last executing test programs: 2m40.454269196s ago: executing program 3 (id=139): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008e0000007600000000000000270000000000ade69500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 2m40.348829067s ago: executing program 3 (id=140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x80) 2m40.347847925s ago: executing program 3 (id=141): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m40.316905168s ago: executing program 3 (id=142): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a010", 0x15}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103", 0x8}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfe33) 2m40.144697981s ago: executing program 3 (id=145): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYRES32], 0x0, 0x58b4, &(0x7f0000005980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x101100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4010bc14, &(0x7f0000000200)={0x10, 0x10005, 0xffffffffffff8ab7, 0x2, 0x86b, 0x6}) 2m38.513408823s ago: executing program 3 (id=156): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) 2m23.374263583s ago: executing program 32 (id=156): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) 1.766114483s ago: executing program 1 (id=1086): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.58142858s ago: executing program 1 (id=1089): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r0, 0x0, 0x4040010) 1.488323855s ago: executing program 4 (id=1092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) 1.451418051s ago: executing program 1 (id=1094): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0xa, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x24842, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 1.41480971s ago: executing program 4 (id=1096): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071109d0000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2}, 0x38) r1 = epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) 1.278205848s ago: executing program 1 (id=1099): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.183355585s ago: executing program 1 (id=1102): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.153757105s ago: executing program 5 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)={0x54, r1, 0x1, 0x0, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.019413543s ago: executing program 5 (id=1105): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 924.7458ms ago: executing program 5 (id=1107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 907.402231ms ago: executing program 5 (id=1110): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) gettid() setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 682.231014ms ago: executing program 0 (id=1115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800002008ffb0000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000fdffffffdbaaf0ff50000000bf8600000000000007080000c8070000bfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r1, @ANYBLOB="000000000600000007000000080000004608f0ff760000005d9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 616.56148ms ago: executing program 0 (id=1116): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4802}, 0x4040010) 564.811014ms ago: executing program 1 (id=1117): socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffff"], 0x40c}}, 0x2004c040) 517.467808ms ago: executing program 0 (id=1119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) get_mempolicy(0x0, 0x0, 0xbf, &(0x7f000079a000/0x1000)=nil, 0xe3f0fc8e3286431a) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r1) 467.682241ms ago: executing program 4 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220200000000000"], 0x2c}}, 0x0) 424.891728ms ago: executing program 4 (id=1122): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) 386.050853ms ago: executing program 4 (id=1123): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 340.659449ms ago: executing program 2 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 339.48526ms ago: executing program 4 (id=1125): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) 328.67137ms ago: executing program 0 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800002008ffb0000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe0000000066090000fdffffffdbaaf0ff50000000bf8600000000000007080000c8070000bfa400000000000007040000f0ffffffd50000000800000018220000", @ANYRES32=r1, @ANYBLOB="000000000600000007000000080000004608f0ff760000005d9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 282.053154ms ago: executing program 2 (id=1127): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'pcmmio\x00', [0x4f27, 0x6, 0x10000, 0xd, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x8, 0x1, 0x1, 0x2, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xffffffff, 0xe62, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) 238.201287ms ago: executing program 0 (id=1128): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000001040)="8932ed20", 0x4, 0x6000c804, 0x0, 0x0) 180.887129ms ago: executing program 2 (id=1129): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4802}, 0x4040010) 161.276965ms ago: executing program 2 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 126.380386ms ago: executing program 2 (id=1131): socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884) 99.034463ms ago: executing program 0 (id=1132): syz_usb_connect(0x5, 0x59, &(0x7f0000000780)=ANY=[@ANYBLOB="12011bca5d6e9f4099041b1029560102030109024700010a0375080904"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 2.928751ms ago: executing program 5 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220200000000000"], 0x2c}}, 0x0) 1.627661ms ago: executing program 2 (id=1134): syz_emit_ethernet(0x3b1, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x37b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xa, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 0s ago: executing program 5 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x1}, 0x8) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r0) kernel console output (not intermixed with test programs): d at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 63.093615][ T7324] XFS (loop0): Unmount and run xfs_repair [ 63.093634][ T7324] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 63.093656][ T7324] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 63.093676][ T7324] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 63.093696][ T7324] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 63.093717][ T7324] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 63.093737][ T7324] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 63.093757][ T7324] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 63.093777][ T7324] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 63.093797][ T7324] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 63.093819][ T7324] XFS (loop0): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 63.093908][ T7324] XFS (loop0): page discard on page 00000000c2a3b1bd, inode 0x2a, pos 126976. [ 63.182262][ T6527] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 63.213251][ T7336] done [ 63.213285][ T7336] bcachefs (loop1): alloc_read... done [ 63.213450][ T7336] bcachefs (loop1): snapshots_read... done [ 63.213893][ T7336] bcachefs (loop1): done starting filesystem [ 63.218566][ T6527] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 63.312042][ T6530] bcachefs (loop1): shutting down [ 63.346131][ T7356] loop2: detected capacity change from 0 to 4096 [ 63.365378][ T7356] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 