last executing test programs: 16m25.889137148s ago: executing program 3 (id=2304): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="44010000", @ANYBLOB="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"], 0x144}}, 0x2000cc41) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003052abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff0800", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)="68da45135780563b39c5737f31bda4e18a02296642c4f8247a67fc8b1900292fc183deeeb07cf494cc61797ba7b1f1a8ed6e55ea686823316a7df59833ea3c19f46bf7fe3665df5818ede80abd569676af8181868a7797b465696b128420e49b95f196", 0x63}, {&(0x7f00000005c0)="9bfcc67b20aba0854cf07ad457dcabf0a998c4de0ebf854ca901f915259689bdb16ecc720cc8ce950bd821c0ce41c06926baabecc7ede9390a29d4c3492fa43f5f950d8921b26446b15603d295e9f9e6dc8ff96af8dde9a814f4f8e8971b462c431ab11a8daa481f14f7e748a77b6d98e8c64abfea73ff794452a37badab41548352bcdfc28eeb6906db8bcc668e65a7470c85761e3ac371e8c90a590b329d185758", 0xa2}], 0x2, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}]}, @rr={0x7, 0x13, 0xe0, [@multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @local]}, @ssrr={0x89, 0x7, 0xc4, [@broadcast]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xa8}, 0x24004010) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x200, 0x200, 0x120, 0x200, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x120, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x4, 0x0, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010100, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}, 0x10, 0x10, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1, 0x0, 0x4}, {0x87}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x120}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 16m19.563295981s ago: executing program 3 (id=2313): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newchain={0x44, 0x64, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x1}, {0x2568ef70372282d, 0xb}, {0xffe4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @TCA_RATE={0x6, 0x5, {0xfd, 0xff}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x44}}, 0x10) io_setup(0x5, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) msgget$private(0x0, 0x1ba) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x42) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) msgctl$IPC_RMID(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r3) sendmsg$inet_sctp(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="fe0019ab95b52a015e980b3d61e7f8a55c6fc03bbc2098c55d202bb049bf51186e865c40868f5b6fe3237c5a1bbe483a73b47ea7cf61b31b9eebf324f52a7a55ce61dd481c6eb59b327a67be1aa144a9709de9f3118cd888a5d780bc8b3cbae79f4a7bd0b87147056835e03f6d4f1b33df2d860505a6669ae5630d3719b41ab077b659278c26a7ea474dd786eb856016d3b4ccf3cf5eb82123592be8d655f955cd21bcf51aa3903d88090b14", 0xac}], 0x1, 0x0, 0x0, 0x4004}, 0x52370e4a4f5c9650) r4 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f0000000240)='.\x00', r5, &(0x7f0000000200)='./file0\x00') unlinkat(r5, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) io_getevents(r2, 0x10001, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) 16m18.502086739s ago: executing program 3 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000010840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x40}}], 0x1, 0x40080) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, r3, 0x2, {0x1, 0x0, 0x2}}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000b40)={0x8}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8924, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2) 16m14.20846099s ago: executing program 3 (id=2321): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x1409, 0x1, 0x70bd2d, 0x27dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x7, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$eJzs3c9rXFsdAPDvvZPkJWl86RMRX1AMuHgP5KVJfVh1Y1sXdlGwYBciLhqapIZOf5CkYGvBBFwoKIi4LdKN/4B76d6dCOrOtVBFKha0dB73zp1mMplfaTIzSe7nA5M599wzOeebOyf33HvnzA2gtOazH2nE+xGvbyQRs03rZqK+cr4o9+Lfj29mjyRqte/+K4mkyGuUT4rnM8XCZET86XLEpyv76918+Oj2crVW95OIc1t37p/bfPjoo/U7y7dWb63eXTr/tY8vLH596eOlpoa+vTPF85Wr3/n8L3/6w6+u/bn6URIX4/r4j1eiJY6jMh/z8boIsTl/LCIuZIk2f5eT5hSEUGqV4v04HhGfjdmo5Et1s7H+i5E2DhioWiWi1l3SqwBwUuneUFaNcUDj2L6/4+DrAx6VDM/zS/UDoP3xjxWnHCbzY6PpF0nTkVH93MbZI6g/q+PV48knrx7PPYk95yFevtk6Y0dQTyfbOxHxuXbxJ3nbzuaRZvGne47104hYjIiJon3fOkQbkqb0IM7DdHOQ+Ju3Qxb/xeI5y7/8lvW3ntYadvwAlNOzS8WOfDtb2t3/ZWOPxvgn2ox/Zg5/SSY36v1f5/FfY38/mY970pZxWDZmudb+V463Zvz951d+3an++vhv7knjkdXfGAsOw/OdiLmW+H+WBVuMf7L4kzbbPyty42J/dXz7L/+80mndqOOvPY34oO3xz+6oNEt1uT55bm29urpY/9m2jj/88Qe/61R/+/jfGUCk7WXbf7pD/E3bP219XfY3ud/+V+60Zvz+2tM7neqf6bn9039MJPXjzYki50c7W1sbSxETydWiSJG/vLW1cb57vPUyL2v581I9/g+/1L7/73n/t0Q11fiX2Yf737v9otO6t3n/N11Mfl3rsw2dZPGv9N7++/p/lverPuv47/cffKHTum7xTx0mMAAAAAAAACihNL8Gm6QLb9JpurBQny/7mZhOq/c2t768du/B3ZWID/PPQ46nkSb5R0Zm68vJ2np1dan4PGxj+XzL8lci4r2I+E1lKl9euHmvujLq4AEAAAAAAAAAAAAAAAAAAOCYOFPM/2/cp/o/lfr8f6Aket9gbt/9H4BTYpA3mASOt7z/d9vFvzu8tgDDZf8P5aX/Q3np/1Be+j+Ul/4P5aX/Q3np/1Be+j8AAAAAnErvffHZ35KI2P7GVP7ITBTrTPqF0238QKUrA2sHMHx6NJTXm0v/BvtQOn2N//9XfDng4JsDjEDSLjMfHNS6d/5nbV+5a+fwbQMAAAAAAAAAAAAA6j54v/P8/4PNDQZOGtP+oLwOMf/fVwfACeer/6G8HOMDPWbxx2SnFb3m/wMAAAAAAAAAAAAAR2YmfyTpQjEXeCbSdGEh4lMRcTbGk7X16upiRLwbEX+tjL+TLS+NutEAAAAAAAAAAAAAAAAAAABwymw+fHR7uVpd3WhO/H9fzulONO6C2rtwrY8yXRPfjAO+KpLh/1mmImLkG2VgibGmnCRiO9vyx6JhG5txPJqRJ0b8jwkAAAAAAAAAAAAAAAAAAEqoae5xe3O/HXKLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD4du//3yOxMl1/QV+F9yZGHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDJ9EgAA//+YYDw3") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="7f000000"], 0x10}], 0x1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1935710000000000000000003b00740095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x10001, 0x4) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r2, &(0x7f0000000080), 0x10) setsockopt$sock_attach_bpf(r1, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) 16m12.494061878s ago: executing program 3 (id=2324): preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x1, 0x3) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000100)={0x3, 0x2, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'], 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x81, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 16m10.532246418s ago: executing program 3 (id=2334): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x80, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x43}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x200040c0) 15m55.197308304s ago: executing program 32 (id=2334): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x80, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x43}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040000}, 0x200040c0) 2.123816043s ago: executing program 2 (id=7067): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.08759678s ago: executing program 2 (id=7070): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xf0, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_simple={0x50, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, '\t\x00\x00\x00\x00'}]}, {0x16, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca394"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x88, 0x1, [@m_simple={0x58, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_DATA={0xd, 0x3, 'trans=fd,'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.053930835s ago: executing program 2 (id=7072): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb7, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa9, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x6c, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x2}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "06"}}}}}, 0x0) 2.001849174s ago: executing program 2 (id=7077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001380)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x2}, 0x94) sendto$inet(r0, &(0x7f0000000ac0)="4d51022a340e4aedb6ee57d0a228d54b69ff231f75", 0x15, 0x80000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f00)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) 1.133466549s ago: executing program 2 (id=7091): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4ea2, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xfff5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 1.020254828s ago: executing program 1 (id=7098): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006000000181000", @ANYRES32, @ANYBLOB="000000000000000079003003000000001800000000000000000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x10001}, &(0x7f0000000200)=0x8) 987.302344ms ago: executing program 1 (id=7102): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x20040891) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x7, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x8045) 941.835762ms ago: executing program 5 (id=7103): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f3000000000"], 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4, 0x0], 0x0, 0x0, 0x2, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 941.544562ms ago: executing program 5 (id=7104): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) 926.923145ms ago: executing program 5 (id=7105): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbb, &(0x7f0000000380)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x6f, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x6, 0x5, "cfa11c"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}, "06"}}}}}, 0x0) 912.091747ms ago: executing program 5 (id=7106): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040), 0x0) 806.786644ms ago: executing program 0 (id=7113): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0xb7, 0x9, 0xb7b9, 0x3, 0x13, "ff08ca14aa9c0f5a"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000002440)=0xd) 767.348981ms ago: executing program 0 (id=7114): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fe9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xd165, 0x4480, 0x400001, 0x18d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') readv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1) 766.854841ms ago: executing program 0 (id=7115): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) 708.288601ms ago: executing program 0 (id=7116): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x189083) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 707.970381ms ago: executing program 0 (id=7117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x131, 0x2c180}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) 632.376164ms ago: executing program 0 (id=7118): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000f40)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f0000000140)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a0900a32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c50de9f30c83766e8911ed5b621c7395f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xfd}, {&(0x7f0000000e80)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000280)="3b3d07b7091f697381965e2e79090900f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910ba0500000000000000b8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e833e91977ac7c7a90b3589931b620784b65b952a0", 0x94}, {&(0x7f0000001040)="476760797e45f0a946021e0f9abf9eecf488bebdc3b9519e0953c736a9e9faf07151bd5c90e9816f2f3ffc4a7fa0785a80b320a23bcf9cd7e3eecc65664f45384f", 0x41}], 0x5}}], 0x2, 0x4000000) 278.974693ms ago: executing program 2 (id=7119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001380)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x2}, 0x94) sendto$inet(r0, &(0x7f0000000ac0)="4d51022a340e4aedb6ee57d0a228d54b69ff231f75", 0x15, 0x80000, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f00)=""/128, 0x80}], 0x1}}], 0x1, 0x0, 0x0) 150.099595ms ago: executing program 1 (id=7120): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x143142, 0x80) sendfile(r2, r2, 0x0, 0x1000000201005) 149.514135ms ago: executing program 1 (id=7121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0xf06, 0x1, 0x94, 0xffbffffb, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}, @ib={0x1b, 0xe64c, 0x10000, {"c24ab1821a495d9106bec29d29ee68ec"}, 0x0, 0x8fc, 0x1}}}, 0x118) syz_emit_ethernet(0x3b5, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37f, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81"}]}}}}}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0xffffff3b, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0xff37) 129.266078ms ago: executing program 4 (id=7122): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r1 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 107.530812ms ago: executing program 4 (id=7123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x3) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0xfff) r5 = socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 72.493078ms ago: executing program 4 (id=7124): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0077140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) 55.573631ms ago: executing program 5 (id=7125): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0x6, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7}}}, 0x90) 55.154471ms ago: executing program 1 (id=7126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000200)={@empty, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @private1, {[], @mlv2_query={0x82, 0x0, 0x0, 0xff88, 0x7006, @empty, 0x6, 0x0, 0x9, 0x4}}}}}}, 0x0) 55.000221ms ago: executing program 4 (id=7127): lgetxattr(0x0, 0x0, 0x0, 0x0) 16.104557ms ago: executing program 4 (id=7128): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 15.678207ms ago: executing program 1 (id=7129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x4041810) 782.09µs ago: executing program 5 (id=7130): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) socket(0x10, 0x803, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040005}, 0x8800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 4 (id=7131): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(0x0, 0x143142, 0x80) sendfile(r2, r2, 0x0, 0x1000000201005) kernel console output (not intermixed with test programs): 4294967295 (level 1) [ 1398.978297][T22635] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1398.985030][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1399.002436][ C0] EXT4-fs (loop2): initial error at time 1776350153: ext4_free_branches:1023: inode 11 [ 1399.014712][ C0] EXT4-fs (loop2): last error at time 1776350153: ext4_free_branches:1023: inode 11 [ 1399.031240][T22639] loop5: detected capacity change from 0 to 512 [ 1399.032717][T22633] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.039167][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1399.047918][T22635] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5273: invalid indirect mapped block 4294967295 (level 1) [ 1399.049188][ C0] EXT4-fs (loop4): initial error at time 1776350153: ext4_free_branches:1023: inode 11 [ 1399.049598][ C0] EXT4-fs (loop4): last error at time 1776350153: ext4_free_branches:1023: inode 11 [ 1399.095618][T22633] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5272: invalid indirect mapped block 4294967295 (level 1) [ 1399.104930][T22639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1399.133873][T22633] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.140864][T22633] EXT4-fs (loop4): 2 truncates cleaned up [ 1399.143193][T22631] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5271: invalid block [ 