last executing test programs: 7.243732841s ago: executing program 1 (id=1353): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 4.454281933s ago: executing program 1 (id=1366): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xe000000}, "0a790cc55a8e"}}}}}}}, 0x0) 4.347154994s ago: executing program 1 (id=1369): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7b52, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 4.082612968s ago: executing program 1 (id=1374): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.99008001s ago: executing program 1 (id=1376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 3.93965838s ago: executing program 4 (id=1377): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954c"}, 0x3b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x38, 0x1, 0x94, 0x8000000000000001, 0x1fe3, 0x2], 0x0, 0x0}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000a40), &(0x7f0000000000)=ANY=[@ANYBLOB='e'], 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r5, 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r5, 0xab05) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r10) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r6, 0x0}) io_uring_enter(r7, 0x3f70, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r11, 0x8b1a, &(0x7f0000000040)) 3.071232494s ago: executing program 3 (id=1381): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) 2.927880346s ago: executing program 4 (id=1383): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 2.306357925s ago: executing program 3 (id=1384): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 2.245018316s ago: executing program 4 (id=1385): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7b52, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 2.185727727s ago: executing program 2 (id=1387): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0x905e, 0x2, 0x2, 0x4000020}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.087506129s ago: executing program 4 (id=1388): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) eventfd(0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) 2.067013209s ago: executing program 3 (id=1389): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.751637444s ago: executing program 0 (id=1391): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.060554294s ago: executing program 0 (id=1392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 910.615427ms ago: executing program 4 (id=1393): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000640)=0x8000) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954c"}, 0x3b) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x38, 0x1, 0x94, 0x8000000000000001, 0x1fe3, 0x2], 0x0, 0x0}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x8d}, 0x90) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000a40), &(0x7f0000000000)=ANY=[@ANYBLOB='e'], 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r5, 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r5, 0xab05) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b1a, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r10) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r6, 0x0}) io_uring_enter(r7, 0x3f70, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r11, 0x8b1a, &(0x7f0000000040)) 898.836547ms ago: executing program 2 (id=1394): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) 822.312608ms ago: executing program 2 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 686.173679ms ago: executing program 0 (id=1396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x3100, 0x2}, @flat=@weak_binder={0x77622a85, 0x100}, @flat=@binder={0x73622a85, 0x1000}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 607.753651ms ago: executing program 3 (id=1397): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x184, 0x1a, 0xffffffffffffffff, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in=@loopback, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x970, 0x0, 0x0, 0xa80}, {0x0, 0x3, 0x0, 0xa6}, {0x4}, 0x70bd2a, 0x3503, 0x2, 0x0, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'authencesn(sha384-generic,cbc(aes-ce))\x00'}, 0x0, 0x100}}]}, 0x184}}, 0x0) 569.787351ms ago: executing program 2 (id=1398): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x18, 0x2004, @fd_index=0x5, 0x7, 0x0, 0x0, 0x18, 0x0, {0x1}}) io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0) 562.384782ms ago: executing program 0 (id=1399): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f00000002c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 443.729823ms ago: executing program 3 (id=1400): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x6, &(0x7f0000000500)=[{0xb0c, 0x1, 0x1, 0x3}, {0x28, 0x0, 0x7}, {0x9, 0x0, 0x5, 0x1}, {0x1, 0x7, 0x10, 0x1}, {0x1ff, 0xff, 0xf}, {0x101, 0x0, 0x0, 0x10000}]}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, 0xffffffffffffffff, 0x15b77000) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$dri(0x0, 0xf003, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) close(0x3) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000002c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x3c}, 0x60) 399.669344ms ago: executing program 4 (id=1401): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, 0x0, 0x0) 349.742665ms ago: executing program 0 (id=1402): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 245.947446ms ago: executing program 3 (id=1403): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20000010) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) eventfd(0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) 72.822339ms ago: executing program 0 (id=1404): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000140)={[{@debug}, {@errors_remount}, {@quota}, {@errors_remount}, {@minixdf}, {@sb={'sb', 0x3d, 0x9}}]}, 0x1, 0x520, &(0x7f0000000d80)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') fanotify_init(0xf00, 0x1001) socket$kcm(0x10, 0x2, 0x0) read$proc_mixer(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0xa0000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831b538dfd8e012e79578e51bc5af65ff7ae735ffc8191a9bb0a83099e90f4580d760551b5b342f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea086e95767d42b4e54861d0227dbfd2e6d28715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c62fd5d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc2200000000000001ff9682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e2331d01ce99a069694124d37cef099ece729aa218f9f44ad06a223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb8fc500404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99ff987900040000009feb121c49e07dbed4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39e00213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd9205218ee0200e2ff08644fb94c06003dc39050f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e906049fe86e09c58e273cd905deb28c13c1ed1c9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f891fab9d3f2e82c5f6fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935000000009c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f281e6bad1e5aa6d901c279eb156c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b4c6936531effce7115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b402bbab76fbb9d8a917df5b2e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380b3e365f84a3e5b116ae3e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627aaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a00000000000000000000000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8d5f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c4a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d76ef45af7d87b308117a9ea24dcda2bc42cf20942c31268a400a221d7b1622585094e9dd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a420cc91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc1a170200a63a83ab25a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b47800acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7acb37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c901d99eced99b46b43016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa91811ccd7c1b1a92bac529df90000000000000000000000004000301b5557b674a86db8c4bfd58ff30000000000000000000000e8f1ed2ea68b0569be17bd73c0633ed4acaaef9e9f7d21998f55b71b26af7e284b1cc4685d740a9d106380dd8cb78f9d9c8cf59b155bc569ddd3098417286bec31896306410a60acadb0f3fb44d30b82986b792635155fa3d562d3aa09452cbb201b0dfed6412837bc2237acf7ca5997ee1898541f4a1c4031e240ccc80ee8fad036ce04409c4630821b8b99be5a3f72afc458f8417544014a67ae4ad31b15c8e13c9f0cdee4abefd0ed28a4a55dd992a748008822d05f13b1a8112d7f41e3bf28bcc1b0963798bed4e0db07d0574016276aa28a86eb33d20a5d58f58201edcef1253b02aac4c74427322ec24809bb059c41db9ee1c3e728c76c5ade17df0a7fc74229ea1a525ee42e8eac3675cb18d6c06748e93179c382f331dde2eea7eab2da71c2ea7086c0c71b6e3d837fdfdc1a5285c471b11eb3311a9f7459a57f7174d000000000000000000000000000000000000000000000008c6987f5d91d640fe5d83d4489b382fe3d3e49c23dcee2af69ba44ab575f354ed026cbf37acc05331084088093fa14152ee6d861dc27a69a9a563c0feb8b27fb7d4586b35a6f181793d5b73e231e7a2d1a6f564a06adc348b9a1c1017f908f99e136b04a0d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 72.459089ms ago: executing program 2 (id=1405): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000300)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x2}, 0x90) 61.393649ms ago: executing program 1 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x844) 0s ago: executing program 2 (id=1407): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): for FREE_SPACE_TREE_VALID (0x2) [ 83.233640][ T26] audit: type=1800 audit(1750863868.799:3): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.65" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 84.667662][ T4538] loop2: detected capacity change from 0 to 32768 [ 84.778812][ T4538] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.75 (4538) [ 85.402405][ T4476] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.599062][ T4476] usb 5-1: device descriptor read/64, error -71 [ 85.726181][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 85.793893][ T4551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 85.882476][ T4476] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.082531][ T4476] usb 5-1: device descriptor read/64, error -71 [ 86.212628][ T4476] usb usb5-port1: attempt power cycle [ 86.592627][ T4542] loop1: detected capacity change from 0 to 40427 [ 86.629507][ T4542] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.658299][ T4542] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.685773][ T4542] F2FS-fs (loop1): invalid crc value [ 86.712849][ T4476] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.974477][ T4542] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 87.477529][ T4573] loop3: detected capacity change from 0 to 65536 [ 87.486965][ T13] cfg80211: failed to load regulatory.db [ 87.496536][ T4218] ath6kl: Failed to init ath6kl core: -71 [ 87.555371][ T4581] loop0: detected capacity change from 0 to 256 [ 87.582633][ T4476] usb 5-1: device descriptor read/8, error -71 [ 87.693069][ T4218] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 87.693812][ T4581] exfat: Deprecated parameter 'utf8' [ 87.706392][ T4581] exfat: Deprecated parameter 'namecase' [ 87.716387][ T4581] exfat: Deprecated parameter 'namecase' [ 87.735277][ T4218] usb 4-1: USB disconnect, device number 2 [ 87.750221][ T4573] XFS (loop3): Mounting V5 Filesystem [ 87.852603][ T4476] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.998685][ T4542] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.022847][ T4476] usb 5-1: device descriptor read/8, error -71 [ 88.153421][ T4476] usb usb5-port1: unable to enumerate USB device [ 88.209578][ T4542] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 88.362758][ T4581] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 88.638073][ T4573] XFS (loop3): Ending clean mount [ 88.981305][ T4218] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 89.079846][ T4218] XFS (loop3): Unmount and run xfs_repair [ 89.128029][ T4218] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 89.310702][ T4218] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 89.571955][ T4218] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 89.659997][ T4218] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 89.697148][ T4218] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 89.722228][ T4218] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 89.769055][ T4218] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 89.796565][ T4218] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.828413][ T4218] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 89.868776][ T4611] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 89.887861][ T4611] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 89.904075][ T4611] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 89.925496][ T4607] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.580582][ T4179] XFS (loop3): Unmounting Filesystem [ 90.701080][ T4629] 9pnet_virtio: no channels available for device 127.0.0.1 [ 92.561506][ T4638] input: syz0 as /devices/virtual/input/input7 [ 92.841416][ T4645] loop0: detected capacity change from 0 to 4096 [ 92.912698][ T4645] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 94.010729][ T4658] loop2: detected capacity change from 0 to 65536 [ 95.391153][ T4658] XFS (loop2): Mounting V5 Filesystem [ 95.779443][ T4686] input: syz0 as /devices/virtual/input/input8 [ 95.971082][ T4658] XFS (loop2): Ending clean mount [ 96.185189][ T13] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 96.208528][ T13] XFS (loop2): Unmount and run xfs_repair [ 96.216568][ T13] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 96.226693][ T13] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 96.241107][ T13] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 96.261796][ T13] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 96.275453][ T13] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 96.308434][ T13] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 96.329971][ T13] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 96.347609][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.358910][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 96.390681][ T4696] XFS (loop2): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 96.435808][ T4696] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 96.460041][ T4696] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 96.943382][ T4175] XFS (loop2): Unmounting Filesystem [ 98.811146][ T4303] wlan1: Trigger new scan to find an IBSS to join [ 99.892824][ T4750] loop1: detected capacity change from 0 to 65536 [ 99.909161][ T4736] input: syz0 as /devices/virtual/input/input9 [ 101.282452][ T4218] Bluetooth: hci4: command 0x0405 tx timeout [ 101.487045][ T26] audit: type=1326 audit(1750863887.049:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 101.492961][ T4773] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 101.509083][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.542429][ T4773] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 101.593324][ T4750] XFS (loop1): Mounting V5 Filesystem [ 101.619736][ T26] audit: type=1326 audit(1750863887.