last executing test programs: 28.437328651s ago: executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='|pu<00||!') 28.400209526s ago: executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xb8d]}, 0x8, 0x80800) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) read(r3, &(0x7f0000000080)=""/11, 0xb) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) 28.380561609s ago: executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='context']) 28.363507872s ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x14}, 0x14}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x55, 0x0}, 0x400}], 0x1, 0x42, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaa200aa0180c200000008004500007890780000fbffffff000000004e2000649078020000000000000000000000bdc23f4e32619374fb7200c896544b8212f38ecf89b3593efc958f99a7c1c3c45e2299e95beebcde21b9f2a70b45f0b2bd0e056d796fce88a0ebc503d63ff892e7a4be946de9"], 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000012c0)="$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") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003b00090000000200cd0000000100000018000380340ae6f5009bbe9625941a6bc6d2b38d1cfdbe7aa6fac224e2643b312fe68d591c65481f80adf18a993a42"], 0x2c}}, 0x40030000000000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) r3 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=@add_del={0x2, 0x0}) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x64, 0x0, 0x0, 0x5, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 28.282708015s ago: executing program 4: r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x0, 0x0) 3.677456757s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) 3.637928943s ago: executing program 0: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x9, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000980)=@tcp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000080), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000340)={r2, &(0x7f0000000400), 0x0}, 0x20) 3.619602407s ago: executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(r0) 2.619326842s ago: executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(0x0, 0x0) 2.156691755s ago: executing program 0: syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) 2.098974233s ago: executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/147, 0x93) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r1, &(0x7f00000001c0)=""/147, 0x93) getdents(r1, 0x0, 0x0) 1.409489091s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) 922.499467ms ago: executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TCSETSF(r1, 0x541d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 906.983579ms ago: executing program 3: syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) 618.123244ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f0070687930000000000c0005000000000000000000200001"], 0x4c}}, 0x0) 605.069556ms ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x0, 0x6}}, 0x20) 580.37085ms ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) ioctl$TCSETS(r0, 0x5420, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) 567.275712ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f00000005c0)={'gre0\x00', @multicast}) 556.120834ms ago: executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) unshare(0x42000000) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ec010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000933cb17c5ed06a173e087111cd5e81fc202e557356773cc378599b6a2b391c2123575a21cf8b8ac07b912750b94d18681b06b26fd75be2325f0c9e2374eec88e73f7e5542c128ca835823fcd16bf0aebc572d2cf002444a511b89cc25b9bd1bd3b57494c242f42f81e9e323aba341cc0b7319f62"], 0x1ec}}, 0x0) 474.120887ms ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x181}, {}], 0x2, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 384.53016ms ago: executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 372.054582ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080), 0x4) recvfrom$inet6(r2, 0x0, 0x0, 0x2100, 0x0, 0x0) read(r2, &(0x7f00000001c0)=""/205, 0xcd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "02cd1af5b897b2f9b533bae77401388ee8fc3e676945ca61", "87288f6509e07f9fb4d336f82e41654d8f8bd447c7bd59f37bc08c53cfd99353"}}}}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@device_b}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x2f4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @acl_policy]}, 0x7c}}, 0x0) 340.564797ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f0070687930000000000c0005000000000000000000200001"], 0x4c}}, 0x0) 322.99965ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x38, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) 308.772983ms ago: executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1, 0x0, 0x6}}, 0x20) 251.306801ms ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r2) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) shutdown(r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x14}, {0x84}, {0x6, 0x0, 0x0, 0x7ffffd3e}]}) semget$private(0x0, 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) close(r1) ioctl$TUNSETNOCSUM(r0, 0x400454ca, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8001}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x54}, 0x1, 0xba01}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x13, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) 229.563734ms ago: executing program 3: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 123.647871ms ago: executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) unshare(0x42000000) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ec010000170001030000000000000000ffffffff0000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff7f000001ff01000000000000000000000000000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000933cb17c5ed06a173e087111cd5e81fc202e557356773cc378599b6a2b391c2123575a21cf8b8ac07b912750b94d18681b06b26fd75be2325f0c9e2374eec88e73f7e5542c128ca835823fcd16bf0aebc572d2cf002444a511b89cc25b9bd1bd3b57494c242f42f81e9e323aba341cc0b7319f62"], 0x1ec}}, 0x0) 15.271238ms ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000f9ffff2000000009001f"], 0x20}}, 0x0) 0s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000400)={[{@prjquota}, {@nogrpid}, {@discard}, {@errors_remount}, {@init_itable, 0x0}, {@orlov}, {@jqfmt_vfsv1}, {@nolazytime}, {@nobh}, {@resuid}, {@noauto_da_alloc}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}], [], 0x2c}, 0xfe, 0x50a, &(0x7f00000005c0)="$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") inotify_init1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) syz_open_pts(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="4b00004d66e97e4cf3341c000000"], 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_PDEATHSIG(0x1, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x40, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@private1}}, 0xe8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/ath9k', 0x121100, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124400000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000692600000000ddffbe67000000000000570600000fff070067060000020000002500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2224c48f, &(0x7f0000000640)={[], [], 0x2c}, 0x84, 0x4bb, &(0x7f0000000140)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000440)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, 0x0, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$netlink(r7, 0x10e, 0xc, 0x0, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): sr1' with parent 'hsr' already present! [ 369.299964][T21085] Cannot create hsr debugfs directory [ 369.322929][T21087] loop1: detected capacity change from 0 to 128 [ 369.330306][T21087] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 369.715329][T21104] loop4: detected capacity change from 0 to 1024 [ 369.723247][T21103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=21103 comm=syz-executor.1 [ 369.739959][T21104] EXT4-fs mount: 20 callbacks suppressed [ 369.739974][T21104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.773206][T19170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.886124][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.895875][T21134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.191678][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 370.191692][ T29] audit: type=1326 audit(2000000107.510:13935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21139 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6043d89ea9 code=0x0 [ 370.627781][T21170] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.839689][T21177] loop4: detected capacity change from 0 to 1024 [ 370.850221][T21177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.876692][T19170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.932494][T21186] loop0: detected capacity change from 0 to 512 [ 370.946281][T21186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.959860][T21186] ext4 filesystem being mounted at /root/syzkaller-testdir1164913241/syzkaller.aVBWAm/81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 370.989483][T21186] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.007479][T19714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.207348][ T29] audit: type=1326 audit(2000000108.530:13936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21209 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f435b673ea9 code=0x0 [ 371.301728][ T29] audit: type=1326 audit(2000000108.620:13937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21198 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x0 [ 371.312271][T21213] loop0: detected capacity change from 0 to 1024 [ 371.331910][T21213] EXT4-fs: quotafile must be on filesystem root [ 371.600316][ T29] audit: type=1400 audit(2000000108.920:13938): avc: denied { mounton } for pid=21218 comm="syz-executor.1" path="/proc/21218/cgroup" dev="proc" ino=90280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 371.755181][T21224] loop1: detected capacity change from 0 to 512 [ 371.763888][T21224] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 17 [ 371.775308][T21224] ext4_test_bit(bit=16, block=4) = 1 [ 371.780646][T21224] is_bad_inode(inode)=0 [ 371.784976][T21224] NEXT_ORPHAN(inode)=0 [ 371.789070][T21224] max_ino=32 [ 371.792257][T21224] i_nlink=1 [ 371.795881][T21224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.874193][T17530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.013801][T21251] tap0: tun_chr_ioctl cmd 1074025677 [ 372.019523][T21251] tap0: linktype set to 821 [ 372.081797][T21260] loop4: detected capacity change from 0 to 512 [ 372.091053][ T29] audit: type=1326 audit(2000000109.400:13939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b673ea9 code=0x7ffc0000 [ 372.115282][ T29] audit: type=1326 audit(2000000109.400:13940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b673ea9 code=0x7ffc0000 [ 372.139727][ T29] audit: type=1326 audit(2000000109.400:13941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f435b673ea9 code=0x7ffc0000 [ 372.163785][ T29] audit: type=1326 audit(2000000109.400:13942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b673ea9 code=0x7ffc0000 [ 372.166493][T21260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.188100][ T29] audit: type=1326 audit(2000000109.400:13943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f435b673ea9 code=0x7ffc0000 [ 372.188128][ T29] audit: type=1326 audit(2000000109.400:13944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21257 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b673ea9 code=0x7ffc0000 [ 372.199989][T21260] EXT4-fs (loop4): 1 truncate cleaned up [ 372.263206][T21260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.392848][T21281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=21281 comm=syz-executor.0 [ 372.542428][T21297] 9pnet_fd: Insufficient options for proto=fd [ 372.903033][T21306] loop2: detected capacity change from 0 to 512 [ 372.913471][T21306] EXT4-fs (loop2): bad s_min_extra_isize: 65528 [ 372.953642][T19170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.088305][T21319] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.096267][T21319] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 373.173263][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.260484][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.317867][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.333062][T21350] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.341286][T21350] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 373.369111][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.411300][T21349] hsr0 speed is unknown, defaulting to 1000 [ 373.472204][ T57] bridge_slave_1: left allmulticast mode [ 373.477989][ T57] bridge_slave_1: left promiscuous mode [ 373.483659][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.491674][ T57] bridge_slave_0: left allmulticast mode [ 373.497386][ T57] bridge_slave_0: left promiscuous mode [ 373.503212][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.657610][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.668687][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.679603][ T57] bond0 (unregistering): Released all slaves [ 373.763305][T21349] chnl_net:caif_netlink_parms(): no