1399.179085][T22635] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.189664][T22635] EXT4-fs (loop2): 2 truncates cleaned up [ 1399.210385][T22633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.226203][T22639] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5274: invalid indirect mapped block 4294967295 (level 1) [ 1399.252964][T22631] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.259519][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1399.280754][ C1] EXT4-fs (loop0): initial error at time 1776350153: ext4_get_branch:178: inode 11: block 4294967295 [ 1399.293189][ C1] EXT4-fs (loop0): last error at time 1776350153: ext4_get_branch:178: inode 11: block 4294967295 [ 1399.319258][T22635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.323874][T22639] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.333191][T22639] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5274: invalid indirect mapped block 4294967295 (level 1) [ 1399.343002][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1399.343552][ C0] EXT4-fs (loop5): initial error at time 1776350153: ext4_free_branches:1023: inode 11 [ 1399.345082][ C0] EXT4-fs (loop5): last error at time 1776350153: ext4_free_branches:1023: inode 11 [ 1399.436172][T22639] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.436556][T22639] EXT4-fs (loop5): 2 truncates cleaned up [ 1399.442643][T22631] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5271: invalid indirect mapped block 4294967295 (level 1) [ 1399.457606][T22639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.479565][T22631] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.493657][T22631] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5271: invalid indirect mapped block 4294967295 (level 1) [ 1399.552599][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.583296][T22631] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1399.615990][T22631] EXT4-fs (loop0): 2 truncates cleaned up [ 1399.691016][T12167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.705445][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.742935][T22631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.771080][T22653] loop5: detected capacity change from 0 to 128 [ 1399.881706][T22649] loop4: detected capacity change from 0 to 512 [ 1399.997722][T22655] loop1: detected capacity change from 0 to 512 [ 1400.008664][T22649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1400.107577][T22655] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1400.149419][T22655] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5278: invalid block [ 1400.165264][T22655] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1400.168610][T22655] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5278: invalid indirect mapped block 4294967295 (level 1) [ 1400.169084][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1400.202166][ C0] EXT4-fs (loop1): initial error at time 1776350154: ext4_get_branch:178: inode 11: block 4294967295 [ 1400.214410][ C0] EXT4-fs (loop1): last error at time 1776350154: ext4_get_branch:178: inode 11: block 4294967295 [ 1400.231806][T22655] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5278: invalid indirect mapped block 4294967295 (level 1) [ 1400.255135][T22655] EXT4-fs (loop1): 2 truncates cleaned up [ 1400.267992][T22655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.383193][T22651] loop2: detected capacity change from 0 to 512 [ 1400.469339][T22651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1400.479151][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.487751][T22649] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.5275: invalid block [ 1400.514893][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.518810][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1400.530379][ C1] EXT4-fs (loop4): initial error at time 1776350155: ext4_get_branch:178: inode 11: block 4294967295 [ 1400.539641][T22651] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5277: invalid indirect mapped block 4294967295 (level 1) [ 1400.541296][ C1] EXT4-fs (loop4): last error at time 1776350155: ext4_get_branch:178: inode 11: block 4294967295 [ 1400.557517][T22651] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5277: invalid indirect mapped block 4294967295 (level 1) [ 1400.566379][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1400.566499][ C0] EXT4-fs (loop2): initial error at time 1776350155: ext4_free_branches:1023: inode 11 [ 1400.566988][ C0] EXT4-fs (loop2): last error at time 1776350155: ext4_free_branches:1023: inode 11 [ 1400.571106][T22649] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5275: invalid indirect mapped block 4294967295 (level 1) [ 1400.616791][T22651] EXT4-fs (loop2): 2 truncates cleaned up [ 1400.656017][T22651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.673971][T22649] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5275: invalid indirect mapped block 4294967295 (level 1) [ 1400.693812][T22649] EXT4-fs (loop4): 2 truncates cleaned up [ 1400.712998][T22666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1400.730818][T22666] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5279: invalid indirect mapped block 4294967295 (level 1) [ 1400.759064][T22649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.778377][T22666] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5279: invalid indirect mapped block 4294967295 (level 1) [ 1400.792433][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1400.792455][ C1] EXT4-fs (loop1): initial error at time 1776350155: ext4_free_branches:1023: inode 11 [ 1400.792496][ C1] EXT4-fs (loop1): last error at time 1776350155: ext4_free_branches:1023: inode 11 [ 1400.836805][T22666] EXT4-fs (loop1): 2 truncates cleaned up [ 1400.843406][T22672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1400.865401][T22666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.865732][T22672] System zones: 1-12 [ 1400.882111][T22672] EXT4-fs error (device loop5): ext4_iget_extra_inode:5042: inode #15: comm syz.5.5281: corrupted in-inode xattr: e_value size too large [ 1400.898806][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1400.902577][T22672] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5281: couldn't read orphan inode 15 (err -117) [ 1400.905290][ C1] EXT4-fs (loop5): initial error at time 1776350155: ext4_iget_extra_inode:5042: inode 15 [ 1400.927238][ C1] EXT4-fs (loop5): last error at time 1776350155: ext4_iget_extra_inode:5042: inode 15 [ 1400.928252][T22672] loop5: lost filesystem error report for type 5 error -117 [ 1400.956414][T22672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1400.979275][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.994441][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.008254][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.090422][T22671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1401.134978][T22671] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5280: invalid block [ 1401.154438][T22671] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5280: invalid indirect mapped block 4294967295 (level 1) [ 1401.169500][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1401.169710][ C0] EXT4-fs (loop0): initial error at time 1776350155: ext4_get_branch:178: inode 11: block 4294967295 [ 1401.170175][ C0] EXT4-fs (loop0): last error at time 1776350155: ext4_get_branch:178: inode 11: block 4294967295 [ 1401.254363][T22671] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5280: invalid indirect mapped block 4294967295 (level 1) [ 1401.277845][T22675] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1401.295306][T22671] EXT4-fs (loop0): 2 truncates cleaned up [ 1401.437729][T22671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.371769][T22675] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5282: invalid indirect mapped block 4294967295 (level 1) [ 1402.568816][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1402.575399][ C1] EXT4-fs (loop2): initial error at time 1776350157: ext4_free_branches:1023: inode 11 [ 1402.576539][T22675] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5282: invalid indirect mapped block 4294967295 (level 1) [ 1402.585417][ C1] EXT4-fs (loop2): last error at time 1776350157: ext4_free_branches:1023: inode 11 [ 1402.615431][T12167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.647540][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.655725][T22675] EXT4-fs (loop2): 2 truncates cleaned up [ 1402.715168][T22675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.756399][T22695] set_capacity_and_notify: 6 callbacks suppressed [ 1402.756467][T22695] loop4: detected capacity change from 0 to 128 [ 1402.867658][T22698] loop0: detected capacity change from 0 to 128 [ 1403.260439][T22690] loop5: detected capacity change from 0 to 512 [ 1403.278405][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.364568][T22690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1403.756517][T22710] loop2: detected capacity change from 0 to 1024 [ 1403.773414][T22710] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 1403.794904][T22691] lo speed is unknown, defaulting to 1000 [ 1403.805335][T22690] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5286: invalid indirect mapped block 4294967295 (level 1) [ 1403.846491][T22714] loop4: detected capacity change from 0 to 164 [ 1403.848813][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1403.859572][ C1] EXT4-fs (loop5): initial error at time 1776350158: ext4_free_branches:1023: inode 11 [ 1403.869272][ C1] EXT4-fs (loop5): last error at time 1776350158: ext4_free_branches:1023: inode 11 [ 1403.883886][T22690] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5286: invalid indirect mapped block 4294967295 (level 1) [ 1403.909567][T22690] EXT4-fs (loop5): 2 truncates cleaned up [ 1403.917815][T22690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.949241][T22714] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 1404.192807][T12167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.281554][T22714] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5290'. [ 1404.303519][T14585] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.344332][T22691] chnl_net:caif_netlink_parms(): no params data found [ 1404.361659][T22717] loop5: detected capacity change from 0 to 1024 [ 1404.407013][T14585] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.459016][T22723] loop4: detected capacity change from 0 to 128 [ 1404.593237][T22691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.602327][T22691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.609712][T22691] bridge_slave_0: entered allmulticast mode [ 1404.616331][T22691] bridge_slave_0: entered promiscuous mode [ 1404.623311][T22691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.633005][T22691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.642204][T22717] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 1404.649008][T22691] bridge_slave_1: entered allmulticast mode [ 1404.656954][T22691] bridge_slave_1: entered promiscuous mode [ 1404.679861][T14585] team0: Port device netdevsim1 removed [ 1404.691442][T14585] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.851118][T14585] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.867242][T22725] loop2: detected capacity change from 0 to 512 [ 1405.000649][T22691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1405.033238][T22725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1405.062082][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5291'. [ 1405.085753][T22691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1405.197540][T22725] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.5293: invalid block [ 1405.216055][T22691] team0: Port device team_slave_0 added [ 1405.222547][T22725] fserror_report: 17 callbacks suppressed [ 1405.222591][T22725] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1405.257098][T22725] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5293: invalid indirect mapped block 4294967295 (level 1) [ 1405.267298][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1405.267837][ C1] EXT4-fs (loop2): initial error at time 1776350159: ext4_get_branch:178: inode 11: block 4294967295 [ 1405.269067][ C1] EXT4-fs (loop2): last error at time 1776350159: ext4_get_branch:178: inode 11: block 4294967295 [ 1405.307365][T22691] team0: Port device team_slave_1 added [ 1405.334634][T22736] loop0: detected capacity change from 0 to 128 [ 1405.343393][T22737] loop5: detected capacity change from 0 to 512 [ 1405.353054][T22725] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1405.354329][T22725] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5293: invalid indirect mapped block 4294967295 (level 1) [ 1405.392265][T22725] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1405.406992][T22691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.423770][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.472671][T22725] EXT4-fs (loop2): 2 truncates cleaned up [ 1405.483963][T22691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.495364][T22691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.502426][T22691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.544555][T22725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.560303][T22691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.584292][T22737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1405.607357][T14585] bridge0: port 3(batadv0) entered disabled state [ 1405.712552][T14585] bridge_slave_1: left allmulticast mode [ 1405.756712][T22737] System zones: 1-12 [ 1405.771292][T14585] bridge_slave_1: left promiscuous mode [ 1405.799873][T22737] EXT4-fs error (device loop5): ext4_iget_extra_inode:5042: inode #15: comm syz.5.5294: corrupted in-inode xattr: e_value size too large [ 1405.836906][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.882078][T14585] bridge_slave_0: left allmulticast mode [ 1405.909265][T22737] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1405.910060][T22737] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5294: couldn't read orphan inode 15 (err -117) [ 1405.919293][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1405.919332][ C0] EXT4-fs (loop5): initial error at time 1776350160: ext4_iget_extra_inode:5042: inode 15 [ 1405.919365][ C0] EXT4-fs (loop5): last error at time 1776350160: ext4_iget_extra_inode:5042: inode 15 [ 1405.973537][T14585] bridge_slave_0: left promiscuous mode [ 1406.011120][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.012589][T22737] loop5: lost filesystem error report for type 5 error -117 [ 1406.087586][T22745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1406.145137][T22745] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5296: invalid indirect mapped block 4294967295 (level 1) [ 1406.161358][T22745] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1406.161583][T22745] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5296: invalid indirect mapped block 4294967295 (level 1) [ 1406.171124][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1406.171283][ C0] EXT4-fs (loop4): initial error at time 1776350160: ext4_free_branches:1023: inode 11 [ 1406.171640][ C0] EXT4-fs (loop4): last error at time 1776350160: ext4_free_branches:1023: inode 11 [ 1406.222056][T22745] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1406.238154][T22745] EXT4-fs (loop4): 2 truncates cleaned up [ 