last executing test programs: 2m19.718077564s ago: executing program 4 (id=5): pselect6(0x40, &(0x7f00000001c0)={0xcd, 0x0, 0x0, 0x0, 0x20000000001, 0x4a92, 0xff, 0x2}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) close(r4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="f36db9d90800000f322e6764260f350f79330f8267333a99c4e17ff057ee66baf80cb8ace60d8aef66bafc0c66ed670f01c8f365f0812109000000f3260fa520", 0x40}], 0x1, 0x51, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) r11 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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") futimesat(r11, &(0x7f0000000000)='./file1\x00', 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2m18.60123432s ago: executing program 4 (id=6): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x240000) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x9, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r7, &(0x7f00000001c0), 0x0}, 0x20) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x5953, &(0x7f0000001800)="$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") truncate(&(0x7f0000000040)='./file3\x00', 0x21fa) 2m13.348331051s ago: executing program 4 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r2, 0x1, 0x3, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r5 = userfaultfd(0x801) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0) fanotify_init(0x0, 0x40000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, &(0x7f0000000100)) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x34020000) 1m55.732413689s ago: executing program 32 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x14, r2, 0x1, 0x3, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r5 = userfaultfd(0x801) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, 0x0) fanotify_init(0x0, 0x40000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, &(0x7f0000000100)) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x34020000) 3.084559624s ago: executing program 2 (id=268): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x5) 3.023376655s ago: executing program 5 (id=269): syz_emit_ethernet(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000340)="674c77ab7c2cbf0ab7", 0x9}], 0x1}}], 0x1, 0x2404c0c0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000080)=@gcm_128={{0x304}, "3f5f0a3d1136ed37", "6b3486f8ef465a75b23bb84ec94e50d2", "94ee4cc5", "b92a7fad8d9450f1"}, 0x28) close(r0) socket$kcm(0x29, 0x5, 0x0) 2.788505801s ago: executing program 2 (id=271): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) 2.75421205s ago: executing program 5 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x80a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r1, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x4000000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4f7dac503ac38fe2c313292df8b8367848634ea285"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24000004) 2.519045539s ago: executing program 2 (id=275): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xdfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.373238129s ago: executing program 5 (id=279): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 1.784326794s ago: executing program 3 (id=281): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000027000200000000d81f"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={0x0, r0}, 0x18) 1.669577225s ago: executing program 3 (id=282): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r1, 0x300, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB='\a'], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.482582359s ago: executing program 1 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x9, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 1.408498365s ago: executing program 0 (id=284): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3a1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.39263743s ago: executing program 5 (id=285): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000010000000b00000008000300", @ANYRES32=r2, @ANYBLOB="30005080110001004abee339084eeef16f162471f40000e105000200000000000800030002ac0f00050009001f"], 0x4c}}, 0x4000000) 1.347303102s ago: executing program 2 (id=286): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.160518417s ago: executing program 1 (id=287): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x7, 0x68, 0x5}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x64}}, 0x0) 1.09754988s ago: executing program 0 (id=288): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty, 0x7}, 0x20) 1.009426977s ago: executing program 5 (id=289): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/219, 0xdb}], 0x1}, 0x10000) 939.162363ms ago: executing program 0 (id=290): openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2f, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96"}}}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1", 0x1}], 0x1}}], 0x1, 0xc0) sendmmsg(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001340)="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", 0x454}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 888.473259ms ago: executing program 2 (id=291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}}, 0x40c0) 888.271615ms ago: executing program 1 (id=292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, 0x0, 0x4008090) sendmsg$NL80211_CMD_JOIN_IBSS(r2, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000780)="40bdc315a7650990422b199057fad0fd6c02550c82ff6aec3c8c14f4de172e20096f0ba4d81318c8f891c9ab748f70222b4e79768fff0ce97ccbd44090ef34a20e6d557736e65e0cd9ec07f68a44c8838f48f0de409eeeabc8dd51d20e4edd400a02a4c4ceeda2af3b5ee08d1bcf8130", 0x70) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r5], 0x1000f) 874.360201ms ago: executing program 3 (id=293): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 664.964947ms ago: executing program 2 (id=294): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x2000c000) 604.453096ms ago: executing program 3 (id=295): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000540)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x48, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {0x10}, @device_a, @device_a, @initial, {0x0, 0x6}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x4, {0x0, 0x7, @void, @void, @void}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 604.263998ms ago: executing program 0 (id=296): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 522.109578ms ago: executing program 1 (id=297): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) 366.889846ms ago: executing program 1 (id=298): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r0, 0xd1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000808, 0xffffffffffffff7c, 0x0}}, 0x10) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000100}, 0x44840) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, 0x0, 0x0) sendmsg$can_j1939(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}}, 0xee) close(r6) sendmsg$nl_route_sched(r5, 0x0, 0xc4) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r7) socket$l2tp(0x2, 0x2, 0x73) socket$igmp6(0xa, 0x3, 0x2) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 284.571171ms ago: executing program 0 (id=299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)="fdc6", 0x2}], 0x1, 0x5) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) 284.327022ms ago: executing program 3 (id=300): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 119.907447ms ago: executing program 3 (id=301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 105.208628ms ago: executing program 5 (id=302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_batadv\x00', {0x1}, 0xf}) 134.668µs ago: executing program 0 (id=303): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 0s ago: executing program 1 (id=304): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 78.718086][ T5826] cgroup: Unknown subsys name 'net' [ 78.869146][ T5826] cgroup: Unknown subsys name 'cpuset' [ 78.878706][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.494191][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.221040][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.235230][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.243017][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.244387][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.258839][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.258892][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.273231][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.274231][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.281677][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.288679][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.296607][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.302276][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.309197][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.317882][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.336324][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.336769][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.354089][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.356080][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.370427][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.378825][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.455137][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.463507][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.472437][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.480710][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.489516][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.051963][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 84.066780][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 84.139192][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 84.245524][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 84.322277][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.331599][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.339162][ T5836] bridge_slave_0: entered allmulticast mode [ 84.348267][ T5836] bridge_slave_0: entered promiscuous mode [ 84.409403][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.417054][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.424270][ T5836] bridge_slave_1: entered allmulticast mode [ 84.433780][ T5836] bridge_slave_1: entered promiscuous mode [ 84.547986][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.588984][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 84.603410][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.626328][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.633516][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.643052][ T5843] bridge_slave_0: entered allmulticast mode [ 84.650669][ T5843] bridge_slave_0: entered promiscuous mode [ 84.690564][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.697853][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.705349][ T5838] bridge_slave_0: entered allmulticast mode [ 84.713083][ T5838] bridge_slave_0: entered promiscuous mode [ 84.737219][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.744369][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.751888][ T5837] bridge_slave_0: entered allmulticast mode [ 84.759501][ T5837] bridge_slave_0: entered promiscuous mode [ 84.767471][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.774776][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.781984][ T5843] bridge_slave_1: entered allmulticast mode [ 84.789343][ T5843] bridge_slave_1: entered promiscuous mode [ 84.817179][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.824336][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.834588][ T5838] bridge_slave_1: entered allmulticast mode [ 84.841891][ T5838] bridge_slave_1: entered promiscuous mode [ 84.879548][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.887165][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.894381][ T5837] bridge_slave_1: entered allmulticast mode [ 84.902518][ T5837] bridge_slave_1: entered promiscuous mode [ 84.957053][ T5836] team0: Port device team_slave_0 added [ 84.987042][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.999396][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.013126][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.024023][ T5836] team0: Port device team_slave_1 added [ 85.051973][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.120438][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.169977][ T5838] team0: Port device team_slave_0 added [ 85.179671][ T5838] team0: Port device team_slave_1 added [ 85.201822][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.229279][ T5843] team0: Port device