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 101.641843][ C0] vkms_vblank_simulate: vblank timer overrun [ 102.121115][ T4786] loop3: detected capacity change from 0 to 40427 [ 102.134940][ T144] wlan1: Trigger new scan to find an IBSS to join [ 102.195852][ T4750] XFS (loop1): Ending clean mount [ 102.260816][ T26] audit: type=1326 audit(1750863887.049:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 102.495572][ T4786] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 102.526379][ T4786] F2FS-fs (loop3): invalid crc value [ 102.537448][ T4218] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 102.585170][ T4786] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.663656][ T4786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.707089][ T4218] XFS (loop1): Unmount and run xfs_repair [ 102.739879][ T4218] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 102.847198][ T26] audit: type=1326 audit(1750863887.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 102.869809][ T4218] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 102.869998][ T26] audit: type=1326 audit(1750863887.049:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 102.922338][ T4218] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 102.977847][ T26] audit: type=1326 audit(1750863887.049:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 102.993043][ T4218] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 103.039959][ T4218] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 103.059364][ T4218] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 103.078745][ T4218] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 103.098647][ T4218] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.117958][ T4218] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 103.139821][ T26] audit: type=1326 audit(1750863887.049:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 103.180337][ T4793] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 103.196020][ T26] audit: type=1326 audit(1750863887.049:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 103.210393][ T4793] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 103.234065][ T4793] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 103.247872][ T26] audit: type=1326 audit(1750863887.049:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 103.270356][ T26] audit: type=1326 audit(1750863887.049:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4772 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb428ecb929 code=0x7ffc0000 [ 103.945828][ T9] wlan1: Trigger new scan to find an IBSS to join [ 104.067633][ T4170] XFS (loop1): Unmounting Filesystem [ 104.702092][ T4798] loop2: detected capacity change from 0 to 32768 [ 104.785548][ T4798] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.153 (4798) [ 104.934938][ T4798] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 104.986476][ T4798] BTRFS info (device loop2): setting nodatacow, compression disabled [ 105.026550][ T4798] BTRFS info (device loop2): max_inline at 0 [ 105.048678][ T4798] BTRFS info (device loop2): enabling disk space caching [ 105.065036][ T4798] BTRFS info (device loop2): turning off barriers [ 105.262574][ T4798] BTRFS info (device loop2): turning on flush-on-commit [ 105.330206][ T4798] BTRFS info (device loop2): doing ref verification [ 105.344486][ T4798] BTRFS info (device loop2): force clearing of disk cache [ 105.354324][ T4798] BTRFS info (device loop2): enabling ssd optimizations [ 105.402418][ T4798] BTRFS info (device loop2): max_inline at 4096 [ 105.467835][ T4798] BTRFS info (device loop2): disk space caching is enabled [ 105.498029][ T4798] BTRFS info (device loop2): has skinny extents [ 105.557466][ T4840] loop0: detected capacity change from 0 to 256 [ 105.654943][ T4840] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.768041][ T4840] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 105.821179][ T4840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 105.863390][ T4837] loop4: detected capacity change from 0 to 2048 [ 106.813005][ T4865] input: syz0 as /devices/virtual/input/input10 [ 107.020878][ T4798] BTRFS error (device loop2): open_ctree failed: -12 [ 107.179372][ T144] wlan1: Trigger new scan to find an IBSS to join [ 107.188420][ T144] wlan1: Trigger new scan to find an IBSS to join [ 107.250327][ T4837] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only [ 107.312010][ T4837] hpfs: filesystem error: improperly stopped [ 107.332705][ T4837] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 108.927745][ T4685] wlan1: Creating new IBSS network, BSSID 82:78:7d:c7:4f:2c [ 109.006148][ T4892] loop4: detected capacity change from 0 to 256 [ 109.207427][ T4892] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.292169][ T4892] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 109.373298][ T4892] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 110.970800][ T4943] loop1: detected capacity change from 0 to 256 [ 111.012239][ T4943] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.034524][ T4943] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 111.034812][ T4947] netlink: 'syz.4.202': attribute type 10 has an invalid length. [ 111.102443][ T4943] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 111.242503][ T4477] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.842868][ T4685] wlan1: Trigger new scan to find an IBSS to join [ 112.129671][ T4477] usb 3-1: device descriptor read/64, error -71 [ 112.215829][ T4965] 9pnet: Could not find request transport: 0xffffffffffffffff [ 112.802783][ T4428] wlan1: Trigger new scan to find an IBSS to join [ 113.175260][ T4981] loop0: detected capacity change from 0 to 256 [ 113.291905][ T4981] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.342574][ T4981] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 113.498136][ T4981] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 113.648689][ T4992] loop1: detected capacity change from 0 to 128 [ 113.661373][ T4994] 9pnet_virtio: no channels available for device 127.0.0.1 [ 114.050398][ T4439] wlan1: Creating new IBSS network, BSSID 1a:d4:2a:07:b6:20 [ 114.611685][ T5006] loop4: detected capacity change from 0 to 512 [ 114.705129][ T5006] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 114.752922][ T5006] EXT4-fs (loop4): invalid journal inode [ 114.760908][ T5006] EXT4-fs (loop4): can't get journal size [ 114.804884][ T5006] EXT4-fs (loop4): 1 truncate cleaned up [ 114.810797][ T5006] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 115.911084][ T4685] wlan1: Trigger new scan to find an IBSS to join [ 115.940453][ T5031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.234'. [ 115.970601][ T5034] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 116.090421][ T5037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 116.099671][ T5037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 116.157435][ T5041] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.199083][ T5045] netem: incorrect ge model size [ 116.207743][ T5045] netem: change failed [ 117.012489][ T4439] wlan1: Trigger new scan to find an IBSS to join [ 117.039836][ T5057] loop0: detected capacity change from 0 to 512 [ 117.146691][ T5057] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 117.231876][ T5057] EXT4-fs (loop0): invalid journal inode [ 117.261947][ T5057] EXT4-fs (loop0): can't get journal size [ 117.308670][ T5057] EXT4-fs (loop0): 1 truncate cleaned up [ 117.493840][ T5057] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 118.200080][ T5078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.250'. [ 118.570564][ T5090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.252'. [ 118.773864][ T5087] loop3: detected capacity change from 0 to 256 [ 119.297549][ T5087] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.352449][ T5087] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 119.389050][ T5087] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 119.465430][ T5098] loop1: detected capacity change from 0 to 512 [ 119.790437][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 119.843112][ T4685] wlan1: Trigger new scan to find an IBSS to join [ 119.965087][ T5098] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.078407][ T5109] 9pnet_virtio: no channels available for device 127.0.0.1 [ 120.610800][ T5098] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 10: comm syz.1.258: lblock 15 mapped to illegal pblock 10 (length 19) [ 120.629422][ T5112] loop0: detected capacity change from 0 to 512 [ 120.666637][ T5098] EXT4-fs (loop1): Remounting filesystem read-only [ 120.677136][ T5112] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 120.722757][ T5112] EXT4-fs (loop0): invalid journal inode [ 120.728519][ T5112] EXT4-fs (loop0): can't get journal size [ 120.772659][ T5112] EXT4-fs (loop0): 1 truncate cleaned up [ 120.802390][ T5112] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 121.177213][ T5126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.265'. [ 121.456194][ T5133] loop3: detected capacity change from 0 to 256 [ 121.520500][ T5136] netlink: 36 bytes leftover after parsing attributes in process `syz.1.267'. [ 121.564002][ T5133] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.618177][ T5133] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 121.662500][ T5133] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 121.856759][ T4439] wlan1: Trigger new scan to find an IBSS to join [ 122.366536][ T5146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.273'. [ 122.819812][ T5150] loop3: detected capacity change from 0 to 256 [ 122.966956][ T5157] loop0: detected capacity change from 0 to 512 [ 123.000156][ T5150] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.275975][ T5157] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 123.292128][ T5150] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 123.401211][ T5157] EXT4-fs (loop0): invalid journal inode [ 123.551743][ T5157] EXT4-fs (loop0): can't get journal size [ 123.729741][ T5162] 9pnet_virtio: no channels available for device 127.0.0.1 [ 123.770658][ T5157] EXT4-fs (loop0): 1 truncate cleaned up [ 123.786525][ T5157] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 124.145114][ T5171] loop2: detected capacity change from 0 to 256 [ 124.201383][ T5171] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.329084][ T5171] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 124.358609][ T5171] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 124.605498][ T5180] netlink: 48 bytes leftover after parsing attributes in process `syz.3.287'. [ 124.883034][ T4685] wlan1: Trigger new scan to find an IBSS to join [ 125.795154][ T4428] wlan1: Creating new IBSS network, BSSID 92:40:b3:43:e2:f3 [ 126.063104][ T5200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 127.236633][ T144] wlan1: Trigger new scan to find an IBSS to join [ 127.269944][ T5205] loop1: detected capacity change from 0 to 512 [ 127.346767][ T5207] loop2: detected capacity change from 0 to 512 [ 127.548346][ T5205] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 127.557454][ T5207] EXT4-fs warning (device loop2): ext4_fill_super:3982: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 127.604239][ T5205] EXT4-fs (loop1): invalid journal inode [ 127.610268][ T5205] EXT4-fs (loop1): can't get journal size [ 127.618379][ T4259] udevd[4259]: incorrect ext4 checksum on /dev/loop2 [ 127.638378][ T5207] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 127.651046][ T5210] loop4: detected capacity change from 0 to 256 [ 127.678264][ T5205] EXT4-fs (loop1): 1 truncate cleaned up [ 127.696536][ T5205] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 127.755860][ T5210] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.853924][ T5210] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 127.933140][ T5210] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 128.192333][ T5214] loop3: detected capacity change from 0 to 65536 [ 128.318627][ T4439] wlan1: Creating new IBSS network, BSSID 12:96:20:38:39:0c [ 128.385540][ T5220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.298'. [ 128.536368][ T5214] XFS (loop3): Mounting V5 Filesystem [ 128.649663][ T5237] 9pnet_virtio: no channels available for device 127.0.0.1 [ 128.653630][ T5235] netlink: 36 bytes leftover after parsing attributes in process `syz.2.300'. [ 128.951231][ T5214] XFS (loop3): Ending clean mount [ 129.297074][ T4285] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 129.829519][ T4285] XFS (loop3): Unmount and run xfs_repair [ 129.980191][ T4285] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 129.987686][ T4285] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 129.996613][ T4285] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 130.005554][ T4285] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 130.014479][ T4285] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 130.023443][ T4285] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 130.053682][ T4285] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 130.082356][ T4285] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.111623][ T4285] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 130.153540][ T5243] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 130.189220][ T5243] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 130.204179][ T5243] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 131.264123][ T5258] loop1: detected capacity change from 0 to 512 [ 131.317250][ T5258] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 131.402252][ T5258] EXT4-fs (loop1): invalid journal inode [ 131.432110][ T5258] EXT4-fs (loop1): can't get journal size [ 131.444702][ T5263] loop0: detected capacity change from 0 to 256 [ 131.471367][ T5258] EXT4-fs (loop1): 1 truncate cleaned up [ 131.511995][ T5258] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 131.534313][ T5263] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.584634][ T5263] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 131.632616][ T4179] XFS (loop3): Unmounting Filesystem [ 131.679176][ T5263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 132.370265][ T5270] loop4: detected capacity change from 0 to 65536 [ 132.571131][ T5270] XFS (loop4): Mounting V5 Filesystem [ 133.101510][ T5270] XFS (loop4): Ending clean mount [ 133.475384][ T4218] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 133.541625][ T4218] XFS (loop4): Unmount and run xfs_repair [ 133.640594][ T4218] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 133.735075][ T4218] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 133.836973][ T4218] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 133.947247][ T4218] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 134.054012][ T4218] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 