last executing test programs: 2.404276538s ago: executing program 2 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008004) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.287767772s ago: executing program 4 (id=379): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000140)="f80204000000000000007f5388a8", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.287290434s ago: executing program 4 (id=381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="1408000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.257046751s ago: executing program 0 (id=382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) 2.21780044s ago: executing program 1 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xb8, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.151683539s ago: executing program 4 (id=385): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001e00)={{0x0, 0x6, 0x100000001, 0x4, 0x1ff, 0x7, 0x9, 0x9, 0x99, 0x8ec, 0x5, 0x80000000, 0x4, 0xa, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002e00)={{r1, 0x81, 0x6, 0x7, 0x0, 0xfffffffffffffff8, 0xf8a, 0x1, 0x2, 0x6, 0x100, 0x5, 0x10, 0x5, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 2.151442453s ago: executing program 0 (id=386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x3a7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xa49, 0x8, 0x1, 0x8, 0x1, 0x0, 0xb, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.978441479s ago: executing program 1 (id=388): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800) 1.267360631s ago: executing program 2 (id=389): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.258615789s ago: executing program 4 (id=391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.229096935s ago: executing program 1 (id=392): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000140)="f80204000000000000007f5388a8", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.16094085s ago: executing program 2 (id=394): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000001bc0)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0xa94, &(0x7f0000002680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1, 0x7, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) setns(0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.16020858s ago: executing program 1 (id=395): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="1408000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.131998412s ago: executing program 3 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.055835546s ago: executing program 1 (id=397): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x890) 1.009652232s ago: executing program 0 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x2c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0xb8, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.005275585s ago: executing program 1 (id=399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 974.507116ms ago: executing program 3 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 973.233448ms ago: executing program 2 (id=401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newlink={0x3c, 0x10, 0x403, 0x70bd29, 0x0, {0x0, 0x0, 0x74, r4, 0x0, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x9}]}}}]}, 0x3c}}, 0x24000090) 891.462944ms ago: executing program 4 (id=402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001e00)={{0x0, 0x6, 0x100000001, 0x4, 0x1ff, 0x7, 0x9, 0x9, 0x99, 0x8ec, 0x5, 0x80000000, 0x4, 0xa, 0x7}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002e00)={{r1, 0x81, 0x6, 0x7, 0x0, 0xfffffffffffffff8, 0xf8a, 0x1, 0x2, 0x6, 0x100, 0x5, 0x10, 0x5, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 891.254436ms ago: executing program 3 (id=403): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4800) 887.793663ms ago: executing program 3 (id=404): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 814.701043ms ago: executing program 3 (id=405): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 804.922358ms ago: executing program 0 (id=406): r0 = socket(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r1, 0xab03) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) 746.791978ms ago: executing program 2 (id=407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="1408000000000000b89e08dc86dd", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 701.85236ms ago: executing program 0 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x27, 0xe, 0x0, &(0x7f0000000140)="f80204000000000000007f5388a8", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 700.367245ms ago: executing program 3 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x3a7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xa49, 0x8, 0x1, 0x8, 0x1, 0x0, 0xb, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.587109ms ago: executing program 0 (id=410): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c80), 0x0, 0x890) 1.317955ms ago: executing program 2 (id=411): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, &(0x7f0000000100)=r1, 0x5042) 0s ago: executing program 4 (id=412): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000001bc0)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0xa94, &(0x7f0000002680)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1, 0x7, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) setns(0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 34.456442][ T6516] cgroup: Unknown subsys name 'net' [ 34.597677][ T6516] cgroup: Unknown subsys name 'cpuset' [ 34.601522][ T6516] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.789575][ T6516] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 36.412849][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.425196][ T6530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.426714][ T6543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.427114][ T6543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.428311][ T6543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.428508][ T6543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.428861][ T6543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.429647][ T6543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.430207][ T6543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.430573][ T6543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.431412][ T6543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.431898][ T6543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.432224][ T6543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.432972][ T6543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.433472][ T6543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.433814][ T6543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.435070][ T6543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.435871][ T6529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.436903][ T6529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.437136][ T6529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.439153][ T6095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.475107][ T6544] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.480563][ T6542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.481880][ T6542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.482310][ T6542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.802109][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 36.836045][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 36.841162][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 36.907370][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 36.993459][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.994859][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.994990][ T6533] bridge_slave_0: entered allmulticast mode [ 36.995851][ T6533] bridge_slave_0: entered promiscuous mode [ 36.997789][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.997839][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.997977][ T6533] bridge_slave_1: entered allmulticast mode [ 36.998766][ T6533] bridge_slave_1: entered promiscuous mode [ 37.049509][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.049627][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.049741][ T6527] bridge_slave_0: entered allmulticast mode [ 37.050593][ T6527] bridge_slave_0: entered promiscuous mode [ 37.052276][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.052323][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.052421][ T6527] bridge_slave_1: entered allmulticast mode [ 37.053386][ T6527] bridge_slave_1: entered promiscuous mode [ 37.054283][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 37.067756][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.068589][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.068718][ T6535] bridge_slave_0: entered allmulticast mode [ 37.069546][ T6535] bridge_slave_0: entered promiscuous mode [ 37.070912][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.070959][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.071054][ T6535] bridge_slave_1: entered allmulticast mode [ 37.071930][ T6535] bridge_slave_1: entered promiscuous mode [ 37.083651][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.117320][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.130196][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.139870][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.139965][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.140081][ T6526] bridge_slave_0: entered allmulticast mode [ 37.140914][ T6526] bridge_slave_0: entered promiscuous mode [ 37.142277][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.142326][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.142453][ T6526] bridge_slave_1: entered allmulticast mode [ 37.143259][ T6526] bridge_slave_1: entered promiscuous mode [ 37.172357][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.178090][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.193006][ T6533] team0: Port device team_slave_0 added [ 37.196465][ T6533] team0: Port device team_slave_1 added [ 37.204837][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.220310][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.221989][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.243633][ T6527] team0: Port device team_slave_0 added [ 37.280617][ T6527] team0: Port device team_slave_1 added [ 37.296733][ T6535] team0: Port device team_slave_0 added [ 37.298764][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.299958][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.300084][ T6534] bridge_slave_0: entered allmulticast mode [ 37.300969][ T6534] bridge_slave_0: entered promiscuous mode [ 37.302339][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.302389][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.302495][ T6534] bridge_slave_1: entered allmulticast mode [ 37.303600][ T6534] bridge_slave_1: entered promiscuous mode [ 37.306586][ T6526] team0: Port device team_slave_0 added [ 37.308237][ T6526] team0: Port device team_slave_1 added [ 37.308846][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.308871][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.308911][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.310662][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.310689][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.310722][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.330345][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.330376][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.330413][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.339529][ T6535] team0: Port device team_slave_1 added [ 37.365413][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.366378][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.366417][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.387805][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.391727][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.399790][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.401903][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.404986][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.406936][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.406962][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.406996][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.426113][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.426177][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.426213][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.427955][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.427980][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.428012][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.501062][ T6534] team0: Port device team_slave_0 added [ 37.503112][ T6534] team0: Port device team_slave_1 added [ 37.507691][ T6533] hsr_slave_0: entered promiscuous mode [ 37.510003][ T6533] hsr_slave_1: entered promiscuous mode [ 37.521769][ T6535] hsr_slave_0: entered promiscuous mode [ 37.523909][ T6535] hsr_slave_1: entered promiscuous mode [ 37.525541][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.525624][ T6535] Cannot create hsr debugfs directory [ 37.540920][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.540984][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.541021][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.542077][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.542101][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.542132][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.569504][ T6527] hsr_slave_0: entered promiscuous mode [ 37.570052][ T6527] hsr_slave_1: entered promiscuous mode [ 37.570438][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.570468][ T6527] Cannot create hsr debugfs directory [ 37.615663][ T6526] hsr_slave_0: entered promiscuous mode [ 37.616200][ T6526] hsr_slave_1: entered promiscuous mode [ 37.616513][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.616542][ T6526] Cannot create hsr debugfs directory [ 37.618931][ T6534] hsr_slave_0: entered promiscuous mode [ 37.619439][ T6534] hsr_slave_1: entered promiscuous mode [ 37.619719][ T6534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.619745][ T6534] Cannot create hsr debugfs directory [ 37.955035][ T6533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.960664][ T6533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.964419][ T6533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.974299][ T6533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.003338][ T6535] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.007944][ T6535] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.015434][ T6535] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.028048][ T6535] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.067314][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.071980][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.086653][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.100931][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.122528][ T6527] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.127059][ T6527] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.131232][ T6527] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.141346][ T6527] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.182469][ T6534] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.188482][ T6534] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.193559][ T6534] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.208044][ T6534] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.231754][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.251467][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.283029][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.299374][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.299533][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.309934][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.323011][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.335792][ T229] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.335882][ T229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.337410][ T229] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.337459][ T229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.338313][ T229] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.338355][ T229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.362452][ T6533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.367158][ T6533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.390517][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.407358][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.419489][ T6535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.423156][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.431869][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.451758][ T611] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.451857][ T611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.476195][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.476300][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.496047][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.496362][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.501791][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.501869][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.515420][ T6542] Bluetooth: hci2: command tx timeout [ 38.515613][ T6542] Bluetooth: hci3: command tx timeout [ 38.515710][ T6542] Bluetooth: hci4: command tx timeout [ 38.515798][ T6542] Bluetooth: hci0: command tx timeout [ 38.515901][ T6542] Bluetooth: hci1: command tx timeout [ 38.567484][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.587359][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.620994][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.641011][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.651669][ T611] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.651767][ T611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.652623][ T611] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.652668][ T611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.716360][ T6533] veth0_vlan: entered promiscuous mode [ 38.730637][ T6533] veth1_vlan: entered promiscuous mode [ 38.748172][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.782168][ T6533] veth0_macvtap: entered promiscuous mode [ 38.795189][ T6533] veth1_macvtap: entered promiscuous mode [ 38.812630][ T6535] veth0_vlan: entered promiscuous mode [ 38.832840][ T6527] veth0_vlan: entered promiscuous mode [ 38.842802][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.860718][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.864093][ T6535] veth1_vlan: entered promiscuous mode [ 38.883255][ T6527] veth1_vlan: entered promiscuous mode [ 38.887444][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.899637][ T6533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899742][ T6533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899773][ T6533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899802][ T6533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.909547][ T6535] veth0_macvtap: entered promiscuous mode [ 38.927495][ T6535] veth1_macvtap: entered promiscuous mode [ 38.950313][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.954037][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.959105][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.972632][ T6535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.977941][ T6535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.980726][ T6535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.983270][ T6535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.017519][ T6526] veth0_vlan: entered promiscuous mode [ 39.021363][ T6526] veth1_vlan: entered promiscuous mode [ 39.058625][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.058714][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.073942][ T6526] veth0_macvtap: entered promiscuous mode [ 39.097910][ T6527] veth0_macvtap: entered promiscuous mode [ 39.116658][ T6527] veth1_macvtap: entered promiscuous mode [ 39.126978][ T6526] veth1_macvtap: entered promiscuous mode [ 39.136915][ T4495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.139912][ T4495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.155813][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.158214][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.159702][ T6526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.159742][ T6526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.159771][ T6526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.159800][ T6526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.191859][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.200217][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.207380][ T781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.207444][ T781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.221493][ T6527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.223497][ T6527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.223531][ T6527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.223559][ T6527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.254377][ T6533] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.256867][ T611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.256899][ T611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.318731][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.318796][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.382485][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.382553][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.469704][ T6534] veth0_vlan: entered promiscuous mode [ 39.472713][ T6534] veth1_vlan: entered promiscuous mode [ 39.508836][ T6642] loop1: detected capacity change from 0 to 32768 [ 39.555910][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.555979][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.559399][ T6644] loop3: detected capacity change from 0 to 256 [ 39.586561][ T6534] veth0_macvtap: entered promiscuous mode [ 39.588585][ T6534] veth1_macvtap: entered promiscuous mode [ 39.611581][ T6644] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 39.632443][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.632506][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.648841][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.650800][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.652469][ T6534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.652511][ T6534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.652540][ T6534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.652569][ T6534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.847212][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.847276][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.929887][ T6655] loop2: detected capacity change from 0 to 512 [ 39.946439][ T6655] ======================================================= [ 39.946439][ T6655] WARNING: The mand mount option has been deprecated and [ 39.946439][ T6655] and is ignored by this kernel. Remove the mand [ 39.946439][ T6655] option from the mount to silence this warning. [ 39.946439][ T6655] ======================================================= [ 39.969638][ T6655] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3: invalid block [ 39.976670][ T6655] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3: invalid indirect mapped block 4294967295 (level 1) [ 39.983569][ T6655] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3: invalid indirect mapped block 4294967295 (level 1) [ 39.986903][ T6655] EXT4-fs (loop2): 2 truncates cleaned up [ 40.036508][ T6655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.069374][ T6657] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 40.123770][ T6655] EXT4-fs error (device loop2): empty_inline_dir:1786: inode #12: block 7: comm syz.2.3: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 40.128961][ T6655] EXT4-fs warning (device loop2): empty_inline_dir:1793: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 40.140159][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.140236][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.158223][ T6653] loop3: detected capacity change from 0 to 32768 [ 40.161446][ T6653] xfs: Unknown parameter 'fscontext' [ 40.270654][ T6527] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.395461][ T6646] loop1: detected capacity change from 0 to 32768 [ 40.400251][ T6646] XFS: noikeep mount option is deprecated. [ 40.430547][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 40.433298][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 40.493299][ T6646] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 40.498053][ T6661] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.498180][ T6661] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.498237][ T6661] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.498283][ T6661] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.511654][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 