last executing test programs: 2m38.778487697s ago: executing program 3 (id=297): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2m37.710963859s ago: executing program 3 (id=298): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2m36.822888271s ago: executing program 3 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000254000/0x2000)=nil, &(0x7f00003fd000/0x4000)=nil, 0x2000, 0x2}) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r4, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293e5a644eed79d79f02308ff67a9", 0x11}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 2m35.30120935s ago: executing program 3 (id=304): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f0000000980)={0x2088100, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0), {0x4}, &(0x7f00000002c0)=""/27, 0x1b, 0x0, &(0x7f0000000400)=[r5, r5, r5, r5, r5, r5], 0x6}, 0x58) 2m31.488334912s ago: executing program 3 (id=311): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x6502b000) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffbf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0xffffff4a, 0x8000008, 0x7, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000000c0)={0x800080, 0x80, 0x8, 0xa, 0x0, 0x55a}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 2m29.328587657s ago: executing program 3 (id=314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = userfaultfd(0x80801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000540)) io_uring_enter(r7, 0x3516, 0xa00100, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x410c0}, 0x2000) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x200007, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}, {&(0x7f0000000200)}, {&(0x7f0000000400)="bc3b812b429e022e2de0e21a7e3cbd85536e2a9bde9187d8e439f83feee7ba8452969e2177ac90703dc48f14b1bd6f131eb54f5dd5246c98f1bb8d0a1863ae3b938965cd5a30090496f6ef2519b71df885f8e20070833286459a99", 0x5b}, {&(0x7f00000005c0)}, {&(0x7f0000000280)="aec3a4124b22d3e3d9c537fda521c5bb2d174b8285a4f75c35318e50", 0x1c}, {&(0x7f00000006c0)="4869f91d442e584eeb87c642a51a811d393a2af03e935ac1bf16b4c3e70d2701390b75ba9d862c157c32c846de38a3f7e530c3c35f8c55b29215f03d8fe3eac5cbd20b5b7b885ace148e9672b28a8cc5f2cab6e4bb992b23cdcc50342156f4bd66949431aa811a0f46e957e6977d08173517da50b1bd3e414417bd2d0b82f231d7a247d224ce455b69e71989cc4e1094d1ae4cc10caaa940a6837f8ece94", 0x9e}, {&(0x7f0000000500)="b3713fea771e2da94a5de828ac4e2ebe93595692c427944a6d300be549f460b764ed8bc849e065a78a5cc0faeedad6a19cf7ccea35f7d2109eebd8c8c8232b05d3f1896be9ca7c4bf852", 0x4a}], 0x7}, 0x4048081) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000c"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0xffffffffffff7ffb, {0x2, 0xff}}, 0x18) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c4020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2m14.243673736s ago: executing program 32 (id=314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = userfaultfd(0x80801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000540)) io_uring_enter(r7, 0x3516, 0xa00100, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x4c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x410c0}, 0x2000) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x200007, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="964a6c5176e84b4d7a", 0x9}, {&(0x7f0000000200)}, {&(0x7f0000000400)="bc3b812b429e022e2de0e21a7e3cbd85536e2a9bde9187d8e439f83feee7ba8452969e2177ac90703dc48f14b1bd6f131eb54f5dd5246c98f1bb8d0a1863ae3b938965cd5a30090496f6ef2519b71df885f8e20070833286459a99", 0x5b}, {&(0x7f00000005c0)}, {&(0x7f0000000280)="aec3a4124b22d3e3d9c537fda521c5bb2d174b8285a4f75c35318e50", 0x1c}, {&(0x7f00000006c0)="4869f91d442e584eeb87c642a51a811d393a2af03e935ac1bf16b4c3e70d2701390b75ba9d862c157c32c846de38a3f7e530c3c35f8c55b29215f03d8fe3eac5cbd20b5b7b885ace148e9672b28a8cc5f2cab6e4bb992b23cdcc50342156f4bd66949431aa811a0f46e957e6977d08173517da50b1bd3e414417bd2d0b82f231d7a247d224ce455b69e71989cc4e1094d1ae4cc10caaa940a6837f8ece94", 0x9e}, {&(0x7f0000000500)="b3713fea771e2da94a5de828ac4e2ebe93595692c427944a6d300be549f460b764ed8bc849e065a78a5cc0faeedad6a19cf7ccea35f7d2109eebd8c8c8232b05d3f1896be9ca7c4bf852", 0x4a}], 0x7}, 0x4048081) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800c00148008000c"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0xffffffffffff7ffb, {0x2, 0xff}}, 0x18) sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c4020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0xb}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 17.125218539s ago: executing program 1 (id=527): socket$xdp(0x2c, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7ffd, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa13, 0xffffffff}, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c11", 0x4f}, {0x0}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r3, 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) pipe2$watch_queue(&(0x7f0000002240), 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) syz_usb_connect(0x0, 0x107, 0x0, 0x0) 13.407338876s ago: executing program 2 (id=533): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0x122}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="db84fd4c4ce9627c6278392c6c0000000008010300000000000000000500000306000240891400000500030021000000340004800800014000000004080001400000000708000140fffffff6080001400000004f080001ad6c31e161a6681ee75744c6d9400000000008000140000000090900010073797a310000000005000300"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 12.218635085s ago: executing program 2 (id=536): openat(0xffffffffffffff9c, 0x0, 0x183341, 0x45) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x103341) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) 12.027643476s ago: executing program 4 (id=537): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000008, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x5, 0x1ff, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) 11.046491443s ago: executing program 4 (id=539): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) 9.945320057s ago: executing program 1 (id=540): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 9.025986051s ago: executing program 2 (id=542): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x2c, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x1d48, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) close_range(r0, r5, 0x0) 8.782505676s ago: executing program 4 (id=543): r0 = semget(0x1, 0x4, 0x39c) semctl$IPC_RMID(r0, 0x0, 0x0) 7.937621016s ago: executing program 0 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffffd}}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r5, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) 7.878704109s ago: executing program 1 (id=545): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0x122}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="db84fd4c4ce9627c6278392c6c0000000008010300000000000000000500000306000240891400000500030021000000340004800800014000000004080001400000000708000140fffffff6080001400000004f080001ad6c31e161a6681ee75744c6d9400000000008000140000000090900010073797a310000000005000300"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 7.729047389s ago: executing program 2 (id=546): socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x0, 0x43}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 7.645557433s ago: executing program 4 (id=547): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6.608405925s ago: executing program 0 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000254000/0x2000)=nil, &(0x7f00003fd000/0x4000)=nil, 0x2000, 0x2}) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r4, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="1bb1b293e5a644eed79d79f02308ff67a9", 0x11}], 0x1, 0x0, 0x0, 0x4001}], 0x1, 0x80) 6.596621816s ago: executing program 1 (id=549): socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1f71, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x2}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'ovf\x00', 0x1, 0xa7e, 0x70}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) r6 = syz_io_uring_setup(0x37, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") process_madvise(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000100)="11", 0x1}], 0x1, 0xa, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r6, 0x92, 0x0, 0x0, 0x0, 0x0) 5.416776605s ago: executing program 2 (id=550): openat(0xffffffffffffff9c, 0x0, 0x183341, 0x45) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, 0x0, 0x0, 0x8080c61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x103341) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) 5.412847055s ago: executing program 1 (id=551): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000f1ffffffffffffff00000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), 0x0}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x20000040) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.639341838s ago: executing program 4 (id=552): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.010569994s ago: executing program 1 (id=553): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) r2 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x0, 0x9661}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) 2.655849045s ago: executing program 0 (id=554): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x2c, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x1d48, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, 0x0, 0x0) listen(r5, 0x4) close_range(r0, r5, 0x0) 2.480563396s ago: executing program 2 (id=555): socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) 1.225406218s ago: executing program 0 (id=556): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}]}, 0x90}}, 0x0) 1.106704185s ago: executing program 0 (id=557): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300"], 0x122}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="db84fd4c4ce9627c6278392c6c0000000008010300000000000000000500000306000240891400000500030021000000340004800800014000000004080001400000000708000140fffffff6080001400000004f080001ad6c31e161a6681ee75744c6d9400000000008000140000000090900010073797a310000000005000300"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) 1.9867ms ago: executing program 4 (id=558): socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x0, 0x43}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 0s ago: executing program 0 (id=559): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c5, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x11624fc, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 85.937336][ T5757] cgroup: Unknown subsys name 'net' [ 86.083910][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.167147][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.388739][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.400065][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.411297][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.411916][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.420357][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.432168][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.440316][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.444167][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.455378][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.455770][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.465989][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.472761][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.483254][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.493412][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.495571][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.511024][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.518191][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.525913][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.533521][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.541635][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.551117][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.591505][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.601020][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.610953][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.180027][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 91.231026][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 91.244639][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 91.307298][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 91.508557][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.517709][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.526652][ T5770] bridge_slave_0: entered allmulticast mode [ 91.534852][ T5770] bridge_slave_0: entered promiscuous mode [ 91.555331][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.563266][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.571058][ T5769] bridge_slave_0: entered allmulticast mode [ 91.578219][ T5769] bridge_slave_0: entered promiscuous mode [ 91.599638][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.607303][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.615748][ T5770] bridge_slave_1: entered allmulticast mode [ 91.623495][ T5770] bridge_slave_1: entered promiscuous mode [ 