team_slave_0 added [ 85.238634][ T5843] team0: Port device team_slave_1 added [ 85.271312][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.278753][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.305685][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.330942][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.338496][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.345788][ T5853] bridge_slave_0: entered allmulticast mode [ 85.353141][ T5853] bridge_slave_0: entered promiscuous mode [ 85.375359][ T5840] Bluetooth: hci1: command tx timeout [ 85.380989][ T5840] Bluetooth: hci0: command tx timeout [ 85.385525][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.393375][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.419424][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.431823][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.439096][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.455506][ T5840] Bluetooth: hci3: command tx timeout [ 85.465237][ T5844] Bluetooth: hci2: command tx timeout [ 85.476049][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.508089][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.515519][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.522878][ T5853] bridge_slave_1: entered allmulticast mode [ 85.530993][ T5853] bridge_slave_1: entered promiscuous mode [ 85.536995][ T5844] Bluetooth: hci4: command tx timeout [ 85.568897][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.576009][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.602203][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.627754][ T5837] team0: Port device team_slave_0 added [ 85.647585][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.655241][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.681416][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.695032][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.702018][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.728606][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.759275][ T5837] team0: Port device team_slave_1 added [ 85.767861][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.827656][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.860752][ T5838] hsr_slave_0: entered promiscuous mode [ 85.867270][ T5838] hsr_slave_1: entered promiscuous mode [ 85.880047][ T5836] hsr_slave_0: entered promiscuous mode [ 85.886723][ T5836] hsr_slave_1: entered promiscuous mode [ 85.892861][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.900695][ T5836] Cannot create hsr debugfs directory [ 85.962628][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.971086][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.997976][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.011151][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.018602][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.045099][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.072684][ T5853] team0: Port device team_slave_0 added [ 86.081942][ T5853] team0: Port device team_slave_1 added [ 86.206138][ T5843] hsr_slave_0: entered promiscuous mode [ 86.212622][ T5843] hsr_slave_1: entered promiscuous mode [ 86.219696][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.227970][ T5843] Cannot create hsr debugfs directory [ 86.280064][ T5837] hsr_slave_0: entered promiscuous mode [ 86.287021][ T5837] hsr_slave_1: entered promiscuous mode [ 86.293282][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.301335][ T5837] Cannot create hsr debugfs directory [ 86.309128][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.316211][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.342375][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.373853][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.381562][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.407992][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.757096][ T5853] hsr_slave_0: entered promiscuous mode [ 86.763621][ T5853] hsr_slave_1: entered promiscuous mode [ 86.772458][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.780154][ T5853] Cannot create hsr debugfs directory [ 87.074061][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.089888][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.124837][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.162251][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.251781][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.269172][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.305249][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.325671][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.423646][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.439668][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.454658][ T5840] Bluetooth: hci1: command tx timeout [ 87.462932][ T5844] Bluetooth: hci0: command tx timeout [ 87.463002][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.488550][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.515609][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.536139][ T5840] Bluetooth: hci2: command tx timeout [ 87.541682][ T5844] Bluetooth: hci3: command tx timeout [ 87.551731][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.613732][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.621120][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.629509][ T5844] Bluetooth: hci4: command tx timeout [ 87.645913][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.657522][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.670760][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.717432][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.724614][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.752808][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.842324][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.858792][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.873458][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.895648][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.002244][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.099436][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.129436][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.204467][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.211661][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.230499][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.240970][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.270972][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.286006][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.293176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.320114][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.327287][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.339437][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.346642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.388092][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.395293][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.409942][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.417249][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.468788][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.511128][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.525589][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.663378][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.716973][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.724130][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.833075][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.840312][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.953324][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.052857][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.193375][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.249265][ T5836] veth0_vlan: entered promiscuous mode [ 89.284288][ T5836] veth1_vlan: entered promiscuous mode [ 89.334295][ T5838] veth0_vlan: entered promiscuous mode [ 89.372849][ T5838] veth1_vlan: entered promiscuous mode [ 89.390014][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.417426][ T5836] veth0_macvtap: entered promiscuous mode [ 89.437900][ T5836] veth1_macvtap: entered promiscuous mode [ 89.473556][ T5843] veth0_vlan: entered promiscuous mode [ 89.513991][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.528814][ T5843] veth1_vlan: entered promiscuous mode [ 89.535743][ T5844] Bluetooth: hci0: command tx timeout [ 89.541186][ T5844] Bluetooth: hci1: command tx timeout [ 89.552105][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.577064][ T5838] veth0_macvtap: entered promiscuous mode [ 89.588471][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.612663][ T5838] veth1_macvtap: entered promiscuous mode [ 89.616806][ T5844] Bluetooth: hci3: command tx timeout [ 89.623848][ T5840] Bluetooth: hci2: command tx timeout [ 89.632098][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.647447][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.657733][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.668837][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.694805][ T5840] Bluetooth: hci4: command tx timeout [ 89.719392][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.732756][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.745364][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.781996][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.792915][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.810357][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.820275][ T5843] veth0_macvtap: entered promiscuous mode [ 89.877292][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.891990][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.900974][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.911131][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.922844][ T5837] veth0_vlan: entered promiscuous mode [ 89.948244][ T5843] veth1_macvtap: entered promiscuous mode [ 89.958745][ T5837] veth1_vlan: entered promiscuous mode [ 89.993336][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.006361][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.029891][ T5853] veth0_vlan: entered promiscuous mode [ 90.057030][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.068734][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.078827][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.090147][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.103502][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.116827][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.127854][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.138302][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.149169][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.160566][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.194508][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.197388][ T5853] veth1_vlan: entered promiscuous mode [ 90.202395][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.236475][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.246498][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.259990][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.271368][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.359109][ T5837] veth0_macvtap: entered promiscuous mode [ 90.400377][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.448691][ T5853] veth0_macvtap: entered promiscuous mode [ 90.465967][ T5837] veth1_macvtap: entered promiscuous mode [ 90.529177][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.533059][ T5853] veth1_macvtap: entered promiscuous mode [ 90.546484][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.653912][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.739693][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.799032][ T5923] loop4: detected capacity change from 0 to 164 [ 90.876613][ T5923] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.894193][ T5923] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 91.403096][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.413171][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.423723][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.433902][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.447210][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.460486][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.498672][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.509759][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.527444][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.548338][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.562149][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.575659][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.587972][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.614968][ T5840] Bluetooth: hci1: command tx timeout [ 91.620462][ T5840] Bluetooth: hci0: command tx timeout [ 91.671152][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.680641][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692445][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.694017][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.700724][ T5844] Bluetooth: hci3: command tx timeout [ 91.700797][ T5840] Bluetooth: hci2: command tx timeout [ 91.725023][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.734025][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.771250][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.775378][ T5840] Bluetooth: hci4: command tx timeout [ 91.784984][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.797251][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.808371][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.818566][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.832301][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.843229][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.858446][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.870798][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.889677][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.909888][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.921134][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.937617][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.950134][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.962760][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.976960][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.991579][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.010693][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.030616][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.040559][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.054097][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.064151][ T929] cfg80211: failed to load regulatory.db [ 92.071225][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.101453][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.110374][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.140904][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.150139][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.469661][ T5930] loop4: detected capacity change from 0 to 32768 [ 92.542287][ T5930] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 92.565956][ T5930] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 92.574347][ T5930] bcachefs (loop4): Version upgrade required: [ 92.574347][ T5930] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 92.574347][ T5930] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 92.574347][ T5930] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 92.667561][ T5930] bcachefs (loop4): dropping and reconstructing all alloc info [ 92.690364][ T5930] bcachefs (loop4): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 92.690399][ T5930] pointer past last bucket (68718691906 > 128), deleting [ 92.731435][ T5930] bcachefs (loop4): accounting_read... [ 92.784124][ T5930] done [ 92.787442][ T5930] bcachefs (loop4): alloc_read... done [ 92.793159][ T5930] bcachefs (loop4): snapshots_read... done [ 92.799487][ T5930] bcachefs (loop4): check_allocations... done [ 92.851233][ T5930] bcachefs (loop4): going read-write [ 92.859353][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.868936][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.968891][ T5930] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1 [ 92.968891][ T5930] rw journal devs: [ 92.993593][ T5930] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 93.036431][ T5930] bcachefs (loop4): done starting filesystem [ 93.063613][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.095740][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.104026][ T5930] bcachefs (loop4): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 93.104055][ T5930] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 93.104075][ T5930] [ 93.130936][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.144815][ T5930] bcachefs (loop4): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 93.144844][ T5930] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 93.144864][ T5930] [ 93.175917][ T5930] bcachefs (loop4): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 93.175940][ T5930] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 93.175959][ T5930] [ 93.208591][ T5930] bcachefs (loop4): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 93.208615][ T5930] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 93.208635][ T5930] [ 93.372260][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.431473][ T5930] syz.4.6 (5930) used greatest stack depth: 18480 bytes left [ 93.764100][ T5946] loop3: detected capacity change from 0 to 32768 [ 93.792910][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.849167][ T5946] bcachefs (loop3): filesystem UUID already open [ 93.856214][ T5946] bcachefs (loop3): shutdown complete [ 93.888282][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.926664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.936841][ T5946] bcachefs: bch2_fs_get_tree() error: EINVAL [ 94.580807][ T5954] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 94.666530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.857308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.997487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.099894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.202385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.304807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.583262][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.823579][ T5836] bcachefs (loop4): shutting down [ 96.852264][ T5836] bcachefs (loop4): going read-only [ 96.862896][ T5836] bcachefs (loop4): finished waiting for writes to stop [ 96.935632][ T5836] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 96.972768][ T5836] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 96.984860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.993656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.002512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.227991][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 97.405535][ T5836] bcachefs (loop4): unclean shutdown complete, journal seq 10 [ 97.476946][ T5836] bcachefs (loop4): done going read-only, filesystem not clean [ 98.245863][ T5890] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.288745][ T5836] bcachefs (loop4): shutdown complete [ 98.312393][ T5985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.463591][ T5985] bond0: (slave rose0): Enslaving as an active interface with an up link [ 98.483553][ T5890] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 98.898124][ T5890] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 98.928097][ T5890] usb 1-1: config 0 has no interface number 1 [ 98.939214][ T5890] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 98.995304][ T5890] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 99.078786][ T5890] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 99.112685][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.145197][ T5890] usb 1-1: Product: syz [ 99.149439][ T5890] usb 1-1: Manufacturer: syz [ 99.154068][ T5890] usb 1-1: SerialNumber: syz [ 99.219744][ T5890] usb 1-1: config 0 descriptor?? [ 99.259449][ T5982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.267059][ T5982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.375998][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'. [ 99.394627][ T5890] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 99.510397][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.519248][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.129635][ T5890] vmk80xx 1-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 100.756026][ T5890] usb 1-1: USB disconnect, device number 2 [ 102.625238][ T6032] process 'syz.3.18' launched './file0' with NULL argv: empty string added [ 103.179234][ T6036] loop1: detected capacity change from 0 to 164 [ 104.539776][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 104.849173][ T6036] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.890385][ T6033] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 105.173642][ T6052] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24'. [ 105.350868][ T6045] loop3: detected capacity change from 0 to 32768 [ 105.358285][ T6045] btrfs: Deprecated parameter 'usebackuproot' [ 105.364659][ T6045] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 105.424696][ T6045] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.22 (6045) [ 105.450934][ T6045] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.461473][ T6045] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 105.470411][ T6045] BTRFS info (device loop3): using free-space-tree [ 105.542476][ T59] kernel write not supported for file [eventfd] (pid: 59 comm: kworker/1:2) [ 105.654278][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x5814f9ab level 0 [ 105.914501][ T6078] loop1: detected capacity change from 0 to 164 [ 106.464781][ T6078] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 106.497169][ T6076] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 106.534230][ T6045] BTRFS warning (device loop3): failed to read root (objectid=9): -5 [ 106.542587][ T6045] BTRFS warning (device loop3): try to load backup roots slot 1 [ 106.569906][ T6045] BTRFS warning (device loop3): global root 2 0 already exists [ 106.578966][ T6045] BTRFS error (device loop3): failed to load root extent [ 106.586176][ T6045] BTRFS warning (device loop3): try to load backup roots slot 2 [ 106.609595][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 106.621856][ T6045] BTRFS warning (device loop3): couldn't read tree root [ 106.628954][ T6045] BTRFS warning (device loop3): try to load backup roots slot 3 [ 106.640710][ T6045] BTRFS warning (device loop3): global root 2 0 already exists [ 106.649943][ T6045] BTRFS error (device loop3): failed to load root extent [ 106.732468][ T6045] BTRFS error (device loop3): open_ctree failed: -17 [ 107.071679][ T6082] loop1: detected capacity change from 0 to 128 [ 110.185760][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 111.940500][ T6115] loop0: detected capacity change from 0 to 164 [ 113.524640][ T6115] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 114.236636][ T6113] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.120286][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 116.198362][ T6130] loop2: detected capacity change from 0 to 128 [ 116.297304][ T6136] loop0: detected capacity change from 0 to 128 [ 118.279243][ T6144] loop1: detected capacity change from 0 to 32768 [ 118.287447][ T6144] btrfs: Deprecated parameter 'usebackuproot' [ 118.293694][ T6144] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 118.415405][ T6144] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.39 (6144) [ 118.492888][ T6151] loop3: detected capacity change from 0 to 164 [ 118.516719][ T6151] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.536882][ T6151] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 118.813478][ T6144] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.824947][ T6144] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 118.835231][ T6144] BTRFS info (device loop1): using free-space-tree [ 119.337953][ T6144] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 119.339129][ T6144] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 119.351123][ T6144] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 119.361338][ T6144] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 119.371423][ T6144] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 119.472680][ T6144] BTRFS error (device loop1): open_ctree failed: -12 [ 119.631543][ T6172] loop3: detected capacity change from 0 to 128 [ 120.069835][ T6173] loop2: detected capacity change from 0 to 32768 [ 121.189398][ T6173] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 121.213031][ T6173] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 121.221472][ T6173] bcachefs (loop2): Version upgrade required: [ 121.221472][ T6173] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 121.221472][ T6173] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 121.221472][ T6173] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 121.334718][ T6173] bcachefs (loop2): dropping and reconstructing all alloc info [ 121.369809][ T6173] bcachefs (loop2): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 121.369843][ T6173] pointer past last bucket (68718691906 > 128), deleting [ 121.404215][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.416523][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.434867][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.454321][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.455409][ T6173] bcachefs (loop2): accounting_read... [ 121.462313][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.532517][ T6173] done [ 121.535540][ T6173] bcachefs (loop2): alloc_read... done [ 121.541097][ T6173] bcachefs (loop2): snapshots_read... done [ 121.547115][ T6173] bcachefs (loop2): check_allocations... done [ 121.717784][ T6173] bcachefs (loop2): going read-write [ 122.671327][ T6173] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 122.671327][ T6173] rw journal devs: [ 122.687793][ T6173] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 122.698470][ T6173] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 122.707705][ T6173] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 122.717365][ T6173] bcachefs (loop2): unclean shutdown complete, journal seq 10 [ 123.128807][ T6173] bcachefs (loop2): bch2_fs_recovery(): error EINTR [ 123.136721][ T6173] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 123.144850][ T6173] bcachefs (loop2): shutting down [ 123.479515][ T6173] bcachefs (loop2): shutdown complete [ 123.534648][ T5844] Bluetooth: hci5: command tx timeout [ 123.893677][ T6211] loop0: detected capacity change from 0 to 164 [ 124.346460][ T6211] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.390437][ T6209] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.615229][ T5844] Bluetooth: hci5: command tx timeout [ 126.664691][ T6236] nbd: must specify at least one socket [ 126.688269][ T802] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.807751][ T6240] loop0: detected capacity change from 0 to 128 [ 127.694553][ T5844] Bluetooth: hci5: command tx timeout [ 127.725197][ T6173] bcachefs: bch2_fs_get_tree() error: EINTR [ 129.155297][ T802] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.403086][ T6179] chnl_net:caif_netlink_parms(): no params data found [ 129.655700][ T6254] loop0: detected capacity change from 0 to 32768 [ 129.662741][ T6254] btrfs: Deprecated parameter 'usebackuproot' [ 129.668897][ T6254] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.693871][ T6254] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.53 (6254) [ 129.732689][ T6254] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.742894][ T6254] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 129.751784][ T6254] BTRFS info (device loop0): using free-space-tree [ 129.844910][ T5844] Bluetooth: hci5: command tx timeout [ 130.731849][ T64] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x5814f9ab level 0 [ 130.764750][ T6254] BTRFS warning (device loop0): failed to read root (objectid=9): -5 [ 130.772920][ T6254] BTRFS warning (device loop0): try to load backup roots slot 1 [ 130.781809][ T6254] BTRFS warning (device loop0): global root 2 0 already exists [ 130.789671][ T6254] BTRFS error (device loop0): failed to load root extent [ 130.797031][ T6254] BTRFS warning (device loop0): try to load backup roots slot 2 [ 130.805293][ T1099] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 130.955463][ T6254] BTRFS warning (device loop0): couldn't read tree root [ 130.962489][ T6254] BTRFS warning (device loop0): try to load backup roots slot 3 [ 131.357840][ T6254] BTRFS warning (device loop0): global root 2 0 already exists [ 131.365572][ T6254] BTRFS error (device loop0): failed to load root extent [ 131.383822][ T802] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.441983][ T6254] BTRFS error (device loop0): open_ctree failed: -17 [ 131.922212][ T6287] nbd: must specify at least one socket [ 131.930798][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 132.859079][ T802] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.877667][ T6296] loop3: detected capacity change from 0 to 8 [ 132.905171][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911910][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986298][ T6298] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 133.004385][ T6298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.61'. [ 133.025408][ T6179] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.056014][ T6179] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.069039][ T6301] loop0: detected capacity change from 0 to 128 [ 133.077104][ T6179] bridge_slave_0: entered allmulticast mode [ 133.088825][ T6179] bridge_slave_0: entered promiscuous mode [ 133.300508][ T6179] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.323642][ T6179] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.341908][ T6179] bridge_slave_1: entered allmulticast mode [ 134.258380][ T6179] bridge_slave_1: entered promiscuous mode [ 134.386551][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 134.396072][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 134.410869][ T6310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.64'. [ 134.570462][ T6179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.598348][ T6314] loop0: detected capacity change from 0 to 128 [ 134.666640][ T6179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.509676][ T6320] loop2: detected capacity change from 0 to 32768 [ 136.267457][ T6320] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 136.291404][ T6320] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 136.299861][ T6320] bcachefs (loop2): Version upgrade required: [ 136.299861][ T6320] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 136.299861][ T6320] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 136.299861][ T6320] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 136.390547][ T6179] team0: Port device team_slave_0 added [ 136.400736][ T6179] team0: Port device team_slave_1 added [ 136.418195][ T6320] bcachefs (loop2): dropping and reconstructing all alloc info [ 136.452840][ T6320] bcachefs (loop2): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 136.452881][ T6320] pointer past last bucket (68718691906 > 128), deleting [ 136.491391][ T6329] overlayfs: failed to resolve './file2': -2 [ 136.493096][ T6320] bcachefs (loop2): accounting_read... done [ 136.540556][ T6320] bcachefs (loop2): alloc_read... done [ 136.546221][ T6320] bcachefs (loop2): snapshots_read... done [ 136.553516][ T6320] bcachefs (loop2): check_allocations... done [ 136.595902][ T6320] bcachefs (loop2): going read-write [ 136.614043][ T802] bridge_slave_1: left allmulticast mode [ 136.632536][ T802] bridge_slave_1: left promiscuous mode [ 136.675938][ T802] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.687236][ T6320] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 136.687236][ T6320] rw journal devs: [ 136.710352][ T6320] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 136.732614][ T6320] bcachefs (loop2): done starting filesystem [ 136.780055][ T6316] bcachefs (loop2): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 136.780078][ T6316] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 136.780097][ T6316] [ 136.806309][ T802] bridge_slave_0: left allmulticast mode [ 136.806347][ T802] bridge_slave_0: left promiscuous mode [ 136.806591][ T802] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.953554][ T6316] bcachefs (loop2): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 136.953587][ T6316] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 136.953608][ T6316] [ 137.022047][ T6316] bcachefs (loop2): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 137.022070][ T6316] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 137.022088][ T6316] [ 137.100149][ T6316] bcachefs (loop2): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 137.100174][ T6316] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 137.100194][ T6316] [ 137.394573][ T6327] loop1: detected capacity change from 0 to 32768 [ 137.401679][ T6327] btrfs: Deprecated parameter 'usebackuproot' [ 137.407857][ T6327] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 137.424349][ T6327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.68 (6327) [ 137.518990][ T6327] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.529620][ T6327] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 137.538528][ T6327] BTRFS info (device loop1): using free-space-tree [ 137.992503][ T6356] loop0: detected capacity change from 0 to 128 [ 138.042301][ T6178] BTRFS warning (device loop1): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x5814f9ab level 0 [ 138.058004][ T6327] BTRFS warning (device loop1): failed to read root (objectid=9): -5 [ 138.066271][ T6327] BTRFS warning (device loop1): try to load backup roots slot 1 [ 138.079756][ T6327] BTRFS warning (device loop1): global root 2 0 already exists [ 138.089487][ T6327] BTRFS error (device loop1): failed to load root extent [ 138.097024][ T6327] BTRFS warning (device loop1): try to load backup roots slot 2 [ 138.114825][ T6178] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 138.125482][ T6327] BTRFS warning (device loop1): couldn't read tree root [ 138.132509][ T6327] BTRFS warning (device loop1): try to load backup roots slot 3 [ 138.142377][ T6327] BTRFS warning (device loop1): global root 2 0 already exists [ 138.150209][ T6327] BTRFS error (device loop1): failed to load root extent [ 138.308741][ T6327] BTRFS error (device loop1): open_ctree failed: -17 [ 139.739419][ T802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.890995][ T59] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.912676][ T802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.070614][ T802] bond0 (unregistering): Released all slaves [ 140.106588][ T59] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.167004][ T59] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.219395][ T59] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.302469][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.344143][ T59] usb 4-1: SerialNumber: syz [ 140.349297][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.349318][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.349346][ T6179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.351684][ T6179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.470532][ T6179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.560214][ T6179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.610006][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 140.618935][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 140.628373][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 140.639695][ T6375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.74'. [ 140.712189][ T6364] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 140.732982][ T59] usb 4-1: 0:2 : does not exist [ 140.757388][ T5837] bcachefs (loop2): shutting down [ 140.762493][ T5837] bcachefs (loop2): going read-only [ 140.784685][ T5837] bcachefs (loop2): finished waiting for writes to stop [ 140.815661][ T5837] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 140.839816][ T59] usb 4-1: USB disconnect, device number 2 [ 140.854667][ T5837] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 140.860003][ T6379] loop0: detected capacity change from 0 to 128 [ 140.874286][ T5837] bcachefs (loop2): unclean shutdown complete, journal seq 10 [ 140.925835][ T5837] bcachefs (loop2): done going read-only, filesystem not clean [ 142.055336][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.066160][ T5837] bcachefs (loop2): shutdown complete [ 142.206177][ T6388] nbd: must specify at least one socket [ 142.218131][ T6179] hsr_slave_0: entered promiscuous mode [ 142.226187][ T6179] hsr_slave_1: entered promiscuous mode [ 142.232611][ T6179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.249409][ T6179] Cannot create hsr debugfs directory [ 142.838473][ T802] hsr_slave_0: left promiscuous mode [ 142.853984][ T802] hsr_slave_1: left promiscuous mode [ 142.875354][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.985460][ T802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.069583][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.116865][ T802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.459334][ T802] veth1_macvtap: left promiscuous mode [ 143.507429][ T802] veth0_macvtap: left promiscuous mode [ 143.521264][ T802] veth1_vlan: left promiscuous mode [ 143.557789][ T802] veth0_vlan: left promiscuous mode [ 144.306836][ T6410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 144.690062][ T6416] loop1: detected capacity change from 0 to 32768 [ 144.859630][ T6416] misc userio: The device must be