63.375954][ T6530] bcachefs (loop1): shutdown complete [ 63.399322][ T7356] ntfs3(loop2): Failed to load $MFT (-22). [ 63.793252][ T7360] loop4: detected capacity change from 0 to 32768 [ 63.797754][ T7360] (syz.4.183,7360,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.804702][ T7360] (syz.4.183,7360,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 63.858209][ T7360] JBD2: Ignoring recovery information on journal [ 63.902068][ T7360] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 65.046669][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.048861][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.196406][ T7392] tap0: tun_chr_ioctl cmd 1074025698 [ 65.513110][ T7398] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 65.639994][ T7264] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 65.773473][ T7394] loop0: detected capacity change from 0 to 32768 [ 65.976233][ T7394] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 65.976296][ T7394] allowing incompatible features above 0.0: (unknown version) [ 65.994234][ T7394] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 65.994329][ T7394] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 65.994428][ T7394] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 65.994557][ T7394] bcachefs (loop0): Version upgrade required: [ 65.994557][ T7394] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 65.994557][ T7394] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 65.994557][ T7394] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 65.994746][ T7394] bcachefs (loop0): dropping and reconstructing all alloc info [ 66.023318][ T7394] bcachefs (loop0): accounting_read... done [ 66.083507][ T7394] bcachefs (loop0): alloc_read... done [ 66.083675][ T7394] bcachefs (loop0): snapshots_read... done [ 66.084157][ T7394] bcachefs (loop0): done starting filesystem [ 66.245220][ T6527] bcachefs (loop0): shutting down [ 66.257454][ T7413] netlink: 'syz.1.200': attribute type 29 has an invalid length. [ 66.259039][ T7413] netlink: 'syz.1.200': attribute type 29 has an invalid length. [ 66.284394][ T6527] bcachefs (loop0): shutdown complete [ 66.310418][ T7416] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 66.319232][ T7416] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 66.323610][ T7416] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 66.326038][ T7416] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 66.489695][ T7422] netlink: 'syz.2.205': attribute type 28 has an invalid length. [ 66.536413][ T6526] ocfs2: Unmounting device (7,4) on (node local) [ 66.707154][ T7433] loop1: detected capacity change from 0 to 2048 [ 66.791373][ T7433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.855196][ T6530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.273673][ T7442] loop1: detected capacity change from 0 to 32768 [ 68.431166][ T7442] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 68.431221][ T7442] allowing incompatible features above 0.0: (unknown version) [ 68.431255][ T7442] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 68.431307][ T7442] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 68.431393][ T7442] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 68.431513][ T7442] bcachefs (loop1): Version upgrade required: [ 68.431513][ T7442] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 68.431513][ T7442] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 68.431513][ T7442] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 68.431698][ T7442] bcachefs (loop1): dropping and reconstructing all alloc info [ 68.479090][ T7442] bcachefs (loop1): accounting_read... done [ 68.548663][ T7442] bcachefs (loop1): alloc_read... done [ 68.548856][ T7442] bcachefs (loop1): snapshots_read... done [ 68.549323][ T7442] bcachefs (loop1): done starting filesystem [ 68.677387][ T6530] bcachefs (loop1): shutting down [ 68.688117][ T7470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.221'. [ 68.688423][ T7469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.221'. [ 68.842819][ T6530] bcachefs (loop1): shutdown complete [ 68.861083][ T7453] loop0: detected capacity change from 0 to 32768 [ 68.864647][ T7453] (syz.0.217,7453,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.865267][ T7453] (syz.0.217,7453,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 68.907821][ T7453] JBD2: Ignoring recovery information on journal [ 68.996282][ T7453] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 69.136733][ T7474] loop4: detected capacity change from 0 to 32768 [ 69.223239][ T7492] IPv6: addrconf: prefix option has invalid lifetime [ 69.227422][ T7474] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 69.233214][ T7474] allowing incompatible features above 0.0: (unknown version) [ 69.233229][ T7474] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 69.233281][ T7474] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 69.233371][ T7474] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 69.233501][ T7474] bcachefs (loop4): Version upgrade required: [ 69.233501][ T7474] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 69.233501][ T7474] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 69.233501][ T7474] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 69.233680][ T7474] bcachefs (loop4): dropping and reconstructing all alloc info [ 69.246330][ T7474] bcachefs (loop4): accounting_read... done [ 69.288778][ T7474] bcachefs (loop4): alloc_read... done [ 69.288958][ T7474] bcachefs (loop4): snapshots_read... done [ 69.289388][ T7474] bcachefs (loop4): done starting filesystem [ 69.332339][ T6526] bcachefs (loop4): shutting down [ 69.393657][ T6526] bcachefs (loop4): shutdown complete [ 69.415038][ T7500] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 69.566009][ T15] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 69.580944][ T7506] netlink: 'syz.1.234': attribute type 29 has an invalid length. [ 70.813539][ T9] cfg80211: failed to load regulatory.db [ 70.988092][ T7512] loop4: detected capacity change from 0 to 32768 [ 71.294304][ T7512] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 71.294801][ T6527] ocfs2: Unmounting device (7,0) on (node local) [ 71.310512][ T7512] allowing incompatible features above 0.0: (unknown version) [ 71.312919][ T7512] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 71.317012][ T7512] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 71.319790][ T7512] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 71.322693][ T7512] bcachefs (loop4): Version upgrade required: [ 71.322693][ T7512] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 71.322693][ T7512] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 71.322693][ T7512] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 71.346263][ T7512] bcachefs (loop4): dropping and reconstructing all alloc info [ 71.426144][ T7512] bcachefs (loop4): accounting_read... done [ 71.470614][ T7512] bcachefs (loop4): alloc_read... done [ 71.472873][ T7512] bcachefs (loop4): snapshots_read... done [ 71.475308][ T7512] bcachefs (loop4): done starting filesystem [ 71.608961][ T6526] bcachefs (loop4): shutting down [ 71.649773][ T7537] IPv6: addrconf: prefix option has invalid lifetime [ 71.674796][ T7539] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 71.847948][ T6526] bcachefs (loop4): shutdown complete [ 71.889415][ T7545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.611513][ T7265] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 72.638260][ T7550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.096170][ T7556] loop4: detected capacity change from 0 to 32768 [ 