params data found [ 373.784941][ T57] hsr_slave_0: left promiscuous mode [ 373.800899][ T57] hsr_slave_1: left promiscuous mode [ 373.815343][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.822825][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.830478][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.837933][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.854643][ T57] veth1_macvtap: left promiscuous mode [ 373.860128][ T57] veth0_macvtap: left promiscuous mode [ 373.865605][ T57] veth1_vlan: left promiscuous mode [ 373.870803][ T57] veth0_vlan: left promiscuous mode [ 373.948392][ T57] team0 (unregistering): Port device team_slave_1 removed [ 373.958862][ T57] team0 (unregistering): Port device team_slave_0 removed [ 374.010334][T21405] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.055229][T21349] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.062328][T21349] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.069733][T21349] bridge_slave_0: entered allmulticast mode [ 374.076336][T21349] bridge_slave_0: entered promiscuous mode [ 374.083435][T21349] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.090655][T21349] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.097911][T21349] bridge_slave_1: entered allmulticast mode [ 374.104357][T21349] bridge_slave_1: entered promiscuous mode [ 374.132148][T21349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.142811][T21349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.164830][T21349] team0: Port device team_slave_0 added [ 374.175870][T21349] team0: Port device team_slave_1 added [ 374.195555][T21349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.202531][T21349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.228563][T21349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.246260][T21349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.253436][T21349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.279504][T21349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.316842][T21349] hsr_slave_0: entered promiscuous mode [ 374.323419][T21349] hsr_slave_1: entered promiscuous mode [ 374.419780][T21445] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.602035][T21349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.613316][T21468] hsr0 speed is unknown, defaulting to 1000 [ 374.620583][T21349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.647391][T21349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.670681][T21349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.695797][T21470] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.728856][T21478] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 374.742385][T21349] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.749660][T21349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.756991][T21349] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.764113][T21349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.818792][T21488] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 374.823974][T21349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.834996][T21482] loop2: detected capacity change from 0 to 512 [ 374.847513][T21349] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.854685][T21482] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 374.869213][ T9652] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.877698][ T9652] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.885863][T21482] EXT4-fs error (device loop2): ext4_get_journal_inode:5752: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 374.911756][T21482] EXT4-fs (loop2): no journal found [ 374.946733][ T9652] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.953813][ T9652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.965398][ T9652] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.971617][T21504] loop1: detected capacity change from 0 to 512 [ 374.972463][ T9652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.981269][T21504] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 374.998924][T21504] EXT4-fs (loop1): 1 truncate cleaned up [ 375.005887][T21504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.020309][T21511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.047314][T21511] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.067480][T21349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.096497][T21511] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.155986][T21511] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.204234][T21349] veth0_vlan: entered promiscuous mode [ 375.215856][T21511] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.230056][T21349] veth1_vlan: entered promiscuous mode [ 375.247066][T21349] veth0_macvtap: entered promiscuous mode [ 375.255530][T21349] veth1_macvtap: entered promiscuous mode [ 375.266614][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.269684][T21534] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 375.277130][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.297840][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.308342][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.318317][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.328969][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.339146][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.349668][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.359465][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.370048][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.387463][T21349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.398973][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.409630][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.419469][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.420891][T21540] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 375.429878][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.429897][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.458876][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.468707][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.479238][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.489092][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.499565][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.511531][T21349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.521986][T21349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.530841][T21349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.539744][T21349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.548567][T21349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.562368][T21511] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.573720][T21511] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.587759][T21511] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.605833][T21511] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.610087][T21548] loop3: detected capacity change from 0 to 512 [ 375.621896][T21548] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 375.633216][T21548] EXT4-fs (loop3): 1 truncate cleaned up [ 375.652145][T21548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.656703][T21552] 9pnet_fd: Insufficient options for proto=fd [ 375.666642][T21548] EXT4-fs error (device loop3): ext4_generic_delete_entry:2676: inode #2: block 13: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 375.691878][T21548] EXT4-fs (loop3): Remounting filesystem read-only [ 375.698455][T21548] EXT4-fs warning (device loop3): ext4_rename_delete:3738: inode #2: comm syz-executor.3: Deleting old file: nlink 4, error=-117 [ 375.726560][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.800901][T21563] loop3: detected capacity change from 0 to 2048 [ 375.808756][T21563] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.826490][T21563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.853682][T17530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.895858][T21563] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 375.910761][T21563] EXT4-fs (loop3): Remounting filesystem read-only [ 376.013786][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.016483][T21578] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.104883][T21589] loop4: detected capacity change from 0 to 512 [ 376.113420][T21589] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 376.125335][T21589] EXT4-fs (loop4): 1 truncate cleaned up [ 376.131302][T21589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.149538][T21589] EXT4-fs error (device loop4): ext4_generic_delete_entry:2676: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 376.170229][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 376.170241][ T29] audit: type=1400 audit(2000000113.470:14073): avc: denied { write } for pid=21593 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 376.178769][T21589] EXT4-fs (loop4): Remounting filesystem read-only [ 376.202939][T21589] EXT4-fs warning (device loop4): ext4_rename_delete:3738: inode #2: comm syz-executor.4: Deleting old file: nlink 4, error=-117 [ 376.218053][T21598] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 376.218225][ T29] audit: type=1400 audit(2000000113.540:14074): avc: denied { relabelfrom } for pid=21597 comm="syz-executor.1" name="" dev="pipefs" ino=92013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 376.229985][T21598] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.254965][ T29] audit: type=1400 audit(2000000113.550:14075): avc: denied { relabelto } for pid=21597 comm="syz-executor.1" name="" dev="pipefs" ino=92013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 376.291463][T21349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.357473][T21612] loop4: detected capacity change from 0 to 512 [ 376.378276][T21612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.402035][T21612] ext4 filesystem being mounted at /root/syzkaller-testdir1778393913/syzkaller.r3z3TA/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.533457][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.557717][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.574204][T21638] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 376.585960][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.599620][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.620408][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.634126][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.648562][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.663004][T21645] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.664743][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.687514][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.702672][T21349] EXT4-fs error (device loop4): ext4_empty_dir:3089: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 376.721964][T21649] 9pnet_fd: Insufficient options for proto=fd [ 376.835242][ T29] audit: type=1400 audit(2000000114.160:14076): avc: denied { accept } for pid=21663 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.849760][T21666] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 377.567161][T21720] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.653681][T21732] loop3: detected capacity change from 0 to 1024 [ 377.676877][T21732] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 377.685148][T21732] System zones: 0-1, 3-12 [ 377.689927][T21732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.740744][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.867611][T21745] loop3: detected capacity change from 0 to 512 [ 377.884117][T21747] loop2: detected capacity change from 0 to 2048 [ 377.892671][T21747] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.903195][T21745] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 377.910625][T21745] EXT4-fs (loop3): mount failed [ 377.919129][T21747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.957962][T21761] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 377.969086][T21761] team0: Device gtp0 is of different type [ 378.001577][T21747] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 378.031836][T21747] EXT4-fs (loop2): Remounting filesystem read-only [ 378.038971][T21766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 378.083135][T21771] loop0: detected capacity change from 0 to 1024 [ 378.108665][T21771] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 378.121896][ T29] audit: type=1326 audit(2000000115.440:14077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da8f1dea9 code=0x7ffc0000 [ 378.140765][T21771] System zones: [ 378.146050][ T29] audit: type=1326 audit(2000000115.440:14078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2da8f1dea9 code=0x7ffc0000 [ 378.146079][ T29] audit: type=1326 audit(2000000115.440:14079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da8f1dea9 code=0x7ffc0000 [ 378.149622][T21771] 0-1 [ 378.173679][ T29] audit: type=1326 audit(2000000115.440:14080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2da8f1dea9 code=0x7ffc0000 [ 378.197865][T21771] , 3-12 [ 378.227485][ T29] audit: type=1326 audit(2000000115.440:14081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da8f1dea9 code=0x7ffc0000 [ 378.245918][T21771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.251687][ T29] audit: type=1326 