registered before sending interrupts [ 145.744064][ T6427] loop0: detected capacity change from 0 to 32768 [ 145.815793][ T6427] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 145.838845][ T6427] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 145.847065][ T6427] bcachefs (loop0): Version upgrade required: [ 145.847065][ T6427] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 145.847065][ T6427] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 145.847065][ T6427] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 145.933169][ T6427] bcachefs (loop0): dropping and reconstructing all alloc info [ 145.955443][ T6427] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 145.955466][ T6427] pointer past last bucket (68718691906 > 128), deleting [ 146.006501][ T6427] bcachefs (loop0): accounting_read... done [ 146.090218][ T6427] bcachefs (loop0): alloc_read... done [ 146.095908][ T6427] bcachefs (loop0): snapshots_read... done [ 146.101824][ T6427] bcachefs (loop0): check_allocations... done [ 146.141702][ T6427] bcachefs (loop0): going read-write [ 146.254917][ T6427] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 146.254917][ T6427] rw journal devs: [ 146.278104][ T6427] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 146.306594][ T6427] bcachefs (loop0): done starting filesystem [ 146.355381][ T6427] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 146.355408][ T6427] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 146.355427][ T6427] [ 146.387355][ T6427] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 146.387371][ T6427] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 146.387385][ T6427] [ 146.417809][ T6427] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 146.417826][ T6427] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 146.417839][ T6427] [ 146.450103][ T6427] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 146.450120][ T6427] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 146.450135][ T6427] [ 147.064502][ T6441] loop2: detected capacity change from 0 to 164 [ 147.647869][ T6441] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.685478][ T6440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.769315][ T802] team0 (unregistering): Port device team_slave_1 removed [ 147.849450][ T802] team0 (unregistering): Port device team_slave_0 removed [ 147.999489][ T6444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 148.010000][ T6444] netlink: 40 bytes leftover after parsing attributes in process `syz.2.86'. [ 148.074161][ T6446] loop2: detected capacity change from 0 to 128 [ 149.823881][ T6453] loop2: detected capacity change from 0 to 32768 [ 149.830999][ T6453] ======================================================= [ 149.830999][ T6453] WARNING: The mand mount option has been deprecated and [ 149.830999][ T6453] and is ignored by this kernel. Remove the mand [ 149.830999][ T6453] option from the mount to silence this warning. [ 149.830999][ T6453] ======================================================= [ 149.949307][ T6453] JBD2: Ignoring recovery information on journal [ 150.121269][ T6453] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 150.133812][ T6453] FAULT_INJECTION: forcing a failure. [ 150.133812][ T6453] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.147371][ T6453] CPU: 1 UID: 0 PID: 6453 Comm: syz.2.89 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 150.147392][ T6453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.147404][ T6453] Call Trace: [ 150.147410][ T6453] [ 150.147416][ T6453] dump_stack_lvl+0x241/0x360 [ 150.147448][ T6453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.147470][ T6453] ? __pfx__printk+0x10/0x10 [ 150.147500][ T6453] should_fail_ex+0x424/0x570 [ 150.147525][ T6453] strncpy_from_user+0x36/0x280 [ 150.147548][ T6453] getname_flags+0x2dc/0x530 [ 150.147573][ T6453] __x64_sys_symlinkat+0x7a/0xb0 [ 150.147593][ T6453] do_syscall_64+0xf3/0x230 [ 150.147612][ T6453] ? clear_bhb_loop+0x45/0xa0 [ 150.147630][ T6453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.147647][ T6453] RIP: 0033:0x7f85e0f8e169 [ 150.147664][ T6453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.147676][ T6453] RSP: 002b:00007f85e1d2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 150.147692][ T6453] RAX: ffffffffffffffda RBX: 00007f85e11b5fa0 RCX: 00007f85e0f8e169 [ 150.147703][ T6453] RDX: 0000200000000040 RSI: ffffffffffffff9c RDI: 0000200000001040 [ 150.147713][ T6453] RBP: 00007f85e1d2a090 R08: 0000000000000000 R09: 0000000000000000 [ 150.147722][ T6453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.147731][ T6453] R13: 0000000000000000 R14: 00007f85e11b5fa0 R15: 00007ffd27155e48 [ 150.147753][ T6453] [ 150.963119][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 151.147456][ T6179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.681803][ T6179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.704100][ T5853] bcachefs (loop0): shutting down [ 151.724129][ T5853] bcachefs (loop0): going read-only [ 151.775238][ T5853] bcachefs (loop0): finished waiting for writes to stop [ 151.809070][ T6179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.822536][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 151.860461][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 151.881346][ T6474] nbd: must specify at least one socket [ 151.888650][ T6179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.905845][ T5853] bcachefs (loop0): unclean shutdown complete, journal seq 10 [ 151.958209][ T5853] bcachefs (loop0): done going read-only, filesystem not clean [ 152.375898][ T6480] loop1: detected capacity change from 0 to 164 [ 152.392469][ T6480] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 152.971053][ T5853] bcachefs (loop0): shutdown complete [ 153.028711][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.348478][ T6179] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.364264][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.371540][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.403043][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.410254][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.906570][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 154.746503][ T6504] loop1: detected capacity change from 0 to 128 [ 155.005304][ T6179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.014172][ T6526] loop2: detected capacity change from 0 to 2048 [ 157.174573][ T6526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.264627][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 157.280286][ T6532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.102'. [ 157.506661][ T6179] veth0_vlan: entered promiscuous mode [ 157.566611][ T6179] veth1_vlan: entered promiscuous mode [ 157.677673][ T6539] loop1: detected capacity change from 0 to 1024 [ 157.823405][ T6179] veth0_macvtap: entered promiscuous mode [ 157.869147][ T6536] loop3: detected capacity change from 0 to 32768 [ 157.918234][ T6179] veth1_macvtap: entered promiscuous mode [ 158.001937][ T6536] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 158.025350][ T6536] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 158.033568][ T6536] bcachefs (loop3): Version upgrade required: [ 158.033568][ T6536] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 158.033568][ T6536] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 158.033568][ T6536] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 158.151859][ T6536] bcachefs (loop3): dropping and reconstructing all alloc info [ 158.172286][ T6536] bcachefs (loop3): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 158.172329][ T6536] pointer past last bucket (68718691906 > 128), deleting [ 158.172686][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.204681][ T6536] bcachefs (loop3): accounting_read... [ 158.284529][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.300824][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.312071][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.324533][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.349999][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.368464][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.380842][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.431017][ T6536] done [ 158.433868][ T6536] bcachefs (loop3): alloc_read... done [ 158.435480][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.439611][ T6536] bcachefs (loop3): snapshots_read... done [ 158.452663][ T6536] bcachefs (loop3): check_allocations... [ 158.507536][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.519119][ T6536] done [ 158.531368][ T6536] bcachefs (loop3): going read-write [ 158.553159][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.702594][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.714200][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.725246][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.826236][ T6554] loop1: detected capacity change from 0 to 164 [ 158.870017][ T6554] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 159.043734][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.060580][ T6179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.064337][ T6536] bcachefs (loop3): insufficient writeable journal devices available: have 0, need 1 [ 159.064337][ T6536] rw journal devs: [ 159.131293][ T6536] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 159.287682][ T6536] bcachefs (loop3): done starting filesystem [ 159.337499][ T6536] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 159.337524][ T6536] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 159.337544][ T6536] [ 159.368496][ T6536] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 159.368519][ T6536] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 159.368538][ T6536] [ 159.400286][ T6536] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 159.400308][ T6536] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 159.400328][ T6536] [ 159.431640][ T6536] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 159.431662][ T6536] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 159.431681][ T6536] [ 159.562285][ T6179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.579877][ T6179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.766034][ T6179] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.778255][ T5838] bcachefs (loop3): shutting down [ 159.782263][ T6179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.783304][ T5838] bcachefs (loop3): going read-only [ 159.799173][ T6179] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.808366][ T6179] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.829149][ T5838] bcachefs (loop3): finished waiting for writes to stop [ 159.928852][ T5838] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 160.009651][ T5838] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 160.151434][ T5838] bcachefs (loop3): unclean shutdown complete, journal seq 10 [ 160.227204][ T5838] bcachefs (loop3): done going read-only, filesystem not clean [ 160.830279][ T5838] bcachefs (loop3): shutdown complete [ 160.857465][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.873796][ T6578] loop0: detected capacity change from 0 to 128 [ 160.904142][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.116110][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.129326][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.203951][ T6593] nbd: must specify at least one socket [ 163.370276][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 163.385416][ T6609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.113'. [ 163.582250][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.35'. [ 165.851802][ T6627] loop0: detected capacity change from 0 to 164 [ 165.889163][ T6627] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 167.605130][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 168.437995][ T6651] loop0: detected capacity change from 0 to 128 [ 169.608426][ T6654] loop5: detected capacity change from 0 to 2048 [ 169.740752][ T6654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.814908][ T6654] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.890036][ T6666] nbd: must specify at least one socket [ 170.491158][ T6179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.212722][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 173.222101][ T6694] netlink: 40 bytes leftover after parsing attributes in process `syz.5.125'. [ 175.000991][ T6714] loop0: detected capacity change from 0 to 32768 [ 175.008205][ T6714] btrfs: Deprecated parameter 'usebackuproot' [ 175.014635][ T6714] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 175.486659][ T6714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.132 (6714) [ 175.689653][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 176.000680][ T6714] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.012833][ T6714] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 176.021811][ T6714] BTRFS info (device loop0): using free-space-tree [ 176.476223][ T1099] BTRFS warning (device loop0): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x5814f9ab level 0 [ 176.644760][ T6714] BTRFS warning (device loop0): failed to read root (objectid=9): -5 [ 176.652943][ T6714] BTRFS warning (device loop0): try to load backup roots slot 1 [ 176.666250][ T6714] BTRFS warning (device loop0): global root 2 0 already exists [ 176.673899][ T6714] BTRFS error (device loop0): failed to load root extent [ 176.681167][ T6714] BTRFS warning (device loop0): try to load backup roots slot 2 [ 176.696619][ T1099] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 176.761149][ T6714] BTRFS warning (device loop0): couldn't read tree root [ 176.770921][ T6714] BTRFS warning (device loop0): try to load backup roots slot 3 [ 176.779611][ T6714] BTRFS warning (device loop0): global root 2 0 already exists [ 176.787342][ T6714] BTRFS error (device loop0): failed to load root extent [ 176.829444][ T6714] BTRFS error (device loop0): open_ctree failed: -17 [ 177.274159][ T6741] loop3: detected capacity change from 0 to 1024 [ 177.537961][ T6741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.903168][ T6751] loop2: detected capacity change from 0 to 40427 [ 178.490988][ T6741] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.134: missing EA_INODE flag [ 178.781047][ T6752] loop5: detected capacity change from 0 to 32768 [ 178.790881][ T6752] ocfs2: Unknown parameter '' [ 178.920190][ T6751] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 178.928381][ T6751] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.993449][ T6751] F2FS-fs (loop2): invalid crc value [ 179.105299][ T6751] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.112696][ T6751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.232881][ T6741] EXT4-fs (loop3): Remounting filesystem read-only [ 179.385258][ T6741] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 179.543990][ T6766] syz.2.136 (6766): drop_caches: 4 [ 181.464835][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.599696][ T6778] loop0: detected capacity change from 0 to 256 [ 182.624121][ T6778] MINIX-fs: mounting file system with errors, running fsck is recommended [ 182.915549][ T6784] loop3: detected capacity change from 0 to 1024 [ 183.064208][ T6786] syz.0.144: attempt to access beyond end of device [ 183.064208][ T6786] loop0: rw=0, sector=917640, nr_sectors = 2 limit=256 [ 183.078536][ T6786] Buffer I/O error on dev loop0, logical block 458820, async page read [ 183.088392][ T6786] syz.0.144: attempt to access beyond end of device [ 183.088392][ T6786] loop0: rw=0, sector=917640, nr_sectors = 2 limit=256 [ 183.101782][ T6786] Buffer I/O error on dev loop0, logical block 458820, async page read [ 183.116101][ T6786] syz.0.144: attempt to access beyond end of device [ 183.116101][ T6786] loop0: rw=0, sector=917640, nr_sectors = 2 limit=256 [ 183.129727][ T6786] Buffer I/O error on dev loop0, logical block 458820, async page read [ 183.299282][ T6784] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 183.341957][ T6784] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.462789][ T6784] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 183.602196][ T6784] EXT4-fs (loop3): orphan cleanup on readonly fs [ 183.610854][ T6784] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.142: Inode bitmap for bg 0 marked uninitialized [ 183.659343][ T6784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.039263][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 185.590606][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.600293][ T6826] loop5: detected capacity change from 0 to 32768 [ 187.819933][ T6826] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 187.843148][ T6826] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 187.853043][ T6826] bcachefs (loop5): Version upgrade required: [ 187.853043][ T6826] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 187.853043][ T6826] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 187.853043][ T6826] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 188.705003][ T6826] bcachefs (loop5): dropping and reconstructing all alloc info [ 188.725188][ T6826] bcachefs (loop5): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 188.725223][ T6826] pointer past last bucket (68718691906 > 128), deleting [ 188.763950][ T6826] bcachefs (loop5): accounting_read... done [ 188.910634][ T6826] bcachefs (loop5): alloc_read... done [ 188.916364][ T6826] bcachefs (loop5): snapshots_read... done [ 188.922260][ T6826] bcachefs (loop5): check_allocations... done [ 188.982819][ T6826] bcachefs (loop5): going read-write [ 189.216919][ T6845] loop3: detected capacity change from 0 to 4096 [ 189.580882][ T6826] bcachefs (loop5): insufficient writeable journal devices available: have 0, need 1 [ 189.580882][ T6826] rw journal devs: [ 189.611410][ T6826] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 189.652617][ T6826] bcachefs (loop5): done starting filesystem [ 189.883172][ T6826] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 189.883203][ T6826] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 189.883222][ T6826] [ 189.915403][ T6826] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 189.915427][ T6826] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 189.915447][ T6826] [ 189.946053][ T6826] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 189.946073][ T6826] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 189.946093][ T6826] [ 189.978932][ T6826] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 189.978956][ T6826] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 189.978975][ T6826] [ 190.801465][ T6179] bcachefs (loop5): shutting down [ 190.829114][ T6179] bcachefs (loop5): going read-only [ 190.873044][ T6179] bcachefs (loop5): finished waiting for writes to stop [ 190.899680][ T6179] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10 [ 190.959789][ T6179] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 191.209670][ T6179] bcachefs (loop5): unclean shutdown complete, journal seq 10 [ 191.225717][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 191.303348][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 192.071879][ T6179] bcachefs (loop5): done going read-only, filesystem not clean [ 192.748582][ T6179] bcachefs (loop5): shutdown complete [ 192.889629][ T6878] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 193.097252][ T6882] FAULT_INJECTION: forcing a failure. [ 193.097252][ T6882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.110491][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.3.162 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 193.110519][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.110532][ T6882] Call Trace: [ 193.110541][ T6882] [ 193.110550][ T6882] dump_stack_lvl+0x241/0x360 [ 193.110589][ T6882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.110620][ T6882] ? __pfx__printk+0x10/0x10 [ 193.110660][ T6882] should_fail_ex+0x424/0x570 [ 193.110695][ T6882] strncpy_from_user+0x36/0x280 [ 193.110727][ T6882] __se_sys_memfd_create+0x25f/0x7d0 [ 193.110762][ T6882] do_syscall_64+0xf3/0x230 [ 193.110787][ T6882] ? clear_bhb_loop+0x45/0xa0 [ 193.110812][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.110832][ T6882] RIP: 0033:0x7fea7538e169 [ 193.110850][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.110867][ T6882] RSP: 002b:00007fea731d4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 193.110888][ T6882] RAX: ffffffffffffffda RBX: 00000000000001a2 RCX: 00007fea7538e169 [ 193.110902][ T6882] RDX: 00007fea731d4ef0 RSI: 0000000000000000 RDI: 00007fea75411404 [ 193.110922][ T6882] RBP: 0000200000000280 R08: 00007fea731d4bb7 R09: 00007fea731d4e40 [ 193.110936][ T6882] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200 [ 193.110949][ T6882] R13: 00007fea731d4ef0 R14: 00007fea731d4eb0 R15: 0000200000000240 [ 193.110981][ T6882] [ 194.738689][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.794971][ T6886] tty tty3: ldisc open failed (-12), clearing slot 2 [ 194.808919][ T6897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.165'. [ 194.849596][ T6887] tty tty3: ldisc open failed (-12), clearing slot 2 [ 195.096181][ T6899] loop3: detected capacity change from 0 to 32768 [ 195.351872][ T6907] loop0: detected capacity change from 0 to 128 [ 195.967456][ T6899] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 195.990509][ T6899] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 195.998755][ T6899] bcachefs (loop3): Version upgrade required: [ 195.998755][ T6899] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 195.998755][ T6899] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 195.998755][ T6899] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 196.104043][ T6899] bcachefs (loop3): dropping and reconstructing all alloc info [ 196.131245][ T6899] bcachefs (loop3): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 196.131269][ T6899] pointer past last bucket (68718691906 > 128), deleting [ 196.173660][ T6899] bcachefs (loop3): accounting_read... done [ 196.313089][ T6899] bcachefs (loop3): alloc_read... done [ 196.323689][ T6899] bcachefs (loop3): snapshots_read... done [ 196.329826][ T6899] bcachefs (loop3): check_allocations... done [ 196.419659][ T6899] bcachefs (loop3): going read-write [ 196.490227][ T6899] bcachefs (loop3): insufficient writeable journal devices available: have 0, need 1 [ 196.490227][ T6899] rw journal devs: [ 196.510072][ T6899] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 196.555700][ T6899] bcachefs (loop3): done starting filesystem [ 196.588048][ T6899] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 196.588073][ T6899] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 196.588092][ T6899] [ 196.619270][ T6899] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 196.619295][ T6899] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 196.619315][ T6899] [ 196.652864][ T6899] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 196.652886][ T6899] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 196.652905][ T6899] [ 196.688186][ T6899] bcachefs (loop3): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 196.688208][ T6899] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 196.688229][ T6899] [ 197.058912][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 197.822660][ T5838] bcachefs (loop3): shutting down [ 197.964663][ T5838] bcachefs (loop3): going read-only [ 197.969945][ T5838] bcachefs (loop3): finished waiting for writes to stop [ 198.017189][ T6931] loop0: detected capacity change from 0 to 256 [ 198.065878][ T6931] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.114885][ T5838] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 198.123875][ T5838] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 198.129482][ T6931] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 198.181701][ T5838] bcachefs (loop3): unclean shutdown complete, journal seq 10 [ 198.225214][ T5838] bcachefs (loop3): done going read-only, filesystem not clean [ 198.274777][ T6931] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 198.365541][ T5838] bcachefs (loop3): shutdown complete [ 198.428167][ T6931] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 198.467927][ T6931] exFAT-fs (loop0): Filesystem has been set read-only [ 198.498926][ T6931] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 198.555969][ T6931] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 198.598004][ T6937] nbd: must specify at least one socket [ 199.852478][ T6953] fuse: Bad value for 'user_id' [ 199.860511][ T6953] fuse: Bad value for 'user_id' [ 200.366393][ T5889] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 200.758320][ T5889] usb 3-1: config 0 has an invalid interface number: 241 but max is 0 [ 200.788740][ T5889] usb 3-1: config 0 has no interface number 0 [ 200.809628][ T5889] usb 3-1: config 0 interface 241 altsetting 6 endpoint 0x2 has invalid maxpacket 1056, setting to 64 [ 200.840680][ T5889] usb 3-1: config 0 interface 241 altsetting 6 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 200.914512][ T5889] usb 3-1: config 0 interface 241 altsetting 6 endpoint 0x89 has invalid maxpacket 512, setting to 64 [ 200.976709][ T5889] usb 3-1: config 0 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 201.021452][ T5889] usb 3-1: config 0 interface 241 