91.645633][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.653435][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.661076][ T5769] bridge_slave_1: entered allmulticast mode [ 91.669124][ T5769] bridge_slave_1: entered promiscuous mode [ 91.676213][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.686462][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.694231][ T5771] bridge_slave_0: entered allmulticast mode [ 91.704781][ T5771] bridge_slave_0: entered promiscuous mode [ 91.726613][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.733983][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.743371][ T5768] bridge_slave_0: entered allmulticast mode [ 91.751563][ T5768] bridge_slave_0: entered promiscuous mode [ 91.774039][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.781510][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.788904][ T5771] bridge_slave_1: entered allmulticast mode [ 91.797507][ T5771] bridge_slave_1: entered promiscuous mode [ 91.816518][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.824071][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.834569][ T5768] bridge_slave_1: entered allmulticast mode [ 91.841913][ T5768] bridge_slave_1: entered promiscuous mode [ 91.873350][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.886290][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.903796][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.950206][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.973354][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.988399][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.001272][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.014846][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.096719][ T5769] team0: Port device team_slave_0 added [ 92.107022][ T5770] team0: Port device team_slave_0 added [ 92.117650][ T5770] team0: Port device team_slave_1 added [ 92.145694][ T5771] team0: Port device team_slave_0 added [ 92.154699][ T5769] team0: Port device team_slave_1 added [ 92.189440][ T5768] team0: Port device team_slave_0 added [ 92.198275][ T5771] team0: Port device team_slave_1 added [ 92.241894][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.249569][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.278392][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.295425][ T5768] team0: Port device team_slave_1 added [ 92.343019][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.354085][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.382215][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.395904][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.408358][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.439702][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.460683][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.468220][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.496412][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.511437][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.519050][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.546139][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.559116][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.566687][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.596708][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.612062][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.619346][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.648526][ T5777] Bluetooth: hci2: command tx timeout [ 92.654655][ T5780] Bluetooth: hci0: command tx timeout [ 92.660982][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.675917][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.683306][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.701404][ T5777] Bluetooth: hci3: command tx timeout [ 92.710442][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.718063][ T5780] Bluetooth: hci1: command tx timeout [ 92.791820][ T5770] hsr_slave_0: entered promiscuous mode [ 92.799111][ T5770] hsr_slave_1: entered promiscuous mode [ 92.841819][ T5769] hsr_slave_0: entered promiscuous mode [ 92.848741][ T5769] hsr_slave_1: entered promiscuous mode [ 92.856191][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.864510][ T5769] Cannot create hsr debugfs directory [ 92.968976][ T5771] hsr_slave_0: entered promiscuous mode [ 92.977135][ T5771] hsr_slave_1: entered promiscuous mode [ 92.984112][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.992784][ T5771] Cannot create hsr debugfs directory [ 93.032987][ T5768] hsr_slave_0: entered promiscuous mode [ 93.039634][ T5768] hsr_slave_1: entered promiscuous mode [ 93.047155][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.055125][ T5768] Cannot create hsr debugfs directory [ 93.472337][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.508377][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.520078][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.548273][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.636888][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.648302][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.662631][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.686137][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.845310][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.866031][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.877633][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.891136][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.010808][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.024347][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.036170][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.049487][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.074673][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.122564][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.179720][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.218611][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.227646][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.253686][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.286934][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.294780][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.307326][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.315099][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.351725][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.359061][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.435648][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.498892][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.524788][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.560295][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.567618][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.616511][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.624100][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.700800][ T5780] Bluetooth: hci0: command tx timeout [ 94.706501][ T5780] Bluetooth: hci2: command tx timeout [ 94.725981][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.786430][ T5777] Bluetooth: hci3: command tx timeout [ 94.792153][ T5780] Bluetooth: hci1: command tx timeout [ 94.817790][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.833944][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.841171][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.887595][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.895315][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.156215][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.259469][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.385492][ T5769] veth0_vlan: entered promiscuous mode [ 95.467511][ T5769] veth1_vlan: entered promiscuous mode [ 95.504722][ T5770] veth0_vlan: entered promiscuous mode [ 95.526057][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.599945][ T5770] veth1_vlan: entered promiscuous mode [ 95.695757][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.713827][ T5769] veth0_macvtap: entered promiscuous mode [ 95.729393][ T5769] veth1_macvtap: entered promiscuous mode [ 95.739930][ T5771] veth0_vlan: entered promiscuous mode [ 95.814437][ T5771] veth1_vlan: entered promiscuous mode [ 95.833876][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.846950][ T5770] veth0_macvtap: entered promiscuous mode [ 95.882387][ T5770] veth1_macvtap: entered promiscuous mode [ 95.903291][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.926013][ T5768] veth0_vlan: entered promiscuous mode [ 95.942710][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.951817][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.961617][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.974011][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.006916][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.018580][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.032387][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.057363][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.068674][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.086694][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.098519][ T5768] veth1_vlan: entered promiscuous mode [ 96.139673][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.152321][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.161661][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.171545][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.195534][ T5771] veth0_macvtap: entered promiscuous mode [ 96.231725][ T5771] veth1_macvtap: entered promiscuous mode [ 96.350215][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.359036][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.375578][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.386911][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.398086][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.409626][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.428694][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.438355][ T5768] veth0_macvtap: entered promiscuous mode [ 96.489100][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.504770][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.516349][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.529292][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.543362][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.575095][ T5768] veth1_macvtap: entered promiscuous mode [ 96.616298][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.626931][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.636885][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.645778][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.657617][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.677702][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.717859][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.729222][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.747679][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.760784][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.773286][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.782256][ T5780] Bluetooth: hci2: command tx timeout [ 96.789424][ T5777] Bluetooth: hci0: command tx timeout [ 96.795117][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.807551][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.820197][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.832664][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.848335][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.862526][ T5777] Bluetooth: hci1: command tx timeout [ 96.862718][ T5780] Bluetooth: hci3: command tx timeout [ 96.876668][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.897124][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.909942][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.922697][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.933929][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.946798][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.957782][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.970198][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.998082][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.018224][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.028944][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.038379][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.154418][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.174070][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.290147][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.324468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.361838][ T5866] syz.2.3[5866]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.482957][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.538180][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.652530][ T9] cfg80211: failed to load regulatory.db [ 97.714347][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.884136][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.847341][ T5866] loop2: detected capacity change from 0 to 32768 [ 98.861319][ T5780] Bluetooth: hci2: command tx timeout [ 98.861457][ T5777] Bluetooth: hci0: command tx timeout [ 98.947733][ T5877] loop3: detected capacity change from 0 to 4096 [ 98.980851][ T5780] Bluetooth: hci1: command tx timeout [ 98.986604][ T5777] Bluetooth: hci3: command tx timeout [ 99.306161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.369712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 99.405455][ T5883] process 'syz.3.6' launched './file1' with NULL argv: empty string added [ 99.512049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.529986][ T5875] loop1: detected capacity change from 0 to 32768 [ 99.540125][ T5875] ======================================================= [ 99.540125][ T5875] WARNING: The mand mount option has been deprecated and [ 99.540125][ T5875] and is ignored by this kernel. Remove the mand [ 99.540125][ T5875] option from the mount to silence this warning. [ 99.540125][ T5875] ======================================================= [ 99.641759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.676611][ T5875] JBD2: Ignoring recovery information on journal [ 99.781634][ T5875] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.131030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 100.181855][ T5875] syz.1.5 (5875) used greatest stack depth: 18768 bytes left [ 100.297680][ T5770] ocfs2: Unmounting device (7,1) on (node local) [ 100.636836][ T5896] loop1: detected capacity change from 0 to 128 [ 100.651487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.854614][ T5898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 100.926757][ T5903] fuse: Bad value for 'fd' [ 101.065157][ T5903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12'. [ 101.091699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.101266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 101.350393][ T5891] loop2: detected capacity change from 0 to 32768 [ 101.359541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.480204][ T5891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.7 (5891) [ 101.506509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.786141][ T5891] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.885231][ T5891] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 101.913653][ T5891] BTRFS info (device loop2): force clearing of disk cache [ 101.940883][ T5891] BTRFS info (device loop2): enabling ssd optimizations [ 101.948522][ T5891] BTRFS info (device loop2): using spread ssd allocation scheme [ 102.010936][ T5891] BTRFS info (device loop2): allowing degraded mounts [ 102.017838][ T5891] BTRFS info (device loop2): enabling disk space caching [ 102.050795][ T5891] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.267307][ T5891] BTRFS info (device loop2): use zstd compression, level 3 [ 102.274939][ T5891] BTRFS info (device loop2): enabling free space tree [ 102.290604][ T5891] BTRFS info (device loop2): setting nodatacow, compression disabled [ 102.331016][ T5891] BTRFS info (device loop2): using free space tree [ 103.280743][ T5927] capability: warning: `syz.0.14' uses deprecated v2 capabilities in a way that may be insecure [ 103.390683][ T5891] BTRFS info (device loop2): auto enabling async discard [ 103.457559][ T5891] BTRFS info (device loop2): rebuilding free space tree [ 103.662404][ T5891] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.197075][ T5775] IPVS: starting estimator thread 0... [ 105.330729][ T5948] IPVS: using max 18 ests per chain, 43200 per kthread [ 105.528589][ T5946] loop3: detected capacity change from 0 to 4096 [ 105.834843][ T5946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.765080][ T28] audit: type=1800 audit(1770193764.727:2): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 107.627274][ T5813] IPVS: starting estimator thread 0... [ 107.679995][ T5966] loop0: detected capacity change from 0 to 512 [ 107.687892][ T5966] EXT4-fs: Ignoring removed nobh option [ 107.745323][ T5964] IPVS: using max 17 ests per chain, 40800 per kthread [ 107.790061][ T5966] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.23: iget: bad i_size value: 38620345925642 [ 108.012638][ T5966] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.23: couldn't read orphan inode 15 (err -117) [ 109.040870][ T5969] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 109.048780][ T5969] netlink: 'syz.1.24': attribute type 2 has an invalid length. [ 109.404353][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.251215][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.778003][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.937273][ T5989] binder: 5988:5989 ioctl c0306201 0 returned -14 [ 113.797572][ T5999] Zero length message leads to an empty skb [ 116.357964][ T6010] loop3: detected capacity change from 0 to 4096 [ 116.686392][ T6010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.449908][ T6015] loop0: detected capacity change from 0 to 4096 [ 121.055420][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 121.381950][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.277199][ T787] IPVS: starting estimator thread 0... [ 122.387455][ T6054] IPVS: using max 17 ests per chain, 40800 per kthread [ 122.489104][ T6053] loop1: detected capacity change from 0 to 4096 [ 122.593532][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.791242][ T6058] tipc: Enabling of bearer rejected, failed to enable media [ 122.860627][ T28] audit: type=1800 audit(1770193780.817:3): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.39" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 123.625510][ T6070] (null): rxe_set_mtu: Set mtu to 1024 [ 124.253787][ T6070] infiniband syz2: set active [ 124.258867][ T6070] infiniband syz2: added veth1_to_team [ 124.268227][ T6070] syz2: rxe_create_cq: returned err = -12 [ 124.274613][ T6070] infiniband syz2: Couldn't create ib_mad CQ [ 124.280932][ T6070] infiniband syz2: Couldn't open port 1 [ 124.319317][ T6070] RDS/IB: syz2: added [ 124.324026][ T6070] smc: adding ib device syz2 with port count 1 [ 124.330680][ T6070] smc: ib device syz2 port 1 has pnetid [ 125.541702][ T6078] loop0: detected capacity change from 0 to 2048 [ 126.212286][ T6081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 128.921895][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.225707][ T6105] loop1: detected capacity change from 0 to 8 [ 129.337861][ T6105] SQUASHFS error: xz decompression failed, data probably corrupt [ 129.355667][ T6109] fuse: Unknown parameter 'user_id00000000000000000000' [ 129.363254][ T6105] SQUASHFS error: Failed to read block 0x108: -5 [ 129.369768][ T6105] SQUASHFS error: Unable to read metadata cache entry [106] [ 129.410501][ T6105] SQUASHFS error: Unable to read inode 0x11f [ 130.957106][ T6122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.59'. [ 132.482011][ T6134] loop3: detected capacity change from 0 to 4096 [ 132.606522][ T6134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.657842][ T28] audit: type=1800 audit(1770193790.617:4): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.60" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 133.034095][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.357130][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.461146][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.560910][ T6148] fuse: Bad value for 'fd' [ 135.854561][ T6163] loop2: detected capacity change from 0 to 2048 [ 136.103654][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.434123][ T6169] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 137.237916][ T6172] loop2: detected capacity change from 0 to 8 [ 137.281997][ T6174] netlink: 68 bytes leftover after parsing attributes in process `syz.0.71'. [ 138.101878][ T6172] SQUASHFS error: xz decompression failed, data probably corrupt [ 138.109867][ T6172] SQUASHFS error: Failed to read block 0x108: -5 [ 138.300676][ T6172] SQUASHFS error: Unable to read metadata cache entry [106] [ 138.321550][ T6172] SQUASHFS error: Unable to read inode 0x11f [ 139.879448][ T6187] loop3: detected capacity change from 0 to 16 [ 139.893325][ T6187] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.958384][ T6187] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 139.969208][ T6187] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 139.979317][ T6187] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 139.989785][ T6187] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 139.999900][ T6187] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 140.008753][ T6187] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 140.018438][ T6190] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 140.077657][ T6190] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 140.087792][ T6190] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 140.090794][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 140.097811][ T6190] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 140.120002][ T6190] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 140.136252][ T6190] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 140.205382][ T6194] fuse: Bad value for 'fd' [ 141.732864][ T6207] tipc: Enabling of bearer rejected, failed to enable media [ 142.027684][ T6215] loop1: detected capacity change from 0 to 2048 [ 142.086103][ T5784] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 142.506462][ T6218] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 143.258751][ T6226] loop1: detected capacity change from 0 to 8 [ 143.346236][ T6227] (null): rxe_set_mtu: Set mtu to 1024 [ 143.352693][ T6227] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 143.945901][ T6226] SQUASHFS error: xz decompression failed, data probably corrupt [ 143.979426][ T6226] SQUASHFS error: Failed to read block 0x108: -5 [ 144.010132][ T6226] SQUASHFS error: Unable to read metadata cache entry [106] [ 144.039291][ T6226] SQUASHFS error: Unable to read inode 0x11f [ 144.166124][ T6228] loop3: detected capacity change from 0 to 4096 [ 144.362598][ T6228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.854315][ T6238] loop2: detected capacity change from 0 to 16 [ 144.911912][ T6238] erofs: (device loop2): mounted with root inode @ nid 36. [ 144.953198][ T28] audit: type=1800 audit(1770193802.917:5): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.84" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 144.976310][ T6238] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 145.059005][ T6238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 145.071925][ T6238] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 145.083365][ T6238] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 145.095556][ T6238] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 145.105227][ T6238] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 145.131673][ T6240] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 145.141917][ T6240] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 145.153091][ T6240] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 145.163388][ T6240] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 145.174742][ T6240] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 145.184505][ T6240] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 145.248963][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 145.666961][ T6230] loop0: detected capacity change from 0 to 40427 [ 145.716891][ T6230] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 145.737725][ T6242] loop2: detected capacity change from 0 to 8 [ 145.746552][ T6230] F2FS-fs (loop0): Image doesn't support compression [ 145.768739][ T6230] F2FS-fs (loop0): Image doesn't support compression [ 145.788947][ T6230] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 145.799003][ T6242] SQUASHFS error: xz decompression failed, data probably corrupt [ 145.825975][ T6242] SQUASHFS error: Failed to read block 0x108: -5 [ 145.845686][ T6242] SQUASHFS error: Unable to read metadata cache entry [106] [ 145.851712][ T6230] F2FS-fs (loop0): invalid crc value [ 145.870460][ T6242] SQUASHFS error: Unable to read inode 0x11f [ 145.893072][ T6230] F2FS-fs (loop0): Found nat_bits in checkpoint [ 146.051588][ T6230] F2FS-fs (loop0): Start checkpoint disabled! [ 146.112324][ T6230] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 146.170191][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.822550][ T6262] tipc: Enabling of bearer rejected, failed to enable media [ 148.875943][ T6277] netlink: 68 bytes leftover after parsing attributes in process `syz.3.95'. [ 150.876304][ T6284] loop1: detected capacity change from 0 to 40427 [ 150.895398][ T6284] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 150.903918][ T6284] F2FS-fs (loop1): Image doesn't support compression [ 150.910813][ T6284] F2FS-fs (loop1): Image doesn't support compression [ 150.917568][ T6284] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 150.937288][ T6284] F2FS-fs (loop1): invalid crc value [ 150.949361][ T6284] F2FS-fs (loop1): Found nat_bits in checkpoint [ 151.005486][ T6284] F2FS-fs (loop1): Start checkpoint disabled! [ 151.018863][ T6284] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 151.193195][ T6294] loop2: detected capacity change from 0 to 4096 [ 151.238965][ T6294] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 151.274743][ T6287] loop3: detected capacity change from 0 to 4096 [ 151.366938][ T6287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.920619][ T28] audit: type=1800 