slave_1: left allmulticast mode [ 61.006057][ T5685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.769'. [ 61.011088][ T11] bridge_slave_1: left promiscuous mode [ 61.025727][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.043220][ T11] bridge_slave_0: left allmulticast mode [ 61.049011][ T11] bridge_slave_0: left promiscuous mode [ 61.054706][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.218988][ T5730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 61.253306][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.275427][ T5734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.777'. [ 61.288937][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.299263][ T11] bond0 (unregistering): Released all slaves [ 61.309887][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.332303][ T5734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.777'. [ 61.362550][ T29] audit: type=1400 audit(1721004182.570:605): avc: denied { module_load } for pid=5733 comm="syz.2.777" path="/sys/power/wakeup_count" dev="sysfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 61.367966][ T5630] team0: Port device team_slave_0 added [ 61.415677][ T11] hsr_slave_0: left promiscuous mode [ 61.437734][ T11] hsr_slave_1: left promiscuous mode [ 61.455250][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.462746][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.487892][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.494266][ T5747] futex_wake_op: syz.2.781 tries to shift op by 144; fix this program [ 61.496147][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.519299][ T11] veth1_macvtap: left promiscuous mode [ 61.524934][ T11] veth0_macvtap: left promiscuous mode [ 61.530433][ T11] veth1_vlan: left promiscuous mode [ 61.535823][ T11] veth0_vlan: left promiscuous mode [ 61.559058][ T5747] loop2: detected capacity change from 0 to 2048 [ 61.590690][ T5747] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.781: bg 0: block 234: padding at end of block bitmap is not set [ 61.628216][ T5747] EXT4-fs (loop2): Remounting filesystem read-only [ 61.750036][ T11] team0 (unregistering): Port device team_slave_1 removed [ 61.776269][ T11] team0 (unregistering): Port device team_slave_0 removed [ 61.786128][ T5781] sd 0:0:1:0: device reset [ 61.817430][ T5630] team0: Port device team_slave_1 added [ 61.893815][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.900816][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.905618][ T5800] loop2: detected capacity change from 0 to 128 [ 61.926885][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.933642][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.950637][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.976537][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.065103][ T5630] hsr_slave_0: entered promiscuous mode [ 62.084950][ T5630] hsr_slave_1: entered promiscuous mode [ 62.092831][ T5630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.112003][ T5630] Cannot create hsr debugfs directory [ 62.153044][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.173770][ T24] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.203260][ T5837] loop1: detected capacity change from 0 to 128 [ 62.271621][ T3529] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 62.742265][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.760519][ T5894] loop0: detected capacity change from 0 to 512 [ 62.826165][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.834829][ T5896] loop1: detected capacity change from 0 to 1024 [ 62.836449][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.851005][ T5896] EXT4-fs: quotafile must be on filesystem root [ 62.859910][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.874573][ T5894] EXT4-fs error (device loop0): __ext4_iget:4906: inode #11: block 2071: comm syz.0.818: invalid block [ 62.907500][ T5894] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.818: couldn't read orphan inode 11 (err -117) [ 62.933340][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.946693][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.046078][ T5894] EXT4-fs (loop0): 1 truncate cleaned up [ 63.060012][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.067096][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.085022][ T3157] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.089306][ T3157] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.124578][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.131727][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.156401][ T5926] futex_wake_op: syz.3.823 tries to shift op by 144; fix this program [ 63.194424][ T5926] loop3: detected capacity change from 0 to 2048 [ 63.272563][ T5926] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.823: bg 0: block 234: padding at end of block bitmap is not set [ 63.291868][ T5926] EXT4-fs (loop3): Remounting filesystem read-only [ 63.296972][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.403058][ T5964] 9pnet_fd: p9_fd_create_unix (5964): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.546136][ T5630] veth0_vlan: entered promiscuous mode [ 63.653356][ T5630] veth1_vlan: entered promiscuous mode [ 63.755071][ T5630] veth0_macvtap: entered promiscuous mode [ 63.762996][ T5630] veth1_macvtap: entered promiscuous mode [ 63.775725][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.786284][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.796337][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.806799][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.816820][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.827262][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.837610][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.848052][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.857857][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.868277][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.988828][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.014122][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.014178][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.014188][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.014200][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.014211][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.014244][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.014252][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.014263][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.014272][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.014284][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.016101][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.166756][ T5630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.177272][ T5630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.187794][ T5630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.198442][ T5630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.295277][ T6028] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.843'. [ 64.335941][ T6034] 9pnet_fd: p9_fd_create_unix (6034): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 64.369796][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.845'. [ 64.476277][ T6023] loop2: detected capacity change from 0 to 8192 [ 64.516022][ T6023] loop2: p1 p2 p4 < > [ 64.520171][ T6023] loop2: partition table partially beyond EOD, truncated [ 64.539857][ T6023] loop2: p1 size 108986237 extends beyond EOD, truncated [ 64.549807][ T6023] loop2: p2 start 65535 is beyond EOD, truncated [ 64.556232][ T6023] loop2: p4 start 50331648 is beyond EOD, truncated [ 64.645419][ T6063] loop2: detected capacity change from 0 to 1024 [ 64.651989][ T6063] EXT4-fs: quotafile must be on filesystem root [ 64.802398][ T6071] bond_slave_0: entered promiscuous mode [ 64.808079][ T6071] bond_slave_1: entered promiscuous mode [ 64.816101][ T6071] bond_slave_0: left promiscuous mode [ 64.821513][ T6071] bond_slave_1: left promiscuous mode [ 64.831938][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.844823][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.855630][ T6071] bond0 (unregistering): Released all slaves [ 65.111151][ T6081] loop0: detected capacity change from 0 to 512 [ 65.139877][ T6081] EXT4-fs error (device loop0): __ext4_iget:4906: inode #11: block 2071: comm syz.0.855: invalid block [ 65.152816][ T6081] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.855: couldn't read orphan inode 11 (err -117) [ 65.170494][ T6081] EXT4-fs (loop0): 1 truncate cleaned up [ 65.177263][ T6081] EXT4-fs mount: 62 callbacks suppressed [ 65.177275][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.375837][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 65.457817][ T24] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.596026][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.616832][ T6107] loop4: detected capacity change from 0 to 1024 [ 65.623730][ T6107] EXT4-fs: Ignoring removed oldalloc option [ 65.630972][ T6107] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 65.653616][ T6105] loop3: detected capacity change from 0 to 8192 [ 65.666537][ T6107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.678755][ T6114] veth1_macvtap: left promiscuous mode [ 65.680355][ T6107] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.866: bg 0: block 505: padding at end of block bitmap is not set [ 65.684246][ T6114] macsec0: entered promiscuous mode [ 65.704033][ T6114] macsec0: entered allmulticast mode [ 65.710309][ T6105] loop3: p1 p2 p4 < > [ 65.714486][ T6105] loop3: partition table partially beyond EOD, truncated [ 65.722274][ T6105] loop3: p1 size 108986237 extends beyond EOD, truncated [ 65.725561][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.730095][ T6105] loop3: p2 start 65535 is beyond EOD, truncated [ 65.745051][ T6105] loop3: p4 start 50331648 is beyond EOD, truncated [ 65.771210][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 65.771224][ T29] audit: type=1400 