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 201.054273][ T5889] usb 3-1: config 0 interface 241 altsetting 6 endpoint 0xE has invalid wMaxPacketSize 0 [ 201.084569][ T5889] usb 3-1: config 0 interface 241 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 201.116580][ T5889] usb 3-1: config 0 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 201.164813][ T5889] usb 3-1: config 0 interface 241 altsetting 6 endpoint 0x1 has invalid maxpacket 2047, setting to 64 [ 201.234433][ T5889] usb 3-1: config 0 interface 241 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 201.290299][ T5889] usb 3-1: config 0 interface 241 has no altsetting 0 [ 201.339234][ T6947] loop0: detected capacity change from 0 to 32768 [ 201.353256][ T5889] usb 3-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=5d.4a [ 201.375709][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.401873][ T5889] usb 3-1: Product: syz [ 201.426647][ T5889] usb 3-1: Manufacturer: syz [ 201.431434][ T5889] usb 3-1: SerialNumber: syz [ 201.459918][ T6947] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.476731][ T5889] usb 3-1: config 0 descriptor?? [ 201.497440][ T6961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.613530][ T6947] XFS (loop0): Ending clean mount [ 201.725881][ T6947] XFS (loop0): Quotacheck needed: Please wait. [ 201.727027][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.765103][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.818465][ T5889] usb 3-1: USB disconnect, device number 2 [ 201.845190][ T6947] XFS (loop0): Quotacheck: Done. [ 202.031447][ T5853] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.722105][ T6968] loop1: detected capacity change from 0 to 32768 [ 202.775469][ T6968] btrfs: Deprecated parameter 'usebackuproot' [ 202.844541][ T6968] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 202.895044][ T6968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.178 (6968) [ 203.266574][ T6999] loop5: detected capacity change from 0 to 32768 [ 203.300410][ T6968] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.368052][ T6999] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 203.391428][ T6999] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 203.394845][ T6968] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 203.399676][ T6999] bcachefs (loop5): Version upgrade required: [ 203.399676][ T6999] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 203.399676][ T6999] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 203.399676][ T6999] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 203.497394][ T929] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 203.508659][ T6999] bcachefs (loop5): dropping and reconstructing all alloc info [ 203.524903][ T6968] BTRFS info (device loop1): using free-space-tree [ 203.552245][ T6999] bcachefs (loop5): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 203.552279][ T6999] pointer past last bucket (68718691906 > 128), deleting [ 203.602664][ T6999] bcachefs (loop5): accounting_read... done [ 203.609504][ T6999] bcachefs (loop5): alloc_read... done [ 203.615608][ T6999] bcachefs (loop5): snapshots_read... done [ 203.622561][ T6999] bcachefs (loop5): check_allocations... done [ 203.676605][ T6999] bcachefs (loop5): going read-write [ 203.694792][ T929] usb 1-1: Using ep0 maxpacket: 8 [ 203.711451][ T929] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 203.762305][ T3505] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 203.784515][ T929] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 203.803144][ T929] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 203.814668][ T929] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 203.827844][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 203.839029][ T6968] BTRFS warning (device loop1): couldn't read tree root [ 203.846032][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 203.846080][ T929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 203.849320][ T929] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 203.883968][ T6999] bcachefs (loop5): insufficient writeable journal devices available: have 0, need 1 [ 203.883968][ T6999] rw journal devs: [ 203.901306][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.901339][ T929] usb 1-1: Product: syz [ 203.901356][ T929] usb 1-1: Manufacturer: syz [ 203.901373][ T929] usb 1-1: SerialNumber: syz [ 203.934765][ T6968] BTRFS warning (device loop1): try to load backup roots slot 1 [ 203.953506][ T3505] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 203.977937][ T6999] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 204.019830][ T6968] BTRFS warning (device loop1): couldn't read tree root [ 204.040231][ T6999] bcachefs (loop5): done starting filesystem [ 204.066674][ T6968] BTRFS warning (device loop1): try to load backup roots slot 2 [ 204.146687][ T929] usb 1-1: config 0 descriptor?? [ 204.151807][ T6999] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 204.151829][ T6999] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 204.151848][ T6999] [ 204.151940][ T53] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 204.193932][ T6999] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 204.193955][ T6999] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 204.193973][ T6999] [ 204.228868][ T6999] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 204.228892][ T6999] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 204.228911][ T6999] [ 204.247336][ T929] hub 1-1:0.0: bad descriptor, ignoring hub [ 204.266753][ T6999] bcachefs (loop5): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 204.266774][ T6999] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 204.266793][ T6999] [ 204.319310][ T6968] BTRFS warning (device loop1): couldn't read tree root [ 204.332103][ T929] hub 1-1:0.0: probe with driver hub failed with error -5 [ 204.348252][ T6968] BTRFS warning (device loop1): try to load backup roots slot 3 [ 204.370728][ T929] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 204.387081][ T6179] bcachefs (loop5): shutting down [ 204.445053][ T6179] bcachefs (loop5): going read-only [ 204.450329][ T6179] bcachefs (loop5): finished waiting for writes to stop [ 204.550314][ T6179] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10 [ 204.596456][ T929] usb 1-1: USB disconnect, device number 3 [ 204.603463][ T6968] BTRFS error (device loop1): open_ctree failed: -4 [ 204.610389][ T6179] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 204.647066][ T6994] loop2: detected capacity change from 0 to 32768 [ 204.653975][ T6179] bcachefs (loop5): unclean shutdown complete, journal seq 10 [ 204.774602][ T6994] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.846598][ T6179] bcachefs (loop5): done going read-only, filesystem not clean [ 204.869499][ T6038] udevd[6038]: setting mode of /dev/bus/usb/001/003 to 020664 failed: No such file or directory [ 204.910611][ T6038] udevd[6038]: setting owner of /dev/bus/usb/001/003 to uid=0, gid=0 failed: No such file or directory [ 205.145183][ T6179] bcachefs (loop5): shutdown complete [ 205.302414][ T6994] XFS (loop2): Ending clean mount [ 205.317346][ T7060] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 205.337678][ T6994] XFS (loop2): Quotacheck needed: Please wait. [ 205.353467][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 205.858695][ T6994] XFS (loop2): Quotacheck: Done. [ 205.932323][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.089033][ T7065] nbd: must specify at least one socket [ 206.236249][ T7070] loop0: detected capacity change from 0 to 128 [ 207.109739][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 207.122088][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 207.128907][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 208.378498][ T7072] loop1: detected capacity change from 0 to 32768 [ 208.385990][ T7072] btrfs: Deprecated parameter 'usebackuproot' [ 208.392116][ T7072] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 208.408345][ T7072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.187 (7072) [ 208.487154][ T7072] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.497520][ T7072] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 208.506442][ T7072] BTRFS info (device loop1): using free-space-tree [ 208.779904][ T3505] BTRFS warning (device loop1): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x5814f9ab level 0 [ 208.831426][ T7072] BTRFS warning (device loop1): failed to read root (objectid=9): -5 [ 208.839742][ T7072] BTRFS warning (device loop1): try to load backup roots slot 1 [ 208.856566][ T7072] BTRFS warning (device loop1): global root 2 0 already exists [ 208.864260][ T7072] BTRFS error (device loop1): failed to load root extent [ 208.871792][ T7072] BTRFS warning (device loop1): try to load backup roots slot 2 [ 208.882686][ T3505] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 208.893300][ T7072] BTRFS warning (device loop1): couldn't read tree root [ 208.900415][ T7072] BTRFS warning (device loop1): try to load backup roots slot 3 [ 208.911049][ T7072] BTRFS warning (device loop1): global root 2 0 already exists [ 208.918827][ T7072] BTRFS error (device loop1): failed to load root extent [ 208.946384][ T7072] BTRFS error (device loop1): open_ctree failed: -17 [ 212.060415][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 212.857221][ T5964] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 213.162104][ T7125] warning: `syz.2.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 213.295665][ T7122] loop0: detected capacity change from 0 to 32768 [ 213.320049][ T5964] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 213.334460][ T5964] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 213.343487][ T5964] usb 2-1: config 0 has no interface number 1 [ 213.365373][ T5964] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 213.387416][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 213.395254][ T5964] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 213.398241][ T5964] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 213.454565][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.482966][ T5964] usb 2-1: Product: syz [ 213.493086][ T5964] usb 2-1: Manufacturer: syz [ 213.503206][ T5964] usb 2-1: SerialNumber: syz [ 213.524685][ T5964] usb 2-1: config 0 descriptor?? [ 213.531679][ T7115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.539714][ T7115] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 213.574211][ T5888] usb 4-1: device descriptor read/64, error -71 [ 213.594984][ T5964] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 213.629170][ T5964] vmk80xx 2-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 213.708436][ T7122] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 213.732448][ T7122] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 213.740753][ T7122] bcachefs (loop0): Version upgrade required: [ 213.740753][ T7122] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 213.740753][ T7122] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 213.740753][ T7122] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 213.845064][ T7122] bcachefs (loop0): dropping and reconstructing all alloc info [ 213.869618][ T7122] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum none 0:0 compress incompressible ptr: 0:68718691906:0 gen 0 invalid [ 213.869647][ T7122] pointer past last bucket (68718691906 > 128), deleting [ 213.894054][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.900952][ T5888] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 213.909181][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.966206][ T7122] bcachefs (loop0): accounting_read... done [ 214.000767][ T7122] bcachefs (loop0): alloc_read... done [ 214.008288][ T7122] bcachefs (loop0): snapshots_read... done [ 214.014268][ T7122] bcachefs (loop0): check_allocations... done [ 214.046472][ T7122] bcachefs (loop0): going read-write [ 214.097880][ T5888] usb 4-1: device descriptor read/64, error -71 [ 214.106519][ T7122] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1 [ 214.106519][ T7122] rw journal devs: [ 214.122863][ T7122] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 214.144542][ T7122] bcachefs (loop0): done starting filesystem [ 214.194078][ T7122] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 214.194101][ T7122] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 214.194138][ T7122] [ 214.226354][ T7122] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 214.226377][ T7122] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 214.226397][ T7122] [ 214.257226][ T7122] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 214.257247][ T7122] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 