audit(1770193809.867:6): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.97" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 152.186889][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.375545][ T6310] tipc: Enabling of bearer rejected, failed to enable media [ 153.633108][ T6308] loop3: detected capacity change from 0 to 40427 [ 153.658534][ T6308] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 153.677376][ T6308] F2FS-fs (loop3): Image doesn't support compression [ 153.769880][ T6308] F2FS-fs (loop3): Image doesn't support compression [ 154.091235][ T6308] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 154.391493][ T6308] F2FS-fs (loop3): invalid crc value [ 154.431342][ T6308] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.795286][ T6308] F2FS-fs (loop3): Start checkpoint disabled! [ 154.823375][ T6330] loop0: detected capacity change from 0 to 8 [ 154.842863][ T6308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 155.052505][ T6330] SQUASHFS error: xz decompression failed, data probably corrupt [ 155.178859][ T6330] SQUASHFS error: Failed to read block 0x108: -5 [ 155.314177][ T6330] SQUASHFS error: Unable to read metadata cache entry [106] [ 155.526040][ T6330] SQUASHFS error: Unable to read inode 0x11f [ 155.901754][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 157.942753][ T6349] fuse: Unknown parameter '0x0000000000000003' [ 157.997060][ T6350] loop3: detected capacity change from 0 to 16 [ 158.052854][ T6350] erofs: (device loop3): mounted with root inode @ nid 36. [ 158.148996][ T6350] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 158.159954][ T6350] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 158.170938][ T6350] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 158.181257][ T6350] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 158.203544][ T6350] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 158.212716][ T6350] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 158.223644][ T6351] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 158.234610][ T6351] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 158.245057][ T6351] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 158.291233][ T6351] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 158.307556][ T6351] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 158.318385][ T6351] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 158.331564][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 160.254482][ T6362] loop0: detected capacity change from 0 to 4096 [ 160.386198][ T27] IPVS: starting estimator thread 0... [ 160.448511][ T6362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.469644][ T28] audit: type=1800 audit(1770193818.427:7): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.113" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 160.520685][ T6370] IPVS: using max 16 ests per chain, 38400 per kthread [ 160.708240][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.111506][ T6393] fuse: Unknown parameter '0x0000000000000003' [ 165.310398][ C0] sched: RT throttling activated [ 166.051094][ T6405] loop2: detected capacity change from 0 to 8 [ 166.094906][ T6405] SQUASHFS error: xz decompression failed, data probably corrupt [ 166.103210][ T6405] SQUASHFS error: Failed to read block 0x108: -5 [ 166.109714][ T6405] SQUASHFS error: Unable to read metadata cache entry [106] [ 166.123602][ T6405] SQUASHFS error: Unable to read inode 0x11f [ 168.469924][ T6424] fuse: Bad value for 'fd' [ 176.353557][ T6460] loop3: detected capacity change from 0 to 4096 [ 176.400693][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.432862][ T28] audit: type=1800 audit(1770193834.387:8): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 176.682092][ T6463] loop0: detected capacity change from 0 to 4096 [ 176.692113][ T6463] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 176.974699][ T6465] tipc: Started in network mode [ 177.010213][ T6465] tipc: Node identity 325b6a142985, cluster identity 4711 [ 177.021725][ T6465] tipc: Enabled bearer , priority 0 [ 177.046658][ T6466] syzkaller0: entered promiscuous mode [ 177.063355][ T6466] syzkaller0: entered allmulticast mode [ 177.252802][ T6466] tipc: Resetting bearer [ 177.321063][ T6464] tipc: Resetting bearer [ 177.621145][ T6464] tipc: Disabling bearer [ 182.168968][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.145160][ T6491] loop0: detected capacity change from 0 to 40427 [ 184.184717][ T6491] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 184.193552][ T6491] F2FS-fs (loop0): Image doesn't support compression [ 184.200335][ T6491] F2FS-fs (loop0): Image doesn't support compression [ 184.208275][ T6491] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 184.220783][ T6491] F2FS-fs (loop0): invalid crc value [ 184.276389][ T6491] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.345955][ T6491] F2FS-fs (loop0): Start checkpoint disabled! [ 184.385403][ T6491] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 185.149290][ T6504] loop2: detected capacity change from 0 to 8 [ 185.253335][ T6504] SQUASHFS error: xz decompression failed, data probably corrupt [ 185.296991][ T6504] SQUASHFS error: Failed to read block 0x108: -5 [ 185.303523][ T6504] SQUASHFS error: Unable to read metadata cache entry [106] [ 185.310897][ T6504] SQUASHFS error: Unable to read inode 0x11f [ 185.574102][ T6506] tipc: Started in network mode [ 185.579078][ T6506] tipc: Node identity 7e295e19501b, cluster identity 4711 [ 185.604295][ T6506] tipc: Enabled bearer , priority 0 [ 185.621915][ T6506] syzkaller0: entered promiscuous mode [ 185.627467][ T6506] syzkaller0: entered allmulticast mode [ 185.705645][ T6506] tipc: Resetting bearer [ 185.790790][ T6505] tipc: Resetting bearer [ 185.842497][ T6505] tipc: Disabling bearer [ 185.955731][ T6512] fuse: Unknown parameter 'fd0x0000000000000003' [ 186.026326][ T6510] netlink: 68 bytes leftover after parsing attributes in process `syz.1.143'. [ 191.429062][ T6538] loop1: detected capacity change from 0 to 40427 [ 191.438908][ T6538] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 191.447482][ T6538] F2FS-fs (loop1): Image doesn't support compression [ 191.454330][ T6538] F2FS-fs (loop1): Image doesn't support compression [ 191.461266][ T6538] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 191.492452][ T6538] F2FS-fs (loop1): invalid crc value [ 191.508195][ T6538] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.579386][ T6538] F2FS-fs (loop1): Start checkpoint disabled! [ 191.639346][ T6538] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 191.970519][ T6543] loop2: detected capacity change from 0 to 40427 [ 192.365062][ T6543] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 192.373666][ T6543] F2FS-fs (loop2): Image doesn't support compression [ 192.381490][ T6543] F2FS-fs (loop2): Image doesn't support compression [ 192.388322][ T6543] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 193.029262][ T6543] F2FS-fs (loop2): invalid crc value [ 193.065440][ T6543] F2FS-fs (loop2): Found nat_bits in checkpoint [ 193.118270][ T6543] F2FS-fs (loop2): Start checkpoint disabled! [ 193.142342][ T6543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 193.664460][ T6562] fuse: Unknown parameter 'fd0x0000000000000003' [ 194.285765][ T6566] loop0: detected capacity change from 0 to 16 [ 194.350207][ T6566] erofs: (device loop0): mounted with root inode @ nid 36. [ 194.373061][ T6564] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 194.383149][ T6564] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 194.393216][ T6564] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 194.403054][ T6564] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 194.413097][ T6564] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 194.421792][ T6564] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 194.443877][ T6564] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 194.454760][ T6564] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 194.464844][ T6564] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 194.474765][ T6564] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 194.484846][ T6564] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 194.493613][ T6564] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 194.512941][ T6565] loop3: detected capacity change from 0 to 4096 [ 194.547326][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 194.582661][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.666520][ T28] audit: type=1800 audit(1770193852.627:9): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.152" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 194.801141][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.810572][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.721738][ T6584] loop1: detected capacity change from 0 to 8 [ 197.751515][ T6585] netlink: 68 bytes leftover after parsing attributes in process `syz.2.162'. [ 197.831240][ T6584] SQUASHFS error: xz decompression failed, data probably corrupt [ 197.839087][ T6584] SQUASHFS error: Failed to read block 0x108: -5 [ 197.891431][ T6584] SQUASHFS error: Unable to read metadata cache entry [106] [ 197.898816][ T6584] SQUASHFS error: Unable to read inode 0x11f [ 199.284323][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.509289][ T6601] loop2: detected capacity change from 0 to 2048 [ 200.856790][ T5784] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 201.230682][ T6610] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 201.377621][ T6606] loop3: detected capacity change from 0 to 8 [ 201.527155][ T6606] SQUASHFS error: xz decompression failed, data probably corrupt [ 201.562743][ T6606] SQUASHFS error: Failed to read block 0x108: -5 [ 201.592737][ T6606] SQUASHFS error: Unable to read metadata cache entry [106] [ 201.600112][ T6606] SQUASHFS error: Unable to read inode 0x11f [ 204.758347][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 207.166803][ T6644] loop3: detected capacity change from 0 to 16 [ 207.188391][ T6644] erofs: (device loop3): mounted with root inode @ nid 36. [ 207.257715][ T6644] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 207.268398][ T6644] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 207.278738][ T6644] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 207.288969][ T6644] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 207.299259][ T6644] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 207.308190][ T6644] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 207.321939][ T6644] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 207.332190][ T6644] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 207.342634][ T6644] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 207.354820][ T6644] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 207.365153][ T6644] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 207.380442][ T6644] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 207.451925][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 207.837639][ T6647] loop1: detected capacity change from 0 to 2048 [ 207.950324][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.198131][ T6650] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 209.258146][ T6657] loop2: detected capacity change from 0 to 40427 [ 209.286672][ T6657] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 209.295843][ T6657] F2FS-fs (loop2): Image doesn't support compression [ 209.302729][ T6657] F2FS-fs (loop2): Image doesn't support compression [ 209.309480][ T6657] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 209.326967][ T6657] F2FS-fs (loop2): invalid crc value [ 209.343521][ T6657] F2FS-fs (loop2): Found nat_bits in checkpoint [ 209.415379][ T6657] F2FS-fs (loop2): Start checkpoint disabled! [ 209.450908][ T6657] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 210.696385][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 212.575237][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.184'. [ 212.590744][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.184'. [ 213.424575][ T6682] netlink: 68 bytes leftover after parsing attributes in process `syz.0.187'. [ 214.212585][ T6691] loop3: detected capacity change from 0 to 16 [ 214.230963][ T6691] erofs: (device loop3): mounted with root inode @ nid 36. [ 214.248600][ T6691] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 214.258534][ T6691] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 214.268696][ T6691] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 214.278583][ T6691] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 214.288698][ T6691] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 214.297453][ T6691] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 214.313890][ T6693] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 214.323885][ T6693] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 214.334059][ T6693] erofs: (device loop3): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 214.343949][ T6693] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 214.354029][ T6693] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 214.362819][ T6693] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 214.426117][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 215.149922][ T6696] loop2: detected capacity change