134.183041][ T4218] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 134.220580][ T4218] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 134.280749][ T4218] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.306942][ T4218] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 134.317024][ T5291] XFS (loop4): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 134.334494][ T5291] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 134.349262][ T5291] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 135.289163][ T4180] XFS (loop4): Unmounting Filesystem [ 135.432909][ T5306] loop3: detected capacity change from 0 to 512 [ 135.466261][ T5303] loop1: detected capacity change from 0 to 65536 [ 135.535835][ T5306] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 135.565804][ T5306] EXT4-fs (loop3): invalid journal inode [ 135.571540][ T5306] EXT4-fs (loop3): can't get journal size [ 135.607302][ T5315] loop2: detected capacity change from 0 to 256 [ 135.638711][ T5303] XFS (loop1): Mounting V5 Filesystem [ 135.675039][ T5306] EXT4-fs (loop3): 1 truncate cleaned up [ 135.689859][ T5315] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.718965][ T5306] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 135.755684][ T5315] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 135.871708][ T5315] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 135.923259][ T5303] XFS (loop1): Ending clean mount [ 136.246988][ T4477] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 136.247132][ T4477] XFS (loop1): Unmount and run xfs_repair [ 136.247167][ T4477] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 136.247228][ T4477] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 136.247289][ T4477] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 136.247347][ T4477] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 136.247386][ T4477] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 136.247447][ T4477] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 136.247485][ T4477] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 136.247549][ T4477] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.247587][ T4477] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 136.247766][ T5328] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 136.268395][ T5328] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 136.268497][ T5328] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 136.512893][ T5295] loop0: detected capacity change from 0 to 40427 [ 136.760193][ T5295] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 136.760249][ T5295] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 136.854769][ T4170] XFS (loop1): Unmounting Filesystem [ 137.149294][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 137.597624][ T5341] loop3: detected capacity change from 0 to 65536 [ 137.935102][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.950721][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.805400][ T5341] XFS (loop3): Mounting V5 Filesystem [ 138.871552][ T5341] XFS (loop3): Ending clean mount [ 139.182204][ T5342] input: syz0 as /devices/virtual/input/input11 [ 139.760023][ T4221] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 140.075240][ T4221] XFS (loop3): Unmount and run xfs_repair [ 140.121586][ T4221] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 140.165882][ T4221] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 140.206091][ T4221] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 140.219911][ T5370] loop0: detected capacity change from 0 to 256 [ 140.237722][ T4221] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 140.261995][ T5370] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.283144][ T5370] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 140.283315][ T4221] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 140.309557][ T4221] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 140.319094][ T4221] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 140.334565][ T4221] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 140.347537][ T4221] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 140.360071][ T5367] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 140.376092][ T5367] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 140.379732][ T5370] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 140.391294][ T5367] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 140.554121][ T4179] XFS (loop3): Unmounting Filesystem [ 140.797372][ T5382] netlink: 84 bytes leftover after parsing attributes in process `syz.2.342'. [ 140.849333][ T5384] loop0: detected capacity change from 0 to 512 [ 140.969249][ T5384] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 141.013625][ T5384] EXT4-fs (loop0): invalid journal inode [ 141.019410][ T5384] EXT4-fs (loop0): can't get journal size [ 141.254464][ T5384] EXT4-fs (loop0): 1 truncate cleaned up [ 141.264575][ T5384] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 142.217130][ T5399] loop2: detected capacity change from 0 to 8 [ 142.785209][ T5399] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.866553][ T5399] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.882565][ T4437] wlan1: Trigger new scan to find an IBSS to join [ 142.912399][ T5399] SQUASHFS error: Unable to read metadata cache entry [99] [ 143.184527][ T5399] SQUASHFS error: Unable to read inode 0x127 [ 143.211443][ T5412] input: syz0 as /devices/virtual/input/input12 [ 143.330037][ T5411] loop3: detected capacity change from 0 to 65536 [ 143.456679][ T5411] XFS (loop3): Mounting V5 Filesystem [ 143.477875][ T5419] loop0: detected capacity change from 0 to 256 [ 143.540725][ T5419] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 143.686581][ T5419] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 143.870019][ T5411] XFS (loop3): Ending clean mount [ 143.895927][ T5419] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 144.653798][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 145.028707][ T5411] sched: RT throttling activated [ 145.921249][ T5437] netlink: 84 bytes leftover after parsing attributes in process `syz.1.356'. [ 145.934967][ T4249] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 146.003623][ T4249] XFS (loop3): Unmount and run xfs_repair [ 146.036999][ T4249] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 146.077273][ T5439] loop2: detected capacity change from 0 to 512 [ 146.084034][ T4249] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 146.122480][ T4249] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 146.131823][ T4249] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 146.161591][ T4249] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 146.304671][ T5443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'. [ 146.367497][ T5439] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 146.390631][ T5439] EXT4-fs (loop2): invalid journal inode [ 146.436633][ T4249] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 146.529111][ T5439] EXT4-fs (loop2): can't get journal size [ 146.637364][ T4249] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 146.702376][ T4249] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 146.743867][ T4249] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 146.879414][ T5432] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 146.922578][ T5432] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 146.937346][ T5432] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 147.068382][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 147.093748][ T5439] EXT4-fs (loop2): 1 truncate cleaned up [ 147.100733][ T5439] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 147.191968][ T4179] XFS (loop3): Unmounting Filesystem [ 147.899617][ T5457] loop1: detected capacity change from 0 to 65536 [ 148.274976][ T384] wlan1: Trigger new scan to find an IBSS to join [ 148.529371][ T5472] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 148.651931][ T5475] loop2: detected capacity change from 0 to 256 [ 148.726362][ T5475] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.748098][ T5457] XFS (loop1): Mounting V5 Filesystem [ 148.808590][ T5475] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 148.849217][ T5475] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 149.003741][ T5457] XFS (loop1): Ending clean mount [ 149.005883][ T5482] netlink: 84 bytes leftover after parsing attributes in process `syz.0.370'. [ 150.237665][ T5487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.371'. [ 150.313266][ T4470] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 150.347820][ T4470] XFS (loop1): Unmount and run xfs_repair [ 150.367637][ T4470] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 150.694348][ T5492] loop0: detected capacity change from 0 to 65536 [ 150.709303][ T4470] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 150.725807][ T4470] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 150.734832][ T4470] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 150.744670][ T4470] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 150.753700][ T4470] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 150.773156][ T4254] wlan1: Creating new IBSS network, BSSID 2a:6c:c7:1c:fe:f9 [ 150.787399][ T4470] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 150.790420][ T4221] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 150.824749][ T4221] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.837343][ T4470] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.849017][ T4470] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 150.852421][ T5490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.372'. [ 150.867620][ T5485] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 150.882462][ T5485] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 150.897341][ T5485] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 151.163599][ T4170] XFS (loop1): Unmounting Filesystem [ 151.193223][ T5492] XFS (loop0): Mounting V5 Filesystem [ 151.483645][ T5492] XFS (loop0): Ending clean mount [ 151.756852][ T4470] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 151.818787][ T4470] XFS (loop0): Unmount and run xfs_repair [ 151.880589][ T4470] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 151.963034][ T4470] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 152.090755][ T4470] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 152.180152][ T4470] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 152.255333][ T4470] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 152.368851][ T4470] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 152.490490][ T4470] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 152.510030][ T4470] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.550574][ T4470] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 152.591831][ T5504] XFS (loop0): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 152.606104][ T5504] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 152.620948][ T5504] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 152.978215][ T4169] XFS (loop0): Unmounting Filesystem [ 153.443334][ T5520] netlink: 84 bytes leftover after parsing attributes in process `syz.2.381'. [ 154.020756][ T5524] loop2: detected capacity change from 0 to 256 [ 154.208171][ T5525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.383'. [ 154.239818][ T5524] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.311546][ T5524] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 154.354736][ T5524] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 154.821436][ T5536] IPv6: Can't replace route, no match found [ 155.326523][ T5540] loop2: detected capacity change from 0 to 65536 [ 155.548735][ T5540] XFS (loop2): Mounting V5 Filesystem [ 155.782322][ T5548] input: syz0 as /devices/virtual/input/input13 [ 156.068934][ T5540] XFS (loop2): Ending clean mount [ 157.987799][ T21] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 158.178878][ T21] XFS (loop2): Unmount and run xfs_repair [ 158.185336][ T5565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.392'. [ 158.199679][ T21] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 158.276260][ T21] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 158.317034][ T4303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.372690][ T5565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.392'. [ 158.385084][ T21] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 158.519154][ T21] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 158.765293][ T21] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 158.935030][ T21] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 159.010216][ T21] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 159.052713][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.061636][ T21] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 159.082222][ T5574] loop0: detected capacity change from 0 to 256 [ 159.112560][ T5560] XFS (loop2): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 159.127169][ T5560] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 159.142409][ T5560] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 159.187719][ T5574] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.258827][ T5574] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 159.283556][ T4175] XFS (loop2): Unmounting Filesystem [ 159.291862][ T5574] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 160.019402][ T5581] loop0: detected capacity change from 0 to 65536 [ 160.212576][ T5581] XFS (loop0): Mounting V5 Filesystem [ 160.368969][ T5581] XFS (loop0): Ending clean mount [ 161.466295][ T4470] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 161.555800][ T4470] XFS (loop0): Unmount and run xfs_repair [ 161.959303][ T5599] input: syz0 as /devices/virtual/input/input14 [ 161.992407][ T4470] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 162.017481][ T4470] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 162.038853][ T4470] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 162.055865][ T4470] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 162.072677][ T4470] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 162.089861][ T4470] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 162.113381][ T4470] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 162.136144][ T4470] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.160595][ T4470] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 162.177658][ T5601] XFS (loop0): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 162.202588][ T5601] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 162.218081][ T5601] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 162.481944][ T4169] XFS (loop0): Unmounting Filesystem [ 163.393474][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 163.635045][ T5619] loop1: detected capacity change from 0 to 256 [ 163.735806][ T5619] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.768586][ T5619] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 163.824415][ T5619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 164.352707][ T5627] loop4: detected capacity change from 0 to 65536 [ 164.473344][ T5631] input: syz0 as /devices/virtual/input/input15 [ 165.000205][ T5627] XFS (loop4): Mounting V5 Filesystem [ 165.459284][ T4437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.497508][ T5627] XFS (loop4): Ending clean mount [ 165.795393][ T4218] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 166.878556][ T4218] XFS (loop4): Unmount and run xfs_repair [ 166.884463][ T4218] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 166.891865][ T4218] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 166.900815][ T4218] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 166.909733][ T4218] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 166.919161][ T4218] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 166.928102][ T4218] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 166.937046][ T4218] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 166.945991][ T4218] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 166.954914][ T4218] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 166.963978][ T5648] XFS (loop4): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 166.979211][ T5648] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 166.993996][ T5648] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 167.105602][ T4437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.117331][ T4180] XFS (loop4): Unmounting Filesystem [ 167.189972][ T4437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.337812][ T4437] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.850240][ T5659] chnl_net:caif_netlink_parms(): no params data found [ 168.094292][ T5656] chnl_net:caif_netlink_parms(): no params data found [ 168.108440][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.423'. [ 168.382458][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.391298][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.410066][ T5659] device bridge_slave_0 entered promiscuous mode [ 168.469256][ T5691] loop1: detected capacity change from 0 to 256 [ 168.479941][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.490882][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.523860][ T5659] device bridge_slave_1 entered promiscuous mode [ 168.558878][ T5691] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.596450][ T5691] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 168.609514][ T5691] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 168.699433][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.711736][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.727814][ T5656] device bridge_slave_0 entered promiscuous mode [ 168.771224][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.792818][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.799955][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.834302][ T5656] device bridge_slave_1 entered promiscuous mode [ 168.849987][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.081966][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.125236][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.198403][ T5710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.430'. [ 169.227086][ T5659] team0: Port device team_slave_0 added [ 169.254237][ T5659] team0: Port device team_slave_1 added [ 169.341191][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.362486][ T4545] Bluetooth: hci1: command 0x0409 tx timeout [ 169.372817][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.442497][ T4545] Bluetooth: hci2: command 0x0409 tx timeout [ 169.465612][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.573733][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.590836][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.611575][ T5713] loop4: detected capacity change from 0 to 65536 [ 169.635487][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.871720][ T5656] team0: Port device team_slave_0 added [ 169.882852][ T5656] team0: Port device team_slave_1 added [ 169.911129][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.918552][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.950347][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.028084][ T5713] XFS (loop4): Mounting V5 Filesystem [ 170.040686][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.057975][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.086394][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.319149][ T5713] XFS (loop4): Ending clean mount [ 170.407178][ T5659] device hsr_slave_0 entered promiscuous mode [ 170.661760][ T5659] device hsr_slave_1 entered promiscuous mode [ 170.672579][ T5659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.680172][ T5659] Cannot create hsr debugfs directory [ 170.782110][ T4545] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 170.987397][ T4545] XFS (loop4): Unmount and run xfs_repair [ 171.105541][ T4545] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 171.283851][ T4545] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 171.440530][ T4545] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 171.538620][ T4545] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 171.551757][ T4545] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 171.561175][ T4545] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 171.570940][ T4545] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 171.580239][ T4545] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 171.589463][ T4545] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 171.598722][ T5730] XFS (loop4): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 171.611432][ T4221] Bluetooth: hci1: command 0x041b tx timeout [ 171.617582][ T5730] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 171.632759][ T5730] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 171.644914][ T4221] Bluetooth: hci2: command 0x041b tx timeout [ 171.678190][ T5735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 171.857634][ T4286] wlan1: Trigger new scan to find an IBSS to join [ 171.894953][ T4180] XFS (loop4): Unmounting Filesystem [ 171.898177][ T5656] device hsr_slave_0 entered promiscuous mode [ 171.962870][ T5656] device hsr_slave_1 entered promiscuous mode [ 171.980213][ T5747] loop1: detected capacity change from 0 to 256 [ 172.006978][ T5656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.045766][ T5747] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.057598][ T5656] Cannot create hsr debugfs directory [ 172.064269][ T5747] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 172.100401][ T5747] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 173.300634][ T4437] device hsr_slave_0 left promiscuous mode [ 173.390521][ T4437] device hsr_slave_1 left promiscuous mode [ 173.539199][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.683240][ T4221] Bluetooth: hci1: command 0x040f tx timeout [ 173.717605][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.813296][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.842417][ T9] wlan1: Trigger new scan to find an IBSS to join [ 173.851336][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.881542][ T4437] device bridge_slave_1 left promiscuous mode [ 173.913463][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 173.952697][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.988752][ T4437] device bridge_slave_0 left promiscuous mode [ 173.995196][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.020751][ T4437] device veth1_macvtap left promiscuous mode [ 174.028622][ T4437] device veth0_macvtap left promiscuous mode [ 174.037496][ T4437] device veth1_vlan left promiscuous mode [ 174.044490][ T4437] device veth0_vlan left promiscuous mode [ 174.678832][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 174.717566][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 174.748927][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.781981][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.960607][ T4437] bond0 (unregistering): Released all slaves [ 174.986939][ T5790] loop1: detected capacity change from 0 to 65536 [ 175.048170][ T5790] XFS (loop1): Mounting V5 Filesystem [ 175.077153][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 175.091050][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 175.134747][ T5790] XFS (loop1): Ending clean mount [ 175.197089][ T5659] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.482867][ T4470] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 175.567650][ T4470] XFS (loop1): Unmount and run xfs_repair [ 175.713686][ T4470] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 175.884274][ T4470] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 176.091510][ T4470] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 176.173282][ T4221] Bluetooth: hci1: command 0x0419 tx timeout [ 176.179463][ T4221] Bluetooth: hci2: command 0x0419 tx timeout [ 176.213162][ T4470] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 176.222179][ T4470] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 176.259676][ T4470] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 176.269510][ T4470] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 176.289628][ T4470] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.305422][ T4470] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 176.323869][ T5807] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 176.340014][ T5807] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 176.354791][ T5807] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 176.388098][ T5659] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.457785][ T5659] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.635877][ T4170] XFS (loop1): Unmounting Filesystem [ 176.677399][ T5659] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.807174][ T4286] wlan1: Trigger new scan to find an IBSS to join [ 176.813907][ T4620] wlan1: Trigger new scan to find an IBSS to join [ 177.040358][ T5840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 177.111994][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.462'. [ 177.562810][ T5851] loop1: detected capacity change from 0 to 512 [ 177.649030][ T5851] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 177.676956][ T5659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.843626][ T4620] wlan1: Trigger new scan to find an IBSS to join [ 177.906059][ T5659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.916635][ T5851] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 177.938110][ T5862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.468'. [ 177.950999][ T5659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.995696][ T5659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.062486][ T5656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.225389][ T5656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.278160][ T5656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.288472][ T5656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.985883][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.024127][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 179.046185][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 179.109939][ T5659] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.139011][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.151919][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.260610][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.294444][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.324898][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.332036][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.401850][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.412170][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.437676][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.464131][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.471306][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.497515][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.523694][ T5904] netlink: 'syz.1.478': attribute type 33 has an invalid length. [ 179.531490][ T5904] netlink: 152 bytes leftover after parsing attributes in process `syz.1.478'. [ 179.561680][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.592253][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.608880][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.645344][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.657758][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.703252][ T5656] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.734900][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.745379][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.745525][ T5914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 179.762141][ T5909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.480'. [ 179.786290][ T5913] loop1: detected capacity change from 0 to 512 [ 179.811992][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.842401][ T9] wlan1: Trigger new scan to find an IBSS to join [ 179.849345][ T4620] wlan1: Trigger new scan to find an IBSS to join [ 179.855415][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.874497][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.913921][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.929443][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.939805][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.978212][ T5913] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 180.001012][ T5913] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.045994][ T5659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.093162][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.132929][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.141477][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.148622][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.227705][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.242077][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.278621][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.285898][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.300938][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.335991][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.486'. [ 180.362804][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 180.386411][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.394940][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.447504][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.496172][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.532151][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.590610][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.618274][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.658973][ T5656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.696321][ T5656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.731094][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.746907][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.785849][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.831760][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.878144][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.949348][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.972912][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.022343][ T144] wlan1: Creating new IBSS network, BSSID 0e:18:c9:fe:db:5b [ 181.029075][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.064678][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.493'. [ 181.147206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.171702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.287460][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.330389][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.375490][ T5659] device veth0_vlan entered promiscuous mode [ 181.399047][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.413056][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.472889][ T5659] device veth1_vlan entered promiscuous mode [ 181.613566][ T5980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.498'. [ 181.633339][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 181.752906][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.772655][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.842590][ T9] wlan1: Trigger new scan to find an IBSS to join [ 181.941052][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.525951][ T5659] device veth0_macvtap entered promiscuous mode [ 182.555622][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.576493][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.621444][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.652114][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.673911][ T5659] device veth1_macvtap entered promiscuous mode [ 182.702315][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.714534][ T5996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.505'. [ 182.753425][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.782794][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.812050][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.831997][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.875893][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.902750][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.943811][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.964804][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.995353][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.022393][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.043204][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.059511][ T6001] loop1: detected capacity change from 0 to 8192 [ 183.066033][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.086853][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.105357][ T5656] device veth0_vlan entered promiscuous mode [ 183.116547][ T4255] loop1: p1 < > p2 p3 < p5 > [ 183.121542][ T4255] loop1: partition table partially beyond EOD, truncated [ 183.122479][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.169603][ T4255] loop1: p1 start 4294967040 is beyond EOD, truncated [ 183.171474][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.196857][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.217207][ T4255] loop1: p2 start 117440512 is beyond EOD, truncated [ 183.218003][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.238264][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.249204][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.257881][ T4255] loop1: p5 start 117440512 is beyond EOD, truncated [ 183.259371][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.318407][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.328593][ T6001] loop1: p1 < > p2 p3 < p5 > [ 183.351047][ T5659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.352756][ T6001] loop1: partition table partially beyond EOD, truncated [ 183.392669][ T5659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.410752][ T6001] loop1: p1 start 4294967040 is beyond EOD, truncated [ 183.427383][ T6001] loop1: p2 start 117440512 is beyond EOD, truncated [ 183.429594][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.470250][ T5656] device veth1_vlan entered promiscuous mode [ 183.489781][ T6001] loop1: p5 start 117440512 is beyond EOD, truncated [ 183.501668][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.519301][ T5994] loop4: detected capacity change from 0 to 32768 [ 183.548811][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.573186][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.596791][ T5659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.633310][ T5659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.642250][ T5659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.691255][ T5659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.762432][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.892555][ T5656] device veth0_macvtap entered promiscuous mode [ 183.988693][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.000161][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 184.001765][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.064261][ T6026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.512'. [ 184.095687][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 184.171088][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 184.191274][ T5656] device veth1_macvtap entered promiscuous mode [ 184.234029][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.252664][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.447647][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.500956][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.531478][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.549806][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.560169][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.571302][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.612890][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.649639][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.675949][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.706819][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.749348][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.777123][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.516'. [ 184.804184][ T4437] wlan1: Trigger new scan to find an IBSS to join [ 184.811199][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.892214][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.903320][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.923339][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.974050][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.992657][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.052594][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.072934][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.090163][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.101172][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.118722][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.136882][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.154702][ T5656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.172381][ T5656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.186560][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.264846][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.298044][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.596587][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 186.086191][ T5656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.097190][ T4550] Bluetooth: hci3: command 0x0406 tx timeout [ 186.138233][ T5656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.166439][ T5656] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.179593][ T4249] Bluetooth: hci0: command 0x0406 tx timeout [ 186.203932][ T5656] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.237387][ T6072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.527'. [ 186.264246][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 186.319887][ T4620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.348081][ T4620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.431553][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.529997][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.530072][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.538743][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.806568][ T9] wlan1: Trigger new scan to find an IBSS to join [ 186.988588][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.018571][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.082597][ T6105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.534'. [ 187.117870][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.319392][ T6115] loop3: detected capacity change from 0 to 256 [ 187.427934][ T6078] loop1: detected capacity change from 0 to 32768 [ 187.430755][ T6115] exfat: Deprecated parameter 'utf8' [ 187.520265][ T4303] device hsr_slave_0 left promiscuous mode [ 187.547021][ T4303] device hsr_slave_1 left promiscuous mode [ 187.578815][ T6078] XFS (loop1): Mounting V5 Filesystem [ 187.587351][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.626644][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.626804][ T6133] loop2: detected capacity change from 0 to 64 [ 187.649992][ T4303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.661333][ T4303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.686726][ T4303] device bridge_slave_1 left promiscuous mode [ 187.723285][ T4303] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.739768][ T6078] XFS (loop1): Ending clean mount [ 187.815158][ T4620] wlan1: Creating new IBSS network, BSSID 72:35:99:ab:01:55 [ 187.820396][ T6078] XFS (loop1): Quotacheck needed: Please wait. [ 187.833051][ T4303] device bridge_slave_0 left promiscuous mode [ 187.844408][ T4303] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.936743][ T4303] device veth1_macvtap left promiscuous mode [ 187.966670][ T4303] device veth0_macvtap left promiscuous mode [ 188.005469][ T4303] device veth1_vlan left promiscuous mode [ 188.040755][ T6078] XFS (loop1): Quotacheck: Done. [ 188.049412][ T4303] device veth0_vlan left promiscuous mode [ 188.234470][ T4170] XFS (loop1): Unmounting Filesystem [ 188.882605][ T4620] wlan1: Trigger new scan to find an IBSS to join [ 188.930445][ T4303] team0 (unregistering): Port device team_slave_1 removed [ 188.949218][ T4303] team0 (unregistering): Port device team_slave_0 removed [ 188.962164][ T4303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.048883][ T4303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.064180][ T6163] loop1: detected capacity change from 0 to 256 [ 189.095038][ T6163] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.120263][ T6163] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 189.153738][ T6163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 189.206726][ T4303] bond0 (unregistering): Released all slaves [ 189.331337][ T6140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.541'. [ 189.341992][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 189.694154][ T6176] loop2: detected capacity change from 0 to 2048 [ 189.912134][ T4685] wlan1: Creating new IBSS network, BSSID 4a:0a:28:ad:9d:65 [ 189.950901][ T6176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.043793][ T6190] loop4: detected capacity change from 0 to 256 [ 190.851510][ T6190] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 190.905845][ T6190] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 190.979664][ T6190] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 191.335136][ T6198] loop0: detected capacity change from 0 to 65536 [ 191.404865][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.560'. [ 191.523949][ T6198] XFS (loop0): Mounting V5 Filesystem [ 191.530353][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 191.617183][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 191.773032][ T6222] loop2: detected capacity change from 0 to 16 [ 191.954708][ T6222] erofs: (device loop2): mounted with root inode @ nid 36. [ 192.271300][ T6198] XFS (loop0): Ending clean mount [ 192.886607][ T4469] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 192.917801][ T4469] XFS (loop0): Unmount and run xfs_repair [ 193.020819][ T4469] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 193.090142][ T4469] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 193.189003][ T4469] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 193.280525][ T4469] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 193.338489][ T4469] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 193.405561][ T4469] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 193.429971][ T6222] batman_adv: batadv0: Adding interface: vxlan0 [ 193.451811][ T6222] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.498244][ T4469] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 193.511387][ T6222] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 193.521693][ T4469] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.571887][ T4469] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.600051][ T6226] XFS (loop0): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 193.622441][ T6226] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 193.637746][ T6226] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 194.217836][ T6241] loop1: detected capacity change from 0 to 256 [ 194.298342][ T6241] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.342858][ T6241] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 194.399218][ T6241] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 194.733260][ T5659] XFS (loop0): Unmounting Filesystem [ 194.778465][ T6231] Unrecognized hibernate image header format! [ 194.807408][ T6231] PM: hibernation: Image mismatch: architecture specific data [ 195.229149][ T6265] loop1: detected capacity change from 0 to 1024 [ 195.871646][ T4620] hfsplus: b-tree write err: -5, ino 4 [ 195.949341][ T6274] loop3: detected capacity change from 0 to 256 [ 196.102791][ T6274] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.202654][ T6274] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 196.317383][ T6274] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d) [ 196.827159][ T6292] binder: 6286:6292 ioctl c0306201 0 returned -14 [ 197.435056][ T6294] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.509640][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 199.365368][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.371878][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.594735][ T6317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.598'. [ 200.327484][ T6302] input: syz0 as /devices/virtual/input/input17 [ 200.453955][ T6322] netlink: 'syz.4.602': attribute type 39 has an invalid length. [ 200.809832][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 202.931924][ T6350] netlink: 36 bytes leftover after parsing attributes in process `syz.3.611'. [ 202.945052][ T4469] Bluetooth: hci4: command 0x0406 tx timeout [ 202.946956][ T1237] wlan1: Trigger new scan to find an IBSS to join [ 203.842428][ T144] wlan1: Trigger new scan to find an IBSS to join [ 204.221402][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 204.236352][ T23] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 204.283016][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 204.311124][ T6393] netlink: 36 bytes leftover after parsing attributes in process `syz.2.626'. [ 204.453955][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6 [ 204.660412][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0xd [ 204.952597][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 205.213533][ T6401] loop0: detected capacity change from 0 to 512 [ 205.433301][ T6401] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 205.618295][ T6401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 205.632357][ T6401] EXT4-fs (loop0): orphan cleanup on readonly fs [ 206.400341][ T6401] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 206.474682][ T6401] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 206.510823][ T6401] EXT4-fs (loop0): 1 truncate cleaned up [ 206.511178][ T6402] fido_id[6402]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.529235][ T6401] EXT4-fs (loop0): mounted filesystem without journal. Opts: commit=0x0000000000000000,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 206.698569][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 206.698584][ T26] audit: type=1326 audit(1750863992.259:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 206.823075][ T26] audit: type=1326 audit(1750863992.319:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 206.946502][ T26] audit: type=1326 audit(1750863992.319:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.022352][ T26] audit: type=1326 audit(1750863992.319:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.196901][ T26] audit: type=1326 audit(1750863992.319:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.325910][ T26] audit: type=1326 audit(1750863992.319:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.428840][ T6429] loop0: detected capacity change from 0 to 65536 [ 207.437979][ T26] audit: type=1326 audit(1750863992.319:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.469093][ T26] audit: type=1326 audit(1750863992.319:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.491571][ T26] audit: type=1326 audit(1750863992.319:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.532442][ T26] audit: type=1326 audit(1750863992.319:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb87119929 code=0x7ffc0000 [ 207.613121][ T6429] XFS (loop0): Mounting V5 Filesystem [ 207.842495][ T154] wlan1: Trigger new scan to find an IBSS to join [ 207.842501][ T4620] wlan1: Trigger new scan to find an IBSS to join [ 208.049366][ T6429] XFS (loop0): Ending clean mount [ 208.387107][ T1110] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 208.691250][ T1110] XFS (loop0): Unmount and run xfs_repair [ 208.785985][ T1110] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 208.923099][ T1110] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 209.158303][ T1110] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 209.193904][ T1110] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 209.233616][ T1110] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 209.282363][ T1110] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 209.307301][ T1110] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 209.329643][ T1110] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 209.355366][ T1110] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 209.401659][ T6456] XFS (loop0): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 209.421541][ T6456] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x514/0x8a0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 209.436396][ T6456] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 209.457532][ T4439] wlan1: Creating new IBSS network, BSSID 9a:c1:f9:61:16:2f [ 209.465358][ T144] wlan1: Creating new IBSS network, BSSID 7a:8d:b7:b3:8b:7c [ 209.657821][ T5659] XFS (loop0): Unmounting Filesystem [ 209.842406][ T4437] wlan1: Trigger new scan to find an IBSS to join [ 215.792377][ T4303] wlan1: Trigger new scan to find an IBSS to join [ 216.129708][ T6569] loop1: detected capacity change from 0 to 1024 [ 216.216792][ T6569] EXT4-fs (loop1): Ignoring removed bh option [ 216.333181][ T6575] netlink: 'syz.0.697': attribute type 10 has an invalid length. [ 216.621410][ T6569] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 217.134011][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.211616][ T6575] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 217.292392][ T6576] netlink: 'syz.0.697': attribute type 10 has an invalid length. [ 217.354922][ T6576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.697'. [ 217.369918][ T6576] device batadv0 entered promiscuous mode [ 217.561906][ T6576] bond0: (slave batadv0): Releasing backup interface [ 217.913764][ T4221] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 217.930579][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.137366][ T4221] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.456740][ T6598] loop4: detected capacity change from 0 to 1024 [ 218.525291][ T6576] bridge0: port 3(batadv0) entered blocking state [ 218.563772][ T6576] bridge0: port 3(batadv0) entered disabled state [ 218.615675][ T6606] netlink: 84 bytes leftover after parsing attributes in process `syz.3.705'. [ 218.634590][ T4254] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 218.644842][ T4254] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 218.670710][ T6598] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 218.708001][ T6598] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 218.736655][ T6598] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.784934][ T6612] loop1: detected capacity change from 0 to 2048 [ 218.836891][ T6612] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.932828][ T6598] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 218.957037][ T6612] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 218.998078][ T6598] netlink: 48 bytes leftover after parsing attributes in process `syz.4.703'. [ 219.847137][ T154] wlan1: Trigger new scan to find an IBSS to join [ 219.976804][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.444346][ T6641] netlink: 84 bytes leftover after parsing attributes in process `syz.2.719'. [ 220.739877][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 220.752026][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'. [ 222.039177][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.730'. [ 222.049610][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 222.176720][ T6676] netlink: 84 bytes leftover after parsing attributes in process `syz.1.733'. [ 222.270744][ T154] wlan1: Creating new IBSS network, BSSID fe:b3:7a:f3:b9:d9 [ 224.140639][ T6691] lo speed is unknown, defaulting to 1000 [ 224.290905][ T6691] lo speed is unknown, defaulting to 1000 [ 224.303717][ T6691] lo speed is unknown, defaulting to 1000 [ 224.311218][ T6697] netlink: 6 bytes leftover after parsing attributes in process `syz.1.737'. [ 224.330925][ T6697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.382849][ T6691] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.582878][ T6691] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.677072][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 224.694665][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 224.786140][ T6691] lo speed is unknown, defaulting to 1000 [ 224.846806][ T6691] lo speed is unknown, defaulting to 1000 [ 224.887000][ T6691] lo speed is unknown, defaulting to 1000 [ 224.905548][ T6691] lo speed is unknown, defaulting to 1000 [ 224.924112][ T6691] lo speed is unknown, defaulting to 1000 [ 226.510187][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 226.637645][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 226.816300][ T6767] loop3: detected capacity change from 0 to 512 [ 226.880835][ T6766] loop2: detected capacity change from 0 to 4096 [ 226.912487][ T6767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.936028][ T6766] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 226.989536][ T6767] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.768: corrupted in-inode xattr [ 227.088802][ T6767] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 227.104557][ T6767] EXT4-fs (loop3): 1 truncate cleaned up [ 227.115794][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 227.155303][ T6767] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,max_batch_time=0x0000000006000000,journal_dev=0x000000007fffffff,noload,,errors=continue. Quota mode: none. [ 227.567299][ T6791] loop4: detected capacity change from 0 to 512 [ 227.648588][ T6791] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 227.970230][ T6791] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 229.157565][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 230.626755][ T6892] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 231.998087][ T6904] fuse: Bad value for 'fd' [ 239.519293][ T4303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 239.749784][ T4428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 239.807350][ T7054] netlink: 172 bytes leftover after parsing attributes in process `syz.3.880'. [ 240.673937][ T7059] loop0: detected capacity change from 0 to 4096 [ 240.770193][ T7059] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 241.111828][ T7088] loop2: detected capacity change from 0 to 2048 [ 241.182444][ T7088] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 241.278383][ T7088] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,delalloc,. Quota mode: none. [ 243.852556][ T4303] wlan1: Trigger new scan to find an IBSS to join [ 244.022120][ T7145] netlink: 84 bytes leftover after parsing attributes in process `syz.2.916'. [ 245.016992][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 245.349466][ T7177] tipc: Started in network mode [ 245.355905][ T7177] tipc: Node identity ac1414aa, cluster identity 4711 [ 245.367253][ T7177] tipc: Enabled bearer , priority 10 [ 245.473713][ T7180] tipc: Enabled bearer , priority 0 [ 245.998007][ T7198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.932'. [ 246.594983][ T4221] tipc: Node number set to 2886997162 [ 246.693924][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 247.740212][ T7254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.949'. [ 247.842917][ T4216] wlan1: Trigger new scan to find an IBSS to join [ 248.563622][ T7263] loop0: detected capacity change from 0 to 1024 [ 248.906310][ T7278] loop0: detected capacity change from 0 to 512 [ 248.992349][ T7278] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 249.029805][ T7278] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 249.038249][ T7278] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 249.047554][ T7278] System zones: 0-3, 34-34 [ 249.055673][ T7278] EXT4-fs (loop0): orphan cleanup on readonly fs [ 249.062217][ T7278] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.965: bad orphan inode 1039 [ 249.154823][ T4439] wlan1: Trigger new scan to find an IBSS to join [ 249.161801][ T7278] EXT4-fs (loop0): Remounting filesystem read-only [ 249.180598][ T7278] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 249.493599][ T7290] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 250.265513][ T7292] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz.0.965: lblock 0 mapped to illegal pblock 3 (length 1) [ 250.320390][ T4216] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.613860][ T4428] wlan1: Creating new IBSS network, BSSID ea:4b:b1:47:ad:1f [ 250.820337][ T7261] loop2: detected capacity change from 0 to 32768 [ 250.979617][ T7261] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.959 (7261) [ 251.340200][ T7310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.975'. [ 251.354205][ T7261] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 251.400945][ T7261] BTRFS info (device loop2): force zlib compression, level 3 [ 251.447359][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 251.468189][ T7261] BTRFS info (device loop2): force clearing of disk cache [ 251.533983][ T7261] BTRFS info (device loop2): setting nodatasum [ 251.582073][ T7261] BTRFS info (device loop2): allowing degraded mounts [ 251.589260][ T7261] BTRFS info (device loop2): enabling disk space caching [ 251.612437][ T7261] BTRFS info (device loop2): disk space caching is enabled [ 251.619704][ T7261] BTRFS info (device loop2): has skinny extents [ 251.686702][ T7261] BTRFS error (device loop2): open_ctree failed: -12 [ 252.676990][ T7344] netlink: 60 bytes leftover after parsing attributes in process `syz.3.980'. [ 252.735900][ T4303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.756822][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 253.240906][ T1237] wlan1: Trigger new scan to find an IBSS to join [ 254.145954][ T4439] wlan1: Creating new IBSS network, BSSID 26:2d:86:af:39:a8 [ 254.451268][ T4255] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (4255) [ 254.847283][ T7381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.994'. [ 255.779737][ T7397] 9pnet_virtio: no channels available for device 127.0.0.1 [ 256.856441][ T7411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1005'. [ 257.701134][ T7425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1007'. [ 259.705065][ T7461] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1023'. [ 259.951420][ T7464] loop4: detected capacity change from 0 to 2048 [ 260.033279][ T7464] Alternate GPT is invalid, using primary GPT. [ 260.040959][ T7464] loop4: p1 p2 p3 [ 260.094202][ T7471] input: syz0 as /devices/virtual/input/input18 [ 260.260194][ T4420] udevd[4420]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 260.280551][ T4259] udevd[4259]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 260.310302][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 261.140690][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.147081][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.157391][ T144] wlan1: Trigger new scan to find an IBSS to join [ 261.487092][ T7503] loop4: detected capacity change from 0 to 512 [ 261.572434][ T7503] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 261.788181][ T7503] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 261.814968][ T7503] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 261.858298][ T7510] 9pnet: p9_client_clunk (7510): Trying to clunk with invalid fid [ 261.866342][ T7510] CPU: 0 PID: 7510 Comm: syz.3.1043 Not tainted 5.15.185-syzkaller #0 [ 261.874538][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.877727][ T7503] System zones: [ 261.884629][ T7510] Call Trace: [ 261.884643][ T7510] [ 261.884654][ T7510] dump_stack_lvl+0x168/0x230 [ 261.884685][ T7510] ? show_regs_print_info+0x20/0x20 [ 261.884706][ T7510] ? load_image+0x3b0/0x3b0 [ 261.884729][ T7510] ? v9fs_fid_find+0x2d1/0x320 [ 261.913720][ T7510] p9_client_clunk+0x2b3/0x380 [ 261.918524][ T7510] v9fs_statfs+0x192/0x350 [ 261.922052][ T7503] 0-3 [ 261.923062][ T7510] ? slab_free_freelist_hook+0xea/0x170 [ 261.923094][ T7510] ? v9fs_drop_inode+0x130/0x130 [ 261.923115][ T7510] ? rcu_is_watching+0x11/0xa0 [ 261.923150][ T7510] user_statfs+0x1f3/0x5b0 [ 261.923179][ T7510] ? vfs_statfs+0x2c0/0x2c0 [ 261.923211][ T7510] __x64_sys_statfs+0xdd/0x1a0 [ 261.923234][ T7510] ? fd_statfs+0x390/0x390 [ 261.923256][ T7510] ? __context_tracking_exit+0x4c/0x80 [ 261.939094][ T7503] , 34-34 [ 261.941522][ T7510] ? __lock_acquire+0x7c60/0x7c60 [ 261.941577][ T7510] ? lockdep_hardirqs_on+0x94/0x140 [ 261.968658][ T7503] [ 261.973296][ T7510] do_syscall_64+0x4c/0xa0 [ 261.973328][ T7510] ? clear_bhb_loop+0x30/0x80 [ 261.973349][ T7510] ? clear_bhb_loop+0x30/0x80 [ 261.973369][ T7510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.973407][ T7510] RIP: 0033:0x7f1290b1f929 [ 261.973428][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.973459][ T7510] RSP: 002b:00007f128e987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 261.973484][ T7510] RAX: ffffffffffffffda RBX: 00007f1290d46fa0 RCX: 00007f1290b1f929 [ 261.992512][ T7503] EXT4-fs (loop4): orphan cleanup on readonly fs [ 261.994832][ T7510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 261.994851][ T7510] RBP: 00007f1290ba1b39 R08: 0000000000000000 R09: 0000000000000000 [ 261.994866][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.994880][ T7510] R13: 0000000000000000 R14: 00007f1290d46fa0 R15: 00007ffc0b55f058 [ 262.001059][ T7503] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1040: bad orphan inode 1039 [ 262.005212][ T7510] [ 262.125799][ T7503] EXT4-fs (loop4): Remounting filesystem read-only [ 262.139353][ T7503] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 263.540811][ T7539] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 3: comm syz.4.1040: lblock 0 mapped to illegal pblock 3 (length 1) [ 264.802838][ T1237] wlan1: Trigger new scan to find an IBSS to join [ 265.538265][ T7527] loop2: detected capacity change from 0 to 32768 [ 265.654359][ T7527] XFS (loop2): Mounting V5 Filesystem [ 266.008470][ T4620] wlan1: Creating new IBSS network, BSSID 66:72:f3:68:c4:e9 [ 266.329194][ T7600] binder: BINDER_SET_CONTEXT_MGR already set [ 266.352406][ T7600] binder: 7595:7600 ioctl 4018620d 200000000040 returned -16 [ 266.420081][ T7527] XFS (loop2): Ending clean mount [ 266.665838][ T7527] XFS (loop2): Quotacheck needed: Please wait. [ 267.501296][ T7527] XFS (loop2): Quotacheck: Done. [ 267.599123][ T5656] XFS (loop2): Unmounting Filesystem [ 270.046717][ T7641] input: syz0 as /devices/virtual/input/input19 [ 270.090055][ T7646] loop3: detected capacity change from 0 to 1024 [ 270.220592][ T7653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1096'. [ 270.257505][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1096'. [ 270.351154][ T7660] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 270.395099][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.404603][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.503113][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.510497][ T7660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.519390][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.526556][ T7660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.603026][ T7660] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 271.649631][ T7685] fuse: Bad value for 'fd' [ 271.962359][ T7681] input: syz0 as /devices/virtual/input/input20 [ 272.134732][ T7694] loop0: detected capacity change from 0 to 64 [ 272.176381][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1113'. [ 273.087461][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 274.730340][ T4428] wlan1: Trigger new scan to find an IBSS to join [ 275.347378][ T7729] loop4: detected capacity change from 0 to 512 [ 275.362906][ T7729] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 275.391088][ T7734] tipc: Started in network mode [ 275.404986][ T7734] tipc: Node identity ac1414aa, cluster identity 4711 [ 275.415701][ T7734] tipc: Enabled bearer , priority 10 [ 275.428757][ T7734] tipc: Enabled bearer , priority 0 [ 275.546559][ T7738] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1129'. [ 275.563725][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 276.817584][ T4220] tipc: Node number set to 2886997162 [ 278.468851][ T7775] input: syz0 as /devices/virtual/input/input21 [ 278.753911][ T1237] wlan1: Creating new IBSS network, BSSID 96:45:4e:6a:bb:b2 [ 279.907919][ T7791] loop2: detected capacity change from 0 to 512 [ 280.058974][ T7791] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 280.128100][ T7791] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 280.163249][ T7798] loop0: detected capacity change from 0 to 64 [ 280.188289][ T7791] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 280.262414][ T7791] System zones: 0-3, 34-34 [ 280.305394][ T7791] EXT4-fs (loop2): orphan cleanup on readonly fs [ 280.349648][ T7791] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.1147: bad orphan inode 1039 [ 280.389225][ T7791] EXT4-fs (loop2): Remounting filesystem read-only [ 280.413793][ T7791] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 280.444228][ T7790] loop4: detected capacity change from 0 to 32768 [ 280.489109][ T7790] (syz.4.1146,7790,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "dirkresv_level=00000000000000000003" or missing value [ 280.595929][ T7790] (syz.4.1146,7790,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 280.617624][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 281.775320][ T7817] loop2: detected capacity change from 0 to 1024 [ 281.934409][ T7817] hfsplus: invalid attributes max_key_len 0 [ 282.827976][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1159'. [ 283.040518][ T7817] hfsplus: failed to load attributes file [ 283.326485][ T7844] loop0: detected capacity change from 0 to 512 [ 283.526067][ T7844] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 283.914337][ T7844] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 283.983844][ T7844] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 284.143957][ T1237] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.155067][ T7844] System zones: 0-3, 34-34 [ 284.160610][ T7844] EXT4-fs (loop0): orphan cleanup on readonly fs [ 284.188253][ T7844] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1167: bad orphan inode 1039 [ 284.205344][ T7844] EXT4-fs (loop0): Remounting filesystem read-only [ 284.212200][ T7844] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 284.322939][ T4439] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.203381][ T7866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1172'. [ 286.779751][ T7879] loop4: detected capacity change from 0 to 40427 [ 286.824055][ T7879] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 286.836449][ T7879] F2FS-fs (loop4): invalid crc value [ 286.885741][ T7879] F2FS-fs (loop4): Found nat_bits in checkpoint [ 287.189874][ T7879] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 287.946070][ T7879] F2FS-fs (loop4) : inject no more block in inc_valid_block_count of __allocate_data_block+0x472/0x9e0 [ 288.156899][ T4180] attempt to access beyond end of device [ 288.156899][ T4180] loop4: rw=2049, want=45112, limit=40427 [ 289.236820][ T7900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1187'. [ 291.611278][ T7917] loop0: detected capacity change from 0 to 32768 [ 291.826302][ T7917] XFS: ikeep mount option is deprecated. [ 291.938444][ T7927] netlink: 'syz.3.1195': attribute type 3 has an invalid length. [ 291.998142][ T7917] XFS (loop0): Mounting V5 Filesystem [ 292.005045][ T7939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1199'. [ 292.252439][ T7948] loop2: detected capacity change from 0 to 512 [ 292.286641][ T7917] XFS (loop0): Ending clean mount [ 292.295537][ T7917] XFS (loop0): Quotacheck needed: Please wait. [ 292.371352][ T7948] EXT4-fs (loop2): Ignoring removed nobh option [ 292.506363][ T7917] XFS (loop0): Quotacheck: Done. [ 293.468767][ T7948] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 293.560674][ T7948] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 293.679166][ T7948] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1203: Corrupt directory, running e2fsck is recommended [ 293.708898][ T7948] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 293.720939][ T7948] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.1203: corrupted in-inode xattr [ 293.721098][ T5659] XFS (loop0): Unmounting Filesystem [ 293.742669][ T7948] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1203: couldn't read orphan inode 15 (err -117) [ 293.757859][ T7948] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,auto_da_alloc,grpjquota=.journal_checksum,barrier=0x0000000000000007,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 293.792878][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 293.815979][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 293.919307][ T7948] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 294.002405][ T7948] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 294.030734][ T7948] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1203: Corrupt directory, running e2fsck is recommended [ 294.117963][ T7948] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.1203: path /122/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 294.385460][ T7948] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 8: comm syz.2.1203: path /122/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 294.743666][ T7981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1213'. [ 295.469419][ T7991] loop4: detected capacity change from 0 to 8192 [ 295.971267][ T7991] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 296.010228][ T7991] REISERFS (device loop4): using ordered data mode [ 296.017343][ T7991] reiserfs: using flush barriers [ 296.017889][ T8002] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 296.044129][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 296.046428][ T7991] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 296.075233][ T7991] REISERFS (device loop4): checking transaction log (loop4) [ 296.095448][ T7991] REISERFS (device loop4): Using r5 hash to sort names [ 296.120676][ T7991] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 296.192022][ T8012] loop2: detected capacity change from 0 to 8 [ 296.448253][ T8012] SQUASHFS error: lzo decompression failed, data probably corrupt [ 296.994722][ T8012] SQUASHFS error: Failed to read block 0x91: -5 [ 297.036489][ T8012] SQUASHFS error: Unable to read metadata cache entry [8f] [ 297.116017][ T8012] SQUASHFS error: Unable to read inode 0x11f [ 297.340279][ T8031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1227'. [ 298.281965][ T8050] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 298.819664][ T8060] loop4: detected capacity change from 0 to 256 [ 299.196695][ T8060] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.273856][ T8060] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 299.338457][ T8060] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 299.407779][ T8065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1240'. [ 299.643683][ T8054] loop0: detected capacity change from 0 to 32768 [ 300.429023][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1244'. [ 300.969341][ T8075] ªªªªªª: renamed from vlan0 [ 301.115388][ T8089] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 301.752599][ T8109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1253'. [ 303.294310][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1259'. [ 303.525183][ T8136] 9pnet_virtio: no channels available for device 127.0.0.1 [ 303.950326][ T8144] tipc: Started in network mode [ 303.976884][ T8144] tipc: Node identity ac1414aa, cluster identity 4711 [ 303.987967][ T8115] loop3: detected capacity change from 0 to 32768 [ 303.996328][ T8144] tipc: Enabled bearer , priority 10 [ 304.016544][ T8115] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.1257 (8115) [ 304.069497][ T8115] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 304.111025][ T8115] BTRFS info (device loop3): using free space tree [ 304.138582][ T8115] BTRFS info (device loop3): has skinny extents [ 304.578801][ T8115] BTRFS info (device loop3): enabling ssd optimizations [ 305.376773][ T4221] tipc: Node number set to 2886997162 [ 305.418252][ T8167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1272'. [ 305.851806][ T8198] tipc: Started in network mode [ 305.868459][ T8198] tipc: Node identity ac1414aa, cluster identity 4711 [ 305.934230][ T8198] tipc: Enabled bearer , priority 10 [ 306.693800][ T4303] wlan1: Trigger new scan to find an IBSS to join [ 306.894753][ T4221] tipc: Node number set to 2886997162 [ 306.960456][ T8220] xt_cgroup: xt_cgroup: no path or classid specified [ 308.576108][ T8238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1290'. [ 308.820190][ T8244] binder: 8237:8244 ioctl c0306201 0 returned -14 [ 308.867029][ T8246] tipc: Enabling of bearer rejected, already enabled [ 308.965290][ T8252] loop0: detected capacity change from 0 to 512 [ 309.037919][ T8252] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 309.126181][ T8252] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 309.681202][ T8252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 309.693273][ T8252] System zones: 0-3, 34-34 [ 309.704932][ T8252] EXT4-fs (loop0): orphan cleanup on readonly fs [ 309.711672][ T8252] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.1297: bad orphan inode 1039 [ 309.850303][ T8252] EXT4-fs (loop0): Remounting filesystem read-only [ 309.871683][ T8252] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 310.662105][ T4254] wlan1: Trigger new scan to find an IBSS to join [ 311.122628][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1307'. [ 312.795162][ T4437] wlan1: Creating new IBSS network, BSSID 52:94:6d:75:d4:f4 [ 312.853518][ T8322] loop2: detected capacity change from 0 to 512 [ 312.919929][ T8327] netlink: 'syz.4.1322': attribute type 3 has an invalid length. [ 313.116894][ T8327] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.1322'. [ 313.126184][ T4428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.852327][ T1237] wlan1: Trigger new scan to find an IBSS to join [ 313.918827][ T8322] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.1316: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 313.944034][ T8322] EXT4-fs error (device loop2): ext4_quota_enable:6415: comm syz.2.1316: Bad quota inode: 4, type: 1 [ 313.968738][ T8347] tipc: Enabling of bearer rejected, already enabled [ 313.985170][ T8347] tipc: Enabling of bearer rejected, already enabled [ 313.985582][ T8322] EXT4-fs warning (device