73.133325][ T7558] loop2: detected capacity change from 0 to 32768 [ 73.149621][ T7558] (syz.2.251,7558,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.175113][ T7558] (syz.2.251,7558,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 73.211220][ T7558] JBD2: Ignoring recovery information on journal [ 73.261903][ T7556] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 73.261959][ T7556] allowing incompatible features above 0.0: (unknown version) [ 73.283253][ T7558] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 73.288571][ T7556] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 73.288662][ T7556] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 73.288751][ T7556] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 73.288916][ T7556] bcachefs (loop4): Version upgrade required: [ 73.288916][ T7556] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 73.288916][ T7556] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 73.288916][ T7556] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 73.289101][ T7556] bcachefs (loop4): dropping and reconstructing all alloc info [ 73.351283][ T7556] bcachefs (loop4): accounting_read... done [ 73.399050][ T7556] bcachefs (loop4): alloc_read... done [ 73.399260][ T7556] bcachefs (loop4): snapshots_read... done [ 73.399709][ T7556] bcachefs (loop4): done starting filesystem [ 73.493531][ T6526] bcachefs (loop4): shutting down [ 73.574692][ T6526] bcachefs (loop4): shutdown complete [ 73.962388][ T6540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.966203][ T6540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.967449][ T6540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.971322][ T6540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.974155][ T6540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.984579][ T6541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.986862][ T6541] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.990426][ T6541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.999023][ T6541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 74.003358][ T6541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 74.015882][ T7576] loop1: detected capacity change from 0 to 32768 [ 74.170454][ T7576] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 74.176930][ T7576] allowing incompatible features above 0.0: (unknown version) [ 74.183650][ T7576] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 74.188812][ T7576] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 74.191313][ T7576] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 74.193905][ T7576] bcachefs (loop1): Version upgrade required: [ 74.193905][ T7576] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 74.193905][ T7576] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 74.193905][ T7576] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 74.216036][ T7576] bcachefs (loop1): dropping and reconstructing all alloc info [ 74.243135][ T7576] bcachefs (loop1): accounting_read... done [ 74.289826][ T7576] bcachefs (loop1): alloc_read... done [ 74.290031][ T7576] bcachefs (loop1): snapshots_read... done [ 74.290478][ T7576] bcachefs (loop1): done starting filesystem [ 74.299068][ T7560] loop0: detected capacity change from 0 to 131072 [ 74.303410][ T7560] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 74.306360][ T7560] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.389369][ T6530] bcachefs (loop1): shutting down [ 74.437271][ T7560] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.437336][ T7560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.464273][ T7560] F2FS-fs (loop0): access invalid blkaddr:3292165 [ 74.466133][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.0.250 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 74.466154][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.466162][ T7560] Call trace: [ 74.466166][ T7560] show_stack+0x2c/0x3c (C) [ 74.466183][ T7560] __dump_stack+0x30/0x40 [ 74.466200][ T7560] dump_stack_lvl+0xd8/0x12c [ 74.466214][ T7560] dump_stack+0x1c/0x28 [ 74.466228][ T7560] __f2fs_is_valid_blkaddr+0xae0/0x107c [ 74.466245][ T7560] f2fs_is_valid_blkaddr+0x12c/0x294 [ 74.466259][ T7560] f2fs_get_node_info+0x630/0xfa0 [ 74.466273][ T7560] read_node_folio+0x1b0/0x3b0 [ 74.466287][ T7560] __get_node_folio+0x148/0xe18 [ 74.466300][ T7560] f2fs_get_inode_folio+0x34/0x44 [ 74.466313][ T7560] f2fs_iget+0x668/0x4d00 [ 74.466327][ T7560] f2fs_lookup+0x364/0x8d0 [ 74.466338][ T7560] path_openat+0xcc0/0x2c40 [ 74.466350][ T7560] do_filp_open+0x18c/0x36c [ 74.466360][ T7560] do_open_execat+0x124/0x4c0 [ 74.466373][ T7560] alloc_bprm+0x3c/0x530 [ 74.466386][ T7560] do_execveat_common+0x168/0x834 [ 74.466400][ T7560] __arm64_sys_execve+0x9c/0xb4 [ 74.466413][ T7560] invoke_syscall+0x98/0x2b8 [ 74.466424][ T7560] el0_svc_common+0x130/0x23c [ 74.466434][ T7560] do_el0_svc+0x48/0x58 [ 74.466444][ T7560] el0_svc+0x58/0x180 [ 74.466456][ T7560] el0t_64_sync_handler+0x84/0x12c [ 74.466468][ T7560] el0t_64_sync+0x198/0x19c [ 74.470595][ T6530] bcachefs (loop1): shutdown complete [ 74.612335][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.644509][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.648089][ T6529] ocfs2: Unmounting device (7,2) on (node local) [ 74.737725][ T7580] chnl_net:caif_netlink_parms(): no params data found [ 74.983207][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.983290][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.983407][ T7580] bridge_slave_0: entered allmulticast mode [ 74.984282][ T7580] bridge_slave_0: entered promiscuous mode [ 74.985382][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.985429][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.985533][ T7580] bridge_slave_1: entered allmulticast mode [ 74.986367][ T7580] bridge_slave_1: entered promiscuous mode [ 75.031057][ T7611] loop1: detected capacity change from 0 to 32768 [ 75.047319][ T7580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.051888][ T7580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.119654][ T7580] team0: Port device team_slave_0 added [ 75.135684][ T7580] team0: Port device team_slave_1 added [ 75.174323][ T7611] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 75.174374][ T7611] allowing incompatible features above 0.0: (unknown version) [ 75.174400][ T7611] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.174458][ T7611] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 75.174553][ T7611] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 75.174686][ T7611] bcachefs (loop1): Version upgrade required: [ 75.174686][ T7611] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 75.174686][ T7611] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 75.174686][ T7611] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 75.174884][ T7611] bcachefs (loop1): dropping and reconstructing all alloc info [ 75.205423][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.205455][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.205505][ T7580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.228288][ T7580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.228325][ T7580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.236580][ T7580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.242738][ T7611] bcachefs (loop1): accounting_read... done [ 75.279502][ T7611] bcachefs (loop1): alloc_read... done [ 75.279673][ T7611] bcachefs (loop1): snapshots_read... done [ 75.280156][ T7611] bcachefs (loop1): done starting filesystem [ 75.308121][ T7580] hsr_slave_0: entered promiscuous mode [ 75.310515][ T7580] hsr_slave_1: entered