from 0 to 4096 [ 215.202660][ T6696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.258132][ T28] audit: type=1800 audit(1770193873.217:10): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.189" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 215.359521][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.788133][ T6700] loop3: detected capacity change from 0 to 40427 [ 215.991668][ T6700] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 216.000108][ T6700] F2FS-fs (loop3): Image doesn't support compression [ 216.007074][ T6700] F2FS-fs (loop3): Image doesn't support compression [ 216.013867][ T6700] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 216.031822][ T6700] F2FS-fs (loop3): invalid crc value [ 216.060740][ T6700] F2FS-fs (loop3): Found nat_bits in checkpoint [ 216.122028][ T6700] F2FS-fs (loop3): Start checkpoint disabled! [ 216.147295][ T6700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 222.254239][ T6732] loop2: detected capacity change from 0 to 2048 [ 222.657909][ T6733] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 222.991449][ T6735] loop1: detected capacity change from 0 to 4096 [ 223.134637][ T6735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.220773][ T28] audit: type=1800 audit(1770193881.117:11): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.199" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 223.256915][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.397143][ T6741] loop0: detected capacity change from 0 to 512 [ 223.434374][ T6741] EXT4-fs: Ignoring removed nobh option [ 223.480087][ T6741] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.195: iget: bad i_size value: 38620345925642 [ 223.514581][ T6741] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.195: couldn't read orphan inode 15 (err -117) [ 223.592286][ T6741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.886923][ T6746] loop2: detected capacity change from 0 to 40427 [ 223.920026][ T6746] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 223.928544][ T6746] F2FS-fs (loop2): Image doesn't support compression [ 223.936277][ T6746] F2FS-fs (loop2): Image doesn't support compression [ 223.943533][ T6746] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 223.974363][ T6746] F2FS-fs (loop2): invalid crc value [ 223.993373][ T6746] F2FS-fs (loop2): Found nat_bits in checkpoint [ 224.301145][ T6746] F2FS-fs (loop2): Start checkpoint disabled! [ 225.062474][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.072650][ T6746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 225.953490][ T6765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.203'. [ 226.764928][ T6776] fuse: Bad value for 'fd' [ 226.773907][ T6776] netlink: 32 bytes leftover after parsing attributes in process `syz.0.204'. [ 228.294205][ T6784] (null): rxe_set_mtu: Set mtu to 1024 [ 228.300135][ T6784] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 231.324457][ T6804] loop0: detected capacity change from 0 to 40427 [ 231.361414][ T6804] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 231.370292][ T6804] F2FS-fs (loop0): Image doesn't support compression [ 231.377349][ T6804] F2FS-fs (loop0): Image doesn't support compression [ 231.384206][ T6804] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 231.427120][ T6804] F2FS-fs (loop0): invalid crc value [ 231.462218][ T6804] F2FS-fs (loop0): Found nat_bits in checkpoint [ 231.554104][ T6804] F2FS-fs (loop0): Start checkpoint disabled! [ 231.764982][ T6804] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 231.980490][ T6812] loop3: detected capacity change from 0 to 40427 [ 231.997583][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.214'. [ 232.088979][ T6812] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 232.097681][ T6812] F2FS-fs (loop3): Image doesn't support compression [ 232.104589][ T6812] F2FS-fs (loop3): Image doesn't support compression [ 232.111385][ T6812] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 232.142082][ T6812] F2FS-fs (loop3): invalid crc value [ 232.180237][ T6812] F2FS-fs (loop3): Found nat_bits in checkpoint [ 232.250414][ T6812] F2FS-fs (loop3): Start checkpoint disabled! [ 232.288526][ T6812] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 233.947188][ T6835] loop0: detected capacity change from 0 to 2048 [ 235.798918][ T6847] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 236.277757][ T6851] loop2: detected capacity change from 0 to 8 [ 236.433682][ T6851] SQUASHFS error: xz decompression failed, data probably corrupt [ 236.449693][ T6851] SQUASHFS error: Failed to read block 0x108: -5 [ 236.459217][ T6851] SQUASHFS error: Unable to read metadata cache entry [106] [ 236.608241][ T6851] SQUASHFS error: Unable to read inode 0x11f [ 237.686131][ T6863] loop3: detected capacity change from 0 to 40427 [ 237.790739][ T6863] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 237.799223][ T6863] F2FS-fs (loop3): Image doesn't support compression [ 237.806760][ T6863] F2FS-fs (loop3): Image doesn't support compression [ 237.813548][ T6863] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 237.822464][ T6863] F2FS-fs (loop3): invalid crc value [ 237.851072][ T6863] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.925813][ T6863] F2FS-fs (loop3): Start checkpoint disabled! [ 238.020683][ T6863] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 238.294528][ T6867] loop1: detected capacity change from 0 to 40427 [ 238.313987][ T6867] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 238.322488][ T6867] F2FS-fs (loop1): Image doesn't support compression [ 238.329274][ T6867] F2FS-fs (loop1): Image doesn't support compression [ 238.336552][ T6867] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 238.351849][ T6867] F2FS-fs (loop1): invalid crc value [ 238.770941][ T6868] netlink: 68 bytes leftover after parsing attributes in process `syz.2.230'. [ 239.522662][ T6867] F2FS-fs (loop1): Found nat_bits in checkpoint [ 239.583303][ T6867] F2FS-fs (loop1): Start checkpoint disabled! [ 239.628896][ T6867] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 240.704568][ T6887] loop0: detected capacity change from 0 to 16 [ 240.746955][ T6887] erofs: (device loop0): mounted with root inode @ nid 36. [ 240.764462][ T6887] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 240.774423][ T6887] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 240.784677][ T6887] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 240.795324][ T6887] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 240.805533][ T6887] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 240.820971][ T6887] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 240.831631][ T6889] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 240.841786][ T6889] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 240.852030][ T6889] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 240.867053][ T6889] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 240.923065][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 240.940187][ T6889] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 240.952333][ T6889] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 242.543308][ T6883] loop2: detected capacity change from 0 to 2048 [ 244.101084][ T5785] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.925221][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 246.397661][ T6913] loop1: detected capacity change from 0 to 8 [ 246.536009][ T6913] SQUASHFS error: xz decompression failed, data probably corrupt [ 246.593553][ T6913] SQUASHFS error: Failed to read block 0x108: -5 [ 246.970760][ T6915] loop3: detected capacity change from 0 to 40427 [ 246.985031][ T6917] loop2: detected capacity change from 0 to 40427 [ 246.995693][ T6917] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 246.996177][ T6915] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 247.004168][ T6917] F2FS-fs (loop2): Image doesn't support compression [ 247.004320][ T6917] F2FS-fs (loop2): Image doesn't support compression [ 247.012631][ T6915] F2FS-fs (loop3): Image doesn't support compression [ 247.019250][ T6917] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 247.026042][ T6915] F2FS-fs (loop3): Image doesn't support compression [ 247.026064][ T6915] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 247.028847][ T6915] F2FS-fs (loop3): invalid crc value [ 247.035471][ T6917] F2FS-fs (loop2): invalid crc value [ 247.077058][ T6913] SQUASHFS error: Unable to read metadata cache entry [106] [ 247.085153][ T6913] SQUASHFS error: Unable to read inode 0x11f [ 247.095085][ T6915] F2FS-fs (loop3): Found nat_bits in checkpoint [ 247.136237][ T6917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.157953][ T6915] F2FS-fs (loop3): Start checkpoint disabled! [ 247.195554][ T6915] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 247.216774][ T6917] F2FS-fs (loop2): Start checkpoint disabled! [ 247.456961][ T6917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 250.455148][ T6939] loop2: detected capacity change from 0 to 512 [ 250.491375][ T6939] EXT4-fs: Ignoring removed nobh option [ 250.605288][ T6939] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.244: iget: bad i_size value: 38620345925642 [ 250.944205][ T6939] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.244: couldn't read orphan inode 15 (err -117) [ 251.195357][ T6939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.549713][ T6946] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 252.863937][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.685496][ T6967] loop0: detected capacity change from 0 to 8 [ 253.760751][ T6967] SQUASHFS error: xz decompression failed, data probably corrupt [ 253.870592][ T6967] SQUASHFS error: Failed to read block 0x108: -5 [ 253.877029][ T6967] SQUASHFS error: Unable to read metadata cache entry [106] [ 253.977862][ T6967] SQUASHFS error: Unable to read inode 0x11f [ 254.246890][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 255.135895][ T6980] loop2: detected capacity change from 0 to 40427 [ 255.146781][ T6980] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 255.155317][ T6980] F2FS-fs (loop2): Image doesn't support compression [ 255.162779][ T6980] F2FS-fs (loop2): Image doesn't support compression [ 255.170067][ T6980] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 255.187321][ T6980] F2FS-fs (loop2): invalid crc value [ 255.204766][ T6980] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.248857][ T6980] F2FS-fs (loop2): Start checkpoint disabled! [ 255.271480][ T6980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 256.235967][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.260491][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.460839][ T6998] loop3: detected capacity change from 0 to 4096 [ 257.465347][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.590733][ T28] audit: type=1800 audit(1770193915.497:12): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.255" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 257.852284][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.832196][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 259.914191][ T7027] loop3: detected capacity change from 0 to 40427 [ 259.922698][ T7027] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 259.931145][ T7027] F2FS-fs (loop3): Image doesn't support compression [ 259.937921][ T7027] F2FS-fs (loop3): Image doesn't support compression [ 259.944696][ T7027] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 259.958433][ T7027] F2FS-fs (loop3): invalid crc value [ 259.988975][ T7027] F2FS-fs (loop3): Found nat_bits in checkpoint [ 260.045781][ T7027] F2FS-fs (loop3): Start checkpoint disabled! [ 260.059119][ T7027] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 261.162959][ T7049] loop0: detected capacity change from 0 to 4096 [ 261.184352][ T7049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.203108][ T28] audit: type=1800 audit(1770193919.167:13): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.267" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 261.543433][ T7054] loop2: detected capacity change from 0 to 4096 [ 261.574002][ T7054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.597797][ T28] audit: type=1800 audit(1770193919.557:14): pid=7054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.268" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 261.944093][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.847432][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.781442][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 264.752931][ T7073] loop2: detected capacity change from 0 to 2048 [ 265.074249][ T7081] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 265.338256][ T7082] gretap1: entered promiscuous mode [ 265.344589][ T7082] batman_adv: batadv0: Adding interface: gretap1 [ 265.351621][ T7082] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.377224][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.384092][ T7082] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 267.381845][ T7099] loop2: detected capacity change from 0 to 4096 [ 267.708190][ T7098] loop3: detected capacity change from 0 to 40427 [ 267.747211][ T7098] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 