1406.423715][T22763] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1406.870934][T22709] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1406.896307][T22709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1406.991553][T14585] team0: Port device bridge1 removed [ 1407.055553][T14585] team0: Port device bridge2 removed [ 1407.114837][T14585] team0: Port device bridge3 removed [ 1407.377664][T14585] team0: Port device bridge4 removed [ 1407.629960][T14585] team0: Port device bridge5 removed [ 1407.673148][T14585] team0: Port device bridge6 removed [ 1407.736893][T14585] team0: Port device bridge7 removed [ 1407.802033][T14585] team0: Port device bridge8 removed [ 1407.868916][T14585] team0: Port device bridge9 removed [ 1407.984033][T22772] set_capacity_and_notify: 4 callbacks suppressed [ 1407.984076][T22772] loop0: detected capacity change from 0 to 1024 [ 1408.004858][T22772] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1408.016272][T14585] team0: Port device bridge10 removed [ 1408.110331][T14585] team0: Port device bridge11 removed [ 1408.189934][T14585] team0: Port device bridge12 removed [ 1408.257659][T22774] loop5: detected capacity change from 0 to 512 [ 1408.341557][T22774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1408.373525][T22774] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5301: invalid indirect mapped block 4294967295 (level 1) [ 1408.400573][T22774] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1408.402511][T22774] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5301: invalid indirect mapped block 4294967295 (level 1) [ 1408.415348][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1408.415367][ C0] EXT4-fs (loop5): initial error at time 1776350162: ext4_free_branches:1023: inode 11 [ 1408.415393][ C0] EXT4-fs (loop5): last error at time 1776350162: ext4_free_branches:1023: inode 11 [ 1408.502292][T22774] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1408.507063][T22774] EXT4-fs (loop5): 2 truncates cleaned up [ 1408.895104][T22780] loop0: detected capacity change from 0 to 128 [ 1409.061003][T14585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.071489][T14585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.083029][T14585] bond0 (unregistering): Released all slaves [ 1409.107062][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1409.236269][T14585] tipc: Left network mode [ 1409.301269][T22691] hsr_slave_0: entered promiscuous mode [ 1409.325110][T22691] hsr_slave_1: entered promiscuous mode [ 1409.349307][T22691] debugfs: 'hsr0' already exists in 'hsr' [ 1409.371754][T22691] Cannot create hsr debugfs directory [ 1409.465378][T14585] hsr_slave_0: left promiscuous mode [ 1409.499877][T14585] hsr_slave_1: left promiscuous mode [ 1409.517282][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.545997][T14585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.616109][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.624887][T14585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.643272][T22793] loop5: detected capacity change from 0 to 128 [ 1409.645274][T14585] veth1_macvtap: left promiscuous mode [ 1409.656085][T14585] veth0_macvtap: left promiscuous mode [ 1409.661493][T22796] loop4: detected capacity change from 0 to 128 [ 1409.664764][T14585] veth1_vlan: left allmulticast mode [ 1409.674584][T14585] veth1_vlan: left promiscuous mode [ 1409.682390][T14585] veth0_vlan: left promiscuous mode [ 1409.785694][T22801] loop2: detected capacity change from 0 to 512 [ 1409.817791][T22801] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1410.017133][T22801] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5303: invalid indirect mapped block 4294967295 (level 1) [ 1410.819204][T22801] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1410.819379][T22801] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5303: invalid indirect mapped block 4294967295 (level 1) [ 1410.842593][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1410.842628][ C1] EXT4-fs (loop2): initial error at time 1776350165: ext4_free_branches:1023: inode 11 [ 1410.842663][ C1] EXT4-fs (loop2): last error at time 1776350165: ext4_free_branches:1023: inode 11 [ 1411.074466][T22801] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1411.074858][T22801] EXT4-fs (loop2): 2 truncates cleaned up [ 1411.105041][T14585] team0 (unregistering): Port device macvlan1 removed [ 1411.116657][T22816] loop0: detected capacity change from 0 to 128 [ 1411.136071][T22801] EXT4-fs mount: 7 callbacks suppressed [ 1411.136088][T22801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1411.301018][T14585] team0 (unregistering): Port device team_slave_1 removed [ 1411.326801][T22819] loop5: detected capacity change from 0 to 128 [ 1411.591741][T14585] team0 (unregistering): Port device team_slave_0 removed [ 1412.337637][T22823] loop4: detected capacity change from 0 to 128 [ 1412.614291][T22806] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1412.640644][ T3039] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1412.801747][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.933433][T22832] loop0: detected capacity change from 0 to 1024 [ 1412.970516][T22832] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1413.032042][T22840] set_capacity_and_notify: 1 callbacks suppressed [ 1413.032062][T22840] loop2: detected capacity change from 0 to 1024 [ 1413.060329][T22831] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 1413.079398][T22840] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 1413.145009][T14585] IPVS: stop unused estimator thread 0... [ 1413.240388][T22691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1413.271953][T22691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1413.285953][T22691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1413.318756][T22852] loop2: detected capacity change from 0 to 128 [ 1413.331128][T22691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1413.351314][T22691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1413.483136][T22691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1413.491416][T22831] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5310'. [ 1413.503584][T22691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1413.515846][T22691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1413.854112][T22865] loop5: detected capacity change from 0 to 128 [ 1414.361504][T22691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.412676][T22691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1414.468917][ T4148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.476119][ T4148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.579654][ T4148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.586777][ T4148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.823299][T22875] loop0: detected capacity change from 0 to 1024 [ 1414.871564][T22875] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1414.950937][T22885] loop4: detected capacity change from 0 to 1024 [ 1414.987510][T22885] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 1415.022469][T22691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.195121][T22883] loop2: detected capacity change from 0 to 512 [ 1415.256027][T22915] loop5: detected capacity change from 0 to 128 [ 1415.283602][T22883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1415.291395][T22691] veth0_vlan: entered promiscuous mode [ 1415.335074][T22691] veth1_vlan: entered promiscuous mode [ 1415.361562][T22909] loop0: detected capacity change from 0 to 1024 [ 1415.382683][T22691] veth0_macvtap: entered promiscuous mode [ 1415.467452][T22909] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1415.482456][T22691] veth1_macvtap: entered promiscuous mode [ 1415.503235][T22691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.645828][T22883] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5316: invalid indirect mapped block 4294967295 (level 1) [ 1415.727584][T22883] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1415.738444][T22883] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5316: invalid indirect mapped block 4294967295 (level 1) [ 1415.747928][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1415.748039][ C1] EXT4-fs (loop2): initial error at time 1776350170: ext4_free_branches:1023: inode 11 [ 1415.748479][ C1] EXT4-fs (loop2): last error at time 1776350170: ext4_free_branches:1023: inode 11 [ 1416.014372][T22883] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1416.021165][T22691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1416.083432][T22883] EXT4-fs (loop2): 2 truncates cleaned up [ 1416.127385][ T5488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.127392][T22883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1416.167681][ T5488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.188968][ T5488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.208618][ T5488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.275357][T22921] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1416.411326][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.427331][T22947] loop4: detected capacity change from 0 to 1024 [ 1416.457816][T22947] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 1416.517378][T22958] loop0: detected capacity change from 0 to 128 [ 1416.985014][T22943] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 1417.019417][T22959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1417.118200][T22959] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5285: invalid indirect mapped block 4294967295 (level 1) [ 1417.215057][T22959] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1417.215852][T22959] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5285: invalid indirect mapped block 4294967295 (level 1) [ 1417.225294][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1417.225312][ C1] EXT4-fs (loop1): initial error at time 1776350171: ext4_free_branches:1023: inode 11 [ 1417.225342][ C1] EXT4-fs (loop1): last error at time 1776350171: ext4_free_branches:1023: inode 11 [ 1417.314601][T22959] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1417.317170][T22959] EXT4-fs (loop1): 2 truncates cleaned up [ 1417.363596][T22959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1417.581511][ T117] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 1417.597860][ T117] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 1417.618402][ T117] team0: Port device netdevsim1 removed [ 1417.662956][T22981] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1417.673186][T22963] lo speed is unknown, defaulting to 1000 [ 1417.699894][T22691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.735409][T22979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1417.884161][T22979] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5324: invalid indirect mapped block 4294967295 (level 1) [ 1417.913831][T22979] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1417.918686][T22979] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5324: invalid indirect mapped block 4294967295 (level 1) [ 1417.919536][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1417.953910][ C1] EXT4-fs (loop4): initial error at time 1776350172: ext4_free_branches:1023: inode 11 [ 1417.969112][ C1] EXT4-fs (loop4): last error at time 1776350172: ext4_free_branches:1023: inode 11 [ 1417.990584][T22979] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1417.995387][T22979] EXT4-fs (loop4): 2 truncates cleaned up [ 1418.018846][T22988] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 1418.269832][ T117] team0: left allmulticast mode [ 1418.305245][ T117] team_slave_0: left allmulticast mode [ 1418.315237][T22979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.335635][ T117] team_slave_1: left allmulticast mode [ 1418.372986][ T117] team0: left promiscuous mode [ 1418.402305][ T117] team_slave_0: left promiscuous mode [ 1418.455984][ T117] team_slave_1: left promiscuous mode [ 1418.509002][ T117] bridge0: port 4(team0) entered disabled state [ 1418.598315][ T117] bond0: left allmulticast mode [ 1418.670128][ T117] bond_slave_0: left allmulticast mode [ 1418.675685][ T117] bond_slave_1: left allmulticast mode [ 1418.717662][ T117] bond0: left promiscuous mode [ 1418.722692][ T117] bond_slave_0: left promiscuous mode [ 1418.728182][ T117] bond_slave_1: left promiscuous mode [ 1418.733892][ T117] bridge0: port 3(bond0) entered disabled state [ 1418.750613][ T117] bridge_slave_1: left allmulticast mode [ 1418.758582][ T117] bridge_slave_1: left promiscuous mode [ 1418.799061][ T117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.818514][T23009] set_capacity_and_notify: 6 callbacks suppressed [ 1418.818532][T23009] loop1: detected capacity change from 0 to 128 [ 1418.840076][ T117] bridge_slave_0: left allmulticast mode [ 1418.851511][ T117] bridge_slave_0: left promiscuous mode [ 1418.861704][T23011] loop5: detected capacity change from 0 to 128 [ 1418.865381][ T117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.980851][T23005] loop0: detected capacity change from 0 to 512 [ 1418.989473][T23005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1419.015129][ T117] batadv0: left allmulticast mode [ 1419.023131][ T117] batadv0: left promiscuous mode [ 1419.028356][ T117] ¤: port 1(batadv0) entered disabled state [ 1419.962619][T22969] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1420.024526][T23005] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5327: invalid indirect mapped block 4294967295 (level 1) [ 1420.179724][T23005] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1420.188858][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1420.204618][ C1] EXT4-fs (loop0): initial error at time 1776350174: ext4_free_branches:1023: inode 11 [ 1420.214325][ C1] EXT4-fs (loop0): last error at time 1776350174: ext4_free_branches:1023: inode 11 [ 1420.224962][T23005] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5327: invalid indirect mapped block 4294967295 (level 1) [ 1420.250379][T23005] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1420.259388][T23020] loop1: detected capacity change from 0 to 512 [ 1420.268867][T23005] EXT4-fs (loop0): 2 truncates cleaned up [ 1420.269359][T23005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.355846][T23020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1420.389089][T23020] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5330: invalid indirect mapped block 4294967295 (level 1) [ 1420.405921][T23020] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1420.408376][T23020] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5330: invalid indirect mapped block 4294967295 (level 1) [ 1420.408886][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1420.408997][ C0] EXT4-fs (loop1): initial error at time 1776350174: ext4_free_branches:1023: inode 11 [ 1420.409318][ C0] EXT4-fs (loop1): last error at time 1776350174: ext4_free_branches:1023: inode 11 [ 1420.464881][T23020] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1420.473298][T23020] EXT4-fs (loop1): 2 truncates cleaned up [ 1420.516584][T23020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.530897][T23025] loop5: detected capacity change from 0 to 512 [ 1420.552806][ T117] team0: Port device bridge1 removed [ 1420.560198][T23025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1420.571349][T23025] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.5331: invalid block [ 1420.587319][T23025] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1420.591218][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1420.608260][ C0] EXT4-fs (loop5): initial error at time 1776350175: ext4_get_branch:178: inode 11: block 4294967295 [ 1420.620419][ C0] EXT4-fs (loop5): last error at time 1776350175: ext4_get_branch:178: inode 11: block 4294967295 [ 1420.638570][T23025] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5331: invalid indirect mapped block 4294967295 (level 1) [ 1420.655082][T23025] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5331: invalid indirect mapped block 4294967295 (level 1) [ 1420.671104][T23025] EXT4-fs (loop5): 2 truncates cleaned up [ 1420.677814][T23025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.720054][ T117] team0: Port device bridge2 removed [ 1420.760111][ T117] team0: Port device bridge3 removed [ 1420.810379][ T117] team0: Port device bridge4 removed [ 1420.850805][ T117] team0: Port device bridge5 removed [ 1421.770895][ T117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.780352][ T117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.789515][ T117] bond0 (unregistering): Released all slaves [ 1421.798507][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1421.829350][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.839646][ T117] tipc: Left network mode [ 1421.851882][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.863514][T22691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.875655][T12167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.938934][T23037] loop4: detected capacity change from 0 to 128 [ 1421.970871][T23043] loop5: detected capacity change from 0 to 128 [ 1421.982621][T23041] loop0: detected capacity change from 0 to 128 [ 1422.995860][T23036] loop1: detected capacity change from 0 to 512 [ 1423.204748][T23036] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1424.264666][T23036] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5334: invalid block [ 1425.060126][T23036] fserror_report: 2 callbacks suppressed [ 1425.174030][T23036] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1425.179077][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1425.197484][ C0] EXT4-fs (loop1): initial error at time 1776350179: ext4_get_branch:178: inode 11: block 4294967295 [ 1425.208998][ C0] EXT4-fs (loop1): last error at time 1776350179: ext4_get_branch:178: inode 11: block 4294967295 [ 1425.242181][T23064] loop4: detected capacity change from 0 to 128 [ 1425.246660][T23036] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5334: invalid indirect mapped block 4294967295 (level 1) [ 1425.277920][T23036] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1425.282101][ T117] hsr_slave_0: left promiscuous mode [ 1425.297980][T23036] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5334: invalid indirect mapped block 4294967295 (level 1) [ 1425.314456][T23036] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1425.314536][ T117] hsr_slave_1: left promiscuous mode [ 1425.332014][ T117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.346383][T23036] EXT4-fs (loop1): 2 truncates cleaned up [ 1425.367300][T23062] loop5: detected capacity change from 0 to 512 [ 1425.376046][T23036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.413685][T23062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1425.467721][ T117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.496443][T23062] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5336: invalid indirect mapped block 4294967295 (level 1) [ 1425.519874][T23070] loop0: detected capacity change from 0 to 128 [ 1425.555427][T23062] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1425.578869][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1425.594782][ C1] EXT4-fs (loop5): initial error at time 1776350180: ext4_free_branches:1023: inode 11 [ 1425.604496][ C1] EXT4-fs (loop5): last error at time 1776350180: ext4_free_branches:1023: inode 11 [ 1425.754195][T23062] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5336: invalid indirect mapped block 4294967295 (level 1) [ 1426.509706][T23062] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1426.516303][T23062] EXT4-fs (loop5): 2 truncates cleaned up [ 1426.541680][T22691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.711291][T23062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1426.766707][T23078] loop4: detected capacity change from 0 to 512 [ 1426.828099][T23077] loop1: detected capacity change from 0 to 512 [ 1426.833240][ T4148] smc: removing ib device !yz2 [ 1426.839124][T23077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1426.853527][ T117] team0 (unregistering): Port device team_slave_1 removed [ 1426.860926][T23080] loop0: detected capacity change from 0 to 128 [ 1426.867789][T23078] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1426.878762][T23078] System zones: 1-12 [ 1426.892333][ T117] team0 (unregistering): Port device team_slave_0 removed [ 1426.948234][T23078] EXT4-fs error (device loop4): ext4_iget_extra_inode:5042: inode #15: comm syz.4.5340: corrupted in-inode xattr: e_value size too large [ 1426.987857][T22963] chnl_net:caif_netlink_parms(): no params data found [ 1427.002762][T23078] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1427.008171][T23078] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5340: couldn't read orphan inode 15 (err -117) [ 1427.012095][ T3039] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1427.017496][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1427.042686][ C0] EXT4-fs (loop4): initial error at time 1776350181: ext4_iget_extra_inode:5042: inode 15 [ 1427.052937][ C0] EXT4-fs (loop4): last error at time 1776350181: ext4_iget_extra_inode:5042: inode 15 [ 1427.063880][T23078] loop4: lost filesystem error report for type 5 error -117 [ 1427.064495][T23078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1427.097074][T23077] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5339: invalid indirect mapped block 4294967295 (level 1) [ 1427.116976][T23077] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1427.119026][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1427.137796][ C1] EXT4-fs (loop1): initial error at time 1776350181: ext4_free_branches:1023: inode 11 [ 1427.148476][ C1] EXT4-fs (loop1): last error at time 1776350181: ext4_free_branches:1023: inode 11 [ 1427.164074][T23077] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5339: invalid indirect mapped block 4294967295 (level 1) [ 1427.186723][T23077] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1427.205271][T23077] EXT4-fs (loop1): 2 truncates cleaned up [ 1427.279880][T23077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1427.354313][T22963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.378834][T22963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1427.391604][T22963] bridge_slave_0: entered allmulticast mode [ 1427.398390][T22963] bridge_slave_0: entered promiscuous mode [ 1427.405352][T12167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.452895][T22963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.464582][T22963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1427.471122][T23104] loop5: detected capacity change from 0 to 128 [ 1427.472301][T22963] bridge_slave_1: entered allmulticast mode [ 1427.496940][T22963] bridge_slave_1: entered promiscuous mode [ 1427.674612][T22963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.695158][T22963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.850464][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.863173][T22691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.941349][T23114] loop0: detected capacity change from 0 to 1024 [ 1427.972832][T23114] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1428.200982][ T3039] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1428.277409][T22963] team0: Port device team_slave_0 added [ 1428.328038][T23118] loop4: detected capacity change from 0 to 164 [ 1428.355456][T22963] team0: Port device team_slave_1 added [ 1428.404841][T23118] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 1428.421092][T23117] loop1: detected capacity change from 0 to 512 [ 1428.436640][T22963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.446649][T22963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.490388][T22963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.690793][T22963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.698354][T23117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1428.700991][T22963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.701027][T22963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1428.806356][T22963] hsr_slave_0: entered promiscuous mode [ 1428.851787][T22963] hsr_slave_1: entered promiscuous mode [ 1428.925201][T23122] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5345'. [ 1428.957510][T23117] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.5344: invalid block [ 1429.058142][T23117] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1429.058695][T23117] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5344: invalid indirect mapped block 4294967295 (level 1) [ 1429.068387][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1429.068545][ C1] EXT4-fs (loop1): initial error at time 1776350183: ext4_get_branch:178: inode 11: block 4294967295 [ 1429.068927][ C1] EXT4-fs (loop1): last error at time 1776350183: ext4_get_branch:178: inode 11: block 4294967295 [ 1429.336171][T23117] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1429.338276][T23117] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5344: invalid indirect mapped block 4294967295 (level 1) [ 1429.369558][T23117] EXT4-fs (loop1): 2 truncates cleaned up [ 1429.389719][T23117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.630656][T22691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.668193][T23141] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 1431.015615][T22963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1431.056264][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1431.068585][T23162] set_capacity_and_notify: 4 callbacks suppressed [ 1431.068605][T23162] loop0: detected capacity change from 0 to 1024 [ 1431.075199][T22963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1431.095018][T23160] loop5: detected capacity change from 0 to 1024 [ 1431.132857][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1431.140561][T22963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1431.148057][T23162] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1431.159246][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1431.171055][T22963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1431.210857][T23141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5347'. [ 1431.226471][T22963] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1431.258050][T23160] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 1431.289738][T23176] loop1: detected capacity change from 0 to 512 [ 1431.323529][T23176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1431.358198][T23176] System zones: 1-12 [ 1431.393714][T23176] EXT4-fs error (device loop1): ext4_iget_extra_inode:5042: inode #15: comm syz.1.5352: corrupted in-inode xattr: e_value size too large [ 1431.408037][T23187] loop4: detected capacity change from 0 to 128 [ 1431.416688][T22963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.417026][T23176] fserror_report: 1 callbacks suppressed [ 1431.417040][T23176] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1431.437875][T23176] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5352: couldn't read orphan inode 15 (err -117) [ 1431.447832][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1431.447867][ C0] EXT4-fs (loop1): initial error at time 1776350185: ext4_iget_extra_inode:5042: inode 15 [ 1431.448002][ C0] EXT4-fs (loop1): last error at time 1776350185: ext4_iget_extra_inode:5042: inode 15 [ 1431.488416][T22963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.489891][T23176] loop1: lost filesystem error report for type 5 error -117 [ 1431.563290][T23176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.595832][T22967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.603054][T22967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.621959][T22963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1431.632689][T22963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1431.660909][T22967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.668209][T22967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.003695][T23196] loop5: detected capacity change from 0 to 1024 [ 1432.158798][T23196] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 1432.336075][T22691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.426466][T23203] loop1: detected capacity change from 0 to 128 [ 1432.527416][T22963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1432.541297][T23206] loop4: detected capacity change from 0 to 512 [ 1432.633250][T23214] loop0: detected capacity change from 0 to 1024 [ 1432.643190][T23206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1432.676540][T23214] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1433.445398][T23206] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5356: invalid indirect mapped block 4294967295 (level 1) [ 1433.504129][T23206] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1433.510971][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1433.526770][ C0] EXT4-fs (loop4): initial error at time 1776350188: ext4_free_branches:1023: inode 11 [ 1433.536597][ C0] EXT4-fs (loop4): last error at time 1776350188: ext4_free_branches:1023: inode 11 [ 1433.566484][T23206] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5356: invalid indirect mapped block 4294967295 (level 1) [ 1433.601419][T23206] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1433.601905][T23206] EXT4-fs (loop4): 2 truncates cleaned up [ 1433.643998][T23206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1433.717297][T23255] loop1: detected capacity change from 0 to 128 [ 1433.912153][T23256] loop5: detected capacity change from 0 to 128 [ 1433.919965][T22963] veth0_vlan: entered promiscuous mode [ 1433.935196][T22963] veth1_vlan: entered promiscuous mode [ 1434.956607][T22963] veth0_macvtap: entered promiscuous mode [ 1435.238321][T22963] veth1_macvtap: entered promiscuous mode [ 1435.322329][T22963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.338478][T22963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.356808][T23275] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 1435.375403][ T5488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.387640][ T5488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.404514][ T5488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.405553][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.424103][T14585] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.633487][T23285] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5360'. [ 1436.517936][T23282] set_capacity_and_notify: 3 callbacks suppressed [ 1436.517957][T23282] loop0: detected capacity change from 0 to 512 [ 1436.867944][T23290] loop1: detected capacity change from 0 to 128 [ 1436.892470][T23292] loop5: detected capacity change from 0 to 128 [ 1436.908268][T23294] loop2: detected capacity change from 0 to 128 [ 1436.928318][T23282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1437.879728][T23282] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5363: invalid block [ 