promiscuous mode [ 75.312516][ T7580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.314687][ T7580] Cannot create hsr debugfs directory [ 75.347891][ T6530] bcachefs (loop1): shutting down [ 75.403844][ T7634] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 75.404952][ T7634] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 75.406985][ T6530] bcachefs (loop1): shutdown complete [ 75.428779][ T7634] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 75.429379][ T7634] netlink: 'syz.4.267': attribute type 29 has an invalid length. [ 75.671184][ T7580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.681973][ T7580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.695265][ T7580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.700361][ T7636] loop0: detected capacity change from 0 to 32768 [ 75.710823][ T7580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.843722][ T7636] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 75.843774][ T7636] allowing incompatible features above 0.0: (unknown version) [ 75.862563][ T7636] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 75.866860][ T7636] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 75.869491][ T7636] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 75.872051][ T7636] bcachefs (loop0): Version upgrade required: [ 75.872051][ T7636] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 75.872051][ T7636] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 75.872051][ T7636] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 75.878690][ T7636] bcachefs (loop0): dropping and reconstructing all alloc info [ 75.897775][ T7655] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 75.907046][ T7636] bcachefs (loop0): accounting_read... done [ 75.923076][ T7636] bcachefs (loop0): alloc_read... done [ 75.923279][ T7636] bcachefs (loop0): snapshots_read... done [ 75.923726][ T7636] bcachefs (loop0): done starting filesystem [ 76.012036][ T6527] bcachefs (loop0): shutting down [ 76.128657][ T6541] Bluetooth: hci5: command tx timeout [ 76.140127][ T7580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.170626][ T6527] bcachefs (loop0): shutdown complete [ 76.194532][ T7580] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.204453][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.204530][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.214373][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.214714][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.001947][ T7664] IPv6: addrconf: prefix option has invalid lifetime [ 77.046638][ T7580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.079482][ T7580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.591806][ T7580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.619460][ T7679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.693014][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 77.903060][ T7668] loop1: detected capacity change from 0 to 32768 [ 78.115548][ T7640] loop4: detected capacity change from 0 to 131072 [ 78.128125][ T7640] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 78.130532][ T7640] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 78.201402][ T6541] Bluetooth: hci5: command tx timeout [ 78.230358][ T7640] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 78.232933][ T7640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 78.243740][ T7668] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 78.248551][ T7668] allowing incompatible features above 0.0: (unknown version) [ 78.248567][ T7668] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 78.248620][ T7668] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 78.248709][ T7668] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 78.248835][ T7668] bcachefs (loop1): Version upgrade required: [ 78.248835][ T7668] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 78.248835][ T7668] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 78.248835][ T7668] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 78.249044][ T7668] bcachefs (loop1): dropping and reconstructing all alloc info [ 78.291048][ T7668] bcachefs (loop1): accounting_read... [ 78.327431][ T7640] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 78.360051][ T7668] done [ 78.361138][ T7668] bcachefs (loop1): alloc_read... done [ 78.361352][ T7668] bcachefs (loop1): snapshots_read... done [ 78.361806][ T7668] bcachefs (loop1): done starting filesystem [ 78.436335][ T7580] veth0_vlan: entered promiscuous mode [ 78.479994][ T7580] veth1_vlan: entered promiscuous mode [ 78.533143][ T7580] veth0_macvtap: entered promiscuous mode [ 78.535071][ T7580] veth1_macvtap: entered promiscuous mode [ 78.567531][ T7703] loop0: detected capacity change from 0 to 32768 [ 78.575296][ T6530] bcachefs (loop1): shutting down [ 78.627492][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.636440][ T6530] bcachefs (loop1): shutdown complete [ 78.640436][ T7580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.646097][ T7580] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.653409][ T7580] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.664183][ T7703] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 78.676708][ T7580] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.679775][ T7580] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.703352][ T7703] allowing incompatible features above 0.0: (unknown version) [ 78.703398][ T7703] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 78.703481][ T7703] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 78.703578][ T7703] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 78.703711][ T7703] bcachefs (loop0): Version upgrade required: [ 78.703711][ T7703] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 78.703711][ T7703] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 78.703711][ T7703] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 78.703922][ T7703] bcachefs (loop0): dropping and reconstructing all alloc info [ 78.742864][ T7703] bcachefs (loop0): accounting_read... [ 78.795228][ T7720] IPv6: addrconf: prefix option has invalid lifetime [ 78.806227][ T7703] done [ 78.806290][ T7703] bcachefs (loop0): alloc_read... done [ 78.806465][ T7703] bcachefs (loop0): snapshots_read... done [ 78.808041][ T7703] bcachefs (loop0): done starting filesystem [ 78.861549][ T1995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.861606][ T1995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.877488][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.877554][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.039534][ T6527] bcachefs (loop0): shutting down [ 79.840405][ T6527] bcachefs (loop0): shutdown complete [ 80.174064][ T7742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.243207][ T7743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 80.288619][ T6541] Bluetooth: hci5: command tx timeout [ 80.776567][ T7734] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 80.778439][ T7734] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 80.952092][ T7739] loop4: detected capacity change from 0 to 32768 [ 81.198670][ T7739] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 81.206627][ T7739] allowing incompatible features above 0.0: (unknown version) [ 81.208993][ T7739] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 81.213294][ T7739] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 81.215928][ T7739] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 81.267275][ T7739] bcachefs (loop4): Version upgrade required: [ 81.267275][ T7739] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 81.267275][ T7739] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 81.267275][ T7739] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 81.267508][ T7739] bcachefs (loop4): dropping and reconstructing all alloc info [ 81.293830][ T7739] bcachefs (loop4): accounting_read... [ 81.315176][ T7765] IPv6: addrconf: prefix option has invalid lifetime [ 81.339127][ T7739] done [ 81.339186][ T7739] bcachefs (loop4): alloc_read... done [ 81.339385][ T7739] bcachefs (loop4): snapshots_read... done [ 81.339827][ T7739] bcachefs (loop4): done starting filesystem [ 81.413345][ T6526] bcachefs (loop4): shutting down [ 81.484094][ T7773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.504831][ T6526] bcachefs (loop4): shutdown complete [ 82.734438][ T7736] loop1: detected capacity change from 0 to 131072 [ 82.763029][ T7736] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 82.763094][ T7736] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.772361][ T7768] loop0: detected capacity change from 0 to 32768 [ 82.879028][ T7736] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.881064][ T7736] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.934361][ T7736] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 83.106159][ T7768] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 83.106209][ T7768] allowing incompatible features above 0.0: (unknown version) [ 83.106238][ T7768] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 83.106295][ T7768] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 83.106389][ T7768] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 83.106513][ T7768] bcachefs (loop0): Version upgrade required: [ 83.106513][ T7768] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 83.106513][ T7768] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 83.106513][ T7768] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 83.106700][ T7768] bcachefs (loop0): dropping and reconstructing all alloc info [ 83.208780][ T7768] bcachefs (loop0): accounting_read... done [ 83.239177][ T7768] bcachefs (loop0): alloc_read... done [ 83.243060][ T7768] bcachefs (loop0): snapshots_read... done [ 83.245440][ T7768] bcachefs (loop0): done starting filesystem [ 83.366805][ T7812] IPv6: addrconf: prefix option has invalid lifetime [ 83.382004][ T6527] bcachefs (loop0): shutting down [ 83.456117][ T6527] bcachefs (loop0): shutdown complete [ 83.702068][ T7795] block device autoloading is deprecated and will be removed. [ 83.737184][ T7816] syzkaller1: entered promiscuous mode [ 83.737249][ T7816] syzkaller1: entered allmulticast mode [ 83.964669][ T7810] loop4: detected capacity change from 0 to 32768 [ 84.276033][ T7810] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 84.276089][ T7810] allowing incompatible features above 0.0: (unknown version) [ 84.276119][ T7810] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 84.276170][ T7810] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 84.276278][ T7810] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 84.276402][ T7810] bcachefs (loop4): Version upgrade required: [ 84.276402][ T7810] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 84.276402][ T7810] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 84.276402][ T7810] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 84.276581][ T7810] bcachefs (loop4): dropping and reconstructing all alloc info [ 84.287812][ T7838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.309473][ T7810] bcachefs (loop4): accounting_read... done [ 84.340410][ T7810] bcachefs (loop4): alloc_read... done [ 84.340588][ T7810] bcachefs (loop4): snapshots_read... done [ 84.341045][ T7810] bcachefs (loop4): done starting filesystem [ 84.443767][ T7834] syzkaller1: entered promiscuous mode [ 84.443833][ T7834] syzkaller1: entered allmulticast mode [ 84.452304][ T6526] bcachefs (loop4): shutting down [ 84.524320][ T6526] bcachefs (loop4): shutdown complete [ 84.722180][ T7851] IPv6: addrconf: prefix option has invalid lifetime [ 85.127631][ T7849] loop5: detected capacity change from 0 to 32768 [ 85.371753][ T7849] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 85.388264][ T7849] allowing incompatible features above 0.0: (unknown version) [ 85.388310][ T7849] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 85.388618][ T7849] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 85.389412][ T7849] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 85.389554][ T7849] bcachefs (loop5): Version upgrade required: [ 85.389554][ T7849] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 85.389554][ T7849] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 85.389554][ T7849] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 85.389743][ T7849] bcachefs (loop5): dropping and reconstructing all alloc info [ 85.473260][ T7849] bcachefs (loop5): accounting_read... done [ 85.512451][ T7849] bcachefs (loop5): alloc_read... done [ 85.512639][ T7849] bcachefs (loop5): snapshots_read... done [ 85.513099][ T7849] bcachefs (loop5): done starting filesystem [ 85.609928][ T7580] bcachefs (loop5): shutting down [ 85.655026][ T7580] bcachefs (loop5): shutdown complete [ 85.655643][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.656054][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.057570][ T7853] loop4: detected capacity change from 0 to 131072 [ 86.058941][ T7853] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 86.058978][ T7853] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.196940][ T7853] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.197001][ T7853] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.214503][ T7875] loop2: detected capacity change from 0 to 32768 [ 86.257324][ T7853] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 86.510200][ T7875] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 86.516687][ T7875] allowing incompatible features above 0.0: (unknown version) [ 86.525895][ T7875] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.530937][ T7875] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 86.533568][ T7875] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 86.536171][ T7875] bcachefs (loop2): Version upgrade required: [ 86.536171][ T7875] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 86.536171][ T7875] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 86.536171][ T7875] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 86.556937][ T7875] bcachefs (loop2): dropping and reconstructing all alloc info [ 86.629467][ T7875] bcachefs (loop2): accounting_read... done [ 86.670471][ T7875] bcachefs (loop2): alloc_read... done [ 86.670662][ T7875] bcachefs (loop2): snapshots_read... done [ 86.671132][ T7875] bcachefs (loop2): done starting filesystem [ 86.860293][ T6529] bcachefs (loop2): shutting down [ 86.946580][ T6529] bcachefs (loop2): shutdown complete [ 87.045632][ T7909] binder: 7908:7909 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.045710][ T7909] binder: 7909 RLIMIT_NICE not set [ 87.126789][ T7912] IPv6: addrconf: prefix option has invalid lifetime [ 87.793588][ T7943] 9pnet_virtio: no channels available for device syz [ 88.354513][ T7949] IPv6: addrconf: prefix option has invalid lifetime [ 88.467066][ T7920] loop1: detected capacity change from 0 to 32768 [ 88.584872][ T7920] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 88.591724][ T7920] allowing incompatible features above 0.0: (unknown version) [ 88.594030][ T7920] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 88.598095][ T7920] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 88.604255][ T7920] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 88.606678][ T7920] bcachefs (loop1): Version upgrade required: [ 88.606678][ T7920] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 88.606678][ T7920] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 88.606678][ T7920] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 88.619084][ T7926] loop0: detected capacity change from 0 to 32768 [ 88.633027][ T7920] bcachefs (loop1): dropping and reconstructing all alloc info [ 88.677140][ T7920] bcachefs (loop1): accounting_read... done [ 88.691195][ T7920] bcachefs (loop1): alloc_read... done [ 88.691389][ T7920] bcachefs (loop1): snapshots_read... done [ 88.692300][ T7920] bcachefs (loop1): done starting filesystem [ 88.853049][ T6530] bcachefs (loop1): shutting down [ 88.880331][ T6530] bcachefs (loop1): shutdown complete [ 88.881367][ T7926] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 88.881389][ T7926] allowing incompatible features above 0.0: (unknown version) [ 88.881400][ T7926] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 88.881459][ T7926] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 88.881547][ T7926] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 88.881680][ T7926] bcachefs (loop0): Version upgrade required: [ 88.881680][ T7926] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 88.881680][ T7926] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 88.881680][ T7926] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 88.881866][ T7926] bcachefs (loop0): dropping and reconstructing all alloc info [ 89.697488][ T7926] bcachefs (loop0): accounting_read... done [ 89.742193][ T7926] bcachefs (loop0): alloc_read... done [ 89.742417][ T7926] bcachefs (loop0): snapshots_read... done [ 89.742870][ T7926] bcachefs (loop0): done starting filesystem [ 90.131484][ T6527] bcachefs (loop0): shutting down [ 90.914520][ T6527] bcachefs (loop0): shutdown complete [ 91.126892][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.371'. [ 91.127381][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.371'. [ 91.529966][ T6606] Process accounting resumed [ 91.909551][ T7997] IPv6: addrconf: prefix option has invalid lifetime [ 92.279397][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.279730][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.890217][ T8011] loop5: detected capacity change from 0 to 32768 [ 93.030865][ T8011] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 93.030915][ T8011] allowing incompatible features above 0.0: (unknown version) [ 93.030951][ T8011] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 93.031010][ T8011] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 93.031105][ T8011] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 93.031236][ T8011] bcachefs (loop5): Version upgrade required: [ 93.031236][ T8011] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 93.031236][ T8011] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 93.031236][ T8011] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 93.031430][ T8011] bcachefs (loop5): dropping and reconstructing all alloc info [ 93.102271][ T8011] bcachefs (loop5): accounting_read... done [ 93.199439][ T8011] bcachefs (loop5): alloc_read... done [ 93.199607][ T8011] bcachefs (loop5): snapshots_read... done [ 93.200059][ T8011] bcachefs (loop5): done starting filesystem [ 93.242884][ T8023] loop4: detected capacity change from 0 to 32768 [ 93.269048][ T8009] loop1: detected capacity change from 0 to 65536 [ 93.305437][ T7580] bcachefs (loop5): shutting down [ 93.327911][ T7580] bcachefs (loop5): shutdown complete [ 94.186252][ T8009] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 94.292279][ T8023] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 94.299165][ T8009] XFS (loop1): Ending clean mount [ 94.314030][ T8023] allowing incompatible features above 0.0: (unknown version) [ 94.314078][ T8023] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 94.314146][ T8023] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 94.314262][ T8023] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 94.314404][ T8023] bcachefs (loop4): Version upgrade required: [ 94.314404][ T8023] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 94.314404][ T8023] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 94.314404][ T8023] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 94.314598][ T8023] bcachefs (loop4): dropping and reconstructing all alloc info [ 94.358699][ T8009] XFS (loop1): Quotacheck needed: Please wait. [ 94.362930][ T7025] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 94.367971][ T7025] XFS (loop1): Unmount and run xfs_repair [ 94.368026][ T7025] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 94.368055][ T7025] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 94.368082][ T7025] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 94.368108][ T7025] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 94.368134][ T7025] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 94.368160][ T7025] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 94.368186][ T7025] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.368211][ T7025] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.368237][ T7025] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.368265][ T7025] XFS (loop1): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 94.409618][ T8009] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 94.523101][ T8009] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 94.523185][ T8009] XFS (loop1): Unmount and run xfs_repair [ 94.523223][ T8009] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 94.523253][ T8009] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 94.523280][ T8009] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 94.523307][ T8009] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 94.523334][ T8009] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 94.523359][ T8009] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 94.523386][ T8009] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.523412][ T8009] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.523439][ T8009] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 94.523468][ T8009] XFS (loop1): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 94.523556][ T8009] XFS (loop1): page discard on page 0000000046460138, inode 0x2a, pos 0. [ 94.599792][ T8023] bcachefs (loop4): accounting_read... [ 94.797182][ T6530] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 94.808538][ T6530] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 94.841259][ T8023] done [ 94.841315][ T8023] bcachefs (loop4): alloc_read... done [ 94.841512][ T8023] bcachefs (loop4): snapshots_read... done [ 94.842002][ T8023] bcachefs (loop4): done starting filesystem [ 94.948503][ T8057] tipc: Started in network mode [ 94.948570][ T8057] tipc: Node identity 7f000001, cluster identity 4711 [ 94.953788][ T8057] tipc: Enabled bearer , priority 10 [ 94.973550][ T8057] tipc: Enabled bearer , priority 0 [ 95.027187][ T6526] bcachefs (loop4): shutting down [ 95.108288][ T6526] bcachefs (loop4): shutdown complete [ 95.666735][ T8066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.670219][ T8066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.774051][ T8068] IPv6: addrconf: prefix option has invalid lifetime [ 96.070227][ T6536] tipc: Node number set to 2130706433 [ 96.135297][ T8077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'. [ 96.135658][ T8077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'. [ 96.233233][ T6536] Process accounting resumed [ 97.493859][ T8104] syz.4.393 uses obsolete (PF_INET,SOCK_PACKET) [ 