audit(1721004186.980:695): avc: denied { mounton } for pid=6104 comm="syz.3.864" path="/dev/loop3p1" dev="devtmpfs" ino=673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.772392][ T6114] loop0: detected capacity change from 0 to 512 [ 65.778033][ T6105] FAT-fs (loop3p1): bogus number of reserved sectors [ 65.815519][ T6105] FAT-fs (loop3p1): Can't find a valid FAT filesystem [ 65.876125][ T6114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.881601][ T6122] loop2: detected capacity change from 0 to 512 [ 65.892712][ T6114] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.917842][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.930148][ T6129] loop4: detected capacity change from 0 to 512 [ 65.937917][ T29] audit: type=1400 audit(1721004187.150:696): avc: denied { connect } for pid=6111 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.941616][ T6114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.867: bg 0: block 18: invalid block bitmap [ 65.957502][ T29] audit: type=1400 audit(1721004187.150:697): avc: denied { write } for pid=6111 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.977145][ T6122] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.006104][ T6132] 9pnet_fd: p9_fd_create_unix (6132): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 66.009172][ T6129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.113478][ T6129] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.127830][ T29] audit: type=1400 audit(1721004187.340:698): avc: denied { setopt } for pid=6136 comm="syz.3.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.159835][ T6139] loop3: detected capacity change from 0 to 512 [ 66.162747][ T6129] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.872: corrupted inode contents [ 66.178132][ T6129] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz.4.872: mark_inode_dirty error [ 66.178703][ T3500] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.192717][ T6139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.210219][ T6129] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz.4.872: corrupted inode contents [ 66.212446][ T6139] EXT4-fs (loop3): 1 truncate cleaned up [ 66.223602][ T6129] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.872: mark_inode_dirty error [ 66.228346][ T6139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.257060][ T29] audit: type=1400 audit(1721004187.470:699): avc: denied { setattr } for pid=6128 comm="syz.4.872" name="NETLINK" dev="sockfs" ino=13790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.258212][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.292169][ T6129] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 66.304555][ T6129] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 66.328051][ T6142] loop2: detected capacity change from 0 to 1024 [ 66.348449][ T6142] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 66.370458][ T6129] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 66.391076][ T3089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.394776][ T6142] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.410940][ T6142] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 66.422979][ T6142] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.437856][ T6142] journal_load_superblock: Cannot read journal superblock [ 66.445622][ T6142] EXT4-fs (loop2): Could not load journal inode [ 66.453655][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.480864][ T6156] loop0: detected capacity change from 0 to 512 [ 66.533161][ T6154] loop1: detected capacity change from 0 to 8192 [ 66.553324][ T6156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.583805][ T29] audit: type=1400 audit(1721004187.790:700): avc: denied { setcheckreqprot } for pid=6167 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.598271][ T6156] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.604231][ T29] audit: type=1326 audit(1721004187.790:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6169 comm="syz.4.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd1581bd9 code=0x0 [ 66.618645][ T6158] netlink: 'syz.3.880': attribute type 21 has an invalid length. [ 66.647565][ T6158] netlink: 128 bytes leftover after parsing attributes in process `syz.3.880'. [ 66.658515][ T6158] netlink: 'syz.3.880': attribute type 4 has an invalid length. [ 66.659233][ T6154] loop1: p1 p2 p4 < > [ 66.670368][ T6154] loop1: partition table partially beyond EOD, truncated [ 66.690329][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.702101][ T6154] loop1: p1 size 108986237 extends beyond EOD, truncated [ 66.721894][ T6154] loop1: p2 start 65535 is beyond EOD, truncated [ 66.728298][ T6154] loop1: p4 start 50331648 is beyond EOD, truncated [ 66.793005][ T3245] IPVS: starting estimator thread 0... [ 66.859501][ T29] audit: type=1400 audit(1721004188.070:702): avc: denied { write } for pid=6187 comm="syz.1.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.884510][ T6183] IPVS: using max 3072 ests per chain, 153600 per kthread [ 66.921303][ T29] audit: type=1326 audit(1721004188.130:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f495f7bd9 code=0x7fc00000 [ 66.955126][ T29] audit: type=1326 audit(1721004188.130:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.0.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5f495f7bd9 code=0x7fc00000 [ 66.980374][ T6192] loop1: detected capacity change from 0 to 1024 [ 67.004971][ T6192] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 67.024171][ T6192] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.035079][ T6192] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 67.054547][ T6192] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.075632][ T6192] journal_load_superblock: Cannot read journal superblock [ 67.082960][ T6192] EXT4-fs (loop1): Could not load journal inode [ 67.348655][ T6206] loop1: detected capacity change from 0 to 512 [ 67.376347][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.390341][ T6206] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.436292][ T4782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.501784][ T6214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6214 comm=syz.1.902 [ 67.520579][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 67.560228][ T6214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.647110][ T6220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.667282][ T6220] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 67.709203][ T6225] loop4: detected capacity change from 0 to 1024 [ 67.726649][ T6225] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 67.736698][ T6220] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 67.753891][ T6233] loop2: detected capacity change from 0 to 128 [ 67.761112][ T6225] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.773711][ T6225] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 67.800974][ T6225] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.819470][ T6225] journal_load_superblock: Cannot read journal superblock [ 67.826713][ T6225] EXT4-fs (loop4): Could not load journal inode [ 67.835603][ T6233] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.838483][ T6242] loop0: detected capacity change from 0 to 512 [ 67.848518][ T6233] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.864794][ T6242] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.918706][ T6242] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #12: comm syz.0.913: corrupted in-inode xattr: invalid ea_ino [ 67.932617][ T6242] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.913: couldn't read orphan inode 12 (err -117) [ 67.947089][ T6242] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.980321][ T3500] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 68.008969][ T3500] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 68.024859][ T3500] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 68.047974][ T3500] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 68.053218][ T6259] netlink: 'syz.3.919': attribute type 21 has an invalid length. [ 68.064922][ T3500] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 68.069710][ T6259] netlink: 128 bytes leftover after parsing attributes in process `syz.3.919'. [ 68.088938][ T3500] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 68.108037][ T3500] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 68.122066][ T6259] netlink: 'syz.3.919': attribute type 4 has an invalid length. [ 68.153457][ T5556] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 68.162648][ T3500] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 68.223044][ T3500] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 68.244494][ T3500] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 68.299758][ T6287] loop1: detected capacity change from 0 to 128 [ 68.382155][ T6297] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 [ 68.451042][ T6293] netlink: 'syz.0.937': attribute type 21 has an invalid length. [ 68.458859][ T6293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.937'. [ 68.477471][ T6293] netlink: 'syz.0.937': attribute type 4 has an invalid length. [ 68.496474][ T4013] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.557529][ T6313] loop0: detected capacity change from 0 to 512 [ 68.590193][ T6313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.609554][ T6313] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.630447][ T6328] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 [ 68.631632][ T6313] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.947: bg 0: block 18: invalid block bitmap [ 68.678297][ T6335] loop3: detected capacity change from 0 to 512 [ 68.696179][ T6335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.709108][ T6335] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.720383][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.723446][ T6335] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.955: corrupted inode contents [ 68.741568][ T6335] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.955: mark_inode_dirty error [ 68.754057][ T6335] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.955: corrupted inode contents [ 68.767129][ T6335] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.955: mark_inode_dirty error [ 68.788591][ T6335] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 68.813240][ T6335] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 68.867047][ T6335] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 68.883975][ T6348] netlink: 'syz.0.956': attribute type 21 has an invalid length. [ 68.891836][ T6348] netlink: 128 bytes leftover after parsing attributes in process `syz.0.956'. [ 68.903420][ T6348] netlink: 'syz.0.956': attribute type 4 has an invalid length. [ 68.922372][ T3089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.950078][ T6353] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 69.092630][ T6364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.964'. [ 69.097155][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 69.126482][ T6375] loop4: detected capacity change from 0 to 128 [ 69.143960][ T6374] veth1_macvtap: left promiscuous mode [ 69.149660][ T6374] macsec0: entered promiscuous mode [ 69.155051][ T6374] macsec0: entered allmulticast mode [ 69.162910][ T6375] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 69.171097][ T6375] FAT-fs (loop4): Filesystem has been set read-only [ 69.232262][ T6374] loop3: detected capacity change from 0 to 512 [ 69.242604][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.249812][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.256897][ T6374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.256958][ T6374] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.278896][ T6341] bridge_slave_0: entered allmulticast mode [ 69.292461][ T6341] bridge_slave_0: entered promiscuous mode [ 69.325763][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.332951][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.343791][ T6341] bridge_slave_1: entered allmulticast mode [ 69.359319][ T6341] bridge_slave_1: entered promiscuous mode [ 69.369560][ T6374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.966: bg 0: block 18: invalid block bitmap [ 69.416587][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.435246][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.476004][ T6341] team0: Port device team_slave_0 added [ 69.484239][ T6341] team0: Port device team_slave_1 added [ 69.491019][ T3089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.547686][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.554778][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.581316][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.661751][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.669047][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.696746][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.709591][ T6401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6401 comm=syz.3.973 [ 69.738959][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 69.812680][ T6399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.873388][ T6401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.900097][ T6401] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 69.917301][ T6401] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 69.972839][ T6341] hsr_slave_0: entered promiscuous mode [ 69.986340][ T6341] hsr_slave_1: entered promiscuous mode [ 70.003960][ T6341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.014450][ T6341] Cannot create hsr debugfs directory [ 70.156441][ T6415] loop0: detected capacity change from 0 to 2048 [ 70.174740][ T6415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.270169][ T6429] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 70.305968][ T6341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.333601][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.417160][ T6341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.495918][ T6341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.546233][ T6451] loop4: detected capacity change from 0 to 2048 [ 70.567203][ T6452] loop0: detected capacity change from 0 to 2048 [ 70.574673][ T6341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.595956][ T6452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.626050][ T6451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.642702][ T6452] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 70.691460][ T6341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.727484][ T6341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.752845][ T6341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.768139][ T6459] netlink: 'syz.1.993': attribute type 21 has an invalid length. [ 70.775935][ T6459] netlink: 128 bytes leftover after parsing attributes in process `syz.1.993'. [ 70.788160][ T6459] netlink: 'syz.1.993': attribute type 4 has an invalid length. [ 70.796074][ T6341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.842320][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.863369][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.863504][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.873088][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.886617][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.922907][ T6341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.933335][ T6341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.954894][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.961971][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.024595][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 71.024609][ T29] audit: type=1400 audit(1721004192.240:722): avc: denied { override_creds } for pid=6469 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.069666][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.079659][ T6476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59674 sclass=netlink_route_socket pid=6476 comm=syz.4.1001 [ 71.106930][ T29] audit: type=1400 audit(1721004192.310:723): avc: denied { watch watch_reads } for pid=6475 comm="syz.4.1001" path="/41/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 71.153037][ T29] audit: type=1400 audit(1721004192.360:724): avc: granted { setsecparam } for pid=6479 comm="syz.4.1002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 71.227261][ T6341] veth0_vlan: entered promiscuous mode [ 71.256385][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.268996][ T6341] veth1_vlan: entered promiscuous mode [ 71.279095][ T6490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'. [ 71.293867][ T6341] veth0_macvtap: entered promiscuous mode [ 71.314212][ T6341] veth1_macvtap: entered promiscuous mode [ 71.335226][ T6495] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1007'. [ 71.350383][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.363817][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.373719][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.384254][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.394163][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.404616][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.414523][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.425197][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.435373][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.445921][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.455781][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.466321][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.486222][ T29] audit: type=1400 audit(1721004192.680:725): avc: denied { setopt } for pid=6493 comm="syz.1.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.511838][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.514864][ T6500] loop1: detected capacity change from 0 to 512 [ 71.526461][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.536938][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.546805][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.553124][ T6500] EXT4-fs (loop1): bad geometry: block count 4043309312 exceeds size of device (256 blocks) [ 71.557221][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.557239][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.557254][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.557268][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.607960][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.617897][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.624627][ T6498] loop0: detected capacity change from 0 to 512 [ 71.628350][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.640159][ T6498] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.644354][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.663977][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.678419][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.686848][ T6498] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz.0.1009: iget: bad i_size value: -6917529027641081756 [ 71.690608][ T6341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.708849][ T6341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.717630][ T6341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.719660][ T6498] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1009: couldn't read orphan inode 17 (err -117) [ 71.726415][ T6341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.753626][ T6498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.785752][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1010'. [ 71.842245][ T29] audit: type=1400 audit(1721004193.050:726): avc: denied { read write } for pid=6506 comm="syz.2.958" name="qrtr-tun" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.866989][ T6498] Quota error (device loop0): do_check_range: Getting block 16777216 out of range 0-5 [ 71.879593][ T6507] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 71.895906][ T29] audit: type=1400 audit(1721004193.080:727): avc: denied { open } for pid=6506 comm="syz.2.958" path="/dev/qrtr-tun" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.938239][ T6512] loop1: detected capacity change from 0 to 512 [ 71.950633][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.970120][ T6512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.983407][ T6516] veth1_macvtap: left promiscuous mode [ 71.983521][ T6512] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.989030][ T6516] macsec0: entered promiscuous mode [ 72.005456][ T6516] macsec0: entered allmulticast mode [ 72.038323][ T6518] loop0: detected capacity change from 0 to 512 [ 72.052499][ T6516] loop2: detected capacity change from 0 to 512 [ 72.076443][ T6518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.093610][ T6518] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.103101][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.120058][ T6524] loop3: detected capacity change from 0 to 128 [ 72.132721][ T4782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.147470][ T6526] loop4: detected capacity change from 0 to 512 [ 72.154158][ T6516] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.169463][ T29] audit: type=1400 audit(1721004193.380:728): avc: denied { bind } for pid=6523 comm="syz.3.1018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.174056][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.200405][ T6516] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1015: bg 0: block 18: invalid block bitmap [ 72.207810][ T29] audit: type=1400 audit(1721004193.410:729): avc: denied { setopt } for pid=6528 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.213425][ T6529] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1020'. [ 72.232289][ T29] audit: type=1400 audit(1721004193.410:730): avc: denied { create } for pid=6528 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 72.268076][ T6526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.282787][ T6526] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.310776][ T5630] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.371544][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.423185][ T6548] loop0: detected capacity change from 0 to 512 [ 72.426452][ T6551] loop1: detected capacity change from 0 to 512 [ 72.439290][ T6548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.440235][ T6552] loop2: detected capacity change from 0 to 1024 [ 72.453531][ T6552] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.454668][ T6548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1027: bg 0: block 248: padding at end of block bitmap is not set [ 72.466302][ T6552] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 72.479954][ T6548] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.1027: Failed to acquire dquot type 1 [ 72.486577][ T6552] EXT4-fs (loop2): orphan cleanup on readonly fs [ 72.499041][ T6548] EXT4-fs (loop0): 1 truncate cleaned up [ 72.503974][ T6552] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.1024: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.523821][ T6552] EXT4-fs (loop2): 1 orphan inode deleted [ 72.529907][ T6552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.534271][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.556982][ T6548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.564802][ T6551] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.594970][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.1024: path /2/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 72.615960][ T4782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.616090][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.1024: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.626294][ T6548] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 72.656092][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 18: comm syz.2.1024: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.677014][ T6548] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 72.677954][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 19: comm syz.2.1024: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.708408][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 20: comm syz.2.1024: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.737827][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 21: comm syz.2.1024: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.759694][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 22: comm syz.2.1024: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.780533][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.780686][ T6552] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 23: comm syz.2.1024: path /2/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 72.841645][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.859117][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1030'. [ 72.912960][ T6584] loop2: detected capacity change from 0 to 512 [ 72.939974][ T6588] loop0: detected capacity change from 0 to 512 [ 72.943498][ T6586] loop1: detected capacity change from 0 to 4096 [ 72.953539][ T6588] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.954939][ T6584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.961776][ T6588] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1041: bg 0: block 248: padding at end of block bitmap is not set [ 72.972692][ T6584] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.987284][ T6588] EXT4-fs error (device loop0): ext4_acquire_dquot:6860: comm syz.0.1041: Failed to acquire dquot type 1 [ 73.011351][ T6588] EXT4-fs (loop0): 1 truncate cleaned up [ 73.013262][ T6586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.017741][ T6588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.046643][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.063998][ T6588] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 73.095877][ T6588] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 73.161952][ T6597] loop2: detected capacity change from 0 to 2048 [ 73.398739][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.738524][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.833659][ T5556] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.847538][ T4782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.879713][ T6617] loop3: detected capacity change from 0 to 512 [ 73.896122][ T6617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.909734][ T6617] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.926857][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1048'. [ 73.941118][ T6624] loop1: detected capacity change from 0 to 1024 [ 73.954693][ T6624] ext4: Bad value for 'journal_dev' [ 73.971619][ T3089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.079963][ T6634] loop3: detected capacity change from 0 to 8192 [ 74.120468][ T6639] netlink: 'syz.4.1056': attribute type 5 has an invalid length. [ 74.136157][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 74.190943][ T6643] loop4: detected capacity change from 0 to 8192 [ 74.201516][ T6647] loop2: detected capacity change from 0 to 512 [ 74.202896][ T6648] loop3: detected capacity change from 0 to 512 [ 74.215001][ T6647] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.221917][ T6647] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1059: bg 0: block 248: padding at end of block bitmap is not set [ 74.236444][ T6647] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.1059: Failed to acquire dquot type 1 [ 74.248124][ T6643] loop4: p1 p2 p4 [ 74.249522][ T6647] EXT4-fs (loop2): 1 truncate cleaned up [ 74.251880][ T6643] loop4: p1 start 83821824 is beyond EOD, truncated [ 74.258280][ T6647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.264091][ T6643] loop4: p2 start 4293394690 is beyond EOD, truncated [ 74.283917][ T6643] loop4: p4 size 50331904 extends beyond EOD, truncated [ 74.300125][ T6647] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 74.319069][ T6647] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 74.400655][ T6341] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.423294][ T6671] loop3: detected capacity change from 0 to 2048 [ 74.438176][ T6671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.476986][ T6671] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.543499][ T6683] loop4: detected capacity change from 0 to 8192 [ 74.999629][ T6700] loop1: detected capacity change from 0 to 512 [ 75.007349][ T6700] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.012490][ T6702] loop0: detected capacity change from 0 to 1024 [ 75.014524][ T6700] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1075: bg 0: block 248: padding at end of block bitmap is not set [ 75.022476][ T6702] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.035604][ T6700] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1075: Failed to acquire dquot type 1 [ 75.046837][ T6702] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.059408][ T6700] EXT4-fs (loop1): 1 truncate cleaned up [ 75.068205][ T6702] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.073031][ T6700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.079063][ T6702] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.1076: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.104866][ T6700] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 75.106550][ T6702] EXT4-fs (loop0): 1 orphan inode deleted [ 75.120475][ T6702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.124730][ T6700] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 75.165236][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.1076: path /57/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 75.184964][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.1076: path /57/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 75.205883][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 18: comm syz.0.1076: path /57/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 75.227777][ T3089] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.228352][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz.0.1076: path /57/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 75.257454][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz.0.1076: path /57/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 75.278269][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 21: comm syz.0.1076: path /57/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 75.298868][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 22: comm syz.0.1076: path /57/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 75.325737][ T6702] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 23: comm syz.0.1076: path /57/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 75.405939][ T6721] loop2: detected capacity change from 0 to 512 [ 75.423832][ T6723] loop1: detected capacity change from 0 to 1024 [ 75.436883][ T6723] ext4: Bad value for 'journal_dev' [ 75.440482][ T6721] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1083: corrupted xattr block 33: overlapping e_value [ 75.453794][ T6730] loop0: detected capacity change from 0 to 1024 [ 75.465119][ T6721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 75.467564][ T6735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1087'. [ 75.474111][ T6721] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1083: corrupted xattr block 33: overlapping e_value [ 75.498454][ T6721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 75.508866][ T6721] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1083: corrupted xattr block 33: overlapping e_value [ 75.525827][ T6741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6741 comm=syz.3.1088 [ 75.526031][ T6741] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 75.539432][ T6721] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 75.546332][ T6741] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.588889][ T6748] 8021q: adding VLAN 0 to HW filter on device bond4 [ 75.603893][ T6748] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 75.618061][ T6748] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 75.965052][ T6795] loop3: detected capacity change from 0 to 8192 [ 75.983162][ T6807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6807 comm=syz.2.1102 [ 75.997846][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1102'. [ 76.081127][ T6815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6815 comm=syz.3.1104 [ 76.094334][ T6815] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 76.119728][ T6815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 76.146019][ T6815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 76.153431][ T6815] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 76.166867][ T6815] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 76.168179][ T11] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 76.189551][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 76.201994][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.201994][ T11] [ 76.211654][ T11] EXT4-fs (loop0): Total free blocks count 0 [ 76.217646][ T11] EXT4-fs (loop0): Free/Dirty block details [ 76.223541][ T11] EXT4-fs (loop0): free_blocks=68451041280 [ 76.229362][ T11] EXT4-fs (loop0): dirty_blocks=16384 [ 76.234733][ T11] EXT4-fs (loop0): Block reservation details [ 76.240707][ T11] EXT4-fs (loop0): i_reserved_data_blocks=1024 [ 76.255199][ T2013] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 76.268289][ T2013] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.268289][ T2013] [ 76.355388][ T6811] chnl_net:caif_netlink_parms(): no params data found [ 76.416107][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.423268][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.431444][ T6811] bridge_slave_0: entered allmulticast mode [ 76.437915][ T6811] bridge_slave_0: entered promiscuous mode [ 76.455900][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.462983][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.470317][ T6811] bridge_slave_1: entered allmulticast mode [ 76.476972][ T6811] bridge_slave_1: entered promiscuous mode [ 76.496860][ T6811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.515457][ T6811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.543610][ T6811] team0: Port device team_slave_0 added [ 76.551434][ T6811] team0: Port device team_slave_1 added [ 76.569759][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.576966][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.585897][ T6856] loop0: detected capacity change from 0 to 1024 [ 76.603099][ T6811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.611398][ T6856] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 76.622842][ T6852] loop3: detected capacity change from 0 to 512 [ 76.634748][ T6852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.645135][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.648449][ T6856] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 76.652061][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.663012][ T6856] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 76.688920][ T6811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.700203][ T6852] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 76.717876][ T6856] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 76.720100][ T6852] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 76.728673][ T6856] journal_load_superblock: Cannot read journal superblock [ 76.743156][ T6856] EXT4-fs (loop0): Could not load journal inode [ 76.745580][ T6852] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3011510273 > max in inode 13 [ 76.769196][ T6811] hsr_slave_0: entered promiscuous mode [ 76.773703][ T6852] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3011510274 > max in inode 13 [ 76.785181][ T6852] EXT4-fs (loop3): 1 truncate cleaned up [ 76.785331][ T6811] hsr_slave_1: entered promiscuous mode [ 76.801348][ T6811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.809085][ T6811] Cannot create hsr debugfs directory [ 76.846789][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 76.846803][ T29] audit: type=1400 audit(1721004198.060:925): avc: denied { read } for pid=6868 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.885112][ T6871] usb usb8: usbfs: process 6871 (syz.0.1117) did not claim interface 0 before use [ 76.887293][ T6875] loop3: detected capacity change from 0 to 512 [ 76.912446][ T29] audit: type=1400 audit(1721004198.110:926): avc: denied { shutdown } for pid=6868 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.925296][ T6878] loop4: detected capacity change from 0 to 764 [ 76.942514][ T6875] ext4 filesystem being mounted at /243/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.996537][ T6811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.074552][ T6897] loop1: detected capacity change from 0 to 1024 [ 77.089166][ T6897] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 77.113746][ T6897] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.124906][ T6897] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 77.140334][ T6897] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.152162][ T6897] journal_load_superblock: Cannot read journal superblock [ 77.159339][ T6897] EXT4-fs (loop1): Could not load journal inode [ 77.199572][ T6911] loop0: detected capacity change from 0 to 512 [ 77.217682][ T6911] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.266777][ T29] audit: type=1400 audit(1721004198.480:927): avc: denied { setopt } for pid=6918 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.274575][ T6923] loop4: detected capacity change from 0 to 1024 [ 77.294105][ T6923] EXT4-fs: quotafile must be on filesystem root [ 77.371767][ T6923] loop4: detected capacity change from 0 to 512 [ 77.378704][ T6923] EXT4-fs: Ignoring removed oldalloc option [ 77.386808][ T6923] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1138: Parent and EA inode have the same ino 15 [ 77.399265][ T6923] EXT4-fs (loop4): Remounting filesystem read-only [ 77.404946][ T6946] loop3: detected capacity change from 0 to 1024 [ 77.412568][ T6923] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -5) [ 77.414714][ T6946] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 77.429854][ T6923] EXT4-fs (loop4): 1 orphan inode deleted [ 77.430832][ T6946] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.435838][ T6923] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 77.446610][ T6946] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 77.453585][ T29] audit: type=1326 audit(1721004198.660:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6939 comm="syz.0.1145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f495f7bd9 code=0x0 [ 77.485617][ T6946] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.496836][ T6946] journal_load_superblock: Cannot read journal superblock [ 77.503964][ T6946] EXT4-fs (loop3): Could not load journal inode [ 77.527731][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 77.670102][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 77.679201][ T6960] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 77.699896][ T6811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.748017][ T6811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.762993][ T29] audit: type=1400 audit(1721004198.970:929): avc: denied { read } for pid=6967 comm="syz.3.