1437.892498][T23282] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1437.895785][T23282] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5363: invalid indirect mapped block 4294967295 (level 1) [ 1437.907260][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1437.907434][ C1] EXT4-fs (loop0): initial error at time 1776350192: ext4_get_branch:178: inode 11: block 4294967295 [ 1437.907763][ C1] EXT4-fs (loop0): last error at time 1776350192: ext4_get_branch:178: inode 11: block 4294967295 [ 1438.320303][T23282] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1438.344783][T23282] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5363: invalid indirect mapped block 4294967295 (level 1) [ 1438.391560][T23282] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1438.546277][ T3311] bond0: (slave syz_tun): Releasing backup interface [ 1438.573944][T23308] loop2: detected capacity change from 0 to 128 [ 1438.595617][ T3311] syz_tun (unregistering): left promiscuous mode [ 1438.607128][T23282] EXT4-fs (loop0): 2 truncates cleaned up [ 1438.703768][T14585] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.754760][T23282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.958834][T23282] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.848699][T14585] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.195796][T14585] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.197478][T23324] loop0: detected capacity change from 0 to 128 [ 1440.277176][T23325] loop2: detected capacity change from 0 to 128 [ 1440.324470][T23303] lo speed is unknown, defaulting to 1000 [ 1440.443843][T14585] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.294748][T23326] loop1: detected capacity change from 0 to 1024 [ 1441.546024][T23326] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1441.610256][T14585] bridge_slave_1: left allmulticast mode [ 1441.618025][T14585] bridge_slave_1: left promiscuous mode [ 1441.624366][T14585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.632838][T14585] bridge_slave_0: left allmulticast mode [ 1441.719031][T14585] bridge_slave_0: left promiscuous mode [ 1441.730458][T14585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.774503][T14585] batadv0: left allmulticast mode [ 1441.803041][T14585] batadv0: left promiscuous mode [ 1441.817324][T23337] loop2: detected capacity change from 0 to 128 [ 1441.827316][T14585] ¤: port 1(batadv0) entered disabled state [ 1442.064705][T23335] loop0: detected capacity change from 0 to 512 [ 1442.164961][T23335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1442.229763][T23342] loop1: detected capacity change from 0 to 1024 [ 1442.299301][T23335] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5372: invalid block [ 1442.331427][T23342] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1442.411643][T23335] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1442.412409][T23335] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5372: invalid indirect mapped block 4294967295 (level 1) [ 1442.421706][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1442.421886][ C0] EXT4-fs (loop0): initial error at time 1776350196: ext4_get_branch:178: inode 11: block 4294967295 [ 1442.422497][ C0] EXT4-fs (loop0): last error at time 1776350196: ext4_get_branch:178: inode 11: block 4294967295 [ 1442.510711][T23335] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1442.555299][T23335] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5372: invalid indirect mapped block 4294967295 (level 1) [ 1442.606164][T14585] bridge1 (unregistering): left promiscuous mode [ 1442.629625][T23335] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1442.642642][T23335] EXT4-fs (loop0): 2 truncates cleaned up [ 1442.711303][T23335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1442.852679][T23348] loop5: detected capacity change from 0 to 128 [ 1442.937820][T23350] loop2: detected capacity change from 0 to 1024 [ 1443.020411][T23350] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 1443.300754][T23356] loop1: detected capacity change from 0 to 128 [ 1444.194076][T23344] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1444.284700][T23362] loop5: detected capacity change from 0 to 128 [ 1444.502398][T23363] loop2: detected capacity change from 0 to 1024 [ 1444.532684][T23363] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 1444.607163][T23366] loop1: detected capacity change from 0 to 128 [ 1446.014919][T23375] loop2: detected capacity change from 0 to 1024 [ 1446.030703][T23376] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1446.043639][T23371] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 1446.062918][T23375] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 1446.261618][T14585] bond0 (unregistering): left promiscuous mode [ 1446.268726][T14585] bond_slave_0: left promiscuous mode [ 1446.276722][T14585] bond_slave_1: left promiscuous mode [ 1446.306326][T14585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1446.396872][T14585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1446.406931][T14585] bond0 (unregistering): Released all slaves [ 1446.446198][T23382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 1446.459858][T23382] System zones: 1-12 [ 1446.631551][T14585] tipc: Left network mode [ 1446.639227][T23382] EXT4-fs error (device loop2): ext4_iget_extra_inode:5042: inode #15: comm syz.2.5385: corrupted in-inode xattr: e_value size too large [ 1446.712380][T23382] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1446.712726][T23382] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5385: couldn't read orphan inode 15 (err -117) [ 1446.713034][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.722008][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1446.722034][ C0] EXT4-fs (loop2): initial error at time 1776350201: ext4_iget_extra_inode:5042: inode 15 [ 1446.722064][ C0] EXT4-fs (loop2): last error at time 1776350201: ext4_iget_extra_inode:5042: inode 15 [ 1446.749902][T23382] loop2: lost filesystem error report for type 5 error -117 [ 1446.912081][T14585] hsr_slave_0: left promiscuous mode [ 1446.936873][T23382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1446.969768][T14585] hsr_slave_1: left promiscuous mode [ 1446.992199][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.034193][T14585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.099070][T14585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.159390][T14585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.233482][T14585] veth1_macvtap: left promiscuous mode [ 1447.244783][T14585] veth0_macvtap: left promiscuous mode [ 1447.333156][T14585] veth1_vlan: left promiscuous mode [ 1447.342452][T14585] veth0_vlan: left promiscuous mode [ 1447.399647][T23402] set_capacity_and_notify: 4 callbacks suppressed [ 1447.399666][T23402] loop5: detected capacity change from 0 to 164 [ 1447.447169][T23402] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82 [ 1447.511741][T22963] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.528038][T23397] loop0: detected capacity change from 0 to 512 [ 1447.615557][T23409] loop2: detected capacity change from 0 to 128 [ 1447.624527][T23397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1447.788073][ T3387] lo speed is unknown, defaulting to 1000 [ 1447.793949][ T3387] syU×: Port: 1 Link DOWN [ 1447.799002][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1447.809020][ T3387] lo speed is unknown, defaulting to 1000 [ 1447.818024][T23413] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5388'. [ 1447.827880][T22967] smc: removing ib device syU× [ 1447.907657][T23303] chnl_net:caif_netlink_parms(): no params data found [ 1447.923266][T23414] loop1: detected capacity change from 0 to 1024 [ 1447.952665][T23397] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.5387: invalid block [ 1448.070629][T23414] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1448.100203][T23397] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1448.108793][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1448.124498][ C0] EXT4-fs (loop0): initial error at time 1776350202: ext4_get_branch:178: inode 11: block 4294967295 [ 1448.135451][ C0] EXT4-fs (loop0): last error at time 1776350202: ext4_get_branch:178: inode 11: block 4294967295 [ 1448.151495][T23397] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5387: invalid indirect mapped block 4294967295 (level 1) [ 1448.214131][T23419] loop5: detected capacity change from 0 to 128 [ 1448.268938][T23397] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1448.273812][T23397] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.5387: invalid indirect mapped block 4294967295 (level 1) [ 1448.335018][T23397] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1448.408837][T23397] EXT4-fs (loop0): 2 truncates cleaned up [ 1448.564115][T23397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1448.900947][T23423] loop2: detected capacity change from 0 to 512 [ 1448.969539][T23423] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1449.169636][T23423] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1449.241672][T23423] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.5392: bad orphan inode 4 [ 1449.265665][T23429] loop5: detected capacity change from 0 to 128 [ 1449.289733][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.407161][T23423] loop2: lost filesystem error report for type 5 error -117 [ 1449.411518][T23423] EXT4-fs (loop2): 1 orphan inode deleted [ 1449.419157][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1449.419181][ C1] EXT4-fs (loop2): initial error at time 1776350203: ext4_orphan_get:1423 [ 1449.419205][ C1] EXT4-fs (loop2): last error at time 1776350203: ext4_orphan_get:1423 [ 1449.524381][T23303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.531776][T23303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.539666][T23303] bridge_slave_0: entered allmulticast mode [ 1449.607762][T23423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.631324][T23303] bridge_slave_0: entered promiscuous mode [ 1449.701366][T23303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.793521][T23303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.904948][T23303] bridge_slave_1: entered allmulticast mode [ 1450.046756][T23303] bridge_slave_1: entered promiscuous mode [ 1450.056488][T23442] loop0: detected capacity change from 0 to 1024 [ 1450.089730][T23442] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 1450.117745][T23303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.128295][T23303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.148919][T23303] team0: Port device team_slave_0 added [ 1450.176100][T23303] team0: Port device team_slave_1 added [ 1450.228558][ T3039] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1450.286757][T23303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.304566][T23303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.340203][T23453] loop5: detected capacity change from 0 to 1024 [ 1450.350846][T23453] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 1450.362907][T23303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.389521][T23303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.403883][T23303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.465498][T23303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.555965][T23303] hsr_slave_0: entered promiscuous mode [ 1450.568379][T23303] hsr_slave_1: entered promiscuous mode [ 1450.590640][T23303] debugfs: 'hsr0' already exists in 'hsr' [ 1450.596209][T23460] loop0: detected capacity change from 0 to 128 [ 1450.607621][T23303] Cannot create hsr debugfs directory [ 1450.614028][T23456] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1450.807239][T22963] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.160344][T23472] EXT4-fs (loop2): filesystem too large to mount safely on this system [ 1451.471132][T23474] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 1451.682441][T23303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1451.696753][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1451.728373][T23303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1451.763418][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1451.787021][T23303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1451.801713][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1451.814622][T23303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1451.835895][T23303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1451.910217][T23303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1451.924366][T23303] 8021q: adding VLAN 0 to HW filter on device team0 [ 1451.936141][T23551] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1451.936141][T23551] The task syz.5.5414 (23551) triggered the difference, watch for misbehavior. [ 1451.959507][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.966665][ T5484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1451.976028][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.983352][ T5484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.042717][ T28] audit: type=1400 audit(1776350206.556:13356): avc: denied { sys_module } for pid=23303 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1452.117805][T23303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.126688][T23573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23573 comm=syz.1.5419 [ 1452.255223][T23593] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5423'. [ 1452.319560][T23303] veth0_vlan: entered promiscuous mode [ 1452.327861][T23303] veth1_vlan: entered promiscuous mode [ 1452.347636][T23303] veth0_macvtap: entered promiscuous mode [ 1452.355717][T23303] veth1_macvtap: entered promiscuous mode [ 1452.368311][T23303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.381703][T23303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.393312][ T117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.410462][ T117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.427074][ T117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.437440][ T117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.493618][T23610] set_capacity_and_notify: 3 callbacks suppressed [ 1452.493634][T23610] loop4: detected capacity change from 0 to 128 [ 1452.546760][T22967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.736223][T22967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.901473][T22967] team0: Port device netdevsim1 removed [ 1452.953965][T22967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.125923][T22967] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1453.223145][T22967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.379956][T22967] bridge0: port 3(batadv0) entered disabled state [ 1453.388238][T22967] bridge_slave_1: left allmulticast mode [ 1453.394961][T22967] bridge_slave_1: left promiscuous mode [ 1453.400752][T22967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.434913][ T28] audit: type=1400 audit(1776350207.946:13357): avc: denied { associate } for pid=23645 comm="syz.5.5439" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1453.436731][T22967] bridge_slave_0: left allmulticast mode [ 1453.469256][T22967] bridge_slave_0: left promiscuous mode [ 1453.475238][T22967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.813050][T22967] team0: Port device bridge1 removed [ 1453.875090][T22967] team0: Port device bridge2 removed [ 1453.951723][T22967] team0: Port device bridge3 