loop2): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 314.064801][ T8322] EXT4-fs (loop2): mount failed [ 314.465832][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 314.480095][ T8363] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 314.552137][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1316'. [ 315.772978][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1343'. [ 315.867656][ T8386] tipc: Enabling of bearer rejected, already enabled [ 315.896397][ T8386] tipc: Enabled bearer , priority 0 [ 315.909325][ T4437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 316.008226][ T8390] loop3: detected capacity change from 0 to 512 [ 316.189650][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1348'. [ 316.307314][ T8390] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 316.588672][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 317.020837][ T8390] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 317.056357][ T8390] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a04ec0a8, mo2=0002] [ 317.065797][ T8390] System zones: 0-3, 34-34 [ 317.071318][ T8390] EXT4-fs (loop3): orphan cleanup on readonly fs [ 317.077819][ T8390] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.1346: bad orphan inode 1039 [ 317.094259][ T8390] EXT4-fs (loop3): Remounting filesystem read-only [ 317.114075][ T8390] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,errors=remount-ro,quota,errors=remount-ro,minixdf,sb=0x0000000000000009,. Quota mode: writeback. [ 318.005433][ T4428] wlan1: Trigger new scan to find an IBSS to join [ 319.366348][ T1237] wlan1: Creating new IBSS network, BSSID be:23:fd:55:1a:64 [ 319.486086][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 319.820244][ T8437] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 320.570564][ T4217] Bluetooth: hci2: command 0x0405 tx timeout [ 321.209401][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 321.222940][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 322.248324][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.254749][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.500476][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 323.571611][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 323.580976][ T8518] netlink: 'syz.2.1395': attribute type 3 has an invalid length. [ 323.648155][ T8518] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1395'. [ 323.847907][ T8526] loop2: detected capacity change from 0 to 512 [ 323.900245][ T8526] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 323.975566][ T8526] EXT4-fs (loop2): invalid journal inode [ 324.032323][ T8526] EXT4-fs (loop2): can't get journal size [ 324.086359][ T8526] EXT4-fs (loop2): 1 truncate cleaned up [ 324.092100][ T8526] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 324.238058][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.338361][ T8538] loop0: detected capacity change from 0 to 512 [ 324.365678][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.405707][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 324.482507][ C0] ------------[ cut here ]------------ [ 324.488537][ C0] refcount_t: addition on 0; use-after-free. [ 324.494928][ C0] WARNING: CPU: 0 PID: 8544 at lib/refcount.c:25 refcount_warn_saturate+0xff/0x1a0 [ 324.504292][ C0] Modules linked in: [ 324.508190][ C0] CPU: 0 PID: 8544 Comm: syz.2.1407 Not tainted 5.15.185-syzkaller #0 [ 324.516397][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.526681][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 324.532807][ C0] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 324.552579][ C0] RSP: 0018:ffffc900000076a8 EFLAGS: 00010246 [ 324.559230][ C0] RAX: edfae4224ed7d700 RBX: 0000000000000002 RCX: ffff88802a0ed940 [ 324.567267][ C0] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000 [ 324.575291][ C0] RBP: ffffc90000007808 R08: dffffc0000000000 R09: fffff52000000e39 [ 324.583497][ C0] R10: fffff52000000e39 R11: 1ffff92000000e38 R12: ffff88801ab9cf80 [ 324.591561][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 324.599589][ C0] FS: 00007f66820266c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 324.608570][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.615368][ C0] CR2: 00007fbf48020000 CR3: 0000000070deb000 CR4: 00000000003506f0 [ 324.623410][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 324.631392][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 324.639781][ C0] Call Trace: [ 324.643128][ C0] [ 324.645980][ C0] tipc_crypto_xmit+0x1949/0x2560 [ 324.651022][ C0] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 324.656292][ C0] ? skb_clone+0x1f1/0x350 [ 324.660716][ C0] ? tipc_crypto_clone_msg+0x33/0x160 [ 324.666149][ C0] tipc_crypto_clone_msg+0x91/0x160 [ 324.671500][ C0] tipc_crypto_xmit+0x1ac5/0x2560 [ 324.676616][ C0] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 324.681829][ C0] tipc_bearer_xmit_skb+0x228/0x3c0 [ 324.687096][ C0] ? tipc_bearer_min_mtu+0x190/0x190 [ 324.692447][ C0] tipc_disc_timeout+0x568/0x6b0 [ 324.697391][ C0] ? tipc_disc_create+0x920/0x920 [ 324.702478][ C0] ? tipc_disc_create+0x920/0x920 [ 324.707507][ C0] call_timer_fn+0x16c/0x530 [ 324.712095][ C0] ? tipc_disc_create+0x920/0x920 [ 324.717188][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 324.723227][ C0] ? __run_timers+0x7c0/0x7c0 [ 324.727907][ C0] ? rcu_is_watching+0x11/0xa0 [ 324.732713][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 324.737909][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 324.743163][ C0] ? tipc_disc_create+0x920/0x920 [ 324.748198][ C0] __run_timers+0x525/0x7c0 [ 324.752773][ C0] ? detach_timer+0x2b0/0x2b0 [ 324.757523][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 324.763737][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 324.768593][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 324.773940][ C0] run_timer_softirq+0x63/0xf0 [ 324.778705][ C0] handle_softirqs+0x328/0x820 [ 324.783518][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 324.788370][ C0] ? do_softirq+0x200/0x200 [ 324.792926][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 324.798214][ C0] __irq_exit_rcu+0x12f/0x220 [ 324.802945][ C0] ? irq_exit_rcu+0x20/0x20 [ 324.807455][ C0] irq_exit_rcu+0x5/0x20 [ 324.811690][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 324.817408][ C0] [ 324.820361][ C0] [ 324.823363][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 324.829355][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 324.835572][ C0] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 83 fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 14 16 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 324.855318][ C0] RSP: 0018:ffffc9000304f930 EFLAGS: 00000246 [ 324.861389][ C0] RAX: ffffffff81ab5b4d RBX: ffffea00015dd540 RCX: ffff88802a0ed940 [ 324.869406][ C0] RDX: ffffc900056b9000 RSI: 000000000007ffff RDI: 0000000000040004 [ 324.877408][ C0] RBP: 0000000000001052 R08: 0000000000000004 R09: 0000000000000003 [ 324.885845][ C0] R10: fffff52000609f1c R11: 1ffff92000609f1c R12: 000ffffffffff000 [ 324.893844][ C0] R13: 1ffff1100445fc8e R14: 0000000000000000 R15: 0000000057755027 [ 324.902300][ C0] ? try_grab_page+0x3d/0x460 [ 324.907001][ C0] try_grab_page+0x3d/0x460 [ 324.911503][ C0] follow_page_pte+0x784/0xc20 [ 324.916299][ C0] ? __might_sleep+0xf0/0xf0 [ 324.920903][ C0] follow_page_mask+0xa6e/0x12d0 [ 324.925880][ C0] __get_user_pages+0xdb5/0x11c0 [ 324.930844][ C0] ? populate_vma_page_range+0x290/0x290 [ 324.936503][ C0] ? read_lock_is_recursive+0x10/0x10 [ 324.941887][ C0] populate_vma_page_range+0x213/0x290 [ 324.947385][ C0] __mm_populate+0x26f/0x3a0 [ 324.951985][ C0] ? check_vma_flags+0x480/0x480 [ 324.956951][ C0] ? preempt_count_add+0x8d/0x190 [ 324.961974][ C0] ? up_write+0x1bb/0x420 [ 324.966333][ C0] vm_mmap_pgoff+0x203/0x2b0 [ 324.970929][ C0] ? account_locked_vm+0xe0/0xe0 [ 324.975891][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 324.980936][ C0] ksys_mmap_pgoff+0x140/0x780 [ 324.985908][ C0] ? mmap_region+0x15e0/0x15e0 [ 324.990678][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 324.995904][ C0] do_syscall_64+0x4c/0xa0 [ 325.000335][ C0] ? clear_bhb_loop+0x30/0x80 [ 325.005056][ C0] ? clear_bhb_loop+0x30/0x80 [ 325.009733][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.015671][ C0] RIP: 0033:0x7f66841be929 [ 325.020089][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.039990][ C0] RSP: 002b:00007f6682026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 325.048437][ C0] RAX: ffffffffffffffda RBX: 00007f66843e5fa0 RCX: 00007f66841be929 [ 325.056442][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 325.064447][ C0] RBP: 00007f6684240b39 R08: ffffffffffffffff R09: 0000000000000000 [ 325.072454][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 325.080513][ C0] R13: 0000000000000000 R14: 00007f66843e5fa0 R15: 00007ffdbf13d438 [ 325.088530][ C0] [ 325.091654][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 325.098972][ C0] CPU: 0 PID: 8544 Comm: syz.2.1407 Not tainted 5.15.185-syzkaller #0 [ 325.107120][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.117258][ C0] Call Trace: [ 325.120553][ C0] [ 325.123395][ C0] dump_stack_lvl+0x168/0x230 [ 325.128072][ C0] ? show_regs_print_info+0x20/0x20 [ 325.133386][ C0] ? load_image+0x3b0/0x3b0 [ 325.137891][ C0] panic+0x2c9/0x7f0 [ 325.141790][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 325.146300][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 325.151789][ C0] __warn+0x248/0x2b0 [ 325.155772][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 325.161236][ C0] report_bug+0x1b7/0x2e0 [ 325.165583][ C0] handle_bug+0x3a/0x70 [ 325.169748][ C0] exc_invalid_op+0x16/0x40 [ 325.174528][ C0] asm_exc_invalid_op+0x16/0x20 [ 325.179394][ C0] RIP: 0010:refcount_warn_saturate+0xff/0x1a0 [ 325.185487][ C0] Code: 09 01 48 c7 c7 40 6b 59 8a e8 dd 27 bb 05 0f 0b eb e0 e8 04 42 9c fd c6 05 ae 8f 79 09 01 48 c7 c7 80 6a 59 8a e8 c1 27 bb 05 <0f> 0b eb c4 e8 e8 41 9c fd c6 05 93 8f 79 09 01 48 c7 c7 e0 6a 59 [ 325.206008][ C0] RSP: 0018:ffffc900000076a8 EFLAGS: 00010246 [ 325.212100][ C0] RAX: edfae4224ed7d700 RBX: 0000000000000002 RCX: ffff88802a0ed940 [ 325.220087][ C0] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000 [ 325.228064][ C0] RBP: ffffc90000007808 R08: dffffc0000000000 R09: fffff52000000e39 [ 325.236040][ C0] R10: fffff52000000e39 R11: 1ffff92000000e38 R12: ffff88801ab9cf80 [ 325.244017][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 325.252104][ C0] ? refcount_warn_saturate+0xff/0x1a0 [ 325.257808][ C0] tipc_crypto_xmit+0x1949/0x2560 [ 325.262878][ C0] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 325.268172][ C0] ? skb_clone+0x1f1/0x350 [ 325.272595][ C0] ? tipc_crypto_clone_msg+0x33/0x160 [ 325.277985][ C0] tipc_crypto_clone_msg+0x91/0x160 [ 325.283204][ C0] tipc_crypto_xmit+0x1ac5/0x2560 [ 325.288244][ C0] ? tipc_crypto_do_cmd+0xd60/0xd60 [ 325.293450][ C0] tipc_bearer_xmit_skb+0x228/0x3c0 [ 325.298744][ C0] ? tipc_bearer_min_mtu+0x190/0x190 [ 325.304042][ C0] tipc_disc_timeout+0x568/0x6b0 [ 325.308983][ C0] ? tipc_disc_create+0x920/0x920 [ 325.314016][ C0] ? tipc_disc_create+0x920/0x920 [ 325.319074][ C0] call_timer_fn+0x16c/0x530 [ 325.323666][ C0] ? tipc_disc_create+0x920/0x920 [ 325.328687][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 325.334677][ C0] ? __run_timers+0x7c0/0x7c0 [ 325.339449][ C0] ? rcu_is_watching+0x11/0xa0 [ 325.344252][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 325.349467][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 325.354665][ C0] ? tipc_disc_create+0x920/0x920 [ 325.359690][ C0] __run_timers+0x525/0x7c0 [ 325.364199][ C0] ? detach_timer+0x2b0/0x2b0 [ 325.368872][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 325.374946][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 325.379795][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 325.385099][ C0] run_timer_softirq+0x63/0xf0 [ 325.389966][ C0] handle_softirqs+0x328/0x820 [ 325.394931][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 325.399780][ C0] ? do_softirq+0x200/0x200 [ 325.404284][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 325.409484][ C0] __irq_exit_rcu+0x12f/0x220 [ 325.414162][ C0] ? irq_exit_rcu+0x20/0x20 [ 325.418666][ C0] irq_exit_rcu+0x5/0x20 [ 325.422904][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 325.428560][ C0] [ 325.431486][ C0] [ 325.434412][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 325.440386][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x60 [ 325.446554][ C0] Code: ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 83 fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 <48> 8d 7e 01 8b 89 14 16 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 [ 325.466262][ C0] RSP: 0018:ffffc9000304f930 EFLAGS: 00000246 [ 325.472341][ C0] RAX: ffffffff81ab5b4d RBX: ffffea00015dd540 RCX: ffff88802a0ed940 [ 325.480580][ C0] RDX: ffffc900056b9000 RSI: 000000000007ffff RDI: 0000000000040004 [ 325.488722][ C0] RBP: 0000000000001052 R08: 0000000000000004 R09: 0000000000000003 [ 325.496689][ C0] R10: fffff52000609f1c R11: 1ffff92000609f1c R12: 000ffffffffff000 [ 325.504661][ C0] R13: 1ffff1100445fc8e R14: 0000000000000000 R15: 0000000057755027 [ 325.512675][ C0] ? try_grab_page+0x3d/0x460 [ 325.517389][ C0] try_grab_page+0x3d/0x460 [ 325.521898][ C0] follow_page_pte+0x784/0xc20 [ 325.526670][ C0] ? __might_sleep+0xf0/0xf0 [ 325.531349][ C0] follow_page_mask+0xa6e/0x12d0 [ 325.536380][ C0] __get_user_pages+0xdb5/0x11c0 [ 325.541499][ C0] ? populate_vma_page_range+0x290/0x290 [ 325.547138][ C0] ? read_lock_is_recursive+0x10/0x10 [ 325.552515][ C0] populate_vma_page_range+0x213/0x290 [ 325.557975][ C0] __mm_populate+0x26f/0x3a0 [ 325.562570][ C0] ? check_vma_flags+0x480/0x480 [ 325.567507][ C0] ? preempt_count_add+0x8d/0x190 [ 325.572726][ C0] ? up_write+0x1bb/0x420 [ 325.577060][ C0] vm_mmap_pgoff+0x203/0x2b0 [ 325.581650][ C0] ? account_locked_vm+0xe0/0xe0 [ 325.586700][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 325.591729][ C0] ksys_mmap_pgoff+0x140/0x780 [ 325.596502][ C0] ? mmap_region+0x15e0/0x15e0 [ 325.601266][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 325.606478][ C0] do_syscall_64+0x4c/0xa0 [ 325.611186][ C0] ? clear_bhb_loop+0x30/0x80 [ 325.615870][ C0] ? clear_bhb_loop+0x30/0x80 [ 325.620565][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.626986][ C0] RIP: 0033:0x7f66841be929 [ 325.631664][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.651460][ C0] RSP: 002b:00007f6682026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 325.659881][ C0] RAX: ffffffffffffffda RBX: 00007f66843e5fa0 RCX: 00007f66841be929 [ 325.667947][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 325.676027][ C0] RBP: 00007f6684240b39 R08: ffffffffffffffff R09: 0000000000000000 [ 325.684124][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 325.692099][ C0] R13: 0000000000000000 R14: 00007f66843e5fa0 R15: 00007ffdbf13d438 [ 325.700095][ C0] [ 325.703247][ C0] Kernel Offset: disabled [ 325.707827][ C0] Rebooting in 86400 seconds..