97.547112][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 97.549714][ T8104] IPVS: Error joining to the multicast group [ 98.092021][ T8088] loop1: detected capacity change from 0 to 32768 [ 98.316335][ T8088] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 98.316395][ T8088] allowing incompatible features above 0.0: (unknown version) [ 98.316427][ T8088] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 98.316479][ T8088] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 98.316567][ T8088] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 98.316695][ T8088] bcachefs (loop1): Version upgrade required: [ 98.316695][ T8088] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 98.316695][ T8088] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 98.316695][ T8088] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 98.316886][ T8088] bcachefs (loop1): dropping and reconstructing all alloc info [ 98.363949][ T8092] loop5: detected capacity change from 0 to 65536 [ 98.387487][ T8088] bcachefs (loop1): accounting_read... done [ 98.419410][ T8088] bcachefs (loop1): alloc_read... done [ 98.419577][ T8088] bcachefs (loop1): snapshots_read... done [ 98.420062][ T8088] bcachefs (loop1): done starting filesystem [ 98.447935][ T8092] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.608262][ T8092] XFS (loop5): Ending clean mount [ 98.610198][ T8092] XFS (loop5): Quotacheck needed: Please wait. [ 98.614759][ T7265] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 98.618496][ T7265] XFS (loop5): Unmount and run xfs_repair [ 98.618551][ T7265] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 98.618575][ T7265] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 98.618596][ T7265] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 98.618617][ T7265] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 98.618637][ T7265] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 98.618657][ T7265] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 98.618677][ T7265] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.618697][ T7265] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.618717][ T7265] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.618740][ T7265] XFS (loop5): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 98.740805][ T6530] bcachefs (loop1): shutting down [ 98.756730][ T8092] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 98.798455][ T8092] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 98.798537][ T8092] XFS (loop5): Unmount and run xfs_repair [ 98.798559][ T8092] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 98.798583][ T8092] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 98.798604][ T8092] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 98.798625][ T8092] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 98.798645][ T8092] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 98.798666][ T8092] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 98.798687][ T8092] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.798707][ T8092] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.798728][ T8092] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 98.798751][ T8092] XFS (loop5): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 98.798836][ T8092] XFS (loop5): page discard on page 0000000086ce6f5f, inode 0x2a, pos 0. [ 98.851870][ T6530] bcachefs (loop1): shutdown complete [ 98.857421][ T7580] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 98.865259][ T7580] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair. [ 99.015319][ T8108] delete_channel: no stack [ 99.070556][ T8136] syzkaller0: entered promiscuous mode [ 99.070627][ T8136] syzkaller0: entered allmulticast mode [ 99.698574][ T8145] loop4: detected capacity change from 0 to 32768 [ 99.701894][ T8145] (syz.4.413,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.702556][ T8145] (syz.4.413,8145,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 99.724773][ T8145] JBD2: Ignoring recovery information on journal [ 99.744757][ T8145] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 101.146035][ T8171] loop2: detected capacity change from 0 to 65536 [ 101.160224][ T8171] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.192267][ T8171] XFS (loop2): Ending clean mount [ 101.201146][ T8171] XFS (loop2): Quotacheck needed: Please wait. [ 101.206803][ T7267] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 101.206968][ T7267] XFS (loop2): Unmount and run xfs_repair [ 101.206989][ T7267] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 101.207011][ T7267] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 101.207057][ T7267] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 101.207078][ T7267] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 101.207098][ T7267] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 101.209094][ T7267] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 101.209117][ T7267] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.209138][ T7267] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.209158][ T7267] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.209181][ T7267] XFS (loop2): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 101.216577][ T8171] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 101.248243][ T8171] XFS (loop2): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 101.248297][ T8171] XFS (loop2): Unmount and run xfs_repair [ 101.248318][ T8171] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 101.249080][ T8171] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 101.249102][ T8171] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 101.249123][ T8171] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 101.249144][ T8171] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 101.249165][ T8171] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 101.249186][ T8171] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.249206][ T8171] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.249227][ T8171] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 101.249250][ T8171] XFS (loop2): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 101.249330][ T8171] XFS (loop2): page discard on page 00000000106d8b62, inode 0x2a, pos 0. [ 101.295335][ T6529] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 101.296455][ T6529] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 101.777194][ T8185] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 110.804128][ T6526] ocfs2: Unmounting device (7,4) on (node local) [ 111.765926][ T8236] delete_channel: no stack [ 113.680728][ T8267] loop0: detected capacity change from 0 to 32768 [ 113.801502][ T8269] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 113.801576][ T8269] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 114.003904][ T8267] (syz.0.447,8267,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.004292][ T8267] (syz.0.447,8267,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 114.047825][ T8267] JBD2: Ignoring recovery information on journal [ 114.245425][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 117.121745][ T8267] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 117.189585][ T8298] netlink: 60 bytes leftover after parsing attributes in process `syz.1.457'. [ 117.223523][ T8300] netlink: 'syz.5.458': attribute type 10 has an invalid length. [ 117.261730][ T6527] ocfs2: Unmounting device (7,0) on (node local) [ 117.362419][ T8300] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.787968][ T8332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.470'. [ 119.410299][ T8328] loop0: detected capacity change from 