214.257263][ T7122] [ 214.290836][ T7122] bcachefs (loop0): bucket 0:34 gen 0 data type user sector count overflow: 0 + -8 > U32_MAX [ 214.290860][ T7122] while marking u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 214.290879][ T7122] [ 214.321620][ T5888] usb usb4-port1: attempt power cycle [ 214.398129][ T5853] bcachefs (loop0): shutting down [ 214.403322][ T5853] bcachefs (loop0): going read-only [ 214.413464][ T5853] bcachefs (loop0): finished waiting for writes to stop [ 214.445676][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10 [ 214.463041][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 214.492472][ T5853] bcachefs (loop0): unclean shutdown complete, journal seq 10 [ 214.555241][ T5853] bcachefs (loop0): done going read-only, filesystem not clean [ 214.656910][ T5853] bcachefs (loop0): shutdown complete [ 214.663553][ T7125] loop2: detected capacity change from 0 to 40427 [ 214.674109][ T5888] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.690634][ T7125] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 214.699853][ T7125] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 214.711513][ T7125] F2FS-fs (loop2): Unrecognized mount option "grpquota=" or missing value [ 214.739558][ T5888] usb 4-1: device descriptor read/8, error -71 [ 214.948932][ T5964] usb 2-1: USB disconnect, device number 2 [ 215.063931][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 215.135256][ T5888] usb 4-1: device descriptor read/8, error -71 [ 215.307616][ T5888] usb usb4-port1: unable to enumerate USB device [ 216.369336][ T7161] loop3: detected capacity change from 0 to 128 [ 217.592349][ T7125] loop2: detected capacity change from 0 to 32768 [ 217.687443][ T7171] nbd: must specify at least one socket [ 219.383510][ T7182] loop1: detected capacity change from 0 to 32768 [ 219.392496][ T7182] btrfs: Deprecated parameter 'usebackuproot' [ 219.398699][ T7182] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 219.412119][ T5847] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 219.422596][ T5847] Bluetooth: hci5: Injecting HCI hardware error event [ 219.432578][ T5847] Bluetooth: hci5: hardware error 0x00 [ 219.441121][ T7182] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.203 (7182) [ 219.477605][ T7182] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 219.487989][ T7182] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 219.498652][ T7182] BTRFS info (device loop1): using free-space-tree [ 220.186952][ T7197] BTRFS warning (device loop1): checksum verify failed on logical 5292032 mirror 1 wanted 0xe145e4ee found 0x5814f9ab level 0 [ 220.234699][ T7182] BTRFS warning (device loop1): failed to read root (objectid=9): -5 [ 220.242959][ T7182] BTRFS warning (device loop1): try to load backup roots slot 1 [ 220.252526][ T7182] BTRFS warning (device loop1): global root 2 0 already exists [ 220.264532][ T7182] BTRFS error (device loop1): failed to load root extent [ 220.271641][ T7182] BTRFS warning (device loop1): try to load backup roots slot 2 [ 220.287893][ T7197] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 220.324578][ T7182] BTRFS warning (device loop1): couldn't read tree root [ 220.331589][ T7182] BTRFS warning (device loop1): try to load backup roots slot 3 [ 220.358312][ T7182] BTRFS warning (device loop1): global root 2 0 already exists [ 220.369319][ T7182] BTRFS error (device loop1): failed to load root extent [ 220.419622][ T7182] BTRFS error (device loop1): open_ctree failed: -17 [ 220.506405][ T7206] loop5: detected capacity change from 0 to 512 [ 220.589134][ T7206] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 222.226806][ T7225] ip6t_rpfilter: unknown options [ 222.594563][ T5847] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 222.716177][ T7240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 223.037342][ T7253] syz.0.198: attempt to access beyond end of device [ 223.037342][ T7253] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 223.114596][ T7253] exFAT-fs (loop0): unable to read boot sector [ 223.120837][ T7253] exFAT-fs (loop0): failed to read boot sector [ 223.154508][ T7253] exFAT-fs (loop0): failed to recognize exfat type [ 223.317557][ T7266] dccp_close: ABORT with 36 bytes unread [ 223.536897][ T7271] gtp0: entered promiscuous mode [ 224.213803][ T7300] syz.5.231 uses obsolete (PF_INET,SOCK_PACKET) [ 224.392933][ T7305] dvmrp0: entered allmulticast mode [ 224.435567][ T7253] loop0: detected capacity change from 0 to 32768 [ 224.485271][ T7253] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section disk_groups: label 3 empty [ 224.485271][ T7253] disk_groups (size 2912): [ 224.485271][ T7253] [deleted] [deleted] [parent 1028 name ] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 [ 224.485486][ T7253] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups [ 224.805757][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.235'. [ 224.817271][ T7313] Zero length message leads to an empty skb [ 225.081648][ T7320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 225.217612][ T7320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.229376][ T7320] bond0: (slave bond1): Enslaving as an active interface with an up link [ 225.726224][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 225.763185][ T7348] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 226.110630][ T7363] syzkaller1: entered promiscuous mode [ 226.142287][ T7363] syzkaller1: entered allmulticast mode [ 226.631944][ T7387] veth0: entered promiscuous mode [ 226.654008][ T7387] veth0: left promiscuous mode [ 226.673524][ T7391] bond0: option mode: unable to set because the bond device has slaves [ 226.914287][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 226.991158][ T7400] geneve2: entered promiscuous mode [ 227.549366][ T7430] netlink: 156 bytes leftover after parsing attributes in process `syz.3.273'. [ 230.427735][ T7529] ------------[ cut here ]------------ [ 230.433453][ T7529] WARNING: CPU: 1 PID: 7529 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 230.444173][ T7529] Modules linked in: [ 230.448944][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.0.303 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 230.460705][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.470867][ T7529] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 230.477424][ T7529] Code: 00 00 e8 b6 b3 2c f7 48 c1 e5 04 48 8d b5 60 c0 c8 9a ba 10 00 00 00 4c 89 ff e8 2e ee 96 f7 e9 ce 00 00 00 e8 94 b3 2c f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 bf b7 2c f7 85 ed [ 230.497182][ T7529] RSP: 0018:ffffc90003a77c48 EFLAGS: 00010293 [ 230.503292][ T7529] RAX: ffffffff8a96c80c RBX: 0000000000000001 RCX: ffff888025260000 [ 230.513286][ T7529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 230.521360][ T7529] RBP: 0000000000000000 R08: ffffffff8a96c4ee R09: 1ffffffff20c0836 [ 230.529411][ T7529] R10: dffffc0000000000 R11: fffffbfff20c0837 R12: ffffffff86e0c410 [ 230.537513][ T7529] R13: dffffc0000000000 R14: ffff88802bf43100 R15: 0000000000000000 [ 230.545558][ T7529] FS: 0000555589260500(0000) GS:ffff888125080000(0000) knlGS:0000000000000000 [ 230.555290][ T7529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.561920][ T7529] CR2: 00007fea75580178 CR3: 000000005ecec000 CR4: 00000000003526f0 [ 230.570471][ T7529] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.578552][ T7529] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.586605][ T7529] Call Trace: [ 230.589925][ T7529] [ 230.592890][ T7529] udpv6_destroy_sock+0x212/0x270 [ 230.598100][ T7529] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 230.603689][ T7529] sk_common_release+0x71/0x2e0 [ 230.610428][ T7529] inet_release+0x17d/0x200 [ 230.615050][ T7529] sock_close+0xbc/0x240 [ 230.619339][ T7529] ? __pfx_sock_close+0x10/0x10 [ 230.624229][ T7529] __fput+0x3e9/0x9f0 [ 230.628360][ T7529] task_work_run+0x251/0x310 [ 230.633089][ T7529] ? _raw_spin_unlock+0x28/0x50 [ 230.638109][ T7529] ? __pfx_task_work_run+0x10/0x10 [ 230.643272][ T7529] ? syscall_exit_to_user_mode+0xa3/0x340 [ 230.649077][ T7529] syscall_exit_to_user_mode+0x13f/0x340 [ 230.655656][ T7529] do_syscall_64+0x100/0x230 [ 230.660683][ T7529] ? clear_bhb_loop+0x45/0xa0 [ 230.665474][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.671406][ T7529] RIP: 0033:0x7f1c6538e169 [ 230.675891][ T7529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.695818][ T7529] RSP: 002b:00007ffd8f239798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 230.704284][ T7529] RAX: 0000000000000000 RBX: 0000000000038333 RCX: 00007f1c6538e169 [ 230.712370][ T7529] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 230.720421][ T7529] RBP: 00007f1c655b7ba0 R08: 0000000000000001 R09: 0000000b8f239a8f [ 230.728494][ T7529] R10: 00007f1c65200000 R11: 0000000000000246 R12: 00007f1c655b5fac [ 230.736556][ T7529] R13: 00007f1c655b5fa0 R14: ffffffffffffffff R15: 00007ffd8f2398b0 [ 230.744678][ T7529] [ 230.747729][ T7529] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.755050][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.0.303 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 230.766454][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.776637][ T7529] Call Trace: [ 230.779942][ T7529] [ 230.782900][ T7529] dump_stack_lvl+0x241/0x360 [ 230.787624][ T7529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.792847][ T7529] ? __pfx__printk+0x10/0x10 [ 230.797460][ T7529] ? vscnprintf+0x5d/0x90 [ 230.801809][ T7529] panic+0x349/0x880 [ 230.805811][ T7529] ? __warn+0x174/0x4d0 [ 230.809980][ T7529] ? __pfx_panic+0x10/0x10 [ 230.814468][ T7529] __warn+0x344/0x4d0 [ 230.818562][ T7529] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 230.824390][ T7529] report_bug+0x2b3/0x500 [ 230.828734][ T7529] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 230.834552][ T7529] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 230.840371][ T7529] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 230.846186][ T7529] handle_bug+0x89/0x170 [ 230.850437][ T7529] exc_invalid_op+0x1a/0x50 [ 230.854950][ T7529] asm_exc_invalid_op+0x1a/0x20 [ 230.859810][ T7529] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 230.866239][ T7529] Code: 00 00 e8 b6 b3 2c f7 48 c1 e5 04 48 8d b5 60 c0 c8 9a ba 10 00 00 00 4c 89 ff e8 2e ee 96 f7 e9 ce 00 00 00 e8 94 b3 2c f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 bf b7 2c f7 85 ed [ 230.885861][ T7529] RSP: 0018:ffffc90003a77c48 EFLAGS: 00010293 [ 230.891937][ T7529] RAX: ffffffff8a96c80c RBX: 0000000000000001 RCX: ffff888025260000 [ 230.899916][ T7529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 230.907892][ T7529] RBP: 0000000000000000 R08: ffffffff8a96c4ee R09: 1ffffffff20c0836 [ 230.915868][ T7529] R10: dffffc0000000000 R11: fffffbfff20c0837 R12: ffffffff86e0c410 [ 230.923845][ T7529] R13: dffffc0000000000 R14: ffff88802bf43100 R15: 0000000000000000 [ 230.931827][ T7529] ? __pfx_geneve_gro_receive+0x10/0x10 [ 230.937392][ T7529] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 230.943122][ T7529] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 230.948944][ T7529] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 230.954767][ T7529] udpv6_destroy_sock+0x212/0x270 [ 230.959800][ T7529] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 230.965355][ T7529] sk_common_release+0x71/0x2e0 [ 230.970219][ T7529] inet_release+0x17d/0x200 [ 230.974742][ T7529] sock_close+0xbc/0x240 [ 230.979005][ T7529] ? __pfx_sock_close+0x10/0x10 [ 230.983878][ T7529] __fput+0x3e9/0x9f0 [ 230.987899][ T7529] task_work_run+0x251/0x310 [ 230.992540][ T7529] ? _raw_spin_unlock+0x28/0x50 [ 230.997416][ T7529] ? __pfx_task_work_run+0x10/0x10 [ 231.002547][ T7529] ? syscall_exit_to_user_mode+0xa3/0x340 [ 231.008278][ T7529] syscall_exit_to_user_mode+0x13f/0x340 [ 231.013925][ T7529] do_syscall_64+0x100/0x230 [ 231.018546][ T7529] ? clear_bhb_loop+0x45/0xa0 [ 231.023258][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.029176][ T7529] RIP: 0033:0x7f1c6538e169 [ 231.033602][ T7529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.053306][ T7529] RSP: 002b:00007ffd8f239798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 231.061750][ T7529] RAX: 0000000000000000 RBX: 0000000000038333 RCX: 00007f1c6538e169 [ 231.069744][ T7529] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 231.077726][ T7529] RBP: 00007f1c655b7ba0 R08: 0000000000000001 R09: 0000000b8f239a8f [ 231.085704][ T7529] R10: 00007f1c65200000 R11: 0000000000000246 R12: 00007f1c655b5fac [ 231.093681][ T7529] R13: 00007f1c655b5fa0 R14: ffffffffffffffff R15: 00007ffd8f2398b0 [ 231.101674][ T7529] [ 231.105030][ T7529] Kernel Offset: disabled [ 231.109364][ T7529] Rebooting in 86400 seconds..