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.807682][ T6811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.814257][ T6969] openvswitch: netlink: IP tunnel dst address not specified [ 77.867016][ T11] bridge_slave_1: left allmulticast mode [ 77.872737][ T11] bridge_slave_1: left promiscuous mode [ 77.878500][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.886267][ T11] bridge_slave_0: left allmulticast mode [ 77.891941][ T11] bridge_slave_0: left promiscuous mode [ 77.897599][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.978546][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.989109][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.999115][ T11] bond0 (unregistering): Released all slaves [ 78.019353][ T6811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.028764][ T6811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.038366][ T6811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.049679][ T6811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.077314][ T11] hsr_slave_0: left promiscuous mode [ 78.083151][ T11] hsr_slave_1: left promiscuous mode [ 78.089121][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.096609][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.104370][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.111931][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.121424][ T11] veth0_macvtap: left promiscuous mode [ 78.127101][ T11] veth1_vlan: left promiscuous mode [ 78.132339][ T11] veth0_vlan: left promiscuous mode [ 78.220336][ T6981] loop0: detected capacity change from 0 to 512 [ 78.227394][ T6981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.227999][ T11] team0 (unregistering): Port device team_slave_1 removed [ 78.237964][ T6981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 78.252371][ T6981] System zones: 1-12 [ 78.252704][ T11] team0 (unregistering): Port device team_slave_0 removed [ 78.263617][ T6981] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.278457][ T6981] EXT4-fs (loop0): 1 truncate cleaned up [ 78.321788][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.335104][ T6811] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.345291][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.352814][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.358726][ T6987] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 78.381053][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.388320][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.440398][ T6811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.450792][ T6811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.503905][ T29] audit: type=1326 audit(1721004199.710:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7000 comm="syz.0.1169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f495f7bd9 code=0x0 [ 78.548707][ T7011] loop1: detected capacity change from 0 to 512 [ 78.553010][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.567184][ T7011] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.592006][ T29] audit: type=1400 audit(1721004199.800:931): avc: denied { read } for pid=7010 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.693422][ T6811] veth0_vlan: entered promiscuous mode [ 78.712356][ T6811] veth1_vlan: entered promiscuous mode [ 78.734277][ T6811] veth0_macvtap: entered promiscuous mode [ 78.751027][ T6811] veth1_macvtap: entered promiscuous mode [ 78.770878][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.784171][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.794131][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.804708][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.814682][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.825300][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.835219][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.845728][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.856030][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.866598][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.876829][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.887478][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.908059][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.917292][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.928073][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.939221][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.949967][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.960072][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.970867][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.980836][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.992157][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.002559][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.013059][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.022890][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.033311][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.045228][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.058835][ T6811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.067571][ T6811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.076456][ T6811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.085244][ T6811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.147855][ T7077] netlink: 'syz.1.1187': attribute type 3 has an invalid length. [ 79.150197][ T29] audit: type=1400 audit(1721004200.360:932): avc: denied { mount } for pid=7076 comm="syz.3.1189" name="/" dev="ramfs" ino=17391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.185648][ T7080] netlink: 'syz.4.1188': attribute type 5 has an invalid length. [ 79.205917][ T29] audit: type=1400 audit(1721004200.390:933): avc: denied { unmount } for pid=3089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 79.214396][ T7088] loop3: detected capacity change from 0 to 512 [ 79.235222][ T7088] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.248668][ T7088] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 79.258632][ T7088] System zones: 1-12 [ 79.265741][ T7088] EXT4-fs (loop3): 1 truncate cleaned up [ 79.313372][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1191'. [ 79.322591][ T29] audit: type=1326 audit(1721004200.540:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.0.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f495f7bd9 code=0x0 [ 79.327204][ T7103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1199'. [ 79.368234][ T7108] netlink: 'syz.1.1201': attribute type 3 has an invalid length. [ 79.427243][ T7124] loop3: detected capacity change from 0 to 128 [ 79.446443][ T7126] loop1: detected capacity change from 0 to 512 [ 79.453213][ T7126] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.521741][ T7128] loop4: detected capacity change from 0 to 512 [ 79.529591][ T7126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 79.539355][ T7126] System zones: 1-12 [ 79.541506][ T7128] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.556234][ T7126] EXT4-fs (loop1): 1 truncate cleaned up [ 79.588945][ T7133] bridge0: entered allmulticast mode [ 79.597274][ T7133] pim6reg: entered allmulticast mode [ 79.955276][ T7139] loop4: detected capacity change from 0 to 1024 [ 79.961895][ T7139] EXT4-fs: quotafile must be on filesystem root [ 80.018171][ T7148] netlink: 'syz.1.1213': attribute type 3 has an invalid length. [ 80.029019][ T7139] loop4: detected capacity change from 0 to 512 [ 80.035650][ T7139] EXT4-fs: Ignoring removed oldalloc option [ 80.042977][ T7139] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1210: Parent and EA inode have the same ino 15 [ 80.055695][ T7139] EXT4-fs (loop4): Remounting filesystem read-only [ 80.062261][ T7139] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -5) [ 80.071249][ T7139] EXT4-fs (loop4): 1 orphan inode deleted [ 80.077343][ T7139] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 80.083607][ T7154] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1215'. [ 80.113813][ T7157] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 80.138812][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 80.225507][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1225'. [ 80.309258][ T7186] loop2: detected capacity change from 0 to 1024 [ 80.340233][ T7186] EXT4-fs (loop2): shut down requested (0) [ 80.340343][ T7196] loop3: detected capacity change from 0 to 764 [ 80.399814][ T7208] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 80.430864][ T7214] netlink: 'syz.3.1235': attribute type 21 has an invalid length. [ 80.439459][ T7214] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1235'. [ 80.442155][ T7216] loop4: detected capacity change from 0 to 128 [ 80.449432][ T7214] netlink: 'syz.3.1235': attribute type 5 has an invalid length. [ 80.462537][ T7214] netlink: 'syz.3.1235': attribute type 6 has an invalid length. [ 80.470365][ T7214] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1235'. [ 80.499000][ T7220] loop2: detected capacity change from 0 to 512 [ 80.517580][ T7220] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.563472][ T7234] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 80.585556][ T7237] loop2: detected capacity change from 0 to 764 [ 80.586017][ T7239] bridge0: entered allmulticast mode [ 80.606485][ T7239] pim6reg: entered allmulticast mode [ 80.613591][ T7230] loop4: detected capacity change from 0 to 1024 [ 80.628383][ T7230] EXT4-fs (loop4): shut down requested (0) [ 80.736248][ T7253] loop3: detected capacity change from 0 to 128 [ 80.789872][ T7257] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1256'. [ 80.825445][ T7260] loop3: detected capacity change from 0 to 512 [ 80.835998][ T7260] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.098387][ T7271] loop1: detected capacity change from 0 to 764 [ 81.269415][ T7283] openvswitch: netlink: IP tunnel dst address not specified [ 81.862489][ T7308] bridge0: entered allmulticast mode [ 81.870635][ T7308] pim6reg: entered allmulticast mode [ 82.118373][ T7315] loop1: detected capacity change from 0 to 512 [ 82.137430][ T7315] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.264393][ T7328] program syz.0.1283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.432685][ T7347] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 82.575720][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 82.575734][ T29] audit: type=1326 audit(1721004203.780:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.4.