audit(2000000115.440:14082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21774 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da8f1dea9 code=0x7ffc0000 [ 378.299957][T20540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.329247][T21781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.344404][T19714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.541236][T21813] loop2: detected capacity change from 0 to 1024 [ 378.557340][T21813] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 378.565571][T21813] System zones: 0-1, 3-12 [ 378.570487][T21813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.619331][T20540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.643521][T21824] loop0: detected capacity change from 0 to 1024 [ 378.656326][T21824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.706963][T21832] loop3: detected capacity change from 0 to 512 [ 378.725190][T21832] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 378.744169][T21832] EXT4-fs error (device loop3): ext4_get_journal_inode:5752: inode #2: comm syz-executor.3: casefold flag without casefold feature [ 378.762185][T19714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.771648][T21832] EXT4-fs (loop3): no journal found [ 379.547230][T21861] 9p: Unknown Cache mode or invalid value m [ 379.579000][T21865] loop2: detected capacity change from 0 to 256 [ 379.784467][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 379.797232][T21890] nftables ruleset with unbound chain [ 379.805780][T21888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.816249][T21888] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.861854][T21888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.872303][T21888] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.884276][T21896] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 379.895925][T21896] team0: Device gtp0 is of different type [ 379.906117][T21349] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.921993][ T1621] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.952872][T21888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.963333][T21888] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.057967][T21888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.068341][T21888] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.118703][T21903] hsr0 speed is unknown, defaulting to 1000 [ 380.155460][T21888] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.163891][T21888] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.178252][T21888] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.186495][T21888] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.210536][T21888] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.218853][T21888] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.238588][T21888] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.246916][T21888] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.263509][T21927] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.311330][T21903] chnl_net:caif_netlink_parms(): no params data found [ 380.357407][T21939] loop0: detected capacity change from 0 to 1024 [ 380.365112][T21939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.366989][T21903] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.378981][T21903] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.386316][T21903] bridge_slave_0: entered allmulticast mode [ 380.393103][T21903] bridge_slave_0: entered promiscuous mode [ 380.400794][T21903] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.400954][T21939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.408099][T21903] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.427504][T21903] bridge_slave_1: entered allmulticast mode [ 380.434101][T21903] bridge_slave_1: entered promiscuous mode [ 380.456060][T19714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.468064][T21903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.480632][T21903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.502320][T21903] team0: Port device team_slave_0 added [ 380.508822][T21903] team0: Port device team_slave_1 added [ 380.525889][T21903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.532986][T21903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.558936][T21903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.568659][T21954] loop0: detected capacity change from 0 to 512 [ 380.581036][T21903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.588051][T21903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.614151][T21903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.638761][T21954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.644828][T21960] loop3: detected capacity change from 0 to 512 [ 380.660015][T21954] ext4 filesystem being mounted at /root/syzkaller-testdir1164913241/syzkaller.aVBWAm/159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.680512][T21903] hsr_slave_0: entered promiscuous mode [ 380.690770][T21903] hsr_slave_1: entered promiscuous mode [ 380.697144][T21903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.704754][T21903] Cannot create hsr debugfs directory [ 380.722677][T19714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.723544][ T1621] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.746999][T21960] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 380.764443][T21960] EXT4-fs (loop3): mount failed [ 380.781203][ T1621] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.833948][ T1621] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.917514][ T1621] bridge_slave_1: left allmulticast mode [ 380.923199][ T1621] bridge_slave_1: left promiscuous mode [ 380.928969][ T1621] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.961303][ T1621] bridge_slave_0: left allmulticast mode [ 380.967006][ T1621] bridge_slave_0: left promiscuous mode [ 380.972757][ T1621] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.097649][ T1621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.108120][ T1621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.118928][ T1621] bond0 (unregistering): Released all slaves [ 381.128387][T22004] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 381.138692][T22004] team0: Device gtp0 is of different type [ 381.179722][T22011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.196901][T22011] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.231391][T22015] loop2: detected capacity change from 0 to 512 [ 381.258149][T22015] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 381.266519][T22023] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.277553][T22015] EXT4-fs (loop2): mount failed [ 381.282457][ T1621] hsr_slave_0: left promiscuous mode [ 381.290304][ T1621] hsr_slave_1: left promiscuous mode [ 381.296464][ T1621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.303904][ T1621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.313999][ T1621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.321567][ T1621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.331228][ T1621] veth1_macvtap: left promiscuous mode [ 381.336750][ T1621] veth0_macvtap: left promiscuous mode [ 381.342279][ T1621] veth1_vlan: left promiscuous mode [ 381.347563][ T1621] veth0_vlan: left promiscuous mode [ 381.473614][ T1621] team0 (unregistering): Port device team_slave_1 removed [ 381.485248][ T1621] team0 (unregistering): Port device team_slave_0 removed [ 381.543341][T22033] loop3: detected capacity change from 0 to 512 [ 381.558009][T22033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.575416][T22033] ext4 filesystem being mounted at /root/syzkaller-testdir1991208221/syzkaller.Er4L97/508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.607433][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.684202][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.729437][T22049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.745548][T21903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.765704][T22058] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.767462][T21903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.785031][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 381.785045][ T29] audit: type=1326 audit(2000000119.100:14195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.815420][ T29] audit: type=1326 audit(2000000119.100:14196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.842367][ T29] audit: type=1326 audit(2000000119.110:14197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.866668][ T29] audit: type=1326 audit(2000000119.110:14198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.890904][ T29] audit: type=1326 audit(2000000119.110:14199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.915121][ T29] audit: type=1326 audit(2000000119.170:14200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.939206][ T29] audit: type=1326 audit(2000000119.170:14201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.963458][ T29] audit: type=1326 audit(2000000119.170:14202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.963546][ T29] audit: type=1326 audit(2000000119.170:14203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.963568][ T29] audit: type=1326 audit(2000000119.170:14204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 381.964149][T21903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.061706][T21903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.112556][T21903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.120086][T22068] loop3: detected capacity change from 0 to 512 [ 382.136903][T21903] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.155209][ T9631] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.162338][ T9631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.175707][ T9631] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.182868][ T9631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.193655][T22068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.220667][T22068] ext4 filesystem being mounted at /root/syzkaller-testdir1991208221/syzkaller.Er4L97/514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.290184][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.330377][T21903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.471199][T21903] veth0_vlan: entered promiscuous mode [ 382.483917][T21903] veth1_vlan: entered promiscuous mode [ 382.503262][T22116] loop0: detected capacity change from 0 to 512 [ 382.507557][T21903] veth0_macvtap: entered promiscuous mode [ 382.518455][T21903] veth1_macvtap: entered promiscuous mode [ 382.531102][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.541744][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.546705][T22116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.551640][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.565309][T22116] ext4 filesystem being mounted at /root/syzkaller-testdir1164913241/syzkaller.aVBWAm/176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.574515][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.574535][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.609948][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.619811][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.630233][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.640100][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.650542][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.661899][T21903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.670471][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.681045][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.691054][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.701512][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.711342][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.721771][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.731609][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.742146][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.751970][T21903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.762410][T21903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.774026][T21903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.783829][T19714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.804722][T21903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.813474][T21903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.822209][T21903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.831004][T21903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.858067][T22129] loop1: detected capacity change from 0 to 2048 [ 382.878363][T22133] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 382.878363][T22133] program syz-executor.0 not setting count and/or reply_len properly [ 382.920723][T22140] loop0: detected capacity change from 0 to 512 [ 382.939440][T22140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.952268][T22140] ext4 filesystem being mounted at /root/syzkaller-testdir1164913241/syzkaller.aVBWAm/178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.982218][T22140] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.039652][T22140] tmpfs: Bad value for 'context' [ 383.060791][T22164] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 383.108387][T22173] tmpfs: Unknown