last executing test programs: 2.86200091s ago: executing program 2 (id=168): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 2.812652052s ago: executing program 2 (id=169): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) close(0x3) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003020000080505a1a4400001"], 0x0) 2.219860319s ago: executing program 1 (id=172): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_USERDATA={0x9a, 0x7, 0x1, 0x0, "3bd2688238ec9d0411e145b8ab7f61076ef852860b459a3c9c0995cebefaf20565bea3317c9926384201cf9a20ff018e19abfc495bdceb4298f9453b26e44bcf75903167591a11509aeeb54e83ded31988907ada7b98e2cb849bb59d82de5d28fcf3331006920bba96649a49d2d480300a5d1c54048ecc89b433b3376040d3cf14ce6cb71314ab4860dc326d234a594ca4325bf3e267"}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 2.172526983s ago: executing program 2 (id=173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 1.690167338s ago: executing program 1 (id=177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x116b, &(0x7f0000000640)=ANY=[@ANYBLOB="37f39e71ee141210e68b9d29d2b96d45f093f3321f8c7fccd6efd6812febfa89632cac69a6685f543e76f8b739ca6144b8d157797c4abd0995a69abb5d34ebadfd30633d5681331bd40a1faa85347c11c158380308ff14da25f7014c4b7c8907cdd9f8480d33af71e7aad2aa0d5fc769c8a572043f5e0712843660366b2f518263628e14394264", @ANYBLOB="0f477c6b16f8b9c88e885caffb95a3aa959c98305f6417e8e8227c234cbd541e987da4ee877d57c5d647f5bbbf29cb73200ef60d85021fa522799b2c2aed449a0318bea42a62452ca0507e30825745514c72cada839cc9ae1d9bd3f12f420e225668829873fde8f8c30ad30452a4ca583cccab42c72bdb40abae1d7237d7ef6758b692d29115983f31b3b90000", @ANYRES64=r1, @ANYRES16=r0, @ANYRES16=r2, @ANYRES32=0x0], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000180)={0x4, 0x2, 'client1\x00', 0x0, "3ce55b18c1f27588", "583d57b0a57e6430d87bc0fb393b14d5e384752fed0f1c8133f3b5ccbae26cfa", 0x7, 0x8}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, 0x0, 0x50) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000140)=0xfffffffffffffffe, 0x8) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1.185180238s ago: executing program 3 (id=178): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 1.184930886s ago: executing program 3 (id=179): ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xec}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48810}, 0x40) 1.180518529s ago: executing program 0 (id=180): syz_open_dev$char_usb(0xc, 0xb4, 0x10000) 1.162469304s ago: executing program 3 (id=181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xfffffffffffffd55}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.141908402s ago: executing program 0 (id=182): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1869a600000000009e9c00", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000000)={"492ca800883e5eecfce875f0e431cd8615341299d8819fc1869283b813e100", r4}) 1.077091772s ago: executing program 0 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 1.076662678s ago: executing program 0 (id=184): r0 = socket(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0xfffffff1, @mcast2, 0x5}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x6, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=[{0xc, 0x29, 0x1003}], 0xc}}], 0x2, 0x0) 1.07218574s ago: executing program 0 (id=185): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="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", 0x3a5, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.008834177s ago: executing program 0 (id=186): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_usb_disconnect(r0) 909.16441ms ago: executing program 2 (id=188): prctl$PR_GET_SPECULATION_CTRL(0x23, 0x4, 0x7fffffffefff) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b23, 0x0) 685.915122ms ago: executing program 1 (id=190): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 518.716066ms ago: executing program 1 (id=191): ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xec}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48810}, 0x40) 512.38456ms ago: executing program 1 (id=193): sched_getaffinity(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff1559607f8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e743611aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x9, 0x1ff, 0x200000, 0x0, 0x0, 0x8000, 0x0, 0x0, r3, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0x1, 0x2000000000}]) dup3(r0, r1, 0x6700000000000000) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$AUDIT_USER(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0000000ed0313082abd7000fcdbdf2575249f0167b0b776d61febe8de680eaa25a2b3e3b4657889f5767f8446477c67780ae7de023bc80e7f6e59c114228d872e089475cc35c1624d1d3cdc90fd3d6b36269570b3cc3f0d71ab30d1dd30719f3d8d5340d9bde944249c4fe4dfa6a059fc5de6d51f9a297883cd637884c476e2159125fa6b19d48925fb1066e1ebf2d54fc53fbab1b28527695264c9955232fc47649d0051766f148fec95b11e265e2f5025736c53b3b1ebf8920a9ddafd4a5ba83514b63b4a0bb214f52fe419562b62917ddfb70f0200bb18037b3886000000"], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x24044084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000001ab40)=@newtfilter={0x68, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r8, {0xa}, {0x6, 0xffff}, {0xe, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x3c, 0x2, [@TCA_BPF_ACT={0x38, 0x1, [@m_xt={0x34, 0x11, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x68}}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="a3640600ffffffffffff040008003500000000000a0034000202020202020000ca465ca22b73f28539eedf1f08c5140fe77033d32bdfb766b8d3d1"], 0x3c}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) 440.953848ms ago: executing program 4 (id=196): r0 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 440.714464ms ago: executing program 4 (id=197): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xc}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x4, 0x7, 0x0, 0x9, 0x2, 0x1}}, {0x6, 0x2, [0x1]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 431.095767ms ago: executing program 4 (id=198): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20040000100001040000000075d16eac8a6c2730", @ANYRES32=r5, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x90, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 287.345992ms ago: executing program 3 (id=199): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002540)=[{{&(0x7f0000000140)=@generic={0x6, "e7a7997b66bbb40320011aec735bf9d4160abf9df10c525a55cb6fe53dadfc3ef7646d8d408dc581ccfc67d444aa80cebf6fd652acbc74eaebd98f26f9aee9b24feca9e51ac669080442482db247fb1c00040e3a5463875ecbbe66c76f49c5ced152bc3acade664dedd2f76b81c561532c7d24d0819bc969ab8adc6fb6ef"}, 0x80, 0x0}}], 0x1, 0x40840) 232.259134ms ago: executing program 3 (id=200): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r0}, 0x18) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0043, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48) 204.001361ms ago: executing program 4 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) 185.023691ms ago: executing program 4 (id=202): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000480)=@file={0xfd, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x4010}}], 0x2, 0x20000000) listen(r1, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) r6 = signalfd4(r0, &(0x7f0000000280)={[0xfd6d]}, 0x8, 0x40000) syz_clone3(&(0x7f00000002c0)={0x120022000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x3a}, &(0x7f0000000140)=""/106, 0x6a, &(0x7f00000001c0)=""/20, &(0x7f0000000240)=[r3, r5, 0xffffffffffffffff], 0x3, {r6}}, 0x58) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 152.212943ms ago: executing program 2 (id=203): ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xec}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48810}, 0x40) 55.707636ms ago: executing program 2 (id=204): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x101, 0x0, 0xfffffffa, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x9, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x800, 0x2, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x354, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) exit(0x7) socket$nl_generic(0x10, 0x3, 0x10) 55.349147ms ago: executing program 4 (id=205): unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xd) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) 39.642446ms ago: executing program 3 (id=206): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40682, 0x9c) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x200, @loopback, 0xffff}, 0x1c, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r5, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000004400), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x10001) 0s ago: executing program 1 (id=207): bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x5, 0x4, 0x6c03, 0xee}, 0x48) io_setup(0x20, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts. [ 23.554212][ T6537] cgroup: Unknown subsys name 'net' [ 23.633487][ T6537] cgroup: Unknown subsys name 'cpuset' [ 23.635516][ T6537] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.774520][ T6537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 24.925719][ T6554] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.926030][ T6554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 24.929586][ T6558] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 24.932214][ T6558] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.940972][ T6559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 24.942516][ T6559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.942619][ T6559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 24.942807][ T6559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 24.943727][ T6559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 24.943967][ T6559] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 24.944813][ T6559] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.944997][ T6559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 24.945293][ T6559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 24.945575][ T6559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 24.946027][ T6559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 24.946707][ T6559] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 24.947350][ T6559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 24.948040][ T6559] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 24.948890][ T6123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 24.949634][ T6123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.951021][ T6123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 24.961624][ T6561] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 24.982946][ T6558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 24.983380][ T6558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 24.983585][ T6558] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.095170][ T6550] chnl_net:caif_netlink_parms(): no params data found [ 25.129416][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 25.153681][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.155487][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.156783][ T6550] bridge_slave_0: entered allmulticast mode [ 25.158373][ T6550] bridge_slave_0: entered promiscuous mode [ 25.179982][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.180066][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.180270][ T6550] bridge_slave_1: entered allmulticast mode [ 25.180760][ T6550] bridge_slave_1: entered promiscuous mode [ 25.202429][ T6550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.206862][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.208150][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.209382][ T6555] bridge_slave_0: entered allmulticast mode [ 25.210899][ T6555] bridge_slave_0: entered promiscuous mode [ 25.212728][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.213939][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.215135][ T6555] bridge_slave_1: entered allmulticast mode [ 25.216325][ T6555] bridge_slave_1: entered promiscuous mode [ 25.219378][ T6550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.219538][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 25.238716][ T6550] team0: Port device team_slave_0 added [ 25.249186][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.251385][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 25.254537][ T6550] team0: Port device team_slave_1 added [ 25.266812][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.295107][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.295143][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.295165][ T6550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.306818][ T6555] team0: Port device team_slave_0 added [ 25.307589][ T6555] team0: Port device team_slave_1 added [ 25.311461][ T6550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.311484][ T6550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.311503][ T6550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.318629][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.318735][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.318797][ T6563] bridge_slave_0: entered allmulticast mode [ 25.319215][ T6563] bridge_slave_0: entered promiscuous mode [ 25.319974][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.319997][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.320040][ T6563] bridge_slave_1: entered allmulticast mode [ 25.320468][ T6563] bridge_slave_1: entered promiscuous mode [ 25.337679][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.337701][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.337714][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.345365][ T6550] hsr_slave_0: entered promiscuous mode [ 25.345657][ T6550] hsr_slave_1: entered promiscuous mode [ 25.352953][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 25.358373][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.358397][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.358411][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.372011][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.373390][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.377300][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.378558][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.379375][ T6557] bridge_slave_0: entered allmulticast mode [ 25.379828][ T6557] bridge_slave_0: entered promiscuous mode [ 25.380575][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.380592][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.380648][ T6557] bridge_slave_1: entered allmulticast mode [ 25.382442][ T6557] bridge_slave_1: entered promiscuous mode [ 25.410452][ T6555] hsr_slave_0: entered promiscuous mode [ 25.411457][ T6555] hsr_slave_1: entered promiscuous mode [ 25.412091][ T6555] debugfs: 'hsr0' already exists in 'hsr' [ 25.412126][ T6555] Cannot create hsr debugfs directory [ 25.416585][ T6563] team0: Port device team_slave_0 added [ 25.421824][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.426055][ T6563] team0: Port device team_slave_1 added [ 25.436541][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.457614][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.458840][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.460792][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.461408][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.461416][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.461427][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.483608][ T6557] team0: Port device team_slave_0 added [ 25.496579][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.497815][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.499139][ T6551] bridge_slave_0: entered allmulticast mode [ 25.500626][ T6551] bridge_slave_0: entered promiscuous mode [ 25.503390][ T6557] team0: Port device team_slave_1 added [ 25.507293][ T6563] hsr_slave_0: entered promiscuous mode [ 25.508709][ T6563] hsr_slave_1: entered promiscuous mode [ 25.509917][ T6563] debugfs: 'hsr0' already exists in 'hsr' [ 25.510947][ T6563] Cannot create hsr debugfs directory [ 25.517805][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.517878][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.517941][ T6551] bridge_slave_1: entered allmulticast mode [ 25.518394][ T6551] bridge_slave_1: entered promiscuous mode [ 25.539922][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.544812][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.544835][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.544855][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.557934][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.563772][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.563793][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.563819][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.579912][ T6557] hsr_slave_0: entered promiscuous mode [ 25.581278][ T6557] hsr_slave_1: entered promiscuous mode [ 25.581463][ T6557] debugfs: 'hsr0' already exists in 'hsr' [ 25.581474][ T6557] Cannot create hsr debugfs directory [ 25.587239][ T6551] team0: Port device team_slave_0 added [ 25.598919][ T6551] team0: Port device team_slave_1 added [ 25.618370][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.619547][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.621087][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.633895][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.633927][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.633945][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.641829][ T6550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.645816][ T6550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.658466][ T6550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.668926][ T6551] hsr_slave_0: entered promiscuous mode [ 25.670355][ T6551] hsr_slave_1: entered promiscuous mode [ 25.673498][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 25.674602][ T6551] Cannot create hsr debugfs directory [ 25.675660][ T6550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.724082][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.724138][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.724312][ T6550] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.724343][ T6550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.738057][ T6555] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.745717][ T6555] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.748108][ T6555] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.753094][ T6555] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.777423][ T6563] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.786478][ T6563] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.788689][ T6563] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.792963][ T6563] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.795711][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.795746][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.795825][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.795860][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.819681][ T6551] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.822218][ T6551] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.824973][ T6551] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.829312][ T6550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.836270][ T6551] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.849861][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.849906][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.849969][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.849997][ T6563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.852858][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.853833][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.857286][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.858636][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.862548][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.864350][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.883462][ T6557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.886614][ T6550] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.893535][ T6557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.896529][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.896830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.897416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.897437][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.905702][ T6557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.913104][ T6557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.937283][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.955462][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.957779][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.957829][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.961453][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.966644][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.970049][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.975071][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.990430][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.990469][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.990981][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.991003][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.991291][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.991311][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.991589][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.991609][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.000555][ T6550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.018716][ T6563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.018763][ T6563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.023219][ T939] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.023258][ T939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.057328][ T6550] veth0_vlan: entered promiscuous mode [ 26.073676][ T6550] veth1_vlan: entered promiscuous mode [ 26.080105][ T6550] veth0_macvtap: entered promiscuous mode [ 26.082760][ T6550] veth1_macvtap: entered promiscuous mode [ 26.086952][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.100485][ T6550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.110097][ T4803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.110323][ T4803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.110340][ T4803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.110353][ T4803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.136451][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.148970][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.157332][ T6563] veth0_vlan: entered promiscuous mode [ 26.175953][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.186974][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.187026][ T4818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.192575][ T4803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.192603][ T4803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.199785][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.203743][ T6563] veth1_vlan: entered promiscuous mode [ 26.206090][ T896] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.206133][ T896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.223167][ T6563] veth0_macvtap: entered promiscuous mode [ 26.228870][ T4803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.228902][ T4803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.235387][ T6563] veth1_macvtap: entered promiscuous mode [ 26.239125][ T6557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.244489][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.252689][ T6555] veth0_vlan: entered promiscuous mode [ 26.255427][ T6555] veth1_vlan: entered promiscuous mode [ 26.264923][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.265803][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.267429][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.267972][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.268010][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.268034][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.285232][ T6555] veth0_macvtap: entered promiscuous mode [ 26.306346][ T6550] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.310393][ T6555] veth1_macvtap: entered promiscuous mode [ 26.363323][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.366173][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.373323][ T939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.373349][ T939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.377258][ T939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.402623][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.402657][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.414757][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.414813][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.414841][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.432751][ T896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.432784][ T896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.444217][ T6551] veth0_vlan: entered promiscuous mode [ 26.447237][ T6551] veth1_vlan: entered promiscuous mode [ 26.676613][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.694122][ T6557] veth0_vlan: entered promiscuous mode [ 26.704946][ T6557] veth1_vlan: entered promiscuous mode [ 26.713408][ T6557] veth0_macvtap: entered promiscuous mode [ 26.714363][ T6557] veth1_macvtap: entered promiscuous mode [ 26.718405][ T4803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.718441][ T4803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.739707][ T6551] veth0_macvtap: entered promiscuous mode [ 26.747619][ T6551] veth1_macvtap: entered promiscuous mode [ 26.749069][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.782288][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.795746][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.798373][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.798605][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.798621][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.798634][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.808734][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.825102][ T4818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.826121][ T4818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.826155][ T4818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.826176][ T4818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.892598][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.892634][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.906431][ T6673] loop2: detected capacity change from 0 to 40427 [ 26.917560][ T6673] F2FS-fs (loop2): invalid crc value [ 26.926987][ T4818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.927025][ T4818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.936857][ T939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.936894][ T939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.943435][ T6671] loop0: detected capacity change from 0 to 32768 [ 26.959738][ T6673] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 26.966793][ T6673] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 26.968419][ T6671] JBD2: Ignoring recovery information on journal [ 26.978054][ T939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.978084][ T939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.981422][ T6554] Bluetooth: hci3: command tx timeout [ 26.982126][ T6558] Bluetooth: hci4: command tx timeout [ 26.982229][ T6558] Bluetooth: hci1: command tx timeout [ 26.982284][ T6558] Bluetooth: hci0: command tx timeout [ 26.996815][ T6671] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 27.043108][ T6683] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 27.145044][ T6554] Bluetooth: hci2: command tx timeout [ 27.182635][ T6671] (syz.0.1,6671,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 27.623744][ T6563] ocfs2: Unmounting device (7,0) on (node local) [ 27.628332][ T6683] loop3: detected capacity change from 0 to 32768 [ 27.630100][ T6683] ======================================================= [ 27.630100][ T6683] WARNING: The mand mount option has been deprecated and [ 27.630100][ T6683] and is ignored by this kernel. Remove the mand [ 27.630100][ T6683] option from the mount to silence this warning. [ 27.630100][ T6683] ======================================================= [ 27.690944][ T6683] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 27.698027][ T6686] loop1: detected capacity change from 0 to 32768 [ 27.699513][ T6682] loop4: detected capacity change from 0 to 32768 [ 27.699866][ T6683] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 27.734758][ T6686] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 27.741340][ T6686] JBD2: Ignoring recovery information on journal [ 27.770315][ T6686] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 27.806028][ T6682] bcachefs (loop4): starting version 1.13: inode_has_child_snapshots opts=compression=gzip [ 27.806061][ T6682] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 27.806075][ T6682] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 27.806130][ T6682] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 27.806171][ T6682] bcachefs (loop4): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 27.806171][ T6682] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 27.983991][ T6686] (syz.1.6,6686,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 27.987326][ T6657] IPVS: starting estimator thread 0... [ 28.008689][ T6682] bcachefs (loop4): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 28.013003][ T6682] bcachefs (loop4): check_topology... done [ 28.020890][ T6682] bcachefs (loop4): accounting_read... done [ 28.078757][ T6682] bcachefs (loop4): alloc_read... done [ 28.080317][ T6682] bcachefs (loop4): snapshots_read... [ 28.081749][ T6704] IPVS: using max 70 ests per chain, 168000 per kthread [ 28.098947][ T6682] done [ 28.098993][ T6682] bcachefs (loop4): check_allocations... [ 28.133417][ T6682] bcachefs (loop4): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 28.137085][ T6682] bcachefs (loop4): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 28.375151][ T6682] done [ 28.380491][ T6550] ocfs2: Unmounting device (7,1) on (node local) [ 28.388818][ T6555] syz-executor: attempt to access beyond end of device [ 28.388818][ T6555] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 28.389175][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 28.389185][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 28.389190][ T6555] Call trace: [ 28.389193][ T6555] show_stack+0x2c/0x3c (C) [ 28.389206][ T6555] __dump_stack+0x30/0x40 [ 28.389213][ T6555] dump_stack_lvl+0xd8/0x12c [ 28.389218][ T6555] dump_stack+0x1c/0x28 [ 28.389223][ T6555] f2fs_handle_critical_error+0x34c/0x4b8 [ 28.389230][ T6555] f2fs_stop_checkpoint+0x5c/0x70 [ 28.389238][ T6555] f2fs_write_end_io+0x768/0xa70 [ 28.389244][ T6555] bio_endio+0x804/0x840 [ 28.389251][ T6555] submit_bio_noacct+0x158/0x176c [ 28.389256][ T6555] submit_bio+0x3b4/0x550 [ 28.389261][ T6555] f2fs_submit_write_bio+0x13c/0x324 [ 28.389267][ T6555] __submit_merged_bio+0x254/0x704 [ 28.389272][ T6555] __submit_merged_write_cond+0x23c/0x4ac [ 28.389278][ T6555] f2fs_write_data_pages+0x1d28/0x2634 [ 28.389284][ T6555] do_writepages+0x270/0x468 [ 28.389292][ T6555] filemap_fdatawrite+0x14c/0x1f4 [ 28.389299][ T6555] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 28.389304][ T6555] f2fs_write_checkpoint+0x690/0x16a0 [ 28.389310][ T6555] kill_f2fs_super+0x21c/0x584 [ 28.389316][ T6555] deactivate_locked_super+0xc4/0x12c [ 28.389323][ T6555] deactivate_super+0xe0/0x100 [ 28.389330][ T6555] cleanup_mnt+0x31c/0x3ac [ 28.389336][ T6555] __cleanup_mnt+0x20/0x30 [ 28.389340][ T6555] task_work_run+0x1dc/0x260 [ 28.389347][ T6555] do_notify_resume+0x174/0x1f4 [ 28.389353][ T6555] el0_svc+0xb8/0x180 [ 28.389360][ T6555] el0t_64_sync_handler+0x84/0x12c [ 28.389366][ T6555] el0t_64_sync+0x198/0x19c [ 28.389373][ T6555] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 28.390590][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 28.390601][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 28.390604][ T6555] Call trace: [ 28.390607][ T6555] show_stack+0x2c/0x3c (C) [ 28.390614][ T6555] __dump_stack+0x30/0x40 [ 28.390620][ T6555] dump_stack_lvl+0xd8/0x12c [ 28.390625][ T6555] dump_stack+0x1c/0x28 [ 28.390629][ T6555] f2fs_handle_critical_error+0x34c/0x4b8 [ 28.390636][ T6555] f2fs_stop_checkpoint+0x5c/0x70 [ 28.390643][ T6555] f2fs_write_end_io+0x768/0xa70 [ 28.390649][ T6555] bio_endio+0x804/0x840 [ 28.390655][ T6555] submit_bio_noacct+0x158/0x176c [ 28.390660][ T6555] submit_bio+0x3b4/0x550 [ 28.390665][ T6555] f2fs_submit_write_bio+0x13c/0x324 [ 28.390671][ T6555] __submit_merged_bio+0x254/0x704 [ 28.390677][ T6555] __submit_merged_write_cond+0x23c/0x4ac [ 28.390682][ T6555] f2fs_write_data_pages+0x1d28/0x2634 [ 28.390693][ T6555] do_writepages+0x270/0x468 [ 28.390701][ T6555] filemap_fdatawrite+0x14c/0x1f4 [ 28.390708][ T6555] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 28.390714][ T6555] f2fs_write_checkpoint+0x690/0x16a0 [ 28.390720][ T6555] kill_f2fs_super+0x21c/0x584 [ 28.390727][ T6555] deactivate_locked_super+0xc4/0x12c [ 28.390734][ T6555] deactivate_super+0xe0/0x100 [ 28.390741][ T6555] cleanup_mnt+0x31c/0x3ac [ 28.390747][ T6555] __cleanup_mnt+0x20/0x30 [ 28.390752][ T6555] task_work_run+0x1dc/0x260 [ 28.390758][ T6555] do_notify_resume+0x174/0x1f4 [ 28.390764][ T6555] el0_svc+0xb8/0x180 [ 28.390770][ T6555] el0t_64_sync_handler+0x84/0x12c [ 28.390775][ T6555] el0t_64_sync+0x198/0x19c [ 28.392756][ T6555] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 28.423586][ T6682] bcachefs (loop4): going read-write [ 28.489604][ T6682] bcachefs (loop4): journal_replay... [ 28.530616][ T6693] loop0: detected capacity change from 0 to 32768 [ 28.539041][ T6682] done [ 28.539303][ T6682] bcachefs (loop4): check_lrus... done [ 28.539981][ T6682] bcachefs (loop4): check_backpointers_to_extents... done [ 28.544863][ T6682] bcachefs (loop4): check_extents_to_backpointers... [ 28.550598][ T6708] loop1: detected capacity change from 0 to 32768 [ 28.553320][ T6682] done [ 28.553639][ T6682] bcachefs (loop4): check_inodes... done [ 28.557881][ T6682] bcachefs (loop4): resume_logged_ops... done [ 28.559878][ T6682] bcachefs (loop4): delete_dead_inodes... done [ 28.564291][ T6682] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 28.564325][ T6682] bcachefs (loop4): check_extents_to_backpointers... [ 28.564783][ T6682] bcachefs (loop4): scanning for missing backpointers in 1/512 buckets [ 28.575696][ T6682] done [ 28.576881][ T6682] bcachefs (loop4): check_inodes... done [ 28.577349][ T6682] bcachefs (loop4): resume_logged_ops... done [ 28.577584][ T6682] bcachefs (loop4): delete_dead_inodes... done [ 28.578666][ T6682] bcachefs (loop4): done starting filesystem [ 28.659652][ T6693] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=compression=gzip [ 28.659689][ T6693] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 28.663956][ T6693] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 28.664032][ T6693] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 28.664065][ T6693] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 28.664065][ T6693] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 28.672609][ T6708] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow [ 28.674409][ T6693] bcachefs (loop0): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 28.674535][ T6693] bcachefs (loop0): check_topology... done [ 28.675884][ T6693] bcachefs (loop0): accounting_read... [ 28.678303][ T6708] allowing incompatible features above 0.0: (unknown version) [ 28.680479][ T6708] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 28.685863][ T6708] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 28.687270][ T6708] bcachefs (loop1): initializing new filesystem [ 28.689931][ T6708] bcachefs (loop1): going read-write [ 28.693769][ T6693] done [ 28.693810][ T6693] bcachefs (loop0): alloc_read... done [ 28.694190][ T6693] bcachefs (loop0): snapshots_read... done [ 28.694592][ T6693] bcachefs (loop0): check_allocations... [ 28.699699][ T6693] bcachefs (loop0): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 28.704094][ T6693] bcachefs (loop0): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 28.717363][ T6693] done [ 28.722786][ T6693] bcachefs (loop0): going read-write [ 28.744964][ T6693] bcachefs (loop0): journal_replay... done [ 28.754563][ T6693] bcachefs (loop0): check_lrus... done [ 28.754910][ T6693] bcachefs (loop0): check_backpointers_to_extents... done [ 28.756279][ T6693] bcachefs (loop0): check_extents_to_backpointers... done [ 28.758081][ T6693] bcachefs (loop0): check_inodes... done [ 28.759165][ T6693] bcachefs (loop0): resume_logged_ops... done [ 28.759925][ T6693] bcachefs (loop0): delete_dead_inodes... done [ 28.763406][ T6693] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 28.763432][ T6693] bcachefs (loop0): check_extents_to_backpointers... [ 28.764738][ T6693] bcachefs (loop0): scanning for missing backpointers in 1/512 buckets [ 28.765999][ T6693] done [ 28.766739][ T6693] bcachefs (loop0): check_inodes... done [ 28.767226][ T6693] bcachefs (loop0): resume_logged_ops... done [ 28.767890][ T6693] bcachefs (loop0): delete_dead_inodes... done [ 28.769271][ T6693] bcachefs (loop0): done starting filesystem [ 28.772494][ T6708] bcachefs (loop1): marking superblocks [ 28.783997][ T6708] bcachefs (loop1): initializing freespace [ 28.790501][ T6708] bcachefs (loop1): done initializing freespace [ 28.792465][ T6708] bcachefs (loop1): reading snapshots table [ 28.792500][ T6708] bcachefs (loop1): reading snapshots done [ 28.799965][ T6708] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 28.800227][ T6708] bcachefs (loop1): done starting filesystem [ 28.828434][ T6729] loop2: detected capacity change from 0 to 32768 [ 28.856721][ T6729] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 28.924058][ T6551] bcachefs (loop4): shutting down [ 28.924105][ T6551] bcachefs (loop4): going read-only [ 28.924194][ T6551] bcachefs (loop4): finished waiting for writes to stop [ 28.928377][ T6729] JBD2: Ignoring recovery information on journal [ 28.964128][ T6551] bcachefs (loop4): flushing journal and stopping allocators, journal seq 19 [ 29.369005][ T6558] Bluetooth: hci4: command tx timeout [ 29.369180][ T6558] Bluetooth: hci3: command tx timeout [ 29.369314][ T6558] Bluetooth: hci2: command tx timeout [ 29.370090][ T6561] Bluetooth: hci1: command tx timeout [ 29.373622][ T6554] Bluetooth: hci0: command tx timeout [ 29.543917][ T6551] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 19 [ 29.546733][ T6551] bcachefs (loop4): clean shutdown complete, journal seq 20 [ 29.547206][ T6551] bcachefs (loop4): marking filesystem clean [ 29.554092][ T6729] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 29.562034][ T6550] bcachefs (loop1): shutting down [ 29.563517][ T6563] bcachefs (loop0): shutting down [ 29.564567][ T6550] bcachefs (loop1): going read-only [ 29.565575][ T6563] bcachefs (loop0): going read-only [ 29.566629][ T6550] bcachefs (loop1): finished waiting for writes to stop [ 29.567928][ T6563] bcachefs (loop0): finished waiting for writes to stop [ 29.574829][ T6551] bcachefs (loop4): shutdown complete [ 29.604199][ T6563] bcachefs (loop0): flushing journal and stopping allocators, journal seq 18 [ 29.605751][ T6563] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 29.607816][ T6550] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2 [ 29.613072][ T6563] bcachefs (loop0): clean shutdown complete, journal seq 19 [ 29.614754][ T6563] bcachefs (loop0): marking filesystem clean [ 29.629077][ T6563] bcachefs (loop0): shutdown complete [ 29.650156][ T6550] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 29.654349][ T6550] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 29.654793][ T6550] bcachefs (loop1): marking filesystem clean [ 29.675542][ T6550] bcachefs (loop1): shutdown complete [ 29.720006][ T6729] (syz.2.9,6729,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 29.944712][ T6743] loop4: detected capacity change from 0 to 32768 [ 30.073086][ T6743] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 30.073900][ T6743] JBD2: Ignoring recovery information on journal [ 30.106955][ T6743] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 30.115107][ T6555] ocfs2: Unmounting device (7,2) on (node local) [ 30.127587][ T6557] ocfs2: Unmounting device (7,3) on (node local) [ 30.266526][ T6743] (syz.4.10,6743,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 30.608864][ T6751] loop3: detected capacity change from 0 to 32768 [ 30.659422][ T6751] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 30.671707][ T6749] loop2: detected capacity change from 0 to 32768 [ 30.672820][ T6551] ocfs2: Unmounting device (7,4) on (node local) [ 30.712234][ T6751] XFS (loop3): Ending clean mount [ 30.714321][ T6749] JBD2: Ignoring recovery information on journal [ 30.749762][ T6749] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 30.922885][ T6766] loop4: detected capacity change from 0 to 32768 [ 30.931085][ T6766] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 30.933614][ T6766] JBD2: Ignoring recovery information on journal [ 31.119869][ T6777] (syz.2.13,6777,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 31.496668][ T6554] Bluetooth: hci0: command tx timeout [ 31.496732][ T6554] Bluetooth: hci1: command tx timeout [ 31.496766][ T6554] Bluetooth: hci2: command tx timeout [ 31.496797][ T6554] Bluetooth: hci3: command tx timeout [ 31.496822][ T6554] Bluetooth: hci4: command tx timeout [ 31.525957][ T6769] loop0: detected capacity change from 0 to 32768 [ 31.547423][ T6769] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 31.547902][ T6766] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 31.554704][ T6555] ocfs2: Unmounting device (7,2) on (node local) [ 31.562155][ T6769] JBD2: Ignoring recovery information on journal [ 31.696564][ T6769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 31.709680][ T6766] (syz.4.15,6766,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 31.727863][ T6557] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 32.054577][ T6769] (syz.0.16,6769,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 32.064616][ T6551] ocfs2: Unmounting device (7,4) on (node local) [ 32.355280][ T6563] ocfs2: Unmounting device (7,0) on (node local) [ 32.417962][ T6784] loop2: detected capacity change from 0 to 32768 [ 32.468571][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468614][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468640][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468655][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468669][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468681][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468692][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468703][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468714][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.468724][ T6790] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 32.607417][ T6794] loop0: detected capacity change from 0 to 32768 [ 32.607876][ T6784] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=compression=lz4 [ 32.607895][ T6784] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 32.607925][ T6784] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 32.607972][ T6784] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 32.608003][ T6784] bcachefs (loop2): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 32.608003][ T6784] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 32.627323][ T6784] bcachefs (loop2): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 32.627434][ T6784] bcachefs (loop2): check_topology... done [ 32.637045][ T6784] bcachefs (loop2): accounting_read... [ 32.666402][ T6792] loop4: detected capacity change from 0 to 32768 [ 32.689518][ T6784] done [ 32.689549][ T6784] bcachefs (loop2): alloc_read... done [ 32.692959][ T6784] bcachefs (loop2): snapshots_read... done [ 32.694519][ T6784] bcachefs (loop2): check_allocations... [ 32.700615][ T6794] JBD2: Ignoring recovery information on journal [ 32.708411][ T6784] bcachefs (loop2): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 32.709543][ T6792] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 32.713374][ T6784] bcachefs (loop2): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 32.720120][ T6792] JBD2: Ignoring recovery information on journal [ 32.728597][ T6784] done [ 32.760984][ T6794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 33.582934][ T6566] Bluetooth: hci4: command tx timeout [ 33.582976][ T6566] Bluetooth: hci3: command tx timeout [ 33.582998][ T6566] Bluetooth: hci2: command tx timeout [ 33.583016][ T6566] Bluetooth: hci1: command tx timeout [ 33.583033][ T6566] Bluetooth: hci0: command tx timeout [ 33.734325][ T6784] bcachefs (loop2): going read-write [ 33.748498][ T6792] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 33.754978][ T6794] (syz.0.20,6794,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 33.759105][ T6784] bcachefs (loop2): journal_replay... [ 33.858416][ T6809] loop1: detected capacity change from 0 to 32768 [ 33.863673][ T6809] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 33.866653][ T6809] JBD2: Ignoring recovery information on journal [ 34.070929][ T6792] (syz.4.19,6792,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 34.144674][ T6817] loop3: detected capacity change from 0 to 32768 [ 34.148047][ T6817] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 34.149909][ T6817] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 34.164424][ T6784] done [ 34.166257][ T6784] bcachefs (loop2): check_lrus... done [ 34.168622][ T6784] bcachefs (loop2): check_backpointers_to_extents... [ 34.169010][ T6563] ocfs2: Unmounting device (7,0) on (node local) [ 34.176920][ T6784] done [ 34.178110][ T6784] bcachefs (loop2): check_extents_to_backpointers... done [ 34.179278][ T6784] bcachefs (loop2): check_inodes... done [ 34.179891][ T6784] bcachefs (loop2): resume_logged_ops... done [ 34.180205][ T6784] bcachefs (loop2): delete_dead_inodes... done [ 34.183991][ T6784] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 34.184002][ T6784] bcachefs (loop2): check_extents_to_backpointers... [ 34.184441][ T6784] bcachefs (loop2): scanning for missing backpointers in 1/512 buckets [ 34.185540][ T6784] done [ 34.234515][ T6817] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 34.434076][ T6784] bcachefs (loop2): check_inodes... done [ 34.444539][ T6784] bcachefs (loop2): resume_logged_ops... done [ 34.451805][ T6784] bcachefs (loop2): delete_dead_inodes... [ 34.452228][ T6551] ocfs2: Unmounting device (7,4) on (node local) [ 34.452492][ T6784] done [ 34.453040][ T6784] bcachefs (loop2): done starting filesystem [ 34.481130][ T6809] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 34.827016][ T6831] loop4: detected capacity change from 0 to 32768 [ 34.839804][ T6809] (syz.1.12,6809,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 34.872090][ T6831] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 35.197521][ T6831] XFS (loop4): Ending clean mount [ 35.301498][ T6550] ocfs2: Unmounting device (7,1) on (node local) [ 35.380177][ T6846] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 35.380443][ T6846] netlink: 36 bytes leftover after parsing attributes in process `syz.4.25'. [ 35.669610][ T6551] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 35.673404][ T6555] bcachefs (loop2): shutting down [ 35.673434][ T6555] bcachefs (loop2): going read-only [ 35.683895][ T6555] bcachefs (loop2): finished waiting for writes to stop [ 35.707360][ T6555] bcachefs (loop2): flushing journal and stopping allocators, journal seq 19 [ 35.718358][ T6555] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 20 [ 35.727941][ T6555] bcachefs (loop2): clean shutdown complete, journal seq 21 [ 35.728354][ T6555] bcachefs (loop2): marking filesystem clean [ 35.757860][ T6555] bcachefs (loop2): shutdown complete [ 35.785910][ T6849] loop0: detected capacity change from 0 to 32768 [ 35.840795][ T6852] loop4: detected capacity change from 0 to 32768 [ 35.867405][ T6852] JBD2: Ignoring recovery information on journal [ 35.882903][ T6852] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 35.915982][ T6557] ocfs2: Unmounting device (7,3) on (node local) [ 36.024871][ T6852] (syz.4.28,6852,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 36.117592][ T6860] loop3: detected capacity change from 0 to 32768 [ 36.584382][ T6551] ocfs2: Unmounting device (7,4) on (node local) [ 36.623472][ T6868] loop1: detected capacity change from 0 to 32768 [ 36.696196][ T6860] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 36.696228][ T6860] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 36.696257][ T6860] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 36.696309][ T6860] bcachefs (loop3): recovering from clean shutdown, journal seq 8 [ 36.696335][ T6860] bcachefs (loop3): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 36.696335][ T6860] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 36.717222][ T6849] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 36.717252][ T6849] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 36.717276][ T6849] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 36.717321][ T6849] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 36.717351][ T6849] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 36.717351][ T6849] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 36.727749][ T6868] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 36.727757][ T6868] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 36.727767][ T6868] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 36.727807][ T6868] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 36.727830][ T6868] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 36.727830][ T6868] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 36.734449][ T6860] bcachefs (loop3): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 36.734563][ T6860] bcachefs (loop3): check_topology... done [ 36.739058][ T6860] bcachefs (loop3): accounting_read... [ 36.745956][ T6849] bcachefs (loop0): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 36.746083][ T6849] bcachefs (loop0): check_topology... done [ 36.746433][ T6849] bcachefs (loop0): accounting_read... [ 36.758901][ T6870] loop4: detected capacity change from 0 to 32768 [ 36.763771][ T6860] done [ 36.763795][ T6860] bcachefs (loop3): alloc_read... done [ 36.764477][ T6860] bcachefs (loop3): snapshots_read... done [ 36.765022][ T6860] bcachefs (loop3): check_allocations... [ 36.767774][ T6849] done [ 36.767794][ T6849] bcachefs (loop0): alloc_read... done [ 36.768084][ T6849] bcachefs (loop0): snapshots_read... done [ 36.770253][ T6849] bcachefs (loop0): check_allocations... [ 36.772463][ T6849] bcachefs (loop0): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 36.772508][ T6849] bcachefs (loop0): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 36.776196][ T6860] bcachefs (loop3): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 36.776237][ T6860] bcachefs (loop3): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 36.782967][ T6868] bcachefs (loop1): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 36.783111][ T6868] bcachefs (loop1): check_topology... [ 36.787892][ T6870] JBD2: Ignoring recovery information on journal [ 36.793962][ T6868] done [ 36.793987][ T6868] bcachefs (loop1): accounting_read... [ 36.794479][ T6860] done [ 36.795496][ T6849] done [ 36.809177][ T6868] done [ 36.809210][ T6868] bcachefs (loop1): alloc_read... done [ 36.809525][ T6868] bcachefs (loop1): snapshots_read... done [ 36.812979][ T6868] bcachefs (loop1): check_allocations... [ 36.814953][ T6868] bcachefs (loop1): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 36.815000][ T6868] bcachefs (loop1): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 36.860107][ T6868] done [ 36.874630][ T6849] bcachefs (loop0): going read-write [ 36.875035][ T6860] bcachefs (loop3): going read-write [ 36.876310][ T6870] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 36.884034][ T6868] bcachefs (loop1): going read-write [ 36.896008][ T6849] bcachefs (loop0): journal_replay... [ 36.897890][ T6868] bcachefs (loop1): journal_replay... [ 36.901108][ T6860] bcachefs (loop3): journal_replay... [ 37.071309][ T6870] (syz.4.33,6870,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 37.287935][ T6860] done [ 37.288360][ T6860] bcachefs (loop3): check_lrus... done [ 37.288720][ T6860] bcachefs (loop3): check_backpointers_to_extents... done [ 37.290471][ T6860] bcachefs (loop3): check_extents_to_backpointers... done [ 37.297361][ T6868] done [ 37.298260][ T6868] bcachefs (loop1): check_lrus... done [ 37.299387][ T6868] bcachefs (loop1): check_backpointers_to_extents... done [ 37.302529][ T6868] bcachefs (loop1): check_extents_to_backpointers... [ 37.303266][ T6860] bcachefs (loop3): check_inodes... [ 37.305695][ T6868] done [ 37.305871][ T6849] done [ 37.307780][ T6868] bcachefs (loop1): check_inodes... [ 37.308527][ T6849] bcachefs (loop0): check_lrus... [ 37.308866][ T6860] done [ 37.308903][ T6860] bcachefs (loop3): resume_logged_ops... [ 37.310521][ T6849] done [ 37.310532][ T6849] bcachefs (loop0): check_backpointers_to_extents... [ 37.311515][ T6868] done [ 37.311542][ T6868] bcachefs (loop1): resume_logged_ops... [ 37.311932][ T6860] done [ 37.311950][ T6860] bcachefs (loop3): delete_dead_inodes... done [ 37.314862][ T6849] done [ 37.315420][ T6849] bcachefs (loop0): check_extents_to_backpointers... [ 37.317077][ T6868] done [ 37.317123][ T6868] bcachefs (loop1): delete_dead_inodes... [ 37.318976][ T6860] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 37.319000][ T6860] bcachefs (loop3): check_extents_to_backpointers... [ 37.319454][ T6860] bcachefs (loop3): scanning for missing backpointers in 1/512 buckets [ 37.320441][ T6868] done [ 37.321251][ T6849] done [ 37.323256][ T6868] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 37.323266][ T6868] bcachefs (loop1): check_extents_to_backpointers... [ 37.323904][ T6860] done [ 37.324218][ T6849] bcachefs (loop0): check_inodes... [ 37.324706][ T6868] bcachefs (loop1): scanning for missing backpointers in 1/512 buckets [ 37.325502][ T6860] bcachefs (loop3): check_inodes... [ 37.326312][ T6868] done [ 37.326656][ T6849] done [ 37.326690][ T6849] bcachefs (loop0): resume_logged_ops... [ 37.328166][ T6860] done [ 37.328172][ T6860] bcachefs (loop3): resume_logged_ops... [ 37.328332][ T6868] bcachefs (loop1): check_inodes... [ 37.328771][ T6849] done [ 37.328788][ T6849] bcachefs (loop0): delete_dead_inodes... [ 37.329788][ T6860] done [ 37.329804][ T6860] bcachefs (loop3): delete_dead_inodes... [ 37.330253][ T6868] done [ 37.330265][ T6868] bcachefs (loop1): resume_logged_ops... [ 37.330474][ T6849] done [ 37.532805][ T6868] done [ 37.532847][ T6868] bcachefs (loop1): delete_dead_inodes... [ 37.535697][ T6860] done [ 37.539153][ T6868] done [ 37.545297][ T6849] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 37.547053][ T6849] bcachefs (loop0): check_extents_to_backpointers... [ 37.547746][ T6849] bcachefs (loop0): scanning for missing backpointers in 1/512 buckets [ 37.553040][ T6860] bcachefs (loop3): done starting filesystem [ 37.558095][ T6868] bcachefs (loop1): done starting filesystem [ 37.564102][ T6849] done [ 37.567127][ T6849] bcachefs (loop0): check_inodes... done [ 37.576004][ T6849] bcachefs (loop0): resume_logged_ops... done [ 37.579631][ T6849] bcachefs (loop0): delete_dead_inodes... done [ 37.586648][ T6849] bcachefs (loop0): done starting filesystem [ 38.612296][ T6551] ocfs2: Unmounting device (7,4) on (node local) [ 38.950287][ T6550] bcachefs (loop1): shutting down [ 38.953297][ T6550] bcachefs (loop1): going read-only [ 38.953360][ T6550] bcachefs (loop1): finished waiting for writes to stop [ 39.022286][ T6550] bcachefs (loop1): flushing journal and stopping allocators, journal seq 18 [ 39.024441][ T6550] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 18 [ 39.054976][ T6550] bcachefs (loop1): clean shutdown complete, journal seq 19 [ 39.055403][ T6550] bcachefs (loop1): marking filesystem clean [ 39.059264][ T6563] bcachefs (loop0): shutting down [ 39.059288][ T6563] bcachefs (loop0): going read-only [ 39.059314][ T6563] bcachefs (loop0): finished waiting for writes to stop [ 39.062503][ T6557] bcachefs (loop3): shutting down [ 39.062530][ T6557] bcachefs (loop3): going read-only [ 39.062549][ T6557] bcachefs (loop3): finished waiting for writes to stop [ 39.161587][ T6557] bcachefs (loop3): flushing journal and stopping allocators, journal seq 18 [ 39.162450][ T6557] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 18 [ 39.356867][ T6557] bcachefs (loop3): clean shutdown complete, journal seq 19 [ 39.363715][ T6563] bcachefs (loop0): flushing journal and stopping allocators, journal seq 18 [ 39.366258][ T6563] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 39.369689][ T6557] bcachefs (loop3): marking filesystem clean [ 39.378327][ T6563] bcachefs (loop0): clean shutdown complete, journal seq 19 [ 39.551603][ T6563] bcachefs (loop0): marking filesystem clean [ 39.838022][ T6550] bcachefs (loop1): shutdown complete [ 39.858551][ T6563] bcachefs (loop0): shutdown complete [ 39.867968][ T6557] bcachefs (loop3): shutdown complete [ 40.094321][ T6934] loop2: detected capacity change from 0 to 32768 [ 40.107328][ T6934] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 40.113523][ T6934] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 40.427978][ T6943] loop0: detected capacity change from 0 to 32768 [ 40.511726][ T6943] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 40.545354][ T6943] XFS (loop0): Ending clean mount [ 40.760502][ T6965] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 40.760830][ T6965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.38'. [ 41.539509][ T6563] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 41.567184][ T6953] loop4: detected capacity change from 0 to 32768 [ 41.568864][ T6953] btrfs: Unknown parameter 'audit' [ 41.751475][ T6555] ocfs2: Unmounting device (7,2) on (node local) [ 41.833002][ T6967] loop4: detected capacity change from 0 to 32768 [ 41.866100][ T6967] JBD2: Ignoring recovery information on journal [ 41.914987][ T6967] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 41.922359][ T6969] loop1: detected capacity change from 0 to 32768 [ 41.948789][ T6980] loop2: detected capacity change from 0 to 4096 [ 42.040291][ T6967] (syz.4.45,6967,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 42.510333][ T6969] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 42.510366][ T6969] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 42.540253][ T6969] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 42.540662][ T6969] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 42.541039][ T6969] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 42.541039][ T6969] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 42.546793][ T6969] bcachefs (loop1): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 42.546924][ T6969] bcachefs (loop1): check_topology... done [ 42.547739][ T6969] bcachefs (loop1): accounting_read... [ 42.654054][ T6551] ocfs2: Unmounting device (7,4) on (node local) [ 42.668165][ T6969] done [ 42.668204][ T6969] bcachefs (loop1): alloc_read... done [ 42.670518][ T6969] bcachefs (loop1): snapshots_read... done [ 42.688973][ T6969] bcachefs (loop1): check_allocations... [ 42.698833][ T6969] bcachefs (loop1): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 42.704229][ T6969] bcachefs (loop1): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 42.706179][ T6995] loop0: detected capacity change from 0 to 32768 [ 42.716019][ T6969] done [ 42.721328][ T6969] bcachefs (loop1): going read-write [ 42.731076][ T6995] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 42.736059][ T6995] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 42.746496][ T6969] bcachefs (loop1): journal_replay... done [ 42.769267][ T6969] bcachefs (loop1): check_lrus... done [ 42.769914][ T6969] bcachefs (loop1): check_backpointers_to_extents... done [ 42.776213][ T6969] bcachefs (loop1): check_extents_to_backpointers... done [ 42.780083][ T6969] bcachefs (loop1): check_inodes... done [ 42.782406][ T6969] bcachefs (loop1): resume_logged_ops... done [ 42.784500][ T6969] bcachefs (loop1): delete_dead_inodes... done [ 42.801461][ T6969] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 42.801494][ T6969] bcachefs (loop1): check_extents_to_backpointers... [ 42.803749][ T6969] bcachefs (loop1): scanning for missing backpointers in 1/512 buckets [ 42.808859][ T6969] done [ 42.815331][ T6969] bcachefs (loop1): check_inodes... done [ 42.821128][ T6969] bcachefs (loop1): resume_logged_ops... done [ 42.831103][ T6969] bcachefs (loop1): delete_dead_inodes... done [ 42.867261][ T6969] bcachefs (loop1): done starting filesystem [ 42.911920][ T7002] loop3: detected capacity change from 0 to 32768 [ 42.928795][ T7002] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 42.930372][ T7002] JBD2: Ignoring recovery information on journal [ 42.963058][ T7002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 43.052765][ T7009] loop4: detected capacity change from 0 to 32768 [ 43.126831][ T7002] (syz.3.39,7002,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 43.165774][ T7009] bcachefs (loop4): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 43.167761][ T7009] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 43.170383][ T7009] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 43.173121][ T7009] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 43.174745][ T7009] bcachefs (loop4): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 43.174745][ T7009] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 43.188396][ T7009] bcachefs (loop4): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 43.188707][ T7009] bcachefs (loop4): check_topology... done [ 43.189145][ T7009] bcachefs (loop4): accounting_read... done [ 43.189428][ T7009] bcachefs (loop4): alloc_read... done [ 43.189837][ T7009] bcachefs (loop4): snapshots_read... done [ 43.190142][ T7009] bcachefs (loop4): check_allocations... [ 43.194300][ T7009] bcachefs (loop4): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 43.194340][ T7009] bcachefs (loop4): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 43.197084][ T7009] done [ 43.199519][ T7009] bcachefs (loop4): going read-write [ 43.205617][ T7009] bcachefs (loop4): journal_replay... done [ 43.222225][ T7009] bcachefs (loop4): check_lrus... done [ 43.222734][ T7009] bcachefs (loop4): check_backpointers_to_extents... done [ 43.227535][ T6550] bcachefs (loop1): shutting down [ 43.227542][ T6550] bcachefs (loop1): going read-only [ 43.227553][ T6550] bcachefs (loop1): finished waiting for writes to stop [ 43.232129][ T7009] bcachefs (loop4): check_extents_to_backpointers... done [ 43.235052][ T7009] bcachefs (loop4): check_inodes... done [ 43.235801][ T7009] bcachefs (loop4): resume_logged_ops... done [ 43.237077][ T7009] bcachefs (loop4): delete_dead_inodes... done [ 43.241398][ T7009] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 43.241422][ T7009] bcachefs (loop4): check_extents_to_backpointers... [ 43.242098][ T7009] bcachefs (loop4): scanning for missing backpointers in 1/512 buckets [ 43.481811][ T6550] bcachefs (loop1): flushing journal and stopping allocators, journal seq 18 [ 43.481905][ T6550] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 18 [ 43.483401][ T7009] done [ 43.486858][ T6550] bcachefs (loop1): clean shutdown complete, journal seq 19 [ 43.487252][ T6550] bcachefs (loop1): marking filesystem clean [ 43.490205][ T7009] bcachefs (loop4): check_inodes... done [ 43.491824][ T7009] bcachefs (loop4): resume_logged_ops... done [ 43.538397][ T7009] bcachefs (loop4): delete_dead_inodes... [ 43.542085][ T6550] bcachefs (loop1): shutdown complete [ 43.544231][ T7009] done [ 43.552407][ T7009] bcachefs (loop4): done starting filesystem [ 43.558183][ T6557] ocfs2: Unmounting device (7,3) on (node local) [ 43.672921][ T7028] loop2: detected capacity change from 0 to 32768 [ 44.014923][ T7028] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=compression=lz4 [ 44.014961][ T7028] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 44.018880][ T7028] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 44.018940][ T7028] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 44.018971][ T7028] bcachefs (loop2): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 44.018971][ T7028] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 44.054023][ T7028] bcachefs (loop2): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 44.054159][ T7028] bcachefs (loop2): check_topology... done [ 44.054915][ T7028] bcachefs (loop2): accounting_read... [ 44.079821][ T7032] loop1: detected capacity change from 0 to 32768 [ 44.084891][ T7028] done [ 44.084910][ T7028] bcachefs (loop2): alloc_read... done [ 44.086327][ T7028] bcachefs (loop2): snapshots_read... done [ 44.086723][ T7028] bcachefs (loop2): check_allocations... [ 44.088381][ T6551] bcachefs (loop4): shutting down [ 44.088398][ T6551] bcachefs (loop4): going read-only [ 44.088417][ T6551] bcachefs (loop4): finished waiting for writes to stop [ 44.088617][ T7028] bcachefs (loop2): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 44.088674][ T7028] bcachefs (loop2): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 44.100656][ T7028] done [ 44.103884][ T7028] bcachefs (loop2): going read-write [ 44.107184][ T7028] bcachefs (loop2): journal_replay... [ 44.122419][ T6551] bcachefs (loop4): flushing journal and stopping allocators, journal seq 18 [ 44.122525][ T6551] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 18 [ 44.128480][ T6551] bcachefs (loop4): clean shutdown complete, journal seq 19 [ 44.128866][ T6551] bcachefs (loop4): marking filesystem clean [ 44.134751][ T7028] done [ 44.136453][ T7028] bcachefs (loop2): check_lrus... done [ 44.138299][ T7028] bcachefs (loop2): check_backpointers_to_extents... done [ 44.144160][ T7028] bcachefs (loop2): check_extents_to_backpointers... done [ 44.147654][ T7028] bcachefs (loop2): check_inodes... [ 44.148384][ T6551] bcachefs (loop4): shutdown complete [ 44.169866][ T7028] done [ 44.169900][ T7028] bcachefs (loop2): resume_logged_ops... done [ 44.171475][ T7028] bcachefs (loop2): delete_dead_inodes... [ 44.176874][ T7032] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=compression=zstd [ 44.179898][ T7028] done [ 44.194045][ T7028] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 44.194081][ T7028] bcachefs (loop2): check_extents_to_backpointers... [ 44.194570][ T7028] bcachefs (loop2): scanning for missing backpointers in 1/512 buckets [ 44.199609][ T7032] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 44.199673][ T7032] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 44.199774][ T7032] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 44.199818][ T7032] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 44.199818][ T7032] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 44.204860][ T7043] loop3: detected capacity change from 0 to 32768 [ 44.213061][ T7043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.55 (7043) [ 44.218674][ T7028] done [ 44.223821][ T7028] bcachefs (loop2): check_inodes... done [ 44.225082][ T7028] bcachefs (loop2): resume_logged_ops... done [ 44.227738][ T7028] bcachefs (loop2): delete_dead_inodes... done [ 44.232507][ T7028] bcachefs (loop2): done starting filesystem [ 44.233802][ T7032] bcachefs (loop1): error reading btree root btree=accounting level=0: btree_node_read_error, fixing [ 44.233913][ T7032] bcachefs (loop1): check_topology... done [ 44.235490][ T7032] bcachefs (loop1): accounting_read... done [ 44.252274][ T7032] bcachefs (loop1): alloc_read... done [ 44.252549][ T7032] bcachefs (loop1): snapshots_read... done [ 44.252854][ T7032] bcachefs (loop1): check_allocations... [ 44.254722][ T7032] bcachefs (loop1): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 44.254756][ T7032] bcachefs (loop1): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing [ 44.257496][ T7043] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.257558][ T7043] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 44.257582][ T7043] BTRFS info (device loop3): using free-space-tree [ 44.276758][ T7032] done [ 44.279083][ T7032] bcachefs (loop1): going read-write [ 44.284394][ T6563] ocfs2: Unmounting device (7,0) on (node local) [ 44.304947][ T7032] bcachefs (loop1): journal_replay... done [ 44.318261][ T7032] bcachefs (loop1): check_lrus... done [ 44.318906][ T7032] bcachefs (loop1): check_backpointers_to_extents... done [ 44.324118][ T7032] bcachefs (loop1): check_extents_to_backpointers... done [ 44.326812][ T7032] bcachefs (loop1): check_inodes... done [ 44.327587][ T7032] bcachefs (loop1): resume_logged_ops... done [ 44.328922][ T7032] bcachefs (loop1): delete_dead_inodes... done [ 44.336512][ T7032] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 44.338132][ T7032] bcachefs (loop1): check_extents_to_backpointers... [ 44.338654][ T7032] bcachefs (loop1): scanning for missing backpointers in 1/512 buckets [ 44.346747][ T7032] done [ 44.354518][ T7032] bcachefs (loop1): check_inodes... done [ 44.361738][ T7032] bcachefs (loop1): resume_logged_ops... done [ 44.363482][ T7032] bcachefs (loop1): delete_dead_inodes... done [ 44.460519][ T7032] bcachefs (loop1): done starting filesystem [ 44.988887][ T12] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 44.994767][ T6550] bcachefs (loop1): shutting down [ 44.994793][ T6550] bcachefs (loop1): going read-only [ 44.998283][ T6550] bcachefs (loop1): finished waiting for writes to stop [ 45.190980][ T6550] bcachefs (loop1): flushing journal and stopping allocators, journal seq 18 [ 45.191103][ T6550] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 18 [ 45.200603][ T6550] bcachefs (loop1): clean shutdown complete, journal seq 19 [ 45.201075][ T6550] bcachefs (loop1): marking filesystem clean [ 45.240568][ T6555] bcachefs (loop2): shutting down [ 45.240596][ T6555] bcachefs (loop2): going read-only [ 45.251152][ T6555] bcachefs (loop2): finished waiting for writes to stop [ 45.257914][ T6557] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 45.275473][ T6555] bcachefs (loop2): flushing journal and stopping allocators, journal seq 19 [ 45.285738][ T6555] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 20 [ 45.287953][ T6555] bcachefs (loop2): clean shutdown complete, journal seq 21 [ 45.288356][ T6555] bcachefs (loop2): marking filesystem clean [ 45.294306][ T6550] bcachefs (loop1): shutdown complete [ 45.347750][ T6555] bcachefs (loop2): shutdown complete [ 45.351369][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.351637][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.400102][ T31] audit: type=1326 audit(45.360:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.405040][ T31] audit: type=1326 audit(45.370:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.405069][ T31] audit: type=1326 audit(45.370:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.405097][ T31] audit: type=1326 audit(45.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.405116][ T31] audit: type=1326 audit(45.370:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.419358][ T31] audit: type=1326 audit(45.380:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.419390][ T31] audit: type=1326 audit(45.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.426580][ T31] audit: type=1326 audit(45.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.426616][ T31] audit: type=1326 audit(45.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.434371][ T31] audit: type=1326 audit(45.400:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7098 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff8ef5c0a8 code=0x7ffc0000 [ 45.473486][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 45.916305][ T7123] input: syz0 as /devices/virtual/input/input2 [ 46.020832][ T6561] Bluetooth: hci4: command 0x0405 tx timeout [ 46.149388][ T7134] netlink: 'syz.4.77': attribute type 4 has an invalid length. [ 47.159259][ T7162] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.314474][ T7151] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 47.491353][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.492082][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.542015][ T6566] Bluetooth: hci5: command 0x1003 tx timeout [ 47.542732][ T6554] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 47.670971][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 47.837263][ T7197] macvlan2: entered allmulticast mode [ 47.837293][ T7197] veth1_vlan: entered allmulticast mode [ 47.838272][ T7197] veth1_vlan: left allmulticast mode [ 47.841410][ T7205] Zero length message leads to an empty skb [ 48.175752][ T7216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 48.175774][ T7216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 48.186728][ T7216] vhci_hcd vhci_hcd.0: Device attached [ 48.304554][ T7223] usb usb8: usbfs: process 7223 (syz.3.99) did not claim interface 0 before use [ 48.565305][ T26] usb 3-1: SetAddress Request (2) to port 0 [ 48.565399][ T26] usb 3-1: new SuperSpeed USB device number 2 using vhci_hcd [ 48.618820][ T7230] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 48.683479][ T7233] gretap1: entered promiscuous mode [ 48.688073][ T7234] netlink: 44 bytes leftover after parsing attributes in process `syz.3.103'. [ 48.710506][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.710863][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.738455][ T7230] macvlan2: entered promiscuous mode [ 48.739729][ T7230] macvlan2: entered allmulticast mode [ 48.757845][ T7218] vhci_hcd: connection reset by peer [ 48.761602][ T4818] vhci_hcd: stop threads [ 48.761803][ T4818] vhci_hcd: release socket [ 48.762142][ T4818] vhci_hcd: disconnect device [ 49.407622][ T7248] netlink: 'syz.4.107': attribute type 10 has an invalid length. [ 49.440777][ T7248] macvlan1: entered allmulticast mode [ 49.822874][ T7264] Bluetooth: MGMT ver 1.23 [ 50.574449][ T7255] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 50.767129][ T7286] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 52.439895][ T7280] net_ratelimit: 3319 callbacks suppressed [ 52.439942][ T7280] Set syz1 is full, maxelem 65536 reached [ 52.789749][ T7326] block device autoloading is deprecated and will be removed. [ 52.997965][ T7341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.998151][ T7341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.404940][ T7346] mmap: syz.1.135 (7346) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.446492][ T7350] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.625260][ T26] usb 3-1: device descriptor read/8, error -110 [ 53.711073][ T6614] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.863195][ T6614] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 