removed [ 1454.010372][T22967] team0: Port device bridge4 removed [ 1454.073019][T22967] team0: Port device bridge5 removed [ 1454.170170][T22967] team0: Port device bridge6 removed [ 1454.210605][T22967] team0: Port device bridge7 removed [ 1454.265328][T22967] team0: Port device bridge8 removed [ 1454.320361][T22967] team0: Port device bridge9 removed [ 1454.372230][T22967] team0: Port device bridge10 removed [ 1454.471879][T22967] team0: Port device bridge11 removed [ 1455.204260][ T28] audit: type=1326 audit(1776350209.716:13358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.241314][ T28] audit: type=1326 audit(1776350209.716:13359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.265256][ T28] audit: type=1326 audit(1776350209.716:13360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.299143][ T28] audit: type=1326 audit(1776350209.716:13361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.329794][ T28] audit: type=1326 audit(1776350209.736:13362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.354361][ T28] audit: type=1326 audit(1776350209.736:13363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.378481][ T28] audit: type=1326 audit(1776350209.736:13364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.413024][ T28] audit: type=1326 audit(1776350209.746:13365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23705 comm="syz.5.5465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4a9ac819 code=0x7ffc0000 [ 1455.631197][T22967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.641212][T22967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.651229][T22967] bond0 (unregistering): Released all slaves [ 1455.738188][T22967] hsr_slave_0: left promiscuous mode [ 1455.747498][T22967] hsr_slave_1: left promiscuous mode [ 1455.759150][T22967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1455.769128][T22967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.776760][T22967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1455.790363][T22967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.808250][T22967] veth1_macvtap: left promiscuous mode [ 1455.817739][T22967] veth0_macvtap: left promiscuous mode [ 1455.826116][T22967] veth1_vlan: left allmulticast mode [ 1455.831585][T22967] veth1_vlan: left promiscuous mode [ 1455.837092][T22967] veth0_vlan: left promiscuous mode [ 1455.964982][T22967] team0 (unregistering): Port device macvlan1 removed [ 1456.026499][T22967] team0 (unregistering): Port device team_slave_1 removed [ 1456.052041][T22967] team0 (unregistering): Port device team_slave_0 removed [ 1456.132485][T23614] chnl_net:caif_netlink_parms(): no params data found [ 1456.146047][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1456.234662][T23614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.266421][T23614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.297926][T23614] bridge_slave_0: entered allmulticast mode [ 1456.322419][T23614] bridge_slave_0: entered promiscuous mode [ 1456.347833][T23614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.371188][T23614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.397201][T23614] bridge_slave_1: entered allmulticast mode [ 1456.425380][T23614] bridge_slave_1: entered promiscuous mode [ 1456.489622][T23614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.519980][T23614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.539784][ T3039] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1456.575482][T23614] team0: Port device team_slave_0 added [ 1456.595541][T23614] team0: Port device team_slave_1 added [ 1456.629606][T23614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.641245][T23614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.680584][T23614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.701140][T23614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.708499][T23614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.737557][T23614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.773495][T23614] hsr_slave_0: entered promiscuous mode [ 1456.780036][T23614] hsr_slave_1: entered promiscuous mode [ 1456.785979][T23614] debugfs: 'hsr0' already exists in 'hsr' [ 1456.793620][T23614] Cannot create hsr debugfs directory [ 1456.866428][ T3039] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1457.094537][T23614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1457.107919][T23614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1457.117874][T23614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1457.127255][T23614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1457.135191][T23614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1457.145418][T23614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1457.159330][T23614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1457.186345][T23614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1457.210956][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1457.210974][ T28] audit: type=1400 audit(1776350211.726:13373): avc: denied { read } for pid=23840 comm="syz.4.5489" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1457.250550][T23845] netlink: 'syz.4.5490': attribute type 1 has an invalid length. [ 1457.259773][ T28] audit: type=1400 audit(1776350211.756:13374): avc: denied { create } for pid=23844 comm="syz.4.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1457.330353][T23845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5490'. [ 1457.368656][T23614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.399854][T23614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.431188][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.438284][ T5484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.460708][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.467828][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.477669][ T28] audit: type=1400 audit(1776350211.996:13375): avc: denied { create } for pid=23865 comm="syz.4.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1457.508259][ T28] audit: type=1400 audit(1776350211.996:13376): avc: denied { connect } for pid=23865 comm="syz.4.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1457.533806][T23614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1457.544976][T23614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1457.595953][ T28] audit: type=1400 audit(1776350211.996:13377): avc: denied { read } for pid=23865 comm="syz.4.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1457.654586][ T28] audit: type=1400 audit(1776350212.056:13378): avc: denied { write } for pid=23865 comm="syz.4.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1457.685254][T23614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.702380][ T28] audit: type=1400 audit(1776350212.066:13379): avc: denied { setopt } for pid=23865 comm="syz.4.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1457.853686][T23614] veth0_vlan: entered promiscuous mode [ 1457.870601][T23614] veth1_vlan: entered promiscuous mode [ 1457.917074][T23614] veth0_macvtap: entered promiscuous mode [ 1457.936814][T23614] veth1_macvtap: entered promiscuous mode [ 1457.982693][T23614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.009346][T23614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.030866][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.055846][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.084990][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.105175][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.186884][T23892] IPv6: addrconf: prefix option has invalid lifetime [ 1458.579963][T23962] 9pnet_virtio: no channels available for device syz [ 1458.735433][T23976] netlink: 'syz.4.5513': attribute type 1 has an invalid length. [ 1458.758875][T23976] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5513'. [ 1458.813357][T23939] chnl_net:caif_netlink_parms(): no params data found [ 1458.856457][T23939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.864825][T23939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.872445][T23939] bridge_slave_0: entered allmulticast mode [ 1458.879418][T23939] bridge_slave_0: entered promiscuous mode [ 1458.886264][T23939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.894285][T23939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.901619][T23939] bridge_slave_1: entered allmulticast mode [ 1458.908310][T23939] bridge_slave_1: entered promiscuous mode [ 1458.927398][T23939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.939093][T23939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.961363][T23939] team0: Port device team_slave_0 added [ 1458.968117][T23939] team0: Port device team_slave_1 added [ 1458.984211][T23939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.991931][T23939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.018181][T23939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1459.031564][T23939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1459.038959][T23939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.066276][T23939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.097480][T23939] hsr_slave_0: entered promiscuous mode [ 1459.103940][T23939] hsr_slave_1: entered promiscuous mode [ 1459.110102][T23939] debugfs: 'hsr0' already exists in 'hsr' [ 1459.116029][T23939] Cannot create hsr debugfs directory [ 1459.184783][T23939] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.251766][T23939] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.310142][T23939] team0: Port device netdevsim1 removed [ 1459.318479][T23939] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.381619][T23939] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.464207][ T4148] bridge_slave_1: left allmulticast mode [ 1459.472776][ T4148] bridge_slave_1: left promiscuous mode [ 1459.478631][ T4148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.486768][ T4148] bridge_slave_0: left allmulticast mode [ 1459.492641][ T4148] bridge_slave_0: left promiscuous mode [ 1459.498507][ T4148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.609598][ T3367] IPVS: starting estimator thread 0... [ 1459.718934][T23994] IPVS: using max 2688 ests per chain, 134400 per kthread [ 1460.453732][ T4148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1460.473320][ T4148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1460.492796][ T4148] bond0 (unregistering): Released all slaves [ 1460.572301][T23939] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1460.602040][T23939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1460.617736][ T4148] hsr_slave_0: left promiscuous mode [ 1460.640292][ T4148] hsr_slave_1: left promiscuous mode [ 1460.657207][ T4148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.673927][ T4148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.690527][ T4148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.699764][ T4148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.715766][ T4148] veth1_macvtap: left promiscuous mode [ 1460.728818][ T4148] veth0_macvtap: left promiscuous mode [ 1460.734434][ T4148] veth1_vlan: left promiscuous mode [ 1460.742367][ T4148] veth0_vlan: left promiscuous mode [ 1460.852579][ T4148] team0 (unregistering): Port device team_slave_1 removed [ 1460.872851][ T4148] team0 (unregistering): Port device team_slave_0 removed [ 1460.933113][T23939] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1460.948540][T23939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1460.964262][T23939] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1460.981880][T23939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1460.998015][T23939] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1461.015571][T23939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1461.084613][T23939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.108592][T23939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.125624][T22967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.132800][T22967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.162643][T22967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.169768][T22967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.298728][T23939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.529622][T23939] veth0_vlan: entered promiscuous mode [ 1461.551935][T23939] veth1_vlan: entered promiscuous mode [ 1461.584149][T23939] veth0_macvtap: entered promiscuous mode [ 1461.594220][T24040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.606913][T23939] veth1_macvtap: entered promiscuous mode [ 1461.612415][T24040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.631641][T23939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1461.653249][T23939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1461.673566][T14585] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.689101][T14585] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.709471][T14585] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.728344][T14585] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.839806][T24040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.861083][T24040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.601486][T24089] syzkaller0: entered promiscuous mode [ 1462.607102][T24089] syzkaller0: entered allmulticast mode [ 1462.717634][ T28] audit: type=1400 audit(1776350217.226:13380): avc: denied { ioctl } for pid=24097 comm="syz.0.5552" path="socket:[73142]" dev="sockfs" ino=73142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1462.778844][ T28] audit: type=1400 audit(1776350217.266:13381): avc: denied { bind } for pid=24097 comm="syz.0.5552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1462.922102][ T28] audit: type=1400 audit(1776350217.436:13382): avc: denied { read } for pid=24112 comm="syz.4.