parameter 'contextt/tun' [ 383.132624][T22176] loop4: detected capacity change from 0 to 512 [ 383.158368][T22176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.171486][T22176] ext4 filesystem being mounted at /root/syzkaller-testdir1375994782/syzkaller.HQQN6E/9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.203215][T21903] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor.4: path /root/syzkaller-testdir1375994782/syzkaller.HQQN6E/9/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 383.713043][T22192] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.793991][T22196] Process accounting resumed [ 383.826117][T22201] tmpfs: Unknown parameter 'contextt/tun' [ 383.867084][T22208] loop3: detected capacity change from 0 to 1024 [ 383.967600][T22214] loop3: detected capacity change from 0 to 512 [ 383.986557][T22214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.007250][T22214] ext4 filesystem being mounted at /root/syzkaller-testdir1991208221/syzkaller.Er4L97/532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.078758][T22225] Process accounting resumed [ 384.122991][T22231] tmpfs: Unknown parameter 'contextt/tun' [ 384.130592][T22229] bridge_slave_0: left allmulticast mode [ 384.136317][T22229] bridge_slave_0: left promiscuous mode [ 384.142029][T22229] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.159187][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.171315][T22229] bridge_slave_1: left allmulticast mode [ 384.177261][T22229] bridge_slave_1: left promiscuous mode [ 384.182964][T22229] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.197638][T22229] bond0: (slave bond_slave_0): Releasing backup interface [ 384.214051][T22229] bond0: (slave bond_slave_1): Releasing backup interface [ 384.235740][T22229] team0: Port device team_slave_0 removed [ 384.255693][T22229] team0: Port device team_slave_1 removed [ 384.272646][T22229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.280205][T22229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.295964][T22229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.303510][T22229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.319404][T22239] loop3: detected capacity change from 0 to 1024 [ 384.613917][T22277] loop1: detected capacity change from 0 to 1024 [ 384.716764][T22282] tipc: Started in network mode [ 384.721671][T22282] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 384.739994][T22282] tipc: Enabled bearer , priority 10 [ 384.747327][T22285] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.808438][T22293] Process accounting resumed [ 385.390872][T22268] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 385.402237][T22268] CPU: 0 PID: 22268 Comm: syz-executor.3 Not tainted 6.10.0-rc3-syzkaller-00109-g0cac73eb3875 #0 [ 385.412748][T22268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 385.422923][T22268] Call Trace: [ 385.426196][T22268] [ 385.429207][T22268] dump_stack_lvl+0xf2/0x150 [ 385.433872][T22268] dump_stack+0x15/0x20 [ 385.438093][T22268] dump_header+0x83/0x2d0 [ 385.442522][T22268] oom_kill_process+0x33e/0x4c0 [ 385.447412][T22268] out_of_memory+0x9af/0xbe0 [ 385.452157][T22268] mem_cgroup_out_of_memory+0x13e/0x190 [ 385.457776][T22268] try_charge_memcg+0x745/0xcd0 [ 385.462624][T22268] ? _raw_spin_unlock+0x26/0x50 [ 385.467501][T22268] ? radix_tree_lookup+0xf9/0x150 [ 385.472577][T22268] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 385.478825][T22268] __read_swap_cache_async+0x2b9/0x520 [ 385.484391][T22268] swap_cluster_readahead+0x276/0x3f0 [ 385.489770][T22268] swapin_readahead+0xe2/0x7a0 [ 385.494544][T22268] ? __filemap_get_folio+0x420/0x5b0 [ 385.499951][T22268] ? swap_cache_get_folio+0x6e/0x210 [ 385.505248][T22268] do_swap_page+0x3bc/0x1840 [ 385.509838][T22268] ? exc_page_fault+0x32e/0x650 [ 385.514690][T22268] ? __rcu_read_lock+0x36/0x50 [ 385.519507][T22268] handle_mm_fault+0x809/0x2a80 [ 385.524433][T22268] ? mas_walk+0x204/0x320 [ 385.528798][T22268] exc_page_fault+0x3b9/0x650 [ 385.533520][T22268] asm_exc_page_fault+0x26/0x30 [ 385.538368][T22268] RIP: 0033:0x7ff6ed2e9bef [ 385.542909][T22268] Code: 89 f5 44 88 7c 24 0e 44 88 7c 24 0f 49 89 ff 44 89 e8 4d 8b 67 28 4c 03 24 c3 4b 8d 04 04 48 3d ff ff ff 7e 0f 87 59 01 00 00 <80> 3d aa 74 17 00 00 4d 89 e6 75 30 81 e6 ff 0f 00 00 83 f6 3d 8d [ 385.562630][T22268] RSP: 002b:00007ffe7809aeb0 EFLAGS: 00010293 [ 385.568707][T22268] RAX: 0000000003e10049 RBX: 00007ff6eccb0008 RCX: 0000001b2e220000 [ 385.576679][T22268] RDX: 0000001b2e22e6e4 RSI: ffffffff83e0ffaf RDI: ffffffff83e0ff95 [ 385.584681][T22268] RBP: 0000000000000013 R08: 0000000080000000 R09: 0000000000000000 [ 385.592642][T22268] R10: 00007ff6ed43b0b8 R11: 0000000083e0ff95 R12: ffffffff83e10049 [ 385.600629][T22268] R13: 0000000000000019 R14: ffffffff83e0ff95 R15: 00007ff6ed465018 [ 385.608661][T22268] ? ____sys_sendmsg+0x245/0x410 [ 385.613600][T22268] ? ____sys_sendmsg+0x2f9/0x410 [ 385.618569][T22268] ? ____sys_sendmsg+0x25f/0x410 [ 385.623515][T22268] ? ____sys_sendmsg+0x245/0x410 [ 385.628511][T22268] [ 385.631918][T22268] memory: usage 307192kB, limit 307200kB, failcnt 125 [ 385.638980][T22268] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 385.646970][T22268] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 385.654242][T22268] Memory cgroup stats for /syz3: [ 385.654389][T22268] cache 20480 [ 385.662593][T22268] rss 0 [ 385.665352][T22268] shmem 0 [ 385.668276][T22268] mapped_file 0 [ 385.671725][T22268] dirty 0 [ 385.674672][T22268] writeback 0 [ 385.678013][T22268] workingset_refault_anon 59 [ 385.682685][T22268] workingset_refault_file 14 [ 385.687266][T22268] swap 380928 [ 385.690535][T22268] swapcached 4096 [ 385.694222][T22268] pgpgin 267932 [ 385.697678][T22268] pgpgout 267926 [ 385.701210][T22268] pgfault 377887 [ 385.704816][T22268] pgmajfault 65 [ 385.708268][T22268] inactive_anon 4096 [ 385.712141][T22268] active_anon 0 [ 385.715609][T22268] inactive_file 12288 [ 385.719632][T22268] active_file 8192 [ 385.723344][T22268] unevictable 0 [ 385.726861][T22268] hierarchical_memory_limit 314572800 [ 385.732228][T22268] hierarchical_memsw_limit 9223372036854771712 [ 385.738616][T22268] total_cache 20480 [ 385.742423][T22268] total_rss 0 [ 385.745768][T22268] total_shmem 0 [ 385.749214][T22268] total_mapped_file 0 [ 385.753185][T22268] total_dirty 0 [ 385.756666][T22268] total_writeback 0 [ 385.760464][T22268] total_workingset_refault_anon 59 [ 385.765643][T22268] total_workingset_refault_file 14 [ 385.770784][T22268] total_swap 380928 [ 385.774612][T22268] total_swapcached 4096 [ 385.778825][T22268] total_pgpgin 267934 [ 385.782791][T22268] total_pgpgout 267928 [ 385.787055][T22268] total_pgfault 377915 [ 385.791398][T22268] total_pgmajfault 65 [ 385.795386][T22268] total_inactive_anon 4096 [ 385.799822][T22268] total_active_anon 0 [ 385.803863][T22268] total_inactive_file 12288 [ 385.808447][T22268] total_active_file 8192 [ 385.812683][T22268] total_unevictable 0 [ 385.813828][T22304] bridge_slave_0: left allmulticast mode [ 385.816670][T22268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3 [ 385.822295][T22304] bridge_slave_0: left promiscuous mode [ 385.822395][T22304] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.830184][T22268] ,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22268,uid=0 [ 385.852526][T22268] Memory cgroup out of memory: Killed process 22268 (syz-executor.3) total-vm:48620kB, anon-rss:548kB, file-rss:8876kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 385.870344][ T3180] tipc: Node number set to 4269801488 [ 385.925682][T22304] bridge_slave_1: left allmulticast mode [ 385.931334][T22304] bridge_slave_1: left promiscuous mode [ 385.937233][T22304] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.967720][T22304] bond0: (slave bond_slave_0): Releasing backup interface [ 385.993190][T22304] bond0: (slave bond_slave_1): Releasing backup interface [ 386.020494][T22304] team0: Port device team_slave_0 removed [ 386.047958][T22304] team0: Port device team_slave_1 removed [ 386.075339][T22304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.082757][T22304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.105666][T22304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.113114][T22304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.274839][T22270] syz-executor.3 (22270) used greatest stack depth: 7184 bytes left [ 386.398680][T22330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 386.644746][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.311073][T22340] syz-executor.2 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 387.325619][T22340] CPU: 1 PID: 22340 Comm: syz-executor.2 Not tainted 6.10.0-rc3-syzkaller-00109-g0cac73eb3875 #0 [ 387.336174][T22340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 387.346287][T22340] Call Trace: [ 387.349569][T22340] [ 387.352494][T22340] dump_stack_lvl+0xf2/0x150 [ 387.357085][T22340] dump_stack+0x15/0x20 [ 387.361244][T22340] dump_header+0x83/0x2d0 [ 387.365593][T22340] oom_kill_process+0x33e/0x4c0 [ 387.370465][T22340] out_of_memory+0x9af/0xbe0 [ 387.375078][T22340] mem_cgroup_out_of_memory+0x13e/0x190 [ 387.380718][T22340] try_charge_memcg+0x745/0xcd0 [ 387.385606][T22340] ? get_page_from_freelist+0x1a2a/0x1a70 [ 387.391408][T22340] obj_cgroup_charge_pages+0xbd/0x1d0 [ 387.396858][T22340] __memcg_kmem_charge_page+0x9d/0x170 [ 387.402503][T22340] __alloc_pages_noprof+0x1bc/0x360 [ 387.407771][T22340] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 387.413221][T22340] alloc_pages_noprof+0xe1/0x100 [ 387.418264][T22340] __vmalloc_node_range_noprof+0x719/0xef0 [ 387.424082][T22340] kvmalloc_node_noprof+0x121/0x170 [ 387.429360][T22340] ? ip_set_alloc+0x1f/0x30 [ 387.433873][T22340] ip_set_alloc+0x1f/0x30 [ 387.438260][T22340] hash_netiface_create+0x273/0x730 [ 387.443459][T22340] ? __nla_parse+0x40/0x60 [ 387.447876][T22340] ? __pfx_hash_netiface_create+0x10/0x10 [ 387.453677][T22340] ip_set_create+0x359/0x8a0 [ 387.458343][T22340] ? memchr+0x1/0x50 [ 387.462239][T22340] ? __nla_parse+0x40/0x60 [ 387.466713][T22340] nfnetlink_rcv_msg+0x4a9/0x570 [ 387.471681][T22340] netlink_rcv_skb+0x12c/0x230 [ 387.476447][T22340] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 387.481927][T22340] nfnetlink_rcv+0x16c/0x15b0 [ 387.486638][T22340] ? kmem_cache_free+0xd8/0x280 [ 387.491505][T22340] ? nlmon_xmit+0x51/0x60 [ 387.495841][T22340] ? __kfree_skb+0x102/0x150 [ 387.500432][T22340] ? consume_skb+0x57/0x180 [ 387.504997][T22340] ? nlmon_xmit+0x51/0x60 [ 387.509393][T22340] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 387.514695][T22340] ? __dev_queue_xmit+0xb21/0x1e50 [ 387.519827][T22340] ? ref_tracker_free+0x3a5/0x410 [ 387.524935][T22340] ? __netlink_deliver_tap+0x495/0x4c0 [ 387.530411][T22340] netlink_unicast+0x58d/0x660 [ 387.535190][T22340] netlink_sendmsg+0x5ca/0x6e0 [ 387.539969][T22340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.545288][T22340] __sock_sendmsg+0x140/0x180 [ 387.549975][T22340] ____sys_sendmsg+0x312/0x410 [ 387.554777][T22340] __sys_sendmsg+0x1e9/0x280 [ 387.559375][T22340] ? futex_wait+0x18e/0x1c0 [ 387.563889][T22340] __x64_sys_sendmsg+0x46/0x50 [ 387.568689][T22340] x64_sys_call+0xb25/0x2d70 [ 387.573318][T22340] do_syscall_64+0xc9/0x1c0 [ 387.577814][T22340] ? clear_bhb_loop+0x55/0xb0 [ 387.582606][T22340] ? clear_bhb_loop+0x55/0xb0 [ 387.587342][T22340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.593310][T22340] RIP: 0033:0x7f2f66b03ea9 [ 387.597733][T22340] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 387.617397][T22340] RSP: 002b:00007f2f65e7e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.625819][T22340] RAX: ffffffffffffffda RBX: 00007f2f66c3af80 RCX: 00007f2f66b03ea9 [ 387.633834][T22340] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 387.641887][T22340] RBP: 00007f2f66b72ff4 R08: 0000000000000000 R09: 0000000000000000 [ 387.649872][T22340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.657930][T22340] R13: 000000000000000b R14: 00007f2f66c3af80 R15: 00007ffd9fc818a8 [ 387.665904][T22340] [ 387.668967][T22340] memory: usage 307200kB, limit 307200kB, failcnt 679 [ 387.676019][T22340] memory+swap: usage 307616kB, limit 9007199254740988kB, failcnt 0 [ 387.684049][T22340] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 387.691392][T22340] Memory cgroup stats for /syz2: [ 387.691540][T22340] cache 4096 [ 387.699777][T22340] rss 28672 [ 387.702882][T22340] shmem 0 [ 387.705886][T22340] mapped_file 0 [ 387.709335][T22340] dirty 0 [ 387.712311][T22340] writeback 0 [ 387.715848][T22340] workingset_refault_anon 207 [ 387.720518][T22340] workingset_refault_file 5 [ 387.725085][T22340] swap 405504 [ 387.728421][T22340] swapcached 28672 [ 387.732211][T22340] pgpgin 231466 [ 387.735705][T22340] pgpgout 231458 [ 387.739251][T22340] pgfault 343593 [ 387.742785][T22340] pgmajfault 111 [ 387.746371][T22340] inactive_anon 0 [ 387.750016][T22340] active_anon 0 [ 387.753461][T22340] inactive_file 4096 [ 387.757381][T22340] active_file 0 [ 387.760825][T22340] unevictable 0 [ 387.764267][T22340] hierarchical_memory_limit 314572800 [ 387.769703][T22340] hierarchical_memsw_limit 9223372036854771712 [ 387.775887][T22340] total_cache 4096 [ 387.779603][T22340] total_rss 28672 [ 387.783297][T22340] total_shmem 0 [ 387.786791][T22340] total_mapped_file 0 [ 387.790755][T22340] total_dirty 0 [ 387.794205][T22340] total_writeback 0 [ 387.798102][T22340] total_workingset_refault_anon 207 [ 387.803286][T22340] total_workingset_refault_file 5 [ 387.808314][T22340] total_swap 405504 [ 387.812170][T22340] total_swapcached 28672 [ 387.816480][T22340] total_pgpgin 231466 [ 387.820450][T22340] total_pgpgout 231458 [ 387.824571][T22340] total_pgfault 343597 [ 387.828636][T22340] total_pgmajfault 111 [ 387.832764][T22340] total_inactive_anon 0 [ 387.836944][T22340] total_active_anon 0 [ 387.840911][T22340] total_inactive_file 4096 [ 387.845332][T22340] total_active_file 0 [ 387.849294][T22340] total_unevictable 0 [ 387.853341][T22340] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=22338,uid=0 [ 387.868726][T22340] Memory cgroup out of memory: Killed process 22338 (syz-executor.2) total-vm:48620kB, anon-rss:516kB, file-rss:8852kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 388.061348][T22373] loop3: detected capacity change from 0 to 512 [ 388.084903][T22373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.104849][T22373] ext4 filesystem being mounted at /root/syzkaller-testdir1991208221/syzkaller.Er4L97/551/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.369301][T22394] loop2: detected capacity change from 0 to 2048 [ 388.395667][T22389] syzkaller0: entered promiscuous mode [ 388.401367][T22389] syzkaller0: entered allmulticast mode [ 388.488795][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.612201][T22404] loop3: detected capacity change from 0 to 1024 [ 388.631978][T22404] EXT4-fs: Ignoring removed orlov option [ 388.648048][T22404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 388.648824][T22409] tap0: tun_chr_ioctl cmd 2147767511 [ 388.670677][T22404] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 388.681642][T22404] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 388.696706][T22404] EXT4-fs (loop3): invalid journal inode [ 388.702386][T22404] EXT4-fs (loop3): can't get journal size [ 388.710428][T22404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 388.767697][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.002527][T22429] syzkaller0: entered promiscuous mode [ 389.008647][T22429] syzkaller0: entered allmulticast mode [ 389.031019][T22433] loop3: detected capacity change from 0 to 512 [ 389.042238][T22433] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap [ 389.055249][T22433] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 389.064785][T22433] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 3 (level 2) [ 389.094729][T22433] EXT4-fs (loop3): 1 orphan inode deleted [ 389.100562][T22433] EXT4-fs (loop3): 1 truncate cleaned up [ 389.119520][T22433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.163811][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.220461][T22442] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.231833][T22442] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 389.258779][T22442] IPv6: NLM_F_REPLACE set, but no existing node found! [ 389.312050][T22452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 389.382773][T22463] loop2: detected capacity change from 0 to 512 [ 389.406399][T22463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 5: invalid block bitmap [ 389.437288][T22471] loop3: detected capacity change from 0 to 2048 [ 389.443686][T22463] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 389.454916][T22463] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 3 (level 2) [ 389.470417][T22463] EXT4-fs (loop2): 1 orphan inode deleted [ 389.476210][T22463] EXT4-fs (loop2): 1 truncate cleaned up [ 389.485061][T22463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.499275][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 389.499288][ T29] audit: type=1326 audit(2000000126.820:14270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22462 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b673ea9 code=0x7fc00000 [ 389.529557][ T29] audit: type=1326 audit(2000000126.820:14271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22462 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f435b673ea9 code=0x7fc00000 [ 389.675352][T20540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.713706][T22474] syzkaller0: entered promiscuous mode [ 389.719795][T22474] syzkaller0: entered allmulticast mode [ 389.754221][T22479] loop2: detected capacity change from 0 to 256 [ 389.781292][T22479] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 389.799233][ T29] audit: type=1400 audit(2000000127.120:14272): avc: denied { execute } for pid=22478 comm="syz-executor.2" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 390.008259][T22496] loop1: detected capacity change from 0 to 8192 [ 390.069402][T22502] loop2: detected capacity change from 0 to 512 [ 390.083938][T22502] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 5: invalid block bitmap [ 390.097820][T22502] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 390.107034][T22502] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 3 (level 2) [ 390.121762][T22502] EXT4-fs (loop2): 1 orphan inode deleted [ 390.127615][T22502] EXT4-fs (loop2): 1 truncate cleaned up [ 390.134182][T22502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.162262][T20540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.196615][ T29] audit: type=1326 audit(2000000127.520:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22462 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b673ea9 code=0x7fc00000 [ 390.273933][T22508] loop2: detected capacity change from 0 to 128 [ 390.288349][T22508] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.301561][T22508] ext4 filesystem being mounted at /root/syzkaller-testdir1184446013/syzkaller.repeWX/137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 390.378273][T22518] team0: Device ipvlan2 failed to register rx_handler [ 390.464454][ T29] audit: type=1326 audit(2000000127.770:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22520 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 390.488651][ T29] audit: type=1326 audit(2000000127.780:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22520 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 390.512832][ T29] audit: type=1326 audit(2000000127.780:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22520 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 390.536926][ T29] audit: type=1326 audit(2000000127.780:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22520 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 390.561113][ T29] audit: type=1326 audit(2000000127.780:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22520 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7ffc0000 [ 390.585280][ T29] audit: type=1326 audit(2000000127.780:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22520 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6ed32b627 code=0x7ffc0000 [ 390.630838][T22525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.700232][T20540] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.829265][T22548] team0: Device ipvlan2 failed to register rx_handler [ 390.890076][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.068846][T22571] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 391.130619][T22577] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 391.143413][T22577] team_slave_0: entered promiscuous mode [ 391.149092][T22577] team_slave_1: entered promiscuous mode [ 391.156049][T22577] macvtap1: entered promiscuous mode [ 391.161394][T22577] team0: entered promiscuous mode [ 391.167959][T22577] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 391.176682][T22577] team0: Device macvtap1 is already an upper device of the team interface [ 391.191080][T22577] team0: left promiscuous mode [ 391.196099][T22577] team_slave_0: left promiscuous mode [ 391.201494][T22577] team_slave_1: left promiscuous mode [ 391.224794][T22580] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 391.331121][T22589] team0: Device ipvlan2 failed to register rx_handler [ 391.580043][T22603] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 391.675543][T22613] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 391.688295][T22613] team_slave_0: entered promiscuous mode [ 391.693998][T22613] team_slave_1: entered promiscuous mode [ 391.700143][T22613] macvtap1: entered promiscuous mode [ 391.705513][T22613] team0: entered promiscuous mode [ 391.714876][T22613] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 391.723520][T22613] team0: Device macvtap1 is already an upper device of the team interface [ 391.733384][T22613] team0: left promiscuous mode [ 391.738609][T22613] team_slave_0: left promiscuous mode [ 391.744015][T22613] team_slave_1: left promiscuous mode [ 391.767194][T22621] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 391.878136][ T57] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.913252][T22625] loop3: detected capacity change from 0 to 512 [ 391.938308][T22625] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap [ 391.955146][ T57] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.964972][T22625] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 391.976196][T22630] loop2: detected capacity change from 0 to 128 [ 391.990539][T22625] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 3 (level 2) [ 392.006526][T22625] EXT4-fs (loop3): 1 orphan inode deleted [ 392.006955][T22630] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.012270][T22625] EXT4-fs (loop3): 1 truncate cleaned up [ 392.033072][ T57] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.044107][T22625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.058924][T22630] ext4 filesystem being mounted at /root/syzkaller-testdir1184446013/syzkaller.repeWX/142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 392.106266][ T57] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.207965][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.275553][T22644] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 392.337049][T22648] loop1: detected capacity change from 0 to 512 [ 392.360069][ T57] bond0 (unregistering): Released all slaves [ 392.367253][T22648] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 392.379789][T22648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 392.387852][T22631] hsr0 speed is unknown, defaulting to 1000 [ 392.401096][T22648] System zones: 0-2, 18-18, 34-34 [ 392.413233][T22648] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 392.429041][T22648] EXT4-fs (loop1): 1 truncate cleaned up [ 392.437925][T22648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.521286][T20540] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.567196][ T57] hsr_slave_0: left promiscuous mode [ 392.577943][ T57] hsr_slave_1: left promiscuous mode [ 392.604768][ T57] veth1_macvtap: left promiscuous mode [ 392.610256][ T57] veth0_macvtap: left promiscuous mode [ 392.615806][ T57] veth1_vlan: left promiscuous mode [ 392.621080][ T57] veth0_vlan: left promiscuous mode [ 392.781241][T17530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.850193][T22657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 392.876990][T22673] loop1: detected capacity change from 0 to 764 [ 392.880194][T22671] loop2: detected capacity change from 0 to 1024 [ 392.904119][T22631] chnl_net:caif_netlink_parms(): no params data found [ 392.913062][T22673] rock: directory entry would overflow storage [ 392.919281][T22673] rock: sig=0x4f50, size=4, remaining=3 [ 392.924859][T22673] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 392.959657][T22671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 392.976292][T22671] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 392.996797][T22631] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.003856][T22631] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.011283][T22631] bridge_slave_0: entered allmulticast mode [ 393.017896][T22631] bridge_slave_0: entered promiscuous mode [ 393.026151][T22631] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.033272][T22631] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.041956][T22671] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 393.044339][T22631] bridge_slave_1: entered allmulticast mode [ 393.056587][T22631] bridge_slave_1: entered promiscuous mode [ 393.083228][T22671] EXT4-fs (loop2): orphan cleanup on readonly fs [ 393.111299][T22631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.134997][T22631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.176913][T22631] team0: Port device team_slave_0 added [ 393.183487][T22631] team0: Port device team_slave_1 added [ 393.195380][T22671] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 393.228734][T22671] EXT4-fs (loop2): Remounting filesystem read-only [ 393.235702][T22671] EXT4-fs (loop2): 1 orphan inode deleted [ 393.242175][T22631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.249689][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.275604][T22631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.289439][T22631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.296483][T22631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.322482][T22631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.348716][T22631] hsr_slave_0: entered promiscuous mode [ 393.354791][T22631] hsr_slave_1: entered promiscuous mode [ 393.366866][T22671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.411350][T22671] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 393.599723][T22631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.608354][T22631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.618106][T22631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.627389][T22631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.643074][T22631] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.650245][T22631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.657538][T22631] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.664663][T22631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.714146][T22631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.735384][ T9641] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.744620][ T9641] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.764639][T22631] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.775115][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.782191][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.786687][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.796901][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.847949][T22631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.941801][T22631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.094086][T22631] veth0_vlan: entered promiscuous mode [ 394.111575][T22631] veth1_vlan: entered promiscuous mode [ 394.128264][T22631] veth0_macvtap: entered promiscuous mode [ 394.149059][T22631] veth1_macvtap: entered promiscuous mode [ 394.165967][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.176510][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.186337][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.196914][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.206738][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.217310][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.227326][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.237819][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.249330][T22631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.258324][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.268822][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.278753][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.289447][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.299305][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.309785][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.319794][T22631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.330271][T22631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.342067][T22631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.353057][T22757] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 394.365106][T22631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.373866][T22631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.382615][T22631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.391360][T22631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.478212][T22768] loop1: detected capacity change from 0 to 128 [ 394.491193][T22768] ext4 filesystem being mounted at /root/syzkaller-testdir1633690706/syzkaller.D5M0oV/471/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 394.492428][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.614173][T22776] hsr0 speed is unknown, defaulting to 1000 [ 394.652228][T22780] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 394.661369][T22781] pimreg: entered allmulticast mode [ 394.678999][T22781] pimreg: left allmulticast mode [ 394.732281][T22787] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 394.815620][T22797] loop3: detected capacity change from 0 to 128 [ 394.836155][T22797] ext4 filesystem being mounted at /root/syzkaller-testdir1991208221/syzkaller.Er4L97/589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 395.132306][T22823] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 395.275092][T22833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.329877][T22823] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.337108][T22823] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.424256][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 395.424300][ T29] audit: type=1326 audit(2000000132.740:14367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22829 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7fc00000 [ 395.489304][ T29] audit: type=1326 audit(2000000132.780:14368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22829 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6ed32dea9 code=0x7fc00000 [ 395.631105][T22823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.652814][T22823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.720142][T22823] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.729350][T22823] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.738569][T22823] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.747618][T22823] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.027647][T22857] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 396.035882][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.055713][T22857] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 396.079369][ T29] audit: type=1326 audit(2000000133.400:14369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22829 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ed32dea9 code=0x7fc00000 [ 396.506108][ T29] audit: type=1326 audit(2000000133.830:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22882 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ea2eea9 code=0x7fc00000 [ 396.551360][ T29] audit: type=1326 audit(2000000133.860:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22882 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f238ea2eea9 code=0x7fc00000 [ 397.161219][T22912] loop2: detected capacity change from 0 to 8192 [ 397.204747][T22912] loop2: p1 < > p2 p3 < p5 > [ 397.209471][T22912] loop2: partition table partially beyond EOD, truncated [ 397.217882][T22912] loop2: p1 start 277760 is beyond EOD, truncated [ 397.224374][T22912] loop2: p2 start 6684676 is beyond EOD, truncated [ 397.231259][ T29] audit: type=1326 audit(2000000134.550:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22882 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ea2eea9 code=0x7fc00000 [ 397.231939][T22912] loop2: p5 start 6684676 is beyond EOD, truncated [ 397.437600][T22938] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0002 [ 397.446000][T22938] tipc: Enabled bearer , priority 10 [ 397.572525][ T29] audit: type=1326 audit(2000000134.890:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22940 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ea2eea9 code=0x7fc00000 [ 397.608186][ T29] audit: type=1326 audit(2000000134.930:14374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22940 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f238ea2eea9 code=0x7fc00000 [ 397.678723][T22967] tipc: Started in network mode [ 397.683686][T22967] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 397.693366][T22967] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ac1e:0003 [ 397.701713][T22967] tipc: Enabled bearer , priority 10 [ 397.932436][T22973] loop1: detected capacity change from 0 to 2048 [ 397.946821][T22982] hsr0 speed is unknown, defaulting to 1000 [ 397.955276][T22984] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 397.980992][T22985] pimreg: entered allmulticast mode [ 397.989072][T22973] loop1: p1 < > p4 [ 398.006985][T22973] loop1: p4 size 8388608 extends beyond EOD, truncated [ 398.017495][T22985] pimreg: left allmulticast mode [ 398.257502][T23002] ipt_rpfilter: unknown options [ 398.311286][ T29] audit: type=1326 audit(2000000135.619:14375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22940 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ea2eea9 code=0x7fc00000 [ 398.381895][T23010] dccp_invalid_packet: P.Data Offset(0) too small [ 398.402402][T23011] loop2: detected capacity change from 0 to 512 [ 398.422070][T23011] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 398.442242][T23011] EXT4-fs (loop2): orphan cleanup on readonly fs [ 398.460903][T23011] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 398.489609][T23011] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 398.496898][T23011] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #16: comm syz-executor.2: casefold flag without casefold feature [ 398.521010][T23011] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 398.790441][T23032] ipt_rpfilter: unknown options [ 398.859166][ T35] tipc: Node number set to 1 [ 398.959390][T23045] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 398.967644][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 398.989400][T23045] (unnamed net_device) (uninitialized): option coupled_control: invalid value (116) [ 399.131566][T23054] mmap: syz-executor.0 (23054): VmData 167407616 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 399.381239][T23072] xt_l2tp: v2 doesn't support IP mode [ 399.426540][T23077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23077 comm=syz-executor.1 [ 399.439821][T23077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.539684][T23084] dccp_invalid_packet: P.Data Offset(0) too small [ 399.881782][T23087] loop2: detected capacity change from 0 to 1024 [ 399.901174][T23087] EXT4-fs mount: 7 callbacks suppressed [ 399.901187][T23087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.930724][T20540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.029001][T23098] ipt_rpfilter: unknown options [ 400.068104][T23102] xt_l2tp: v2 doesn't support IP mode [ 400.105115][T20540] syz_tun (unregistering): left promiscuous mode [ 400.407806][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.480339][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.491925][ T29] audit: type=1326 audit(2000000137.627:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da8f1dea9 code=0x7fc00000 [ 400.622891][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.725030][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.244737][ T40] bond0 (unregistering): Released all slaves [ 401.264355][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 401.264370][ T29] audit: type=1326 audit(2000000138.347:14378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23109 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da8f1dea9 code=0x7fc00000 [ 401.306248][T23115] hsr0 speed is unknown, defaulting to 1000 [ 401.319172][ T40] tipc: Disabling bearer [ 401.324406][ T40] tipc: Left network mode [ 401.405919][T23129] hsr0 speed is unknown, defaulting to 1000 [ 401.427214][T23153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23153 comm=syz-executor.3 [ 401.466635][T23153] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 401.498601][T23153] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.506979][T23153] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.515360][T23153] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.523578][T23153] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.576533][T23153] vxlan0: entered promiscuous mode [ 401.612662][ T40] batadv_slave_0: left promiscuous mode [ 401.621681][ T40] hsr_slave_0: left promiscuous mode [ 401.638866][ T40] hsr_slave_1: left promiscuous mode [ 401.657875][ T40] veth1_macvtap: left promiscuous mode [ 401.663403][ T40] veth0_macvtap: left promiscuous mode [ 401.668933][ T40] veth1_vlan: left promiscuous mode [ 401.674201][ T40] veth0_vlan: left promiscuous mode [ 401.860006][T23115] chnl_net:caif_netlink_parms(): no params data found [ 402.005429][T17530] syz_tun (unregistering): left promiscuous mode [ 402.070147][T23115] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.077292][T23115] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.094610][T23115] bridge_slave_0: entered allmulticast mode [ 402.103474][T23115] bridge_slave_0: entered promiscuous mode [ 402.112404][T23129] chnl_net:caif_netlink_parms(): no params data found [ 402.125790][T23115] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.132998][T23115] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.140865][T23115] bridge_slave_1: entered allmulticast mode [ 402.147489][T23115] bridge_slave_1: entered promiscuous mode [ 402.203990][T23172] hsr0 speed is unknown, defaulting to 1000 [ 402.212891][T23115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.234342][T23115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.256351][T23129] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.263557][T23129] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.296557][T23129] bridge_slave_0: entered allmulticast mode [ 402.316987][T23129] bridge_slave_0: entered promiscuous mode [ 402.323074][T23190] loop3: detected capacity change from 0 to 512 [ 402.350944][T23129] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.358022][T23129] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.366735][T23190] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 402.381774][T23129] bridge_slave_1: entered allmulticast