40.518260][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 40.538585][ T6648] loop0: detected capacity change from 0 to 32768 [ 40.544435][ T6673] loop4: detected capacity change from 0 to 1024 [ 40.547621][ T6648] (syz.0.1,6648,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 40.552417][ T6648] (syz.0.1,6648,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 40.583836][ T6648] JBD2: Ignoring recovery information on journal [ 40.588920][ T6646] XFS (loop1): Ending clean mount [ 40.594961][ T52] Bluetooth: hci1: command tx timeout [ 40.595040][ T52] Bluetooth: hci0: command tx timeout [ 40.595080][ T52] Bluetooth: hci4: command tx timeout [ 40.595114][ T52] Bluetooth: hci3: command tx timeout [ 40.595155][ T52] Bluetooth: hci2: command tx timeout [ 40.608322][ T6646] XFS (loop1): Quotacheck needed: Please wait. [ 40.622732][ T6675] loop3: detected capacity change from 0 to 2048 [ 40.627048][ T6675] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576 [ 40.633954][ T6675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 40.648636][ T12] hfsplus: b-tree write err: -5, ino 8 [ 40.653267][ T6661] Zero length message leads to an empty skb [ 40.666514][ T6673] syz.4.5: attempt to access beyond end of device [ 40.666514][ T6673] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 40.697737][ T6648] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 40.718030][ T6648] (syz.0.1,6648,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 40.728941][ T6646] XFS (loop1): Quotacheck: Done. [ 40.795529][ T6679] netlink: 'syz.4.11': attribute type 2 has an invalid length. [ 40.813035][ T6648] (syz.0.1,6648,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 40.821963][ T6648] (syz.0.1,6648,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 40.822125][ T6648] (syz.0.1,6648,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 40.822167][ T6648] (syz.0.1,6648,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 40.822215][ T6648] (syz.0.1,6648,0):ocfs2_quota_read:201 ERROR: status = -5 [ 40.822249][ T6648] Quota error (device loop0): find_block_dqentry: Can't read quota tree block 6 [ 40.822350][ T6648] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 40.822378][ T6648] (syz.0.1,6648,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 40.829287][ T6648] (syz.0.1,6648,0):ocfs2_mknod:314 ERROR: status = -5 [ 40.829345][ T6648] (syz.0.1,6648,0):ocfs2_mknod:502 ERROR: status = -5 [ 40.829407][ T6648] (syz.0.1,6648,0):ocfs2_create:675 ERROR: status = -5 [ 40.913354][ T6533] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 40.959577][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.965227][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.019304][ T6526] ocfs2: Unmounting device (7,0) on (node local) [ 41.120105][ T6690] netlink: 'syz.4.16': attribute type 10 has an invalid length. [ 41.137995][ T6542] block nbd1: Receive control failed (result -107) [ 41.144933][ T6688] loop3: detected capacity change from 0 to 512 [ 41.159214][ T6688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.186057][ T6688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.215354][ T6686] nbd1: detected capacity change from 0 to 8589934592 [ 41.218415][ T6686] block nbd1: Dead connection, failed to find a fallback [ 41.221257][ T6686] block nbd1: shutting down sockets [ 41.223284][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.229083][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.231778][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.240429][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.240588][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.240619][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.240701][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.240730][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.240807][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.240836][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.240954][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.240984][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.241071][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.241099][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.241404][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.241439][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.241490][ T6686] ldm_validate_partition_table(): Disk read failed. [ 41.241579][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.241607][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.241686][ T6686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 41.241714][ T6686] Buffer I/O error on dev nbd1, logical block 0, async page read [ 41.241879][ T6686] Dev nbd1: unable to read RDB block 0 [ 41.242297][ T6686] nbd1: unable to read partition table [ 41.257349][ T6690] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 41.294857][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.294913][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.523029][ T6694] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 41.745465][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.757651][ T6699] loop1: detected capacity change from 0 to 32768 [ 41.818663][ T6704] loop4: detected capacity change from 0 to 2048 [ 41.886325][ T6711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.994175][ T6699] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 42.010669][ T6704] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 42.037503][ T6709] loop2: detected capacity change from 0 to 32768 [ 42.041337][ T6704] Remounting filesystem read-only [ 42.045192][ T6699] allowing incompatible features above 0.0: (unknown version) [ 42.047379][ T6699] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 42.052053][ T6699] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 42.058690][ T6699] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 42.061538][ T6699] bcachefs (loop1): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete [ 42.061538][ T6699] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive [ 42.061538][ T6699] running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents [ 42.079820][ T6704] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 42.099908][ T6709] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 42.151331][ T6721] loop0: detected capacity change from 0 to 1024 [ 42.183048][ T6699] bcachefs (loop1): accounting_read... [ 42.205406][ T6721] syz.0.22: attempt to access beyond end of device [ 42.205406][ T6721] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 42.217524][ T6699] done [ 42.218661][ T6699] bcachefs (loop1): alloc_read... done [ 42.225124][ T6699] bcachefs (loop1): snapshots_read... done [ 42.225906][ T6699] bcachefs (loop1): check_allocations... [ 42.245130][ T6699] bcachefs (loop1): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 42.245218][ T6699] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 42.246742][ T6728] netlink: 'syz.4.23': attribute type 2 has an invalid length. [ 42.273856][ T14] hfsplus: b-tree write err: -5, ino 8 [ 42.280744][ T6699] bcachefs (loop1): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 42.280795][ T6699] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 42.281731][ T6709] XFS (loop2): Ending clean mount [ 42.282677][ T6699] bcachefs (loop1): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 42.282694][ T6699] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 42.288465][ T6699] bcachefs (loop1): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 42.288483][ T6699] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 42.311685][ T6699] bcachefs (loop1): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 42.311734][ T6699] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 42.312421][ T6699] bcachefs (loop1): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.312503][ T6699] bcachefs (loop1): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.312982][ T6699] bcachefs (loop1): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.313066][ T6699] bcachefs (loop1): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.313289][ T6699] bcachefs (loop1): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.313351][ T6699] bcachefs (loop1): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.313453][ T6699] bcachefs (loop1): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.313513][ T6699] bcachefs (loop1): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.313625][ T6699] bcachefs (loop1): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.313686][ T6699] bcachefs (loop1): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.313800][ T6699] bcachefs (loop1): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.313860][ T6699] bcachefs (loop1): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.313964][ T6699] bcachefs (loop1): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.314024][ T6699] bcachefs (loop1): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 42.314126][ T6699] bcachefs (loop1): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 42.314197][ T6699] bcachefs (loop1): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 42.314302][ T6699] bcachefs (loop1): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 42.314372][ T6699] bcachefs (loop1): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 42.314480][ T6699] bcachefs (loop1): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 42.345868][ T6699] bcachefs (loop1): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 42.346199][ T6699] bcachefs (loop1): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 42.346225][ T6699] Ratelimiting new instances of previous error [ 42.346347][ T6699] bcachefs (loop1): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 42.346361][ T6699] Ratelimiting new instances of previous error [ 42.382231][ T6699] done [ 42.398768][ T6699] bcachefs (loop1): going read-write [ 42.432524][ T6699] bcachefs (loop1): journal_replay... [ 42.540558][ T6734] loop0: detected capacity change from 0 to 2048 [ 42.572096][ T6708] loop3: detected capacity change from 0 to 32768 [ 42.618843][ T6708] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 42.620321][ T6699] done [ 42.626579][ T6699] bcachefs (loop1): check_extents_to_backpointers... [ 42.627369][ T6699] bcachefs (loop1): scanning for missing backpointers in 4/128 buckets [ 42.639278][ T6699] done [ 42.649793][ T6699] bcachefs (loop1): check_subvols... [ 42.650411][ T6699] bcachefs (loop1): subvol root 4096:4294967295 has wrong bi_subvol field: got 0, should be 10798, fixing [ 42.652139][ T6699] done [ 42.664984][ T52] Bluetooth: hci3: command tx timeout [ 42.665055][ T52] Bluetooth: hci4: command tx timeout [ 42.665109][ T52] Bluetooth: hci0: command tx timeout [ 42.665158][ T52] Bluetooth: hci1: command tx timeout [ 42.672516][ T6542] Bluetooth: hci2: command tx timeout [ 42.686433][ T6699] bcachefs (loop1): check_inodes... [ 42.687119][ T6699] bcachefs (loop1): inode points to missing dirent [ 42.687182][ T6699] inum: 536870912:4294967295 [ 42.687199][ T6699] mode=100755 [ 42.687214][ T6699] flags=(15300000) [ 42.687228][ T6699] journal_seq=4 [ 42.687242][ T6699] hash_seed=8469d717004af4ef [ 42.687256][ T6699] hash_type=siphash [ 42.687270][ T6699] bi_size=10 [ 42.687284][ T6699] bi_sectors=8 [ 42.687298][ T6699] bi_version=0 [ 42.687312][ T6699] bi_atime=2780562352 [ 42.687326][ T6699] bi_ctime=2780562352 [ 42.687340][ T6699] bi_mtime=2780562352 [ 42.687353][ T6699] bi_otime=2780562352 [ 42.687367][ T6699] bi_uid=0 [ 42.687381][ T6699] bi_gid=0 [ 42.687395][ T6699] bi_nlink=0 [ 42.687408][ T6699] bi_generation=0 [ 42.687422][ T6699] bi_dev=0 [ 42.687436][ T6699] bi_data_checksum=0 [ 42.687450][ T6699] bi_compression=0 [ 42.687464][ T6699] bi_project=0 [ 42.687478][ T6699] bi_background_compression=0 [ 42.687492][ T6699] bi_data_replicas=0 [ 42.687506][ T6699] bi_promote_target=0 [ 42.687520][ T6699] bi_foreground_target=0 [ 42.687534][ T6699] bi_background_target=0 [ 42.687548][ T6699] bi_erasure_code=0 [ 42.687562][ T6699] bi_fields_set=0 [ 42.687576][ T6699] bi_dir=2 [ 42.687589][ T6699] bi_dir_offset=32 [ 42.687603][ T6699] bi_subvol=0 [ 42.687617][ T6699] bi_parent_subvol=0 [ 42.687631][ T6699] bi_nocow=0 [ 42.687645][ T6699] bi_depth=0 [ 42.687658][ T6699] bi_inodes_32bit=0 [ 42.687672][ T6699] bi_casefold=0, fixing [ 42.736936][ T6742] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 42.750668][ T6699] done [ 42.751611][ T6699] bcachefs (loop1): check_dirents... [ 42.752302][ T6699] bcachefs (loop1): dirent points to missing inode: [ 42.752362][ T6699] u64s 7 type dirent 4096:1896155912177158345:U32_MAX len 0 ver 0: file3 -> 536870913 type reg, fixing [ 42.752925][ T6699] bcachefs (loop1): dirent points to missing inode: [ 42.752939][ T6699] u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg, fixing [ 42.753258][ T6699] bcachefs (loop1): hash table key at wrong offset: should be at 5178636093158006573 [ 42.753270][ T6699] u64s 8 type dirent 4096:8130059955150870709:U32_MAX len 0 ver 0: lost+foun -> 4097 type dir, fixing [ 42.753901][ T6699] bcachefs (loop1): dirent points to missing inode: [ 42.753916][ T6699] u64s 8 type dirent 4096:9097378837824744618:U32_MAX len 0 ver 0: file.cold -> 172335562754 type reg, fixing [ 42.754131][ T6699] bcachefs (loop1): fsck counted subdirectories wrong for inum 4096:4294967295: got 1 should be 2 [ 42.754276][ T6699] bcachefs (loop1): check_dirents requires second pass [ 42.768227][ T6699] done [ 42.768996][ T6699] bcachefs (loop1): resume_logged_ops... [ 42.772382][ T6741] (syz.3.20,6741,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 42.776566][ T6699] done [ 42.776596][ T6699] bcachefs (loop1): delete_dead_inodes... done [ 42.779287][ T6699] bcachefs (loop1): missing subvolume 1running recovery pass check_inodes (28), currently at lookup_root_inode (43) [ 42.779564][ T6699] bcachefs (loop1): error in recovery: ENOENT_bkey_type_mismatch [ 42.779578][ T6699] emergency read only at seq 19 [ 42.779628][ T6699] bcachefs (loop1): bch2_fs_start(): error starting filesystem ENOENT_bkey_type_mismatch [ 42.779649][ T6699] bcachefs (loop1): shutting down [ 42.779668][ T6699] bcachefs (loop1): going read-only [ 42.779747][ T6699] bcachefs (loop1): finished waiting for writes to stop [ 42.884317][ T6699] bcachefs (loop1): flushing journal and stopping allocators, journal seq 19 [ 42.884462][ T6699] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 19 [ 42.885049][ T6699] bcachefs (loop1): unclean shutdown complete, journal seq 19 [ 42.898385][ T6535] ocfs2: Unmounting device (7,3) on (node local) [ 42.935410][ T6699] bcachefs (loop1): done going read-only, filesystem not clean [ 43.003678][ T6699] bcachefs (loop1): shutdown complete [ 43.738877][ T6734] syz.0.24 (6734): drop_caches: 2 [ 43.840672][ T6745] loop3: detected capacity change from 0 to 40427 [ 43.852220][ T6745] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 43.852348][ T6745] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 43.891806][ T6745] F2FS-fs (loop3): invalid crc value [ 44.045416][ T6745] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 44.045500][ T6745] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.265085][ T6754] loop4: detected capacity change from 0 to 32768 [ 44.286756][ T6754] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.30 (6754) [ 44.305214][ T6754] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 44.309549][ T6754] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 44.312711][ T6754] BTRFS info (device loop4): using free-space-tree [ 44.421272][ T6754] BTRFS info (device loop4): rebuilding free space tree [ 44.516377][ T6754] BTRFS info (device loop4): scrub: started on devid 1 [ 44.519758][ T6754] BTRFS info (device loop4): unable to make block group 5242880 ro [ 44.519886][ T6754] BTRFS info (device loop4): space_info DATA+METADATA (sub-group id 0) has 884736 free, is not full [ 44.519941][ T6754] BTRFS info (device loop4): space_info total=3276800, used=53248, pinned=0, reserved=12288, may_use=2326528, readonly=0 zone_unusable=0 [ 44.519976][ T6754] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 44.520028][ T6754] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 44.520053][ T6754] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 44.520078][ T6754] BTRFS info (device loop4): delayed_block_rsv: size 98304 reserved 98304 [ 44.520103][ T6754] BTRFS info (device loop4): delayed_refs_rsv: size 786432 reserved 786432 [ 44.530303][ T6754] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0 [ 44.651072][ T6534] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 44.745284][ T6542] Bluetooth: hci2: command tx timeout [ 44.745356][ T6542] Bluetooth: hci1: command tx timeout [ 44.745409][ T6542] Bluetooth: hci0: command tx timeout [ 44.745448][ T6542] Bluetooth: hci4: command tx timeout [ 44.745486][ T6542] Bluetooth: hci3: command tx timeout [ 44.764389][ T6782] loop4: detected capacity change from 0 to 64 [ 44.787725][ T6782] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 44.888828][ T6784] loop4: detected capacity change from 0 to 1024 [ 44.923620][ T6784] syz.4.34: attempt to access beyond end of device [ 44.923620][ T6784] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 44.926977][ T6699] bcachefs: bch2_fs_get_tree() error: ENOENT_bkey_type_mismatch [ 44.961547][ T781] hfsplus: b-tree write err: -5, ino 8 [ 44.988799][ T611] kworker/u8:7: attempt to access beyond end of device [ 44.988799][ T611] loop3: rw=1, sector=77824, nr_sectors = 2232 limit=40427 [ 45.073589][ T611] kworker/u8:7: attempt to access beyond end of device [ 45.073589][ T611] loop3: rw=1, sector=80056, nr_sectors = 1864 limit=40427 [ 45.105332][ T6527] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 45.142870][ T611] kworker/u8:7: attempt to access beyond end of device [ 45.142870][ T611] loop3: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 45.226178][ T611] kworker/u8:7: attempt to access beyond end of device [ 45.226178][ T611] loop3: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 45.279532][ T611] kworker/u8:7: attempt to access beyond end of device [ 45.279532][ T611] loop3: rw=1, sector=57344, nr_sectors = 2048 limit=40427 [ 45.366644][ T611] kworker/u8:7: attempt to access beyond end of device [ 45.366644][ T611] loop3: rw=1, sector=59392, nr_sectors = 2048 limit=40427 [ 45.451691][ T611] kworker/u8:7: attempt to access beyond end of device [ 45.451691][ T611] loop3: rw=1, sector=61440, nr_sectors = 2056 limit=40427 [ 45.486388][ T6800] loop1: detected capacity change from 0 to 64 [ 45.535096][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 45.590286][ T6788] loop0: detected capacity change from 0 to 32768 [ 45.649387][ T6788] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 45.805195][ T6788] XFS (loop0): Ending clean mount [ 45.810086][ T6788] XFS (loop0): Quotacheck needed: Please wait. [ 45.862510][ T6788] XFS (loop0): Quotacheck: Done. [ 45.959028][ T6535] bio_check_eod: 4 callbacks suppressed [ 45.959114][ T6535] syz-executor: attempt to access beyond end of device [ 45.959114][ T6535] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 45.959346][ T6535] syz-executor: attempt to access beyond end of device [ 45.959346][ T6535] loop3: rw=2051, sector=77824, nr_sectors = 4096 limit=40427 [ 45.959419][ T6535] syz-executor: attempt to access beyond end of device [ 45.959419][ T6535] loop3: rw=2051, sector=57344, nr_sectors = 13608 limit=40427 [ 45.960581][ T6535] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 45.960656][ T6535] F2FS-fs (loop3): Issue discard(9728, 9728, 512) failed, ret: -5 [ 45.960698][ T6535] F2FS-fs (loop3): Issue discard(7168, 7168, 1701) failed, ret: -5 [ 46.293842][ T6818] loop1: detected capacity change from 0 to 32768 [ 46.413448][ T6821] loop2: detected capacity change from 0 to 32768 [ 46.482549][ T6829] netlink: 'syz.3.35': attribute type 2 has an invalid length. [ 46.489102][ T6821] (syz.2.43,6821,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 46.489358][ T6821] (syz.2.43,6821,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 46.522988][ T6821] JBD2: Ignoring recovery information on journal [ 46.527872][ T6832] loop3: detected capacity change from 0 to 1024 [ 46.586672][ T6526] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 46.592666][ T6821] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 46.616399][ T6832] syz.3.46: attempt to access beyond end of device [ 46.616399][ T6832] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 46.711584][ T781] hfsplus: b-tree write err: -5, ino 8 [ 46.734791][ T6826] loop4: detected capacity change from 0 to 32768 [ 46.753915][ T6821] (syz.2.43,6821,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 46.769022][ T6826] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 46.974592][ T6826] XFS (loop4): Ending clean mount [ 47.083026][ T6861] syzkaller0: entered promiscuous mode [ 47.083089][ T6861] syzkaller0: entered allmulticast mode [ 47.095111][ T6534] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 47.137437][ T6527] ocfs2: Unmounting device (7,2) on (node local) [ 47.146552][ T6863] loop3: detected capacity change from 0 to 512 [ 47.162484][ T6863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.202940][ T6863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.301493][ T6535] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.331851][ T6873] netlink: 'syz.2.53': attribute type 13 has an invalid length. [ 47.425803][ T6873] veth0_macvtap: left promiscuous mode [ 47.450846][ T6873] macvtap0: entered allmulticast mode [ 47.455971][ T6873] macvtap0: refused to change device tx_queue_len [ 47.573481][ T6857] loop0: detected capacity change from 0 to 32768 [ 47.694771][ T6857] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 47.700509][ T6857] allowing incompatible features above 0.0: (unknown version) [ 47.703030][ T6857] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 47.708113][ T6857] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 47.711029][ T6857] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 47.713739][ T6857] bcachefs (loop0): Version upgrade from 1.19: autofix_errors to 1.7: mi_btree_bitmap incomplete [ 47.713739][ T6857] Doing compatible version upgrade from 1.19: autofix_errors to 1.28: inode_has_case_insensitive [ 47.713739][ T6857] running recovery passes: check_extents_to_backpointers,check_inodes [ 47.744775][ T6857] bcachefs (loop0): accounting_read... done [ 47.787838][ T6857] bcachefs (loop0): alloc_read... done [ 47.790772][ T6857] bcachefs (loop0): snapshots_read... done [ 47.797292][ T6857] bcachefs (loop0): going read-write [ 47.803178][ T6857] bcachefs (loop0): journal_replay... done [ 47.806606][ T6857] bcachefs (loop0): check_extents_to_backpointers... [ 47.807880][ T6857] bcachefs (loop0): scanning for missing backpointers in 9/128 buckets [ 47.813766][ T6857] bcachefs (loop0): backpointer doesn't match btree node it points to: [ 47.819277][ T6857] u64s 9 type backpointer 0:9699328:0 len 0 ver 0: bucket=0:37:0 btree=backpointers level=1 data_type=btree suboffset=0 len=4 gen=0 pos=SPOS_MAX [ 47.819326][ T6857] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 47.819344][ T6857] u64s 9 type backpointer 0:9699328:0 len 0 ver 0: bucket=0:37:0 btree=backpointers level=1 data_type=btree suboffset=0 len=256 gen=0 pos=SPOS_MAX, fixing [ 47.834869][ T6857] done [ 47.841587][ T6857] bcachefs (loop0): check_inodes... done [ 47.846338][ T6857] bcachefs (loop0): resume_logged_ops... done [ 47.851391][ T6857] bcachefs (loop0): delete_dead_inodes... done [ 47.861167][ T6857] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 47.861222][ T6857] bcachefs (loop0): check_extents_to_backpointers... [ 47.861850][ T6857] bcachefs (loop0): scanning for missing backpointers in 1/128 buckets [ 47.870591][ T6857] done [ 47.872767][ T6857] bcachefs (loop0): check_inodes... done [ 47.877098][ T6857] bcachefs (loop0): resume_logged_ops... done [ 47.883502][ T6857] bcachefs (loop0): delete_dead_inodes... done [ 47.887496][ T6857] bcachefs (loop0): done starting filesystem [ 47.943238][ T6526] bcachefs (loop0): shutting down [ 47.943344][ T6526] bcachefs (loop0): going read-only [ 47.943387][ T6526] bcachefs (loop0): finished waiting for writes to stop [ 47.977078][ T6892] loop1: detected capacity change from 0 to 32768 [ 48.070580][ T6898] IPv6: Can't replace route, no match found [ 48.370408][ T6908] syzkaller0: entered promiscuous mode [ 48.370485][ T6908] syzkaller0: entered allmulticast mode [ 48.526384][ T6922] netlink: 'syz.4.76': attribute type 13 has an invalid length. [ 48.602691][ T6920] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 48.647723][ T6922] veth0_macvtap: left promiscuous mode [ 48.685131][ T6922] macvtap0: entered allmulticast mode [ 48.691165][ T6922] macvtap0: refused to change device tx_queue_len [ 48.821706][ T6938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.907462][ T6944] loop3: detected capacity change from 0 to 64 [ 48.911399][ T6944] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 48.953108][ T6095] block nbd4: Receive control failed (result -107) [ 48.970982][ T6949] ip6gretap1: entered allmulticast mode [ 48.981469][ T6518] block nbd4: shutting down sockets [ 48.983451][ T6949] bridge0: port 3(ip6gretap1) entered blocking state [ 48.985693][ T6949] bridge0: port 3(ip6gretap1) entered disabled state [ 48.989289][ T6949] ip6gretap1: entered promiscuous mode [ 48.991468][ T6949] bridge0: port 3(ip6gretap1) entered blocking state [ 48.991705][ T6949] bridge0: port 3(ip6gretap1) entered forwarding state [ 49.032986][ T6951] loop2: detected capacity change from 0 to 2048 [ 49.056858][ T6953] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 49.059842][ T6953] bridge0: port 3(macsec0) entered blocking state [ 49.061831][ T6953] bridge0: port 3(macsec0) entered disabled state [ 49.063872][ T6953] macsec0: entered allmulticast mode [ 49.066155][ T6953] veth1_macvtap: entered allmulticast mode [ 49.069060][ T6953] macsec0: entered promiscuous mode [ 49.071384][ T6953] bridge0: port 3(macsec0) entered blocking state [ 49.071661][ T6953] bridge0: port 3(macsec0) entered forwarding state [ 49.087609][ T6526] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [ 49.087987][ T6526] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 49.098591][ T6526] bcachefs (loop0): clean shutdown complete, journal seq 16 [ 49.099261][ T6526] bcachefs (loop0): marking filesystem clean [ 49.118516][ T6955] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 49.141948][ T6958] netlink: 'syz.4.90': attribute type 13 has an invalid length. [ 49.151161][ T6949] bridge0: port 4(syz_tun) entered blocking state [ 49.151351][ T6949] bridge0: port 4(syz_tun) entered disabled state [ 49.151596][ T6949] syz_tun: entered allmulticast mode [ 49.152667][ T6949] syz_tun: entered promiscuous mode [ 49.153086][ T6949] bridge0: port 4(syz_tun) entered blocking state [ 49.153223][ T6949] bridge0: port 4(syz_tun) entered forwarding state [ 49.160884][ T6958] macvtap0: refused to change device tx_queue_len [ 49.163752][ T6951] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 49.174884][ T6951] Remounting filesystem read-only [ 49.183256][ T6526] bcachefs (loop0): shutdown complete [ 49.246419][ T6951] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 49.496058][ T6972] warning: `syz.4.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.677278][ T6542] block nbd4: Receive control failed (result -107) [ 49.737410][ T6979] block nbd4: shutting down sockets [ 49.840787][ T6987] tipc: Started in network mode [ 49.840988][ T6987] tipc: Node identity 080211000001, cluster identity 4711 [ 49.841547][ T6987] tipc: Enabled bearer , priority 0 [ 49.842409][ T6987] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 49.842716][ T6987] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 49.890395][ T6987] tipc: Resetting bearer [ 49.891405][ T6987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.891811][ T6987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.035869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.036217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.117608][ T6542] block nbd3: Receive control failed (result -107) [ 50.173110][ T6658] block nbd3: shutting down sockets [ 50.184733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.283808][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.287370][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.334752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.334910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.484702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.624596][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.624758][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.767772][ T7006] netlink: 'syz.4.108': attribute type 13 has an invalid length. [ 50.769478][ T7006] macvtap0: refused to change device tx_queue_len [ 50.915935][ T6579] tipc: Node number set to 134418688 [ 50.955184][ T7010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.109'. [ 51.142697][ T7015] loop4: detected capacity change from 0 to 1024 [ 51.180261][ T781] hfsplus: b-tree write err: -5, ino 8 [ 51.258784][ T7017] block nbd3: shutting down sockets [ 51.275653][ T7020] loop0: detected capacity change from 0 to 2048 [ 51.309200][ T7022] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 51.345732][ T7020] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 51.353221][ T7020] Remounting filesystem read-only [ 51.370736][ T7024] vlan2: entered promiscuous mode [ 51.372728][ T7024] team0: entered promiscuous mode [ 51.374486][ T7024] team_slave_0: entered promiscuous mode [ 51.377356][ T7024] team_slave_1: entered promiscuous mode [ 51.379268][ T7024] vlan2: entered allmulticast mode [ 51.379610][ T7020] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 51.383500][ T7024] team0: entered allmulticast mode [ 51.385571][ T7024] team_slave_0: entered allmulticast mode [ 51.387285][ T7024] team_slave_1: entered allmulticast mode [ 51.405898][ T7024] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 51.763110][ T7024] bond_slave_0: entered promiscuous mode [ 51.763354][ T7024] bond_slave_1: entered promiscuous mode [ 51.763955][ T7024] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 51.794074][ T7024] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 51.840619][ T7038] netlink: 'syz.0.121': attribute type 13 has an invalid length. [ 51.874441][ T7038] veth0_macvtap: left promiscuous mode [ 51.915320][ T7038] macvtap0: entered allmulticast mode [ 51.934989][ T7038] macvtap0: refused to change device tx_queue_len [ 52.004267][ T7024] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.024006][ T7024] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.131014][ T7024] bridge0: port 3(macsec0) entered disabled state [ 52.207614][ T7045] loop0: detected capacity change from 0 to 256 [ 52.239118][ T7045] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 52.354821][ T7049] loop4: detected capacity change from 0 to 1024 [ 52.389933][ T14] hfsplus: b-tree write err: -5, ino 8 [ 52.477529][ T7051] loop0: detected capacity change from 0 to 2048 [ 52.637958][ T7057] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.664012][ T7051] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12 [ 52.664907][ T7051] Remounting filesystem read-only [ 52.797907][ T7051] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 53.799320][ T7072] loop1: detected capacity change from 0 to 1024 [ 53.829664][ T7072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.147841][ T7084] syzkaller0: entered promiscuous mode [ 54.147913][ T7084] syzkaller0: entered allmulticast mode [ 55.169482][ T6533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.533484][ T7136] syzkaller0: entered promiscuous mode [ 55.533556][ T7136] syzkaller0: entered allmulticast mode [ 56.647575][ T7139] loop0: detected capacity change from 0 to 32768 [ 56.660402][ T7139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.157 (7139) [ 56.680446][ T7139] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 56.680546][ T7139] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 56.680581][ T7139] BTRFS info (device loop0): using free-space-tree [ 56.970817][ T7139] bridge0: port 3(syz_tun) entered blocking state [ 56.970901][ T7139] bridge0: port 3(syz_tun) entered disabled state [ 56.971082][ T7139] syz_tun: entered allmulticast mode [ 56.972123][ T7139] syz_tun: entered promiscuous mode [ 56.992461][ T7139] bridge0: port 3(syz_tun) entered blocking state [ 56.992887][ T7139] bridge0: port 3(syz_tun) entered forwarding state [ 58.578282][ T7210] netlink: 2 bytes leftover after parsing attributes in process `syz.3.176'. [ 58.634066][ T6526] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 61.338000][ T7325] syzkaller0: entered promiscuous mode [ 61.338078][ T7325] syzkaller0: entered allmulticast mode [ 61.366850][ T7326] netlink: 'syz.4.227': attribute type 2 has an invalid length. [ 61.371269][ T7326] netlink: 'syz.4.227': attribute type 5 has an invalid length. [ 61.377395][ T7326] netlink: 'syz.4.227': attribute type 6 has an invalid length. [ 61.379866][ T7326] netlink: 'syz.4.227': attribute type 7 has an invalid length. [ 61.382507][ T7326] netlink: 9 bytes leftover after parsing attributes in process `syz.4.227'. [ 61.402692][ T7326] netlink: 103672 bytes leftover after parsing attributes in process `syz.4.227'. [ 61.403344][ T7326] netlink: 'syz.4.227': attribute type 2 has an invalid length. [ 61.403994][ T7326] netlink: 'syz.4.227': attribute type 5 has an invalid length. [ 61.404777][ T7326] netlink: 'syz.4.227': attribute type 6 