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcd1581bd9 code=0x0 [ 82.647353][ T7373] loop1: detected capacity change from 0 to 512 [ 82.655561][ T7373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.666777][ T7373] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.673670][ T7373] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1303: bg 0: block 248: padding at end of block bitmap is not set [ 82.688476][ T7373] Quota error (device loop1): write_blk: dquota write failed [ 82.695904][ T7373] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 82.705880][ T7373] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1303: Failed to acquire dquot type 1 [ 82.717723][ T7373] EXT4-fs (loop1): 1 truncate cleaned up [ 82.727767][ T7373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.732794][ T29] audit: type=1400 audit(1721004203.940:955): avc: denied { remount } for pid=7372 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 82.756919][ T7373] EXT4-fs error (device loop1): __ext4_remount:6503: comm syz.1.1303: Abort forced by user [ 82.763537][ T29] audit: type=1400 audit(1721004203.970:956): avc: denied { ioctl } for pid=7379 comm="syz.2.1306" path="socket:[19481]" dev="sockfs" ino=19481 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.768874][ T7373] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 82.807639][ T29] audit: type=1326 audit(1721004204.020:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7379 comm="syz.2.1306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ab1d23bd9 code=0x0 [ 82.836501][ T7373] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 82.836537][ T7373] ext4 filesystem being remounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.845228][ T7373] Quota error (device loop1): write_blk: dquota write failed [ 82.864988][ T7373] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 82.865007][ T7373] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.1303: Failed to acquire dquot type 1 [ 82.957721][ T29] audit: type=1400 audit(1721004204.170:958): avc: denied { ioctl } for pid=7389 comm="syz.1.1308" path="socket:[19501]" dev="sockfs" ino=19501 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.121801][ T29] audit: type=1326 audit(1721004204.330:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7394 comm="syz.1.1309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcae9a26bd9 code=0x0 [ 83.189310][ T7401] loop0: detected capacity change from 0 to 512 [ 83.197284][ T7401] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.1312: corrupted in-inode xattr: e_value size too large [ 83.211841][ T7401] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1312: couldn't read orphan inode 15 (err -117) [ 83.275572][ T7405] bridge0: entered allmulticast mode [ 83.283605][ T7405] pim6reg: entered allmulticast mode [ 83.316088][ T7409] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 83.340876][ T7411] ipt_ECN: cannot use operation on non-tcp rule [ 83.358168][ T7413] Driver unsupported XDP return value 0 on prog (id 253) dev N/A, expect packet loss! [ 83.438535][ T7422] loop4: detected capacity change from 0 to 1024 [ 83.545630][ T7426] loop4: detected capacity change from 0 to 512 [ 83.571587][ T7426] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.664351][ T7426] pim6reg1: entered promiscuous mode [ 83.671658][ T7426] pim6reg1: entered allmulticast mode [ 83.892197][ T7451] __nla_validate_parse: 4 callbacks suppressed [ 83.892213][ T7451] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1331'. [ 83.925907][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 83.936831][ T7454] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.945829][ T7454] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.954582][ T7454] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.963287][ T7454] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.972282][ T7454] vxlan0: entered promiscuous mode [ 84.044498][ T7462] loop1: detected capacity change from 0 to 1024 [ 84.058400][ T7462] EXT4-fs (loop1): shut down requested (0) [ 84.125597][ T7467] loop1: detected capacity change from 0 to 1024 [ 84.195292][ T7470] loop1: detected capacity change from 0 to 512 [ 84.206447][ T7470] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.225261][ T7470] pim6reg1: entered promiscuous mode [ 84.230623][ T7470] pim6reg1: entered allmulticast mode [ 84.775134][ T7487] loop3: detected capacity change from 0 to 512 [ 84.790030][ T7487] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 84.805827][ T7487] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1344: invalid indirect mapped block 2683928664 (level 1) [ 84.829927][ T7487] EXT4-fs (loop3): 1 truncate cleaned up [ 84.857506][ T7503] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 84.862119][ T7487] Process accounting resumed [ 84.888624][ T7487] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1344: Invalid block bitmap block 3 in block_group 0 [ 84.929818][ T7487] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1344: Invalid block bitmap block 3 in block_group 0 [ 84.949783][ T7487] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1344: Invalid block bitmap block 3 in block_group 0 [ 84.967929][ T7487] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1344: invalid indirect mapped block 2683928664 (level 1) [ 85.417123][ T7546] loop0: detected capacity change from 0 to 512 [ 85.453405][ T7546] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.596125][ T7564] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1366'. [ 85.605239][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 85.614780][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1366'. [ 85.624286][ T7564] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 86.395774][ T7588] loop1: detected capacity change from 0 to 512 [ 86.408321][ T7588] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.442086][ T7596] loop3: detected capacity change from 0 to 1024 [ 86.569273][ T7614] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.576922][ T7614] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 86.657114][ T7632] loop4: detected capacity change from 0 to 512 [ 86.663785][ T7632] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.676542][ T7632] EXT4-fs error (device loop4): __ext4_iget:4906: inode #11: block 1: comm syz.4.1392: invalid block [ 86.689744][ T7632] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.1392: couldn't read orphan inode 11 (err -117) [ 86.717908][ T2013] bridge_slave_1: left allmulticast mode [ 86.723581][ T2013] bridge_slave_1: left promiscuous mode [ 86.729331][ T2013] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.737093][ T2013] bridge_slave_0: left allmulticast mode [ 86.742735][ T2013] bridge_slave_0: left promiscuous mode [ 86.748420][ T2013] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.859399][ T7650] program syz.4.1397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.969331][ T7667] loop1: detected capacity change from 0 to 128 [ 86.976147][ T7667] FAT-fs (loop1): Unrecognized mount option "017777777777777777777770xffffffffffffffffjM Y!nKkýw4ս6Xdd$5k^/kB?BC=00 I'z" or missing value [ 86.993244][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1407'. [ 87.004319][ T7672] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1407'. [ 87.013572][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1407'. [ 87.024133][ T2013] hsr_slave_0: left promiscuous mode [ 87.039038][ T2013] hsr_slave_1: left promiscuous mode [ 87.047069][ T2013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.054789][ T2013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.054866][ T7674] loop4: detected capacity change from 0 to 512 [ 87.069969][ T2013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.070285][ T7674] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 87.078463][ T2013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.095935][ T2013] veth1_macvtap: left promiscuous mode [ 87.101491][ T2013] veth0_macvtap: left promiscuous mode [ 87.107040][ T2013] veth1_vlan: left promiscuous mode [ 87.112263][ T2013] veth0_vlan: left promiscuous mode [ 87.217197][ T2013] team0 (unregistering): Port device team_slave_1 removed [ 87.228865][ T2013] team0 (unregistering): Port device team_slave_0 removed [ 87.270002][ T7677] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 87.362676][ T7693] loop4: detected capacity change from 0 to 512 [ 87.377790][ T7693] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.402889][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1418'. [ 87.411891][ T7700] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1418'. [ 87.429303][ T7703] loop0: detected capacity change from 0 to 1024 [ 87.454995][ T7709] loop3: detected capacity change from 0 to 512 [ 87.461413][ T7709] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 87.504094][ T7709] IPVS: Unknown mcast interface: vcan0 [ 87.547329][ T2013] bridge_slave_1: left allmulticast mode [ 87.553104][ T2013] bridge_slave_1: left promiscuous mode [ 87.558911][ T2013] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.568169][ T2013] bridge_slave_0: left allmulticast mode [ 87.573872][ T2013] bridge_slave_0: left promiscuous mode [ 87.579617][ T2013] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.625737][ T7737] loop3: detected capacity change from 0 to 512 [ 87.647403][ T7737] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.655370][ T7737] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 87.656510][ T2013] batman_adv: batadv0: Removing interface: gretap1 [ 87.663581][ T7737] System zones: 0-1, 15-15, 18-18, 34-34 [ 87.676111][ T7737] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.677504][ T2013] batman_adv: batadv0: Removing interface: gretap2 [ 87.682448][ T7737] __quota_error: 79 callbacks suppressed [ 87.682459][ T7737] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 87.705821][ T7737] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 87.720463][ T7737] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 87.741205][ T29] audit: type=1326 audit(1721004208.950:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7733 comm="syz.0.1432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f495f7bd9 code=0x0 [ 87.764411][ T7737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1434: bg 0: block 40: padding at end of block bitmap is not set [ 87.779202][ T7737] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 87.788728][ T7737] EXT4-fs (loop3): 1 truncate cleaned up [ 87.837096][ T2013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.847919][ T2013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.858077][ T2013] bond0 (unregistering): Released all slaves [ 87.877958][ T7748] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 87.910465][ T7750] 0X: renamed from hsr0 (while UP) [ 87.917322][ T7750] 0X: entered allmulticast mode [ 87.922292][ T7750] hsr_slave_0: entered allmulticast mode [ 87.928024][ T7750] hsr_slave_1: entered allmulticast mode [ 87.935792][ T7750] A link change request failed with some changes committed already. Interface c0X may have been left with an inconsistent configuration, please check. [ 88.007022][ T2013] hsr_slave_0: left promiscuous mode [ 88.015815][ T2013] hsr_slave_1: left promiscuous mode [ 88.025355][ T2013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.033221][ T2013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.055630][ T2013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.063085][ T2013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.072212][ T2013] veth1_macvtap: left promiscuous mode [ 88.077846][ T2013] veth0_macvtap: left promiscuous mode [ 88.083432][ T2013] veth1_vlan: left promiscuous mode [ 88.088659][ T2013] veth0_vlan: left promiscuous mode [ 88.330128][ T2013] team0 (unregistering): Port device team_slave_1 removed [ 88.350580][ T2013] team0 (unregistering): Port device team_slave_0 removed [ 88.426335][ T7782] loop4: detected capacity change from 0 to 512 [ 88.479771][ T7782] EXT4-fs (loop4): 1 truncate cleaned up [ 88.500922][ T7771] validate_nla: 5 callbacks suppressed [ 88.500935][ T7771] netlink: 'syz.3.1446': attribute type 5 has an invalid length. [ 88.555626][ T7784] loop0: detected capacity change from 0 to 256 [ 88.561546][ T7782] netlink: 'syz.4.1450': attribute type 2 has an invalid length. [ 88.580849][ T7784] FAT-fs (loop0): Directory bread(block 64) failed [ 88.594962][ T7791] 1X: renamed from c0X (while UP) [ 88.600357][ T7784] FAT-fs (loop0): Directory bread(block 65) failed [ 88.607213][ T7784] FAT-fs (loop0): Directory bread(block 66) failed [ 88.613772][ T7784] FAT-fs (loop0): Directory bread(block 67) failed [ 88.621963][ T7791] A link change request failed with some changes committed already. Interface c1X may have been left with an inconsistent configuration, please check. [ 88.624055][ T7784] FAT-fs (loop0): Directory bread(block 68) failed [ 88.645415][ T7784] FAT-fs (loop0): Directory bread(block 69) failed [ 88.651997][ T7784] FAT-fs (loop0): Directory bread(block 70) failed [ 88.658624][ T7784] FAT-fs (loop0): Directory bread(block 71) failed [ 88.665176][ T7784] FAT-fs (loop0): Directory bread(block 72) failed [ 88.671771][ T7784] FAT-fs (loop0): Directory bread(block 73) failed [ 88.721824][ T7810] loop4: detected capacity change from 0 to 512 [ 88.726147][ T7784] syz.0.1451: attempt to access beyond end of device [ 88.726147][ T7784] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 88.744852][ T7784] syz.0.1451: attempt to access beyond end of device [ 88.744852][ T7784] loop0: rw=2049, sector=1288, nr_sectors = 32 limit=256 [ 88.769664][ T7810] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.790759][ T29] audit: type=1400 audit(1721004210.000:1040): avc: denied { read } for pid=7815 comm="syz.2.1463" path="socket:[20185]" dev="sockfs" ino=20185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 88.807252][ T7812] loop3: detected capacity change from 0 to 1024 [ 88.821308][ T7812] EXT4-fs: Ignoring removed oldalloc option [ 88.888447][ T7827] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 88.901365][ T7829] __nla_validate_parse: 9 callbacks suppressed [ 88.901434][ T7829] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1470'. [ 88.920774][ T29] audit: type=1400 audit(1721004210.120:1041): avc: denied { connect } for pid=7832 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.951404][ T7829] 0X: renamed from hsr0 (while UP) [ 88.958342][ T7829] 0X: entered allmulticast mode [ 88.963321][ T7829] hsr_slave_0: entered allmulticast mode [ 88.963924][ T29] audit: type=1400 audit(1721004210.130:1042): avc: denied { setopt } for pid=7832 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.969004][ T7829] hsr_slave_1: entered allmulticast mode [ 88.976662][ T7829] A link change request failed with some changes committed already. Interface c0X may have been left with an inconsistent configuration, please check. [ 88.988404][ T29] audit: type=1400 audit(1721004210.170:1043): avc: denied { map } for pid=7832 comm="syz.1.1471" path="socket:[20687]" dev="sockfs" ino=20687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.988428][ T29] audit: type=1400 audit(1721004210.170:1044): avc: denied { setattr } for pid=7839 comm="syz.4.1472" name="file0" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.056020][ T29] audit: type=1400 audit(1721004210.170:1045): avc: denied { read } for pid=7839 comm="syz.4.1472" name="file0" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.056043][ T29] audit: type=1400 audit(1721004210.170:1046): avc: denied { open } for pid=7839 comm="syz.4.1472" path="/134/file0" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.058886][ T29] audit: type=1400 audit(1721004210.250:1047): avc: denied { write } for pid=7835 comm="syz.3.1469" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.126006][ T7847] loop0: detected capacity change from 0 to 256 [ 89.146837][ T7847] FAT-fs (loop0): Directory bread(block 64) failed [ 89.154189][ T7847] FAT-fs (loop0): Directory bread(block 65) failed [ 89.161048][ T7847] FAT-fs (loop0): Directory bread(block 66) failed [ 89.174926][ T7847] FAT-fs (loop0): Directory bread(block 67) failed [ 89.181508][ T7847] FAT-fs (loop0): Directory bread(block 68) failed [ 89.188864][ T7847] FAT-fs (loop0): Directory bread(block 69) failed [ 89.195675][ T7847] FAT-fs (loop0): Directory bread(block 70) failed [ 89.202207][ T7847] FAT-fs (loop0): Directory bread(block 71) failed [ 89.220502][ T7851] loop7: detected capacity change from 0 to 16384 [ 89.231901][ T7847] FAT-fs (loop0): Directory bread(block 72) failed [ 89.240370][ T7847] FAT-fs (loop0): Directory bread(block 73) failed [ 89.279388][ T7847] syz.0.1475: attempt to access beyond end of device [ 89.279388][ T7847] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 89.293287][ T7847] syz.0.1475: attempt to access beyond end of device [ 89.293287][ T7847] loop0: rw=2049, sector=1288, nr_sectors = 32 limit=256 [ 89.659605][ T7895] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1495'. [ 89.669560][ T7895] 1X: renamed from c0X (while UP) [ 89.677939][ T7895] A link change request failed with some changes committed already. Interface c1X may have been left with an inconsistent configuration, please check. [ 89.685631][ T7901] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 89.729553][ T7908] loop0: detected capacity change from 0 to 1024 [ 89.736448][ T7908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.743316][ T7908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.755949][ T7908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 89.764355][ T7908] System zones: 0-1, 3-36 [ 89.773574][ T7915] loop4: detected capacity change from 0 to 512 [ 89.780322][ T7915] ext4: Unknown parameter 'euid<00000000000000000000' [ 89.818187][ T7921] loop3: detected capacity change from 0 to 1024 [ 89.825198][ T7921] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.836338][ T7921] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 89.854667][ T7921] JBD2: no valid journal superblock found [ 89.860631][ T7921] EXT4-fs (loop3): Could not load journal inode [ 89.920725][ T7935] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 89.967955][ T7941] loop0: detected capacity change from 0 to 1024 [ 89.975233][ T7941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.983654][ T7941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.006208][ T7941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 90.014446][ T7941] System zones: 0-1, 3-36 [ 90.036452][ T7948] ================================================================== [ 90.044521][ T7948] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 90.051620][ T7948] [ 90.053928][ T7948] write to 0xffff888104229580 of 8 bytes by task 7949 on cpu 0: [ 90.061540][ T7948] exit_mm+0x9c/0x190 [ 90.065505][ T7948] do_exit+0x556/0x1710 [ 90.069644][ T7948] do_group_exit+0x102/0x150 [ 90.074219][ T7948] get_signal+0xf2f/0x1080 [ 90.078621][ T7948] arch_do_signal_or_restart+0x95/0x4b0 [ 90.084150][ T7948] syscall_exit_to_user_mode+0x59/0x130 [ 90.089692][ T7948] do_syscall_64+0xd6/0x1c0 [ 90.094218][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.100101][ T7948] [ 90.102408][ T7948] read to 0xffff888104229580 of 8 bytes by task 7948 on cpu 1: [ 90.109932][ T7948] mm_update_next_owner+0x1c9/0x460 [ 90.115118][ T7948] exit_mm+0xdc/0x190 [ 90.119080][ T7948] do_exit+0x556/0x1710 [ 90.123216][ T7948] do_group_exit+0x142/0x150 [ 90.127788][ T7948] __x64_sys_exit_group+0x1f/0x20 [ 90.132796][ T7948] x64_sys_call+0x27f9/0x2d70 [ 90.137458][ T7948] do_syscall_64+0xc9/0x1c0 [ 90.141954][ T7948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.147835][ T7948] [ 90.150140][ T7948] value changed: 0xffff888100054fc0 -> 0x0000000000000000 [ 90.157225][ T7948] [ 90.159527][ T7948] Reported by Kernel Concurrency Sanitizer on: [ 90.165669][ T7948] CPU: 1 PID: 7948 Comm: syz.2.1519 Tainted: G W 6.10.0-syzkaller #0 [ 90.175111][ T7948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.185151][ T7948] ==================================================================