mode [ 402.388186][T23129] bridge_slave_1: entered promiscuous mode [ 402.394265][T23190] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 402.413317][T23115] team0: Port device team_slave_0 added [ 402.419783][T23115] team0: Port device team_slave_1 added [ 402.425748][T23190] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.489888][T23129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.500128][T23115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.507173][T23115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.533239][T23115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.544193][T16941] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 402.554925][T23115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.561905][T23115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.587900][T23115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.601930][T23129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.632313][T23129] team0: Port device team_slave_0 added [ 402.651485][T23129] team0: Port device team_slave_1 added [ 402.666916][T23115] hsr_slave_0: entered promiscuous mode [ 402.683983][T23115] hsr_slave_1: entered promiscuous mode [ 402.695091][T23115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.702639][T23115] Cannot create hsr debugfs directory [ 402.766931][T23129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.773923][T23129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.799957][T23129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.858688][T23129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.865652][T23129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.891749][T23129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.932592][T23172] chnl_net:caif_netlink_parms(): no params data found [ 403.045617][T23129] hsr_slave_0: entered promiscuous mode [ 403.053876][T23129] hsr_slave_1: entered promiscuous mode [ 403.065925][T23129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.073489][T23129] Cannot create hsr debugfs directory [ 403.161794][T23172] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.168939][T23172] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.191531][T23172] bridge_slave_0: entered allmulticast mode [ 403.205171][T23172] bridge_slave_0: entered promiscuous mode [ 403.220285][ T40] bridge_slave_1: left allmulticast mode [ 403.225982][ T40] bridge_slave_1: left promiscuous mode [ 403.231701][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.257556][ T40] bridge_slave_0: left allmulticast mode [ 403.263357][ T40] bridge_slave_0: left promiscuous mode [ 403.269039][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.347163][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.357972][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.371962][ T40] bond0 (unregistering): Released all slaves [ 403.402861][T23172] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.409981][T23172] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.431520][T23172] bridge_slave_1: entered allmulticast mode [ 403.437983][T23172] bridge_slave_1: entered promiscuous mode [ 403.471593][T23172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.505313][T23172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.527804][ T40] hsr_slave_0: left promiscuous mode [ 403.535089][ T40] hsr_slave_1: left promiscuous mode [ 403.542709][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.550254][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.626285][ T40] team0 (unregistering): Port device team_slave_1 removed [ 403.638481][ T40] team0 (unregistering): Port device team_slave_0 removed [ 403.673212][ T29] audit: type=1400 audit(2000000140.580:14379): avc: denied { name_bind } for pid=23206 comm="syz-executor.3" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 403.740608][T23172] team0: Port device team_slave_0 added [ 403.771316][T23172] team0: Port device team_slave_1 added [ 403.781219][T23115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.801428][T23115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.821482][T23172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.828490][T23172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.854565][T23172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.865786][T23115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.874369][T23115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 403.894664][T23172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.901654][T23172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.927836][T23172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.987863][T23172] hsr_slave_0: entered promiscuous mode [ 404.016812][T23172] hsr_slave_1: entered promiscuous mode [ 404.046213][T23115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.071200][T23115] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.092228][T17567] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.099287][T17567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.123811][T17567] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.130919][T17567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.224304][T23172] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.234097][T23172] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.262909][T23129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.272636][T23129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.284919][T23129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.295242][T23129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.314443][T23172] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.324293][T23172] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.364847][T23115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.399703][T23172] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.409512][T23172] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.460376][T23129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.476398][T23129] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.488179][T23172] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.498002][T23172] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.518643][T17567] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.525782][T17567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.543124][T23219] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ‚ح(للي«QhQI¸¥ [ 404.553713][T23115] veth0_vlan: entered promiscuous mode [ 404.564435][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.571519][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.594820][T23115] veth1_vlan: entered promiscuous mode [ 404.609701][T23115] veth0_macvtap: entered promiscuous mode [ 404.633638][T23129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.644054][T23129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.674916][T23115] veth1_macvtap: entered promiscuous mode [ 404.687075][T23172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.702047][T23172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.715832][T23172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.725014][T23172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 404.746749][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.757214][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.767133][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.777560][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.787528][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.797970][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.807879][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.818296][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.839004][T23115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.853316][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.863831][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.873690][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.884114][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.893923][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.904324][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.914196][T23115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.924639][T23115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.936091][T23115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.947914][T23115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.956804][T23115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.965664][T23115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.974405][T23115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.992795][T23129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.065097][T23172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.096345][T23172] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.120476][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.127676][ T9650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.173204][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.180386][ T9625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.196381][T23172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.211037][T23129] veth0_vlan: entered promiscuous mode [ 405.248100][T23129] veth1_vlan: entered promiscuous mode [ 405.283359][T23129] veth0_macvtap: entered promiscuous mode [ 405.292341][T23129] veth1_macvtap: entered promiscuous mode [ 405.301307][T23261] loop3: detected capacity change from 0 to 2048 [ 405.311205][T23261] EXT4-fs: Ignoring removed orlov option [ 405.317097][T23172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.330978][T23261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.345657][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.356126][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.365946][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.376450][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.386339][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.396928][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.406806][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.417363][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.427243][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.437745][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.475621][T23129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.505217][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.515706][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.525532][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.536040][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.545855][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.556349][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.566310][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.576786][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.586717][T23129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.597166][T23129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.610365][T23129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.620849][T23129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.629563][T23129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.638398][T23129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.647215][T23129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.702222][T23172] veth0_vlan: entered promiscuous mode [ 405.723582][T23172] veth1_vlan: entered promiscuous mode [ 405.765317][T23172] veth0_macvtap: entered promiscuous mode [ 405.773785][T23172] veth1_macvtap: entered promiscuous mode [ 405.801705][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.812222][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.822062][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.832658][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.842739][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.853265][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.863085][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.873575][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.883401][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.893829][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.903783][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.914217][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.927566][T23172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.935961][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.946456][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.956304][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.966739][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.976551][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.986995][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.996816][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.007535][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.017422][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.027856][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.037812][T23172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.048339][T23172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.061685][T23272] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 406.078511][T23272] EXT4-fs (loop3): Remounting filesystem read-only [ 