53.868016][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.872037][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.874100][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.878665][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.888883][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.891458][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.894911][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.897340][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.899677][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.902168][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.904904][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.906870][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.909614][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.909644][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.909657][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.915959][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.915994][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.916022][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.922326][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.922361][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.922392][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.928629][ T6614] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 53.928665][ T6614] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 53.928690][ T6614] usb 1-1: config 0 interface 0 has no altsetting 0 [ 53.935437][ T6614] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 53.935472][ T6614] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 53.935501][ T6614] usb 1-1: Product: syz [ 53.935515][ T6614] usb 1-1: Manufacturer: syz [ 53.935527][ T6614] usb 1-1: SerialNumber: syz [ 53.958317][ T6614] usb 1-1: config 0 descriptor?? [ 53.973639][ T6614] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 54.138538][ T7373] vxcan1: entered allmulticast mode [ 54.312917][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 54.318996][ T6602] usb 1-1: USB disconnect, device number 2 [ 54.328183][ T6602] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 54.517939][ T26] usb usb3-port1: attempt power cycle [ 55.151874][ T26] usb usb3-port1: unable to enumerate USB device [ 55.353871][ T7387] netlink: 224 bytes leftover after parsing attributes in process `syz.0.142'. [ 56.539086][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 56.539155][ T31] audit: type=1326 audit(56.500:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7407 comm="syz.3.150" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9fd5c0a8 code=0x0 [ 56.543707][ T6602] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 56.693890][ T6602] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 56.693922][ T6602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.693932][ T6602] usb 1-1: Product: syz [ 56.693939][ T6602] usb 1-1: Manufacturer: syz [ 56.693946][ T6602] usb 1-1: SerialNumber: syz [ 56.695381][ T6602] usb 1-1: config 0 descriptor?? [ 56.840394][ T10] cfg80211: failed to load regulatory.db [ 56.904011][ T10] usb 1-1: USB disconnect, device number 3 [ 56.957201][ T7418] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 57.114820][ T7424] tipc: Started in network mode [ 57.114854][ T7424] tipc: Node identity 8e2ff2aeb86, cluster identity 4711 [ 57.115902][ T7424] tipc: Enabled bearer , priority 0 [ 57.117682][ T7424] syzkaller0: entered promiscuous mode [ 57.117700][ T7424] syzkaller0: entered allmulticast mode [ 57.373806][ T7424] tipc: Resetting bearer [ 57.378593][ T7423] tipc: Resetting bearer [ 57.393173][ T7423] tipc: Disabling bearer [ 57.464920][ T7434] netlink: 356 bytes leftover after parsing attributes in process `syz.3.161'. [ 58.093950][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 58.093991][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 58.265074][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.268968][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.338514][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.338727][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.591594][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 59.607203][ T7484] virtio-fs: tag not found [ 59.978413][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 59.981777][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.982297][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.112379][ T7510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.115964][ T7510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.610971][ T6602] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.626112][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 60.630613][ T7535] bridge_slave_0: left allmulticast mode [ 60.630643][ T7535] bridge_slave_0: left promiscuous mode [ 60.630820][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.635452][ T7535] bridge_slave_1: left allmulticast mode [ 60.635477][ T7535] bridge_slave_1: left promiscuous mode [ 60.635551][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.638790][ T7535] bond0: (slave bond_slave_0): Releasing backup interface [ 60.663574][ T7535] bond0: (slave bond_slave_1): Releasing backup interface [ 60.678548][ T7537] netlink: 'syz.4.198': attribute type 10 has an invalid length. [ 60.703866][ T7535] team0: Port device team_slave_0 removed [ 60.706292][ T7535] team0: Port device team_slave_1 removed [ 60.707741][ T7535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.708563][ T7535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.709898][ T7535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.709907][ T7535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.772887][ T6602] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 60.773735][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.773749][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.773758][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.774432][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.774444][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.774456][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.775168][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.775180][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.775190][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.775851][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.775867][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.775878][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.776726][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.776743][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.776754][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.777470][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.777495][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.777514][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.778186][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.778199][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.778211][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.778925][ T6602] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 60.778937][ T6602] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 60.778946][ T6602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 60.780369][ T6602] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 60.780384][ T6602] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 60.780391][ T6602] usb 1-1: Product: syz [ 60.780397][ T6602] usb 1-1: Manufacturer: syz [ 60.780402][ T6602] usb 1-1: SerialNumber: syz [ 60.783237][ T6602] usb 1-1: config 0 descriptor?? [ 60.794397][ T6602] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 60.814731][ T7537] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 60.974805][ T7553] input: syz1 as /devices/virtual/input/input3 [ 61.061692][ T24] usb 1-1: USB disconnect, device number 4 [ 61.064218][ T24] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 61.152268][ T7558] ------------[ cut here ]------------ [ 61.152293][ T7558] verifier bug: not inlined functions bpf_probe_read_user_str#114 is missing func(1) [ 61.581200][ T7558] WARNING: CPU: 1 PID: 7558 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 61.582729][ T7558] Modules linked in: [ 61.583378][ T7558] CPU: 1 UID: 0 PID: 7558 Comm: syz.3.206 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 61.585216][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 61.586886][ T7558] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 61.588156][ T7558] pc : bpf_check+0x1559c/0x15d8c [ 61.588869][ T7558] lr : bpf_check+0x1559c/0x15d8c [ 61.589590][ T7558] sp : ffff80009fe47480 [ 61.590159][ T7558] x29: ffff80009fe47980 x28: dfff800000000000 x27: 0000000000000006 [ 61.591339][ T7558] x26: 1ffff00013733c12 x25: ffff80009b99e094 x24: ffff0000d4f70008 [ 61.592572][ T7558] x23: ffff80009b99e090 x22: ffff80008b1441c0 x21: ffff800092df4000 [ 61.593963][ T7558] x20: ffff80009b99e094 x19: 1ffff00013733c12 x18: 1fffe000337a0688 [ 61.595268][ T7558] x17: ffff80008f7be000 x16: ffff80008b007230 x15: 0000000000000001 [ 61.596525][ T7558] x14: 1fffe000337a3108 x13: 0000000000000000 x12: 0000000000000000 [ 61.597701][ T7558] x11: 0000000000080000 x10: 0000000000000003 x9 : 2002fb2909380d00 [ 61.598961][ T7558] x8 : 2002fb2909380d00 x7 : ffff800080491074 x6 : 0000000000000000 [ 61.600142][ T7558] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 61.601328][ T7558] x2 : ffff80009fe47040 x1 : ffff80008b6577c0 x0 : 0000000000000001 [ 61.602600][ T7558] Call trace: [ 61.603084][ T7558] bpf_check+0x1559c/0x15d8c (P) [ 61.603811][ T7558] bpf_prog_load+0xec8/0x13fc [ 61.604520][ T7558] __sys_bpf+0x450/0x628 [ 61.605195][ T7558] __arm64_sys_bpf+0x80/0x98 [ 61.605869][ T7558] invoke_syscall+0x98/0x2b8 [ 61.606549][ T7558] el0_svc_common+0x130/0x23c [ 61.607262][ T7558] do_el0_svc+0x48/0x58 [ 61.607902][ T7558] el0_svc+0x58/0x180 [ 61.608546][ T7558] el0t_64_sync_handler+0x84/0x12c [ 61.609385][ T7558] el0t_64_sync+0x198/0x19c [ 61.610056][ T7558] irq event stamp: 292 [ 61.610669][ T7558] hardirqs last enabled at (291): [] finish_lock_switch+0xb0/0x1c0 [ 61.612040][ T7558] hardirqs last disabled at (292): [] el1_brk64+0x1c/0x48 [ 61.613340][ T7558] softirqs last enabled at (110): [] local_bh_enable+0x10/0x34 [ 61.614783][ T7558] softirqs last disabled at (108): [] local_bh_disable+0x10/0x34 [ 61.616112][ T7558] ---[ end trace 0000000000000000 ]--- [ 62.573605][ T7560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 62.573633][ T7560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.574397][ T7560] vhci_hcd vhci_hcd.0: Device attached [ 62.814536][ T7588] vhci_hcd: connection closed [ 62.815552][ T7603] vhci_hcd: stop threads [ 62.815584][ T7603] vhci_hcd: release socket [ 62.815611][ T7603] vhci_hcd: disconnect device [ 62.850769][ T24] usb 11-1: enqueue for inactive port 0 [ 63.343779][ T24] usb usb11-port1: attempt power cycle [ 63.901444][ T24] usb usb11-port1: unable to enumerate USB device [ 64.502498][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.502547][ T2414] ieee802154 phy1 wpan1: encryption failed: -22