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1462.971915][ T28] audit: type=1400 audit(1776350217.486:13383): avc: denied { write } for pid=24112 comm="syz.4.5559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1462.998589][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b6d0e00: rx timeout, send abort [ 1463.155469][ T28] audit: type=1400 audit(1776350217.666:13384): avc: denied { connect } for pid=24129 comm="syz.2.5567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1463.498606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b6d1000: rx timeout, send abort [ 1463.506893][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b6d0e00: abort rx timeout. Force session deactivation [ 1463.802549][T15034] IPVS: starting estimator thread 0... [ 1463.808133][T24154] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1463.908838][T24155] IPVS: using max 2736 ests per chain, 136800 per kthread [ 1463.954171][ T28] audit: type=1400 audit(1776350218.466:13385): avc: denied { bind } for pid=24173 comm="syz.1.5587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1463.975586][ T28] audit: type=1400 audit(1776350218.496:13386): avc: denied { listen } for pid=24173 comm="syz.1.5587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1463.995807][ T28] audit: type=1400 audit(1776350218.496:13387): avc: denied { connect } for pid=24173 comm="syz.1.5587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1464.006884][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b6d1000: abort rx timeout. Force session deactivation [ 1464.016017][ T28] audit: type=1400 audit(1776350218.496:13388): avc: denied { read } for pid=24173 comm="syz.1.5587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1464.096141][T24185] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1464.106117][ T28] audit: type=1400 audit(1776350218.566:13389): avc: denied { shutdown } for pid=24173 comm="syz.1.5587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1464.278012][T24198] tipc: Started in network mode [ 1464.289420][T24198] tipc: Node identity 9ef5db327d39, cluster identity 4711 [ 1464.302353][T24198] tipc: Enabled bearer , priority 0 [ 1464.316383][T24198] syzkaller0: entered promiscuous mode [ 1464.322132][T24198] syzkaller0: entered allmulticast mode [ 1464.333308][T24198] tipc: Resetting bearer [ 1464.341266][T24197] tipc: Resetting bearer [ 1464.348593][T24197] tipc: Disabling bearer [ 1465.230387][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.242662][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.818728][T24305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.828030][T24305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.973288][T24367] xt_hashlimit: size too large, truncated to 1048576 [ 1467.095709][T24371] syzkaller0: entered promiscuous mode [ 1467.101283][T24371] syzkaller0: entered allmulticast mode [ 1467.478359][T24338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1467.650447][T24434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.659526][T24434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.669886][T24434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.678518][T24434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.697784][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b976200: rx timeout, send abort [ 1468.197782][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b9aa000: rx timeout, send abort [ 1468.206396][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b976200: abort rx timeout. Force session deactivation [ 1468.259448][T24440] syzkaller0: entered promiscuous mode [ 1468.266274][T24440] syzkaller0: entered allmulticast mode [ 1468.579276][ T3387] IPVS: starting estimator thread 0... [ 1468.585492][T24476] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1468.603003][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1468.706217][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b9aa000: abort rx timeout. Force session deactivation [ 1468.719522][T24478] IPVS: using max 2784 ests per chain, 139200 per kthread [ 1468.935881][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811affb000: rx timeout, send abort [ 1469.158300][T24505] IPv6: addrconf: prefix option has invalid lifetime [ 1469.435940][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811affea00: rx timeout, send abort [ 1469.444775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811affb000: abort rx timeout. Force session deactivation [ 1469.463820][T24527] loop1: detected capacity change from 0 to 8192 [ 1469.481202][T24527] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1469.523508][T23995] IPVS: starting estimator thread 0... [ 1469.638950][T24534] IPVS: using max 2736 ests per chain, 136800 per kthread [ 1469.944576][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811affea00: abort rx timeout. Force session deactivation [ 1470.190964][T24601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5777'. [ 1470.511718][T24621] IPv6: addrconf: prefix option has invalid lifetime [ 1470.552412][T24625] syzkaller0: entered promiscuous mode [ 1470.558050][T24625] syzkaller0: entered allmulticast mode [ 1470.867165][T24665] netlink: 'syz.0.5808': attribute type 12 has an invalid length. [ 1470.875275][T24665] netlink: 'syz.0.5808': attribute type 29 has an invalid length. [ 1470.883486][T24665] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5808'. [ 1470.892835][T24665] netlink: 'syz.0.5808': attribute type 1 has an invalid length. [ 1471.067243][ T3387] IPVS: starting estimator thread 0... [ 1471.094333][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1471.094435][ T28] audit: type=1400 audit(1776350225.606:13392): avc: denied { module_load } for pid=24700 comm="syz.1.5825" path="/sys/kernel/notes" dev="sysfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1471.097738][T24701] Invalid ELF header magic: != ELF [ 1471.169072][T24697] IPVS: using max 2736 ests per chain, 136800 per kthread [ 1471.356502][T24733] IPv6: addrconf: prefix option has invalid lifetime [ 1471.402622][T24738] syzkaller0: entered promiscuous mode [ 1471.408176][T24738] syzkaller0: entered allmulticast mode [ 1471.621111][ T28] audit: type=1400 audit(1776350226.136:13393): avc: denied { listen } for pid=24759 comm="syz.5.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1471.683775][T24763] syzkaller0: entered promiscuous mode [ 1471.689689][T24763] syzkaller0: entered allmulticast mode [ 1472.243767][T24842] loop4: detected capacity change from 0 to 128 [ 1472.319880][T24846] loop0: detected capacity change from 0 to 512 [ 1472.425410][T24858] netlink: 'syz.2.5899': attribute type 12 has an invalid length. [ 1472.434498][T24858] netlink: 'syz.2.5899': attribute type 29 has an invalid length. [ 1472.443913][T24858] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1472.454512][T24858] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5899'. [ 1472.721063][T24895] netlink: 'syz.4.5916': attribute type 12 has an invalid length. [ 1472.730227][T24895] netlink: 'syz.4.5916': attribute type 29 has an invalid length. [ 1472.738403][T24895] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5916'. [ 1472.768066][T24895] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5916'. [ 1473.017753][T24936] netlink: 'syz.4.5936': attribute type 4 has an invalid length. [ 1473.910898][T25018] loop2: detected capacity change from 0 to 512 [ 1474.213299][T25039] loop1: detected capacity change from 0 to 128 [ 1474.798632][T25077] loop4: detected capacity change from 0 to 512 [ 1475.849447][T25158] loop2: detected capacity change from 0 to 512 [ 1477.400412][T25065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1477.464259][T25229] loop0: detected capacity change from 0 to 512 [ 1477.573728][T25246] loop1: detected capacity change from 0 to 128 [ 1477.709856][T25264] loop5: detected capacity change from 0 to 512 [ 1477.799884][T25272] loop1: detected capacity change from 0 to 764 [ 1477.806720][T25272] iso9660: Unknown parameter 'ÿÿÿ' [ 1478.004100][T25291] loop5: detected capacity change from 0 to 512 [ 1478.523149][T25359] loop5: detected capacity change from 0 to 128 [ 1479.985396][T25485] loop2: detected capacity change from 0 to 128 [ 1480.005481][ T28] audit: type=1400 audit(1776350234.516:13394): avc: denied { setopt } for pid=25480 comm="syz.0.6175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1480.146117][T25498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6183'. [ 1480.180960][T25500] netlink: 'syz.2.6184': attribute type 12 has an invalid length. [ 1480.196782][T25500] netlink: 'syz.2.6184': attribute type 29 has an invalid length. [ 1480.205111][T25500] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6184'. [ 1480.214521][T25500] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6184'. [ 1480.983453][T25537] xt_hashlimit: size too large, truncated to 1048576 [ 1481.625878][T25586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.633397][T25586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.701653][T25586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.713698][T25586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.747679][ T5480] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.765095][ T5480] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.775420][ T5480] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.796118][ T5480] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.893482][T25604] netlink: 'syz.2.6230': attribute type 12 has an invalid length. [ 1481.911604][T25604] netlink: 'syz.2.6230': attribute type 29 has an invalid length. [ 1481.924070][T25604] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1481.945057][T25604] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1482.144575][T25630] loop1: detected capacity change from 0 to 512 [ 1482.271547][T25640] IPv6: addrconf: prefix option has invalid lifetime [ 1482.628865][T25679] loop1: detected capacity change from 0 to 256 [ 1482.719940][T25686] netlink: 'syz.1.6266': attribute type 12 has an invalid length. [ 1482.737681][T25689] loop0: detected capacity change from 0 to 764 [ 1482.744747][T25689] iso9660: Unknown parameter 'ÿÿÿ' [ 1482.754679][T25686] netlink: 'syz.1.6266': attribute type 29 has an invalid length. [ 1482.778981][T25686] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1482.796962][T25686] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6266'. [ 1482.977825][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6276'. [ 1483.182367][T25732] loop5: detected capacity change from 0 to 512 [ 1483.325355][T25751] loop2: detected capacity change from 0 to 128 [ 1483.333795][ T28] audit: type=1326 audit(1776350237.856:13395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25748 comm="syz.0.6294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d3767c819 code=0x0 [ 1483.556747][T25776] loop5: detected capacity change from 0 to 736 [ 1483.731745][T25794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6309'. [ 1483.967819][T25813] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6316'. [ 1484.300055][T25851] netlink: 'syz.2.6335': attribute type 12 has an invalid length. [ 1484.308124][T25851] netlink: 'syz.2.6335': attribute type 29 has an invalid length. [ 1484.354836][T25858] loop0: detected capacity change from 0 to 128 [ 1484.486613][ T28] audit: type=1326 audit(1776350238.996:13396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1484.559115][ T28] audit: type=1326 audit(1776350238.996:13397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1484.585284][ T28] audit: type=1326 audit(1776350238.996:13398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1484.658279][T25895] loop1: detected capacity change from 0 to 128 [ 1484.676686][ T28] audit: type=1326 audit(1776350238.996:13399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1484.758527][ T28] audit: type=1326 audit(1776350238.996:13400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1484.772675][T25911] xt_hashlimit: size too large, truncated to 1048576 [ 1484.787951][T25913] loop2: detected capacity change from 0 to 764 [ 1484.831629][T25913] iso9660: Unknown parameter 'ÿÿÿ' [ 1484.844344][ T28] audit: type=1326 audit(1776350238.996:13401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1484.927292][ T28] audit: type=1326 audit(1776350238.996:13402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1485.000681][ T28] audit: type=1326 audit(1776350238.996:13403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1485.064493][ T28] audit: type=1326 audit(1776350238.996:13404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1485.092829][ T28] audit: type=1326 audit(1776350238.996:13405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1485.118120][ T28] audit: type=1326 audit(1776350238.996:13406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1485.142250][ T28] audit: type=1326 audit(1776350238.996:13407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1485.166810][ T28] audit: type=1326 audit(1776350238.996:13408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25878 comm="syz.0.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d3767c819 code=0x7ffc0000 [ 1485.197555][T25935] loop0: detected capacity change from 0 to 736 [ 1485.229554][T25938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.243917][T25938] batadv_slave_0: entered promiscuous mode [ 1485.353051][T25950] loop1: detected capacity change from 0 to 512 [ 1485.400907][T25954] veth0_macvtap: entered allmulticast mode [ 1485.408413][T25956] loop5: detected capacity change from 0 to 128 [ 1485.425596][T25954] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 1485.477429][T25964] loop0: detected capacity change from 0 to 736 [ 1485.572484][T25977] loop4: detected capacity change from 0 to 764 [ 1485.581300][T25977] iso9660: Unknown parameter 'ÿÿÿ' [ 1485.692159][T25991] __nla_validate_parse: 4 callbacks suppressed [ 1485.692249][T25991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6399'. [ 1485.866544][ T28] audit: type=1400 audit(1776350240.376:13409): avc: denied { unmount } for pid=23303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1485.919910][T26013] xt_hashlimit: size too large, truncated to 1048576 [ 1486.426527][T26037] IPv6: addrconf: prefix option has invalid lifetime [ 1486.581322][T26046] loop0: detected capacity change from 0 to 128 [ 1486.601530][T26047] loop4: detected capacity change from 0 to 736 [ 1486.639248][T26046] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1486.659082][T26046] FAT-fs (loop0): Filesystem has been set read-only [ 1486.933976][T26073] netlink: 'syz.0.6435': attribute type 12 has an invalid length. [ 1486.954764][T26073] netlink: 'syz.0.6435': attribute type 29 has an invalid length. [ 1486.970119][T26073] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6435'. [ 1486.986771][T26073] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6435'. [ 1487.021864][T26080] loop4: detected capacity change from 0 to 764 [ 1487.042053][T26080] iso9660: Unknown parameter 'ÿÿÿ' [ 1487.112664][T26086] xt_hashlimit: size too large, truncated to 1048576 [ 1487.728958][T26127] loop0: detected capacity change from 0 to 736 [ 1487.825176][T26135] netlink: 'syz.1.6461': attribute type 12 has an invalid length. [ 1487.852488][T26135] netlink: 'syz.1.6461': attribute type 29 has an invalid length. [ 1487.867186][T26135] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6461'. [ 1487.883992][T26135] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6461'. [ 1488.085710][T26159] GUP no longer grows the stack in syz.1.6472 (26159): 200000007000-200000008000 (200000003000) [ 1488.097089][T26159] CPU: 0 UID: 0 PID: 26159 Comm: syz.1.6472 Tainted: G W syzkaller #0 PREEMPT(full) [ 1488.097119][T26159] Tainted: [W]=WARN [ 1488.097126][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1488.097141][T26159] Call Trace: [ 1488.097149][T26159] [ 1488.097158][T26159] __dump_stack+0x1d/0x30 [ 1488.097334][T26159] dump_stack_lvl+0x95/0xd0 [ 1488.097412][T26159] dump_stack+0x15/0x1b [ 1488.097438][T26159] __get_user_pages+0x1b26/0x1f10 [ 1488.097478][T26159] __gup_longterm_locked+0x2fa/0xe30 [ 1488.097652][T26159] gup_fast_fallback+0x1f2/0x1410 [ 1488.097758][T26159] pin_user_pages_fast+0x5f/0x90 [ 1488.097787][T26159] io_pin_pages+0xba/0x170 [ 1488.097819][T26159] io_region_pin_pages+0x58/0xf0 [ 1488.097921][T26159] io_create_region+0x2c4/0x330 [ 1488.097947][T26159] io_allocate_scq_urings+0x125/0x3f0 [ 1488.097983][T26159] ? selinux_capable+0x31/0x40 [ 1488.098033][T26159] io_uring_create+0x2f6/0x500 [ 1488.098077][T26159] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 1488.098100][T26159] __x64_sys_io_uring_setup+0x31/0x40 [ 1488.098122][T26159] x64_sys_call+0x2962/0x3020 [ 1488.098172][T26159] do_syscall_64+0x12c/0x3b0 [ 1488.098211][T26159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.098240][T26159] RIP: 0033:0x7eff9518c819 [ 1488.098260][T26159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.098282][T26159] RSP: 002b:00007eff93be7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1488.098365][T26159] RAX: ffffffffffffffda RBX: 00007eff95405fa0 RCX: 00007eff9518c819 [ 1488.098379][T26159] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000004fee [ 1488.098392][T26159] RBP: 00007eff95222c91 R08: 0000000000000000 R09: 0000000000000000 [ 1488.098405][T26159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1488.098417][T26159] R13: 00007eff95406038 R14: 00007eff95405fa0 R15: 00007ffd89d16768 [ 1488.098452][T26159] [ 1488.903856][T26194] IPv6: addrconf: prefix option has invalid lifetime [ 1488.999815][T26197] xt_hashlimit: size too large, truncated to 1048576 [ 1489.038959][T26201] netlink: 'syz.2.6489': attribute type 12 has an invalid length. [ 1489.081633][T26201] netlink: 'syz.2.6489': attribute type 29 has an invalid length. [ 1489.114643][T26201] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6489'. [ 1489.128962][T26201] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6489'. [ 1489.319773][T26208] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6492'. [ 1489.437915][T26212] netlink: 'syz.0.6494': attribute type 1 has an invalid length. [ 1489.467877][T26212] netlink: 'syz.0.6494': attribute type 2 has an invalid length. [ 1489.503588][T26214] loop1: detected capacity change from 0 to 764 [ 1489.534013][T26214] iso9660: Unknown parameter 'ÿÿÿ' [ 1490.311259][T26266] set_capacity_and_notify: 1 callbacks suppressed [ 1490.311276][T26266] loop4: detected capacity change from 0 to 736 [ 1490.477798][T26276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.546047][T26281] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6525'. [ 1490.767777][T26302] netlink: 'syz.4.6534': attribute type 12 has an invalid length. [ 1490.776546][T26302] netlink: 'syz.4.6534': attribute type 29 has an invalid length. [ 1490.784867][T26302] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6534'. [ 1490.794849][T26302] netlink: 59 bytes leftover after parsing attributes in process `syz.4.6534'. [ 1491.028117][T26324] loop5: detected capacity change from 0 to 736 [ 1491.367759][T26362] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6561'. [ 1491.381045][T26362] netlink: 59 bytes leftover after parsing attributes in process `syz.4.6561'. [ 1491.414018][T26367] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6563'. [ 1491.963261][T26414] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1492.024176][T26421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=26421 comm=syz.0.6583 [ 1492.037540][T26421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1492.310751][T26441] program syz.5.6594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1492.450041][T26451] xt_hashlimit: size too large, truncated to 1048576 [ 1492.759784][T26474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1492.865632][T26479] xt_hashlimit: size too large, truncated to 1048576 [ 1492.905406][T26488] loop2: detected capacity change from 0 to 764 [ 1492.920988][T26488] iso9660: Unknown parameter 'ÿÿÿ' [ 1493.251543][T26504] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6619'. [ 1493.422809][T26511] loop4: detected capacity change from 0 to 128 [ 1493.606759][T26525] xt_hashlimit: size too large, truncated to 1048576 [ 1493.824975][T26548] loop0: detected capacity change from 0 to 512 [ 1494.212390][T26566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1494.264428][T26570] syzkaller0: entered promiscuous mode [ 1494.272557][T26570] syzkaller0: entered allmulticast mode [ 1494.391867][T26580] loop5: detected capacity change from 0 to 512 [ 1494.675749][T26598] validate_nla: 2 callbacks suppressed [ 1494.675800][T26598] netlink: 'syz.4.6663': attribute type 12 has an invalid length. [ 1494.695758][T26598] netlink: 'syz.4.6663': attribute type 29 has an invalid length. [ 1494.789868][T26609] program syz.2.6669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.806507][T26613] loop4: detected capacity change from 0 to 256 [ 1494.920474][T26625] loop2: detected capacity change from 0 to 512 [ 1494.936956][T26627] syzkaller0: entered promiscuous mode [ 1494.961097][T26627] syzkaller0: entered allmulticast mode [ 1495.404226][T26658] IPv6: addrconf: prefix option has invalid lifetime [ 1495.437380][T26667] loop0: detected capacity change from 0 to 256 [ 1495.447658][T26667] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1495.479964][T26667] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779264) [ 1495.496726][T26667] FAT-fs (loop0): Filesystem has been set read-only [ 1496.263375][T26703] loop2: detected capacity change from 0 to 1764 [ 1496.448928][T26716] netlink: 'syz.4.6715': attribute type 5 has an invalid length. [ 1496.449418][T26717] netlink: 'syz.1.6716': attribute type 12 has an invalid length. [ 1496.465061][T26717] netlink: 'syz.1.6716': attribute type 29 has an invalid length. [ 1496.478831][T26717] __nla_validate_parse: 6 callbacks suppressed [ 1496.478851][T26717] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6716'. [ 1496.499550][T26717] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6716'. [ 1496.700482][T26731] loop1: detected capacity change from 0 to 1764 [ 1496.717323][T26735] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6723'. [ 1497.297330][T26771] syzkaller0: entered promiscuous mode [ 1497.313140][T26771] syzkaller0: entered allmulticast mode [ 1497.406282][T26775] netlink: 'syz.5.6740': attribute type 12 has an invalid length. [ 1497.433956][T26775] netlink: 'syz.5.6740': attribute type 29 has an invalid length. [ 1497.467762][T26775] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6740'. [ 1497.498085][T26775] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6740'. [ 1498.482741][ T28] audit: type=1400 audit(1776350252.996:13410): avc: denied { checkpoint_restore } for pid=26811 comm="syz.1.6756" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1498.548616][T26814] netlink: 'syz.1.6757': attribute type 12 has an invalid length. [ 1498.558420][T26814] netlink: 'syz.1.6757': attribute type 29 has an invalid length. [ 1498.567196][T26814] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6757'. [ 1498.577531][T26814] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6757'. [ 1498.737953][T26830] loop1: detected capacity change from 0 to 256 [ 1498.767212][T26830] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1498.831840][T26837] loop1: detected capacity change from 0 to 512 [ 1499.463755][T26881] netlink: 'syz.5.6786': attribute type 12 has an invalid length. [ 1499.487170][T26881] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6786'. [ 1499.508853][T26881] netlink: 11 bytes leftover after parsing attributes in process `syz.5.6786'. [ 1499.951756][T26932] loop0: detected capacity change from 0 to 256 [ 1499.973306][T26932] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1500.266452][T26944] loop0: detected capacity change from 0 to 512 [ 1500.746851][T26961] loop1: detected capacity change from 0 to 256 [ 1500.760977][T26961] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1500.889602][T26969] loop2: detected capacity change from 0 to 132 [ 1501.066286][T26984] loop1: detected capacity change from 0 to 512 [ 1501.231980][T26999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6837'. [ 1501.291118][T27004] loop0: detected capacity change from 0 to 256 [ 1501.299011][T27005] syzkaller0: entered promiscuous mode [ 1501.308508][T27005] syzkaller0: entered allmulticast mode [ 1501.317940][T27004] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1501.435213][T27020] loop2: detected capacity change from 0 to 256 [ 1501.471272][T27020] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1501.524858][T27020] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 1501.533092][T27020] FAT-fs (loop2): Filesystem has been set read-only [ 1501.539759][T27020] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 1501.547923][T27020] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 1501.556061][T27020] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 1501.638303][T27033] __nla_validate_parse: 1 callbacks suppressed [ 1501.638321][T27033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6853'. [ 1501.667977][T27035] program syz.0.6854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1501.886072][T27054] loop0: detected capacity change from 0 to 256 [ 1501.907902][T27054] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1502.055839][T27070] loop5: detected capacity change from 0 to 764 [ 1502.163143][T27082] loop5: detected capacity change from 0 to 164 [ 1502.202304][T27086] loop2: detected capacity change from 0 to 7 [ 1502.211684][T27084] loop5: detected capacity change from 0 to 128 [ 1502.297996][T27094] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6881'. [ 1502.336747][T27097] syzkaller0: entered promiscuous mode [ 1502.355489][T27097] syzkaller0: entered allmulticast mode [ 1502.554852][ T28] audit: type=1400 audit(1776350257.066:13411): avc: denied { name_bind } for pid=27122 comm="syz.0.6894" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1502.588124][T27121] validate_nla: 1 callbacks suppressed [ 1502.588139][T27121] netlink: 'syz.1.6892': attribute type 12 has an invalid length. [ 1502.612059][T27121] netlink: 'syz.1.6892': attribute type 29 has an invalid length. [ 1502.627040][T27121] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6892'. [ 1502.636487][T27121] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6892'. [ 1502.668883][T27131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1502.682252][T27135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6899'. [ 1502.724507][T27142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6902'. [ 1502.733747][T27142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6902'. [ 1502.787939][ T28] audit: type=1400 audit(1776350257.296:13412): avc: denied { write } for pid=27147 comm="syz.4.6904" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1502.946054][T27164] syzkaller0: entered promiscuous mode [ 1502.956935][T27164] syzkaller0: entered allmulticast mode [ 1503.217718][T27202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6928'. [ 1503.235543][T27202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.264310][T27205] ip6erspan0: entered allmulticast mode [ 1503.276731][T27208] Unable to read rock-ridge attributes [ 1503.290268][T27208] Unable to read rock-ridge attributes [ 1503.303921][T27208] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1503.683695][T27267] Unable to read rock-ridge attributes [ 1503.693968][T27267] Unable to read rock-ridge attributes [ 1503.701571][T27267] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1503.981590][T27303] syzkaller0: entered promiscuous mode [ 1503.988385][T27303] syzkaller0: entered allmulticast mode [ 1504.005673][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6974'. [ 1504.411193][T27350] netlink: 'syz.1.6993': attribute type 12 has an invalid length. [ 1504.432708][T27350] netlink: 'syz.1.6993': attribute type 29 has an invalid length. [ 1504.433457][T27352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27352 comm=syz.5.6994 [ 1504.649917][T27372] Unable to read rock-ridge attributes [ 1504.934563][T27401] syzkaller0: entered promiscuous mode [ 1504.940527][T27401] syzkaller0: entered allmulticast mode [ 1505.543691][T27428] syzkaller0: entered promiscuous mode [ 1505.549885][T27428] syzkaller0: entered allmulticast mode [ 1505.902532][ C1] vcan0: j1939_tp_rxtimer: 0xffff888121783e00: rx timeout, send abort [ 1506.214844][T27465] syzkaller0: entered promiscuous mode [ 1506.221305][T27465] syzkaller0: entered allmulticast mode [ 1506.272456][T27459] 9p: Bad value for 'wfdno' [ 1506.402571][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b83fa00: rx timeout, send abort [ 1506.411412][ C1] vcan0: j1939_tp_rxtimer: 0xffff888121783e00: abort rx timeout. Force session deactivation [ 1506.542514][T27493] syzkaller0: entered promiscuous mode [ 1506.548245][T27493] syzkaller0: entered allmulticast mode [ 1506.561172][T27496] netlink: 'syz.5.7053': attribute type 5 has an invalid length. [ 1506.836670][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c824600: rx timeout, send abort [ 1506.911238][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b83fa00: abort rx timeout. Force session deactivation [ 1507.336681][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b6d5a00: rx timeout, send abort [ 1507.345911][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811c824600: abort rx timeout. Force session deactivation [ 1507.508667][T27553] __nla_validate_parse: 4 callbacks suppressed [ 1507.516424][T27553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7078'. [ 1507.531658][T27553] sit1: entered allmulticast mode [ 1507.687296][T27574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.796124][T27582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27582 comm=syz.0.7089 [ 1507.809227][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7089'. [ 1507.845123][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b6d5a00: abort rx timeout. Force session deactivation [ 1508.425115][T27595] program syz.1.7095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1508.611096][T27609] 9p: Bad value for 'wfdno' [ 1508.755983][T27642] bond1: option miimon: invalid value (18446744073709551602) [ 1508.763800][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811baaf600: rx timeout, send abort [ 1508.772361][T27642] bond1: option miimon: allowed values 0 - 2147483647 [ 1508.780252][T27642] bond1 (unregistering): Released all slaves [ 1509.261920][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b9c5600: rx timeout, send abort [ 1509.270409][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811baaf600: abort rx timeout. Force session deactivation [ 1509.384400][T27659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27659 comm=syz.4.7123 [ 1509.496915][ T3000] ================================================================== [ 1509.505157][ T3000] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 1509.513707][ T3000] [ 1509.516151][ T3000] write to 0xffff88810163f6a0 of 8 bytes by task 14055 on cpu 0: [ 1509.524067][ T3000] inode_set_ctime_current+0x5f2/0x8c0 [ 1509.529603][ T3000] simple_unlink+0x2d/0x80 [ 1509.534055][ T3000] shmem_unlink+0x12d/0x140 [ 1509.538577][ T3000] vfs_unlink+0x1c7/0x490 [ 1509.542929][ T3000] filename_unlinkat+0x1e2/0x410 [ 1509.547909][ T3000] __se_sys_unlink+0x2b/0xe0 [ 1509.552593][ T3000] __x64_sys_unlink+0x1f/0x30 [ 1509.557468][ T3000] x64_sys_call+0x2eb6/0x3020 [ 1509.562175][ T3000] do_syscall_64+0x12c/0x3b0 [ 1509.566779][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.572708][ T3000] [ 1509.575084][ T3000] read to 0xffff88810163f6a0 of 8 bytes by task 3000 on cpu 1: [ 1509.582811][ T3000] atime_needs_update+0x2ef/0x3e0 [ 1509.587931][ T3000] touch_atime+0x4a/0x330 [ 1509.592354][ T3000] do_readlinkat+0x137/0x2f0 [ 1509.596956][ T3000] __x64_sys_readlink+0x47/0x60 [ 1509.601991][ T3000] x64_sys_call+0x2b51/0x3020 [ 1509.606767][ T3000] do_syscall_64+0x12c/0x3b0 [ 1509.611367][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.617265][ T3000] [ 1509.619597][ T3000] value changed: 0x0000000069e0f437 -> 0x0000000069e0f438 [ 1509.626717][ T3000] [ 1509.629040][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 1509.635220][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 1509.645727][ T3000] Tainted: [W]=WARN [ 1509.649618][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1509.659765][ T3000] ================================================================== [ 1509.770423][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b9c5600: abort rx timeout. Force session deactivation