406.103725][T23172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.327256][T23172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.336071][T23172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.344843][T23172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.353718][T23172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.415853][T16941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.648100][T23322] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.711896][T23324] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.823685][ T29] audit: type=1400 audit(2000000143.479:14380): avc: denied { map } for pid=23334 comm="syz-executor.2" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 407.146239][T23363] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.366217][T23374] sock: sock_timestamping_bind_phc: sock not bind to device [ 407.605762][T23405] sock: sock_timestamping_bind_phc: sock not bind to device [ 407.623052][ T29] audit: type=1400 audit(2000000144.217:14381): avc: denied { bind } for pid=23396 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 407.748389][T23417] usb usb8: usbfs: process 23417 (syz-executor.0) did not claim interface 0 before use [ 408.012732][T23434] x_tables: duplicate underflow at hook 1 [ 408.192182][ T29] audit: type=1400 audit(2000000144.752:14382): avc: denied { shutdown } for pid=23449 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 408.278883][ T29] audit: type=1326 audit(2000000144.826:14383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23449 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668e9bcea9 code=0x0 [ 409.007542][T23462] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.149264][T23464] hsr0 speed is unknown, defaulting to 1000 [ 409.189148][T23470] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.299930][T23478] loop2: detected capacity change from 0 to 8192 [ 409.331430][T23482] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 409.338135][T23482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 409.345550][T23482] vhci_hcd vhci_hcd.0: Device attached [ 409.352567][T23482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.373114][T23482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.382911][T21903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.392556][T23482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.401473][T23482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.425164][T23490] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.435196][T23482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.443872][T23482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.472995][T23482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 409.497754][T23482] vhci_hcd vhci_hcd.0: port 0 already used [ 409.508571][T23483] vhci_hcd: connection closed [ 409.508926][ T40] vhci_hcd: stop threads [ 409.517976][ T40] vhci_hcd: release socket [ 409.522473][ T40] vhci_hcd: disconnect device [ 409.577727][ T3212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.595934][ T9650] vhci_hcd: vhci_device speed not set [ 409.621380][ T3212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.676291][ T3212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.706036][T23495] hsr0 speed is unknown, defaulting to 1000 [ 409.738200][ T3212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.754495][T23522] loop1: detected capacity change from 0 to 8192 [ 409.827386][T23495] chnl_net:caif_netlink_parms(): no params data found [ 409.836591][ T3212] bridge_slave_1: left allmulticast mode [ 409.842230][ T3212] bridge_slave_1: left promiscuous mode [ 409.847971][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.856508][ T3212] bridge_slave_0: left allmulticast mode [ 409.862243][ T3212] bridge_slave_0: left promiscuous mode [ 409.867981][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.956373][ T3212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.966822][ T3212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.977457][ T3212] bond0 (unregistering): Released all slaves [ 409.987869][T23536] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 410.026169][T23495] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.033299][T23495] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.040612][T23495] bridge_slave_0: entered allmulticast mode [ 410.047137][T23495] bridge_slave_0: entered promiscuous mode [ 410.056223][T23495] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.063466][T23495] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.070684][T23495] bridge_slave_1: entered allmulticast mode [ 410.077649][T23495] bridge_slave_1: entered promiscuous mode [ 410.116764][ T3212] hsr_slave_0: left promiscuous mode [ 410.117035][T23547] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 410.131072][ T3212] hsr_slave_1: left promiscuous mode [ 410.136859][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.144393][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.152147][ T3212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.160163][ T3212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.168907][ T3212] veth1_macvtap: left promiscuous mode [ 410.174427][ T3212] veth0_macvtap: left promiscuous mode [ 410.180079][ T3212] veth1_vlan: left promiscuous mode [ 410.185379][ T3212] veth0_vlan: left promiscuous mode [ 410.288474][T23562] loop3: detected capacity change from 0 to 512 [ 410.295200][ T3212] team0 (unregistering): Port device team_slave_1 removed [ 410.303722][T23562] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 410.312305][ T3212] team0 (unregistering): Port device team_slave_0 removed [ 410.313020][T23562] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 [ 410.335743][T23562] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 410.349150][T23562] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.363011][T23562] ext2 filesystem being mounted at /root/syzkaller-testdir1991208221/syzkaller.Er4L97/653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.364502][T23495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.392343][T23562] usb usb8: usbfs: process 23562 (syz-executor.3) did not claim interface 0 before use [ 410.422065][T16941] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 410.423465][T23566] syz-executor.2[23566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.431410][T23566] syz-executor.2[23566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.431490][T23495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.472276][T23495] team0: Port device team_slave_0 added [ 410.479136][T23495] team0: Port device team_slave_1 added [ 410.493722][T23495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.500745][T23495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.527206][T23495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.538893][T23495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.545975][T23495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.572004][T23495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.583108][T23575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 410.589624][T23575] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 410.597578][T23575] vhci_hcd vhci_hcd.0: Device attached [ 410.604730][T23575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.613434][T23575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.623882][T23575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.624212][T23495] hsr_slave_0: entered promiscuous mode [ 410.632596][T23575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.646024][T23495] hsr_slave_1: entered promiscuous mode [ 410.653540][T23495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.657615][T23575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.662175][T23495] Cannot create hsr debugfs directory [ 410.673454][T23575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.684636][T23575] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 410.693988][T23575] vhci_hcd vhci_hcd.0: port 0 already used [ 410.701159][T23576] vhci_hcd: connection closed [ 410.701287][ T57] vhci_hcd: stop threads [ 410.710222][ T57] vhci_hcd: release socket [ 410.714683][ T57] vhci_hcd: disconnect device [ 410.940750][T23608] hsr0 speed is unknown, defaulting to 1000 [ 410.992041][T23608] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.152728][T23495] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.161826][T23495] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.171734][T23495] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.183448][T23495] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.236990][T23495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.259605][T23495] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.272811][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.272910][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.274170][ T9690] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.274204][ T9690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.314807][ T29] audit: type=1326 audit(2000000147.632:14384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23631 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f668e9bcea9 code=0x0 [ 411.347623][T23495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.375743][T23643] hsr0 speed is unknown, defaulting to 1000 [ 411.422021][T23648] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.491721][T23659] loop3: detected capacity change from 0 to 512 [ 411.499650][T23659] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 411.506462][T23495] veth0_vlan: entered promiscuous mode [ 411.515047][T23495] veth1_vlan: entered promiscuous mode [ 411.533433][T23495] veth0_macvtap: entered promiscuous mode [ 411.541740][T23495] veth1_macvtap: entered promiscuous mode [ 411.555184][T23495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.565712][T23495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.575552][T23495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.586021][T23495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.595922][T23495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.606374][T23495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.616253][T23495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.626735][T23495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.636295][T23660] loop3: detected capacity change from 0 to 512 [ 411.636723][T23495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.653275][T23495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.654964][T23660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 411.663150][T23495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.683469][T23495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.696918][T23495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.696942][T23660] EXT4-fs (loop3): 1 truncate cleaned up [ 411.697027][T23495] ================================================================== [ 411.697057][T23495] BUG: KCSAN: data-race in data_push_tail / number [ 411.697093][T23495] [ 411.697100][T23495] write to 0xffffffff883d5133 of 1 bytes by task 23660 on cpu 0: [ 411.697117][T23495] number+0x7d0/0xa90 [ 411.697139][T23495] vsnprintf+0xa44/0xe30 [ 411.697164][T23495] pointer+0x8a1/0xd20 [ 411.697195][T23495] vsnprintf+0x861/0xe30 [ 411.697220][T23495] vscnprintf+0x42/0x90 [ 411.697243][T23495] printk_sprint+0x30/0x2d0 [ 411.697259][T23495] vprintk_store+0x570/0x810 [ 411.697274][T23495] vprintk_emit+0x10c/0x5e0 [ 411.697288][T23495] vprintk_default+0x26/0x30 [ 411.697304][T23495] vprintk+0x75/0x80 [ 411.697326][T23495] _printk+0x7a/0xa0 [ 411.697343][T23495] __ext4_msg+0x18e/0x1a0 2033/05/18 03:35:48 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 411.697322][T23660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.697368][T23495] ext4_orphan_cleanup+0x91e/0x9e0 [ 411.697396][T23495] ext4_fill_super+0x367a/0x39e0 [ 411.697420][T23495] get_tree_bdev+0x253/0x2e0 [ 411.697440][T23495] ext4_get_tree+0x1c/0x30 [ 411.697462][T23495] vfs_get_tree+0x56/0x1d0 [ 411.697483][T23495] do_new_mount+0x227/0x690 [ 411.697504][T23495] path_mount+0x49b/0xb30 [ 411.697521][T23495] __se_sys_mount+0x27f/0x2d0 [ 411.697539][T23495] __x64_sys_mount+0x67/0x80 [ 411.697558][T23495] x64_sys_call+0x25c9/0x2d70 [ 411.697583][T23495] do_syscall_64+0xc9/0x1c0 [ 411.697598][T23495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.697624][T23495] [ 411.697630][T23495] read to 0xffffffff883d5130 of 8 bytes by task 23495 on cpu 1: [ 411.697646][T23495] data_push_tail+0x102/0x430 [ 411.697670][T23495] data_alloc+0xbe/0x2c0 [ 411.697690][T23495] prb_reserve+0x85e/0xb60 [ 411.697713][T23495] vprintk_store+0x53f/0x810 [ 411.697730][T23495] vprintk_emit+0x10c/0x5e0 [ 411.697746][T23495] vprintk_default+0x26/0x30 [ 411.697765][T23495] vprintk+0x75/0x80 [ 411.697787][T23495] _printk+0x7a/0xa0 [ 411.697805][T23495] batadv_hardif_activate_interface+0x1e5/0x330 [ 411.697829][T23495] batadv_hard_if_event+0x47a/0x1000 [ 411.697852][T23495] raw_notifier_call_chain+0x6f/0x1d0 [ 411.697877][T23495] call_netdevice_notifiers_info+0xae/0x100 [ 411.697895][T23495] __dev_notify_flags+0xff/0x1a0 [ 411.697914][T23495] dev_change_flags+0xab/0xd0 [ 411.697932][T23495] do_setlink+0x841/0x2490 [ 411.697957][T23495] rtnl_newlink+0x11a1/0x1690 [ 411.69798