0 to 32768 [ 119.428656][ T8328] (syz.0.469,8328,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.432770][ T8328] (syz.0.469,8328,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.472184][ T8328] JBD2: Ignoring recovery information on journal [ 119.584270][ T8328] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 119.813294][ T8353] 9pnet_virtio: no channels available for device syz [ 119.913388][ T8356] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 120.013945][ T8352] loop4: detected capacity change from 0 to 4096 [ 120.035022][ T8352] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 120.164880][ T8352] ntfs3(loop4): Failed to load $MFT (-22). [ 120.351662][ T8364] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.219382][ T8372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.481'. [ 121.426953][ T6527] ocfs2: Unmounting device (7,0) on (node local) [ 121.667137][ T31] audit: type=1326 audit(122.241:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8382 comm="syz.4.487" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa155cc28 code=0x7ffc0000 [ 121.774067][ T8391] 9pnet_virtio: no channels available for device syz [ 122.551640][ T8402] loop4: detected capacity change from 0 to 4096 [ 122.582932][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.585509][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.590545][ T8402] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 122.615339][ T8402] ntfs3(loop4): Failed to load $MFT (-22). [ 123.097789][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.098126][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.138550][ T8419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 123.138755][ T8415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 123.194538][ T8411] loop2: detected capacity change from 0 to 32768 [ 123.211778][ T8411] (syz.2.495,8411,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.220653][ T8411] (syz.2.495,8411,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.257755][ T8411] JBD2: Ignoring recovery information on journal [ 123.317356][ T8411] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 123.563997][ T8431] loop1: detected capacity change from 0 to 4096 [ 123.579748][ T8431] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 123.582222][ T8434] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.502'. [ 123.628003][ T8431] ntfs3(loop1): Failed to load $MFT (-22). [ 123.774136][ T7267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.774200][ T7267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.195568][ T6529] ocfs2: Unmounting device (7,2) on (node local) [ 124.936182][ T8458] delete_channel: no stack [ 124.968089][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 124.968168][ T8464] netlink: 'syz.4.505': attribute type 5 has an invalid length. [ 124.968556][ T8464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 125.000771][ T8464] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 125.000949][ T8464] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 125.000982][ T8464] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 125.001013][ T8464] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 125.001172][ T8464] geneve2: entered promiscuous mode [ 125.001200][ T8464] geneve2: entered allmulticast mode [ 125.018985][ T8467] input input2: cannot allocate more than FF_MAX_EFFECTS effects [ 125.264281][ T8474] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 125.266475][ T8474] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 125.289481][ T8472] loop2: detected capacity change from 0 to 4096 [ 125.300692][ T8472] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 125.654634][ T8472] ntfs3(loop2): Failed to load $MFT (-22). [ 125.892298][ T8479] 9pnet_virtio: no channels available for device syz [ 126.504738][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.506650][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.496699][ T8509] 9pnet_virtio: no channels available for device syz [ 127.839574][ T8516] IPv6: addrconf: prefix option has invalid lifetime [ 129.643883][ T8534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.799487][ T8536] random: crng reseeded on system resumption [ 132.501094][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 132.557152][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 132.638608][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.641932][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.932790][ T8550] IPv6: addrconf: prefix option has invalid lifetime [ 133.754336][ T8567] loop4: detected capacity change from 0 to 32768 [ 133.862333][ T8567] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 133.870880][ T8567] allowing incompatible features above 0.0: (unknown version) [ 133.870930][ T8567] features: atomic_nlink [ 133.870988][ T8567] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 133.871030][ T8567] bcachefs (loop4): initializing new filesystem [ 133.874398][ T8567] bcachefs (loop4): going read-write [ 133.970110][ T8567] bcachefs (loop4): marking superblocks [ 133.983042][ T8567] bcachefs (loop4): initializing freespace [ 134.015612][ T8567] bcachefs (loop4): done initializing freespace [ 134.016690][ T8567] bcachefs (loop4): reading snapshots table [ 134.016742][ T8567] bcachefs (loop4): reading snapshots done [ 134.101871][ T8567] bcachefs (loop4): done starting filesystem [ 134.246003][ T6526] bcachefs (loop4): shutting down [ 134.246065][ T6526] bcachefs (loop4): going read-only [ 134.246118][ T6526] bcachefs (loop4): finished waiting for writes to stop [ 134.396857][ T6526] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 134.661387][ T6526] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 134.664613][ T6526] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 134.665383][ T6526] bcachefs (loop4): marking filesystem clean [ 134.707518][ T6526] bcachefs (loop4): shutdown complete [ 135.311573][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.312670][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.333432][ T8601] bridge0: entered allmulticast mode [ 135.357317][ T8601] bridge_slave_1: left allmulticast mode [ 135.365025][ T8601] bridge_slave_1: left promiscuous mode [ 135.366099][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.564178][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 135.715937][ T8603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.748611][ T8601] bridge_slave_0: left allmulticast mode [ 135.748688][ T8601] bridge_slave_0: left promiscuous mode [ 135.749304][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.024818][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.025181][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.558238][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.5.566'. [ 136.558752][ T8624] netlink: 32 bytes leftover after parsing attributes in process `syz.5.566'. [ 137.294883][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 137.294960][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 137.529077][ T8623] loop0: detected capacity change from 0 to 32768 [ 137.979744][ T8623] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 137.984692][ T8623] allowing incompatible features above 0.0: (unknown version) [ 137.987274][ T8623] features: atomic_nlink [ 137.990996][ T8623] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 137.991058][ T8623] bcachefs (loop0): initializing new filesystem [ 138.003270][ T8623] bcachefs (loop0): going read-write [ 138.679233][ T8623] bcachefs (loop0): marking superblocks [ 138.693001][ T8623] bcachefs (loop0): initializing freespace [ 138.737049][ T8623