267.755733][ T7098] F2FS-fs (loop3): Image doesn't support compression [ 267.763282][ T7098] F2FS-fs (loop3): Image doesn't support compression [ 267.770068][ T7098] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 267.784737][ T7098] F2FS-fs (loop3): invalid crc value [ 267.795953][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.795961][ T7098] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.843735][ T28] audit: type=1800 audit(1770193925.797:15): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.279" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 267.870985][ T7098] F2FS-fs (loop3): Start checkpoint disabled! [ 267.887231][ T7098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 268.668598][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.068209][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 269.768985][ T7120] fuse: Bad value for 'fd' [ 269.806420][ T7120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.284'. [ 269.840134][ T7112] loop0: detected capacity change from 0 to 8192 [ 271.856437][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 272.070476][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 272.474999][ T27] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.486261][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.510420][ T27] usb 2-1: Product: syz [ 272.534050][ T27] usb 2-1: Manufacturer: syz [ 272.538757][ T27] usb 2-1: SerialNumber: syz [ 272.612125][ T27] usb 2-1: config 0 descriptor?? [ 273.603576][ T27] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 273.643708][ T27] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 273.697898][ T27] usb 2-1: USB disconnect, device number 2 [ 274.098246][ T7149] loop0: detected capacity change from 0 to 4096 [ 274.274462][ T7149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.307013][ T28] audit: type=1800 audit(1770193932.257:16): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.293" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 274.661174][ T7153] loop1: detected capacity change from 0 to 40427 [ 274.710647][ T7153] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 274.719126][ T7153] F2FS-fs (loop1): Image doesn't support compression [ 274.726606][ T7153] F2FS-fs (loop1): Image doesn't support compression [ 274.733529][ T7153] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 274.744393][ T7153] F2FS-fs (loop1): invalid crc value [ 274.766504][ T7153] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.823159][ T7153] F2FS-fs (loop1): Start checkpoint disabled! [ 274.864097][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.873499][ T7153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 277.512398][ T7173] Bluetooth: MGMT ver 1.22 [ 277.926952][ T7179] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 277.969175][ T7177] loop0: detected capacity change from 0 to 2048 [ 279.149692][ T7177] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 279.791802][ T7197] loop1: detected capacity change from 0 to 4096 [ 280.069780][ T7197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.095394][ T28] audit: type=1800 audit(1770193938.057:17): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.303" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 280.254123][ T7203] (null): rxe_set_mtu: Set mtu to 1024 [ 280.260083][ T7203] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 280.509736][ T7205] loop2: detected capacity change from 0 to 4096 [ 280.656905][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.713414][ T28] audit: type=1800 audit(1770193939.677:18): pid=7211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.306" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 283.358719][ T5813] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 284.562327][ T7223] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 285.672245][ T5813] usb 1-1: device descriptor read/all, error -71 [ 285.878010][ T7229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.313'. [ 285.994594][ T7237] loop0: detected capacity change from 0 to 4096 [ 286.027511][ T7237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.053565][ T28] audit: type=1800 audit(1770193944.017:19): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.315" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 286.809004][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.836864][ T7257] fuse: Bad value for 'fd' [ 289.848394][ T7257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.319'. [ 291.937239][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 292.746182][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.324'. [ 295.005044][ T7293] netlink: 'syz.2.329': attribute type 10 has an invalid length. [ 295.145725][ T7293] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.253409][ T7298] loop0: detected capacity change from 0 to 16 [ 295.283716][ T7298] erofs: (device loop0): mounted with root inode @ nid 36. [ 295.331075][ T7298] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 295.373634][ T7298] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 295.417181][ T7298] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 295.458029][ T7298] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 295.519369][ T7293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.626321][ T7298] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 295.664006][ T7298] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 295.683434][ T7299] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 295.695512][ T7299] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 295.715057][ T7299] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 295.728648][ T7299] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 295.734003][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 295.740922][ T7299] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 295.778411][ T7299] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 295.956088][ T7302] loop1: detected capacity change from 0 to 8192 [ 296.202830][ T7305] loop0: detected capacity change from 0 to 8 [ 296.514637][ T7308] loop1: detected capacity change from 0 to 4096 [ 296.624669][ T7305] SQUASHFS error: xz decompression failed, data probably corrupt [ 296.736936][ T7305] SQUASHFS error: Failed to read block 0x108: -5 [ 296.755785][ T7305] SQUASHFS error: Unable to read metadata cache entry [106] [ 296.764883][ T7305] SQUASHFS error: Unable to read inode 0x11f [ 296.866690][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.153791][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.298624][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.334'. [ 300.441552][ T7323] loop0: detected capacity change from 0 to 2048 [ 300.500420][ T5784] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.552487][ T7323] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 300.662821][ T7324] random: crng reseeded on system resumption [ 301.813486][ T7330] loop2: detected capacity change from 0 to 40427 [ 301.838371][ T7330] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 301.846927][ T7330] F2FS-fs (loop2): Image doesn't support compression [ 301.853817][ T7330] F2FS-fs (loop2): Image doesn't support compression [ 301.861018][ T7330] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 301.870831][ T7330] F2FS-fs (loop2): invalid crc value [ 301.878319][ T7330] F2FS-fs (loop2): Found nat_bits in checkpoint [ 301.915255][ T7330] F2FS-fs (loop2): Start checkpoint disabled! [ 301.944550][ T7330] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 301.962899][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.972860][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.981774][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.991545][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.999706][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 302.007739][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.156637][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.168720][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.185792][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.658856][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.667201][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 302.677076][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.102319][ T7342] netlink: 'syz.2.341': attribute type 6 has an invalid length. [ 303.197257][ T7343] loop0: detected capacity change from 0 to 16 [ 303.221381][ T7343] erofs: (device loop0): mounted with root inode @ nid 36. [ 303.322920][ T7343] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 303.419771][ T7343] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 303.454878][ T7343] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 303.520605][ T7343] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 303.595584][ T7343] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 303.620299][ T7343] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 303.630211][ T7345] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 303.641078][ T7345] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 303.651241][ T7345] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 303.680488][ T7345] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 303.738649][ T7345] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 303.849248][ T7345] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 304.377387][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 304.767625][ T5780] Bluetooth: hci4: command tx timeout [ 304.850138][ T7357] loop2: detected capacity change from 0 to 8 [ 304.908199][ T7357] SQUASHFS error: xz decompression failed, data probably corrupt [ 304.939552][ T7357] SQUASHFS error: Failed to read block 0x108: -5 [ 304.949708][ T7328] chnl_net:caif_netlink_parms(): no params data found [ 304.957551][ T7357] SQUASHFS error: Unable to read metadata cache entry [106] [ 304.979185][ T7357] SQUASHFS error: Unable to read inode 0x11f [ 305.436442][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.628448][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.640023][ T7328] bridge_slave_0: entered allmulticast mode [ 306.657949][ T27] libceph: connect (1)[c::]:6789 error -101 [ 306.667364][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 306.780476][ T5780] Bluetooth: hci4: command tx timeout [ 306.831379][ T7328] bridge_slave_0: entered promiscuous mode [ 306.837807][ T7364] ceph: No mds server is up or the cluster is laggy [ 306.970438][ T27] libceph: connect (1)[c::]:6789 error -101 [ 307.042256][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 307.049071][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.116887][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.124606][ T7328] bridge_slave_1: entered allmulticast mode [ 307.268090][ T7328] bridge_slave_1: entered promiscuous mode [ 307.534818][ T7328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.547850][ T7328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.590957][ T7328] team0: Port device team_slave_0 added [ 307.601966][ T7328] team0: Port device team_slave_1 added [ 307.636233][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.643492][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.669949][ T7328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.840448][ T7378] loop1: detected capacity change from 0 to 40427 [ 307.874329][ T7378] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 307.882895][ T7378] F2FS-fs (loop1): Image doesn't support compression [ 307.889670][ T7378] F2FS-fs (loop1): Image doesn't support compression [ 307.896648][ T7378] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 307.908979][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.922932][ T7378] F2FS-fs (loop1): invalid crc value [ 307.944369][ T7378] F2FS-fs (loop1): Found nat_bits in checkpoint [ 308.006016][ T7378] F2FS-fs (loop1): Start checkpoint disabled! [ 308.030641][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.057094][ T7378] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 308.224405][ T7328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.861752][ T7387] netlink: 'syz.2.349': attribute type 6 has an invalid length. [ 308.943805][ T7328] hsr_slave_0: entered promiscuous mode [ 308.961263][ T7328] hsr_slave_1: entered promiscuous mode [ 308.968783][ T7328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.977342][ T7328] Cannot create hsr debugfs directory [ 309.296567][ T7390] loop1: detected capacity change from 0 to 40427 [ 309.311360][ T7390] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 309.320051][ T7390] F2FS-fs (loop1): Image doesn't support compression [ 309.326935][ T7390] F2FS-fs (loop1): Image doesn't support compression [ 309.334281][ T7390] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 309.350595][ T7390] F2FS-fs (loop1): invalid crc value [ 309.437917][ T7390] F2FS-fs (loop1): Found nat_bits in checkpoint [ 309.489336][ T7390] F2FS-fs (loop1): Start checkpoint disabled! [ 309.501727][ T7390] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 312.676128][ T7328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.692640][ T7410] loop1: detected capacity change from 0 to 64 [ 312.704402][ T7328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.721136][ T7328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.744852][ T7328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.990634][ T7410] input: syz0 as /devices/virtual/input/input5 [ 313.102524][ T7410] x_tables: duplicate underflow at hook 3 [ 313.284757][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.398725][ T7424] loop0: detected capacity change from 0 to 8 [ 313.406718][ T7328] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.492511][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.499770][ T7255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.724958][ T7422] loop1: detected capacity change from 0 to 40427 [ 313.771445][ T7424] SQUASHFS error: xz decompression failed, data probably corrupt [ 313.779729][ T7424] SQUASHFS error: Failed to read block 0x108: -5 [ 313.799160][ T7422] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 313.809433][ T7422] F2FS-fs (loop1): Image doesn't support compression [ 313.816319][ T7422] F2FS-fs (loop1): Image doesn't support compression [ 313.823406][ T7422] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 313.837537][ T7422] F2FS-fs (loop1): invalid crc value [ 313.842714][ T7424] SQUASHFS error: Unable to read metadata cache entry [106] [ 313.874105][ T7422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 313.884790][ T7424] SQUASHFS error: Unable to read inode 0x11f [ 313.929408][ T7422] F2FS-fs (loop1): Start checkpoint disabled! [ 313.939313][ T7422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 313.972208][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.979444][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.591515][ T7431] input: syz1 as /devices/virtual/input/input6 [ 315.215507][ T7328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.573002][ T7328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.207066][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.238630][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.516886][ T7461] loop1: detected capacity change from 0 to 512 [ 318.534063][ T7461] EXT4-fs: Ignoring removed nobh option [ 318.580692][ T7461] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.363: iget: bad i_size value: 38620345925642 [ 318.691599][ T7461] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.363: couldn't read orphan inode 15 (err -117) [ 318.807461][ T7461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.836297][ T7328] veth0_vlan: entered promiscuous mode [ 318.887506][ T7328] veth1_vlan: entered promiscuous mode [ 319.057007][ T7328] veth0_macvtap: entered promiscuous mode [ 319.069498][ T7328] veth1_macvtap: entered promiscuous mode [ 319.558290][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.569404][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.701882][ T7472] loop0: detected capacity change from 0 to 16 [ 319.737012][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.756941][ T7472] erofs: (device loop0): mounted with root inode @ nid 36. [ 319.780644][ T7472] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 319.810570][ T7472] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 319.825096][ T7472] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 319.834998][ T7472] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 319.845179][ T7472] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 319.894903][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.167161][ T7480] loop2: detected capacity change from 0 to 40427 [ 320.175581][ T7472] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 320.182249][ T7464] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 320.205254][ T7480] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 320.213774][ T7480] F2FS-fs (loop2): Image doesn't support compression [ 320.214009][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.220683][ T7480] F2FS-fs (loop2): Image doesn't support compression [ 320.220709][ T7480] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 320.225297][ T7480] F2FS-fs (loop2): invalid crc value [ 320.253320][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.280752][ T7483] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 320.297228][ T7483] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 320.310094][ T7483] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 320.326004][ T7483] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 320.336062][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.336085][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.358856][ T7480] F2FS-fs (loop2): Found nat_bits in checkpoint [ 320.409518][ T7480] F2FS-fs (loop2): Start checkpoint disabled! [ 320.448607][ T7483] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 320.458431][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.480466][ T7480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 320.514595][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.572676][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 320.582522][ T7483] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 320.620148][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.793899][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.298492][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.363572][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.373684][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.384354][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.395202][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.405849][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.417997][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.432494][ T7328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.441359][ T7328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.450192][ T7328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.459146][ T7328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.535235][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 322.754402][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.852850][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.115946][ T7498] loop0: detected capacity change from 0 to 40427 [ 323.132844][ T7498] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 323.141589][ T7498] F2FS-fs (loop0): Image doesn't support compression [ 323.148386][ T7498] F2FS-fs (loop0): Image doesn't support compression [ 323.155354][ T7498] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 323.164981][ T7498] F2FS-fs (loop0): invalid crc value [ 323.177504][ T7498] F2FS-fs (loop0): Found nat_bits in checkpoint [ 323.274849][ T7498] F2FS-fs (loop0): Start checkpoint disabled! [ 323.283549][ T7498] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 323.607036][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.623940][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.600853][ T7526] syzkaller0: entered promiscuous mode [ 327.606499][ T7526] syzkaller0: entered allmulticast mode [ 327.690438][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 327.891190][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 327.926456][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.958012][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.998838][ T5812] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 328.165241][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.193957][ T5812] usb 3-1: config 0 descriptor?? [ 328.286955][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.377'. [ 330.128691][ T5812] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 330.228956][ T6097] usb 3-1: USB disconnect, device number 2 [ 330.437280][ T7544] fido_id[7544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 330.759431][ T7534] loop0: detected capacity change from 0 to 40427 [ 330.777128][ T7534] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 331.531733][ T7534] F2FS-fs (loop0): Image doesn't support compression [ 331.569491][ T7534] F2FS-fs (loop0): Image doesn't support compression [ 331.583908][ T7534] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 331.746077][ T7534] F2FS-fs (loop0): invalid crc value [ 331.790596][ T7534] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 332.616132][ T7559] loop4: detected capacity change from 0 to 4096 [ 333.614187][ T7559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.654861][ T28] audit: type=1800 audit(1770193991.617:20): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.381" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 333.681400][ T27] IPVS: starting estimator thread 0... [ 333.882962][ T7561] IPVS: using max 18 ests per chain, 43200 per kthread [ 333.978782][ T7328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.111381][ T7568] Cannot find set identified by id 0 to match [ 334.699919][ T7579] netlink: 68 bytes leftover after parsing attributes in process `syz.1.386'. [ 337.031694][ T7588] loop0: detected capacity change from 0 to 4096 [ 337.123310][ T7588] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 338.133017][ T7601] loop1: detected capacity change from 0 to 512 [ 338.166609][ T7601] EXT4-fs (loop1): orphan cleanup on readonly fs [ 338.189908][ T7601] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.392: ea_inode file size=4 entry size=6 [ 338.212414][ T7601] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 338.227213][ T7601] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #15: comm syz.1.392: corrupted inode contents [ 338.246850][ T7601] EXT4-fs (loop1): Remounting filesystem read-only [ 338.253908][ T7601] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -5) [ 338.263574][ T7601] EXT4-fs (loop1): 1 orphan inode deleted [ 338.271294][ T7601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 338.334653][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.658297][ T7596] loop4: detected capacity change from 0 to 40427 [ 338.694590][ T7596] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 338.736326][ T7596] F2FS-fs (loop4): Image doesn't support compression [ 338.759943][ T7596] F2FS-fs (loop4): Image doesn't support compression [ 338.777549][ T7596] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x4 [ 338.811501][ T7596] F2FS-fs (loop4): invalid crc value [ 338.944172][ T7596] F2FS-fs (loop4): Found nat_bits in checkpoint [ 339.100556][ T7596] F2FS-fs (loop4): Start checkpoint disabled! [ 339.114808][ T7596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 339.252394][ T7616] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 339.284239][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 339.733091][ T7618] loop0: detected capacity change from 0 to 8192 [ 344.216592][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.401'. [ 344.225918][ T7637] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 344.233849][ T7637] netlink: 'syz.2.401': attribute type 2 has an invalid length. [ 346.492844][ T7649] loop1: detected capacity change from 0 to 512 [ 346.526503][ T7649] EXT4-fs: Ignoring removed nobh option [ 346.589424][ T7649] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.406: iget: bad i_size value: 38620345925642 [ 346.643001][ T7649] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.406: couldn't read orphan inode 15 (err -117) [ 346.719390][ T7649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.871833][ T7655] loop0: detected capacity change from 0 to 4096 [ 346.919091][ T7655] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 347.549529][ T7660] fuse: Bad value for 'fd' [ 347.586694][ T7660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.407'. [ 347.634601][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.279074][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 352.811012][ T7701] loop4: detected capacity change from 0 to 64 [ 353.764909][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.418'. [ 354.033813][ T7707] sch_tbf: peakrate 65537 is lower than or equals to rate 6025535303193684509 ! [ 354.069965][ T7711] netlink: 68 bytes leftover after parsing attributes in process `syz.1.419'. [ 356.626480][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.423'. [ 359.346112][ T7743] loop2: detected capacity change from 0 to 40427 [ 359.383850][ T7743] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 359.433245][ T7743] F2FS-fs (loop2): Image doesn't support compression [ 359.460608][ T7743] F2FS-fs (loop2): Image doesn't support compression [ 359.471059][ T7743] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 359.530798][ T7743] F2FS-fs (loop2): invalid crc value [ 359.560168][ T7743] F2FS-fs (loop2): Found nat_bits in checkpoint [ 359.800754][ T7743] F2FS-fs (loop2): Start checkpoint disabled! [ 359.860766][ T7743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 360.212441][ T7755] netlink: 68 bytes leftover after parsing attributes in process `syz.0.430'. [ 361.224422][ T7750] loop4: detected capacity change from 0 to 32768 [ 361.255343][ T7750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.429 (7750) [ 361.302009][ T7750] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.320766][ T7750] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 361.350599][ T7750] BTRFS info (device loop4): enabling auto defrag [ 362.957590][ T7750] BTRFS info (device loop4): use no compression [ 363.026659][ T7750] BTRFS info (device loop4): force clearing of disk cache [ 363.073368][ T7750] BTRFS info (device loop4): max_inline at 4096 [ 363.185280][ T7750] BTRFS info (device loop4): disabling free space tree [ 363.192715][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 363.206755][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 363.216784][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 363.281205][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 363.701296][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 363.933383][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 363.991135][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 364.041329][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 364.081187][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 364.100811][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 364.132061][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 364.152091][ T7750] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 364.249341][ T7750] BTRFS error (device loop4): open_ctree failed: -12 [ 365.950954][ T7807] netlink: 'syz.4.440': attribute type 10 has an invalid length. [ 366.214644][ T7807] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 366.823146][ T7818] netlink: 68 bytes leftover after parsing attributes in process `syz.1.441'. [ 369.574233][ T7836] loop4: detected capacity change from 0 to 64 [ 369.617081][ T28] audit: type=1800 audit(1770194027.577:21): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.446" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 369.855871][ T7839] input: syz1 as /devices/virtual/input/input7 [ 371.906207][ T7849] loop0: detected capacity change from 0 to 2048 [ 372.188000][ T7854] netlink: 68 bytes leftover after parsing attributes in process `syz.4.450'. [ 372.576916][ T7858] (null): rxe_set_mtu: Set mtu to 1024 [ 372.584103][ T7858] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 374.918168][ T7879] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 377.489315][ T7895] netlink: 'syz.1.459': attribute type 10 has an invalid length. [ 377.517619][ T5780] block nbd0: Receive control failed (result -32) [ 377.583300][ T7895] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 377.626408][ T7898] loop4: detected capacity change from 0 to 16 [ 377.635812][ T7898] erofs: (device loop4): mounted with root inode @ nid 36. [ 377.655224][ T7898] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 377.665148][ T7898] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 377.675314][ T7898] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 377.685160][ T7898] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 377.695213][ T7898] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 377.703865][ T7898] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 377.738990][ T7899] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 377.790514][ T7899] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 377.838346][ T7899] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 377.862134][ T7899] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 377.925578][ T7899] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 378.004523][ T7899] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 378.089750][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 378.305401][ T7904] netlink: 68 bytes leftover after parsing attributes in process `syz.0.461'. [ 379.292796][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.299223][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.993658][ T7922] loop0: detected capacity change from 0 to 2048 [ 381.140484][ T7654] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.249946][ T7907] loop2: detected capacity change from 0 to 40427 [ 381.303857][ T7907] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 381.334774][ T7907] F2FS-fs (loop2): Image doesn't support compression [ 381.374342][ T7907] F2FS-fs (loop2): Image doesn't support compression [ 381.430122][ T7907] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 381.476229][ T7907] F2FS-fs (loop2): invalid crc value [ 381.490500][ T7907] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 382.719276][ T7945] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 382.819425][ T7946] loop4: detected capacity change from 0 to 16 [ 382.830771][ T7946] erofs: (device loop4): mounted with root inode @ nid 36. [ 382.895291][ T7946] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 382.905160][ T7946] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 382.915232][ T7946] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 382.925058][ T7946] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 382.935028][ T7946] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 382.943707][ T7946] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 383.145300][ T7949] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 383.191907][ T7949] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 383.203702][ T7949] erofs: (device loop4): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 383.213825][ T7949] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 383.263068][ T7950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.473'. [ 383.273788][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 383.321020][ T7949] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 383.361713][ T7949] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 383.793821][ T7957] loop4: detected capacity change from 0 to 8 [ 383.912268][ T7957] SQUASHFS error: xz decompression failed, data probably corrupt [ 383.976730][ T7957] SQUASHFS error: Failed to read block 0x108: -5 [ 384.010397][ T7957] SQUASHFS error: Unable to read metadata cache entry [106] [ 384.045398][ T7957] SQUASHFS error: Unable to read inode 0x11f [ 387.079287][ T7978] loop0: detected capacity change from 0 to 40427 [ 387.511571][ T7978] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 387.520057][ T7978] F2FS-fs (loop0): Image doesn't support compression [ 387.527094][ T7978] F2FS-fs (loop0): Image doesn't support compression [ 387.533951][ T7978] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 387.661999][ T7978] F2FS-fs (loop0): invalid crc value [ 387.697653][ T7978] F2FS-fs (loop0): Found nat_bits in checkpoint [ 387.775144][ T7978] F2FS-fs (loop0): Start checkpoint disabled! [ 387.801314][ T7978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 389.280166][ T8003] loop1: detected capacity change from 0 to 2048 [ 392.212039][ T8012] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 392.219933][ T8012] netlink: 'syz.2.486': attribute type 2 has an invalid length. [ 395.087314][ T8028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 396.142363][ T8033] loop2: detected capacity change from 0 to 8 [ 396.261346][ T8033] SQUASHFS error: xz decompression failed, data probably corrupt [ 396.294983][ T8033] SQUASHFS error: Failed to read block 0x108: -5 [ 396.331034][ T8033] SQUASHFS error: Unable to read metadata cache entry [106] [ 396.359421][ T8033] SQUASHFS error: Unable to read inode 0x11f [ 397.801931][ T8044] loop0: detected capacity change from 0 to 16 [ 397.811395][ T8044] erofs: (device loop0): mounted with root inode @ nid 36. [ 397.821909][ T8044] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 397.832742][ T8044] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 397.842866][ T8044] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 397.852873][ T8044] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 397.862923][ T8044] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 397.871710][ T8044] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 397.890776][ T8046] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 397.926767][ T8046] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 397.982556][ T8046] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 398.028325][ T8046] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 398.046024][ T8046] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 398.086342][ T8046] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 398.164973][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 399.440326][ T8048] netlink: 'syz.1.495': attribute type 1 has an invalid length. [ 399.448937][ T8048] netlink: 'syz.1.495': attribute type 2 has an invalid length. [ 399.927502][ T8052] loop2: detected capacity change from 0 to 40427 [ 399.940262][ T8052] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 399.948911][ T8052] F2FS-fs (loop2): Image doesn't support compression [ 399.955942][ T8052] F2FS-fs (loop2): Image doesn't support compression [ 399.964139][ T8052] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 399.973265][ T8052] F2FS-fs (loop2): invalid crc value [ 399.981945][ T8052] F2FS-fs (loop2): Found nat_bits in checkpoint [ 400.035388][ T8052] F2FS-fs (loop2): Start checkpoint disabled! [ 400.053784][ T8052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 400.269433][ T8056] loop4: detected capacity change from 0 to 2048 [ 401.933405][ T8067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.500'. [ 402.091657][ T8069] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 403.546969][ T8077] loop0: detected capacity change from 0 to 4096 [ 403.750919][ T28] audit: type=1800 audit(1770194061.707:22): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.502" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 404.082284][ T8084] loop0: detected capacity change from 0 to 8 [ 404.193236][ T8084] SQUASHFS error: xz decompression failed, data probably corrupt [ 404.217602][ T8084] SQUASHFS error: Failed to read block 0x108: -5 [ 404.232579][ T8084] SQUASHFS error: Unable to read metadata cache entry [106] [ 404.975321][ T8089] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 404.983233][ T8089] netlink: 'syz.1.506': attribute type 2 has an invalid length. [ 405.880480][ T8084] SQUASHFS error: Unable to read inode 0x11f [ 407.368340][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 410.291343][ T8115] loop1: detected capacity change from 0 to 4096 [ 410.394466][ T8124] (null): rxe_set_mtu: Set mtu to 1024 [ 410.402734][ T8124] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 411.292850][ T28] audit: type=1800 audit(1770194069.257:23): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.512" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 411.666469][ T8133] block nbd0: NBD_DISCONNECT [ 411.673735][ T8133] block nbd0: Send disconnect failed -32 [ 411.731408][ T8133] block nbd0: shutting down sockets [ 412.133684][ T8135] loop4: detected capacity change from 0 to 2048 [ 412.413680][ T8135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.439728][ T8135] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.699048][ T8145] loop1: detected capacity change from 0 to 4096 [ 413.406626][ T8145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.431392][ T8135] fs-verity: sha512 using implementation "sha512-avx2" [ 413.458127][ T28] audit: type=1800 audit(1770194071.417:24): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 413.645204][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.645230][ T7328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.584000][ T8159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 417.846898][ T8180] loop2: detected capacity change from 0 to 4096 [ 418.049025][ T8187] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.527' sets config #1 [ 418.229209][ T28] audit: type=1800 audit(1770194076.147:25): pid=8180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.526" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 418.652535][ T8193] loop0: detected capacity change from 0 to 4096 [ 419.334437][ T8193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.401428][ T28] audit: type=1800 audit(1770194077.327:26): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.528" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 419.536589][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.997280][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.531'. [ 422.418222][ T8223] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 422.604501][ T8223] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 423.857767][ T8239] loop0: detected capacity change from 0 to 4096 [ 424.664508][ T8239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.723155][ T28] audit: type=1800 audit(1770194082.677:27): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.538" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 424.891947][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.940529][ T8263] netlink: 'syz.2.546': attribute type 10 has an invalid length. [ 428.364905][ T8279] loop1: detected capacity change from 0 to 4096 [ 428.901117][ T8279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.948430][ T28] audit: type=1800 audit(1770194086.897:28): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.549" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 429.144070][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.506788][ T7268] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 434.654730][ T8315] netlink: 'syz.4.558': attribute type 10 has an invalid length. [ 434.702257][ T8317] loop0: detected capacity change from 0 to 64 [ 434.820071][ T8317] Trying to free block not in datazone [ 440.555101][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.567240][ T1290] ieee802154 phy1 wpan1: encryption failed: -22