has an invalid length. [ 61.405265][ T7326] netlink: 'syz.4.227': attribute type 7 has an invalid length. [ 61.406044][ T7326] netlink: 9 bytes leftover after parsing attributes in process `syz.4.227'. [ 62.397705][ T7342] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.233'. [ 62.527230][ T7352] netlink: 830 bytes leftover after parsing attributes in process `syz.3.238'. [ 63.506993][ T7372] loop0: detected capacity change from 0 to 256 [ 63.510720][ T7372] exfat: Bad value for 'uid' [ 63.514111][ T7372] exfat: Bad value for 'uid' [ 63.580590][ T7378] »»»»»»: renamed from vlan0 (while UP) [ 63.657043][ T7383] netlink: 2 bytes leftover after parsing attributes in process `syz.3.250'. [ 63.826033][ T7403] netlink: 'syz.3.260': attribute type 29 has an invalid length. [ 63.830721][ T7403] netlink: 'syz.3.260': attribute type 29 has an invalid length. [ 63.872261][ T7406] syz.4.261 uses obsolete (PF_INET,SOCK_PACKET) [ 63.895380][ T7397] syzkaller0: entered promiscuous mode [ 63.897500][ T7397] syzkaller0: entered allmulticast mode [ 63.952926][ T7408] loop3: detected capacity change from 0 to 256 [ 63.955579][ T7408] exfat: Bad value for 'uid' [ 63.955641][ T7408] exfat: Bad value for 'uid' [ 64.747965][ T2406] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.748129][ T2406] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.804217][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.268'. [ 64.917900][ T7433] loop1: detected capacity change from 0 to 256 [ 64.924129][ T7433] exfat: Bad value for 'uid' [ 64.926821][ T7433] exfat: Bad value for 'uid' [ 64.930989][ T7438] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.272'. [ 66.249889][ T7479] loop0: detected capacity change from 0 to 256 [ 66.252752][ T7479] exfat: Bad value for 'uid' [ 66.253371][ T7479] exfat: Bad value for 'uid' [ 69.884076][ T2321] cfg80211: failed to load regulatory.db [ 78.133785][ T7505] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.294'. [ 78.149402][ T7505] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 78.264118][ T7515] loop4: detected capacity change from 0 to 256 [ 78.266971][ T7515] exfat: Bad value for 'uid' [ 78.270888][ T7515] exfat: Bad value for 'uid' [ 78.501973][ T7540] syzkaller0: entered promiscuous mode [ 78.503924][ T7540] syzkaller0: entered allmulticast mode [ 78.730687][ T7560] loop0: detected capacity change from 0 to 256 [ 78.731381][ T7560] exfat: Bad value for 'uid' [ 78.731411][ T7560] exfat: Bad value for 'uid' [ 78.826850][ T7556] syzkaller0: entered promiscuous mode [ 78.826922][ T7556] syzkaller0: entered allmulticast mode [ 78.875098][ T7567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.317'. [ 79.091330][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.4.317'. [ 79.095296][ T7567] netlink: 60 bytes leftover after parsing attributes in process `syz.4.317'. [ 79.159677][ T7587] netlink: 'syz.4.325': attribute type 21 has an invalid length. [ 79.159745][ T7587] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.160268][ T7587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.160327][ T7587] IPv6: NLM_F_CREATE should be set when creating new route [ 79.160366][ T7587] IPv6: NLM_F_CREATE should be set when creating new route [ 79.160394][ T7587] IPv6: NLM_F_CREATE should be set when creating new route [ 79.912531][ T7594] loop0: detected capacity change from 0 to 256 [ 79.918515][ T7594] exfat: Bad value for 'uid' [ 79.919955][ T7594] exfat: Bad value for 'uid' [ 79.932978][ T7595] netlink: 68 bytes leftover after parsing attributes in process `syz.2.327'. [ 80.021397][ T7597] loop3: detected capacity change from 0 to 2048 [ 80.054109][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.332'. [ 80.078365][ T7604] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.093270][ T7597] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 80.093815][ T7597] Remounting filesystem read-only [ 92.035626][ T7650] loop2: detected capacity change from 0 to 256 [ 92.061203][ T7653] netlink: 68 bytes leftover after parsing attributes in process `syz.4.342'. [ 92.132740][ T7650] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 92.283019][ T7673] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 92.289045][ T7673] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 92.295834][ T7673] tipc: Resetting bearer [ 92.428589][ T7675] Illegal XDP return value 4294967294 on prog (id 36) dev N/A, expect packet loss! [ 93.142946][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 93.229168][ T7687] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 93.229251][ T7687] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 93.251365][ T7693] netlink: 68 bytes leftover after parsing attributes in process `syz.1.358'. [ 93.308533][ T7699] loop0: detected capacity change from 0 to 256 [ 93.319057][ T7696] tipc: Resetting bearer [ 93.319705][ T7697] syzkaller0: entered promiscuous mode [ 93.319738][ T7697] syzkaller0: entered allmulticast mode [ 93.330435][ T7699] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 93.591825][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 94.438484][ T7728] loop0: detected capacity change from 0 to 256 [ 94.441859][ T7730] syzkaller0: entered promiscuous mode [ 94.441943][ T7730] syzkaller0: entered allmulticast mode [ 94.478211][ T7728] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 94.637702][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 94.800145][ T7759] syzkaller0: entered promiscuous mode [ 94.800232][ T7759] syzkaller0: entered allmulticast mode [ 95.679851][ T7779] loop2: detected capacity change from 0 to 2048 [ 95.692171][ T7781] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.722563][ T7779] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 12 [ 95.723761][ T7779] Remounting filesystem read-only [ 95.788161][ T7779] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 95.840974][ T7788] syzkaller0: entered promiscuous mode [ 95.842659][ T7788] syzkaller0: entered allmulticast mode [ 95.861709][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 96.791339][ T7812] syzkaller0: entered promiscuous mode [ 96.797156][ T7812] syzkaller0: entered allmulticast mode [ 96.837052][ T7817] [ 96.838021][ T7817] ============================= [ 96.839677][ T7817] WARNING: suspicious RCU usage [ 96.841001][ T7817] 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 Not tainted [ 96.842790][ T7817] ----------------------------- [ 96.844140][ T7817] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 96.845642][ T7815] loop4: detected capacity change from 0 to 2048 [ 96.848897][ T7817] [ 96.848897][ T7817] other info that might help us debug this: [ 96.848897][ T7817] [ 96.851721][ T7817] [ 96.851721][ T7817] rcu_scheduler_active = 2, debug_locks = 1 [ 96.854006][ T7817] 1 lock held by syz.2.411/7817: [ 96.855760][ T7817] #0: ffff80008f869b60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x18/0x54 [ 96.858718][ T7817] [ 96.858718][ T7817] stack backtrace: [ 96.860316][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.2.411 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 96.863243][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.866084][ T7817] Call trace: [ 96.867006][ T7817] show_stack+0x2c/0x3c (C) [ 96.868319][ T7817] __dump_stack+0x30/0x40 [ 96.869512][ T7817] dump_stack_lvl+0xd8/0x12c [ 96.870829][ T7817] dump_stack+0x1c/0x28 [ 96.872089][ T7817] lockdep_rcu_suspicious+0x168/0x274 [ 96.873594][ T7817] task_cls_state+0x1d0/0x1f0 [ 96.874916][ T7817] bpf_get_cgroup_classid_curr+0x1c/0x6c [ 96.876493][ T7817] bpf_prog_cd2e46495e8fe8a5+0x4c/0x70 [ 96.878076][ T7817] bpf_prog_run_pin_on_cpu+0x70/0x1e8 [ 96.879583][ T7817] bpf_prog_test_run_syscall+0x2fc/0x4ac [ 96.881177][ T7817] bpf_prog_test_run+0x2b4/0x33c [ 96.882662][ T7817] __sys_bpf+0x4b0/0x614 [ 96.883862][ T7817] __arm64_sys_bpf+0x80/0x98 [ 96.885180][ T7817] invoke_syscall+0x98/0x2b8 [ 96.886436][ T7817] el0_svc_common+0x130/0x23c [ 96.887757][ T7817] do_el0_svc+0x48/0x58 [ 96.888886][ T7817] el0_svc+0x58/0x180 [ 96.889981][ T7817] el0t_64_sync_handler+0x84/0x12c [ 96.891455][ T7817] el0t_64_sync+0x198/0x19c ** replaying previous printk message ** [ 96.891810][ T7819] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.919370][ T7815] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 96.919915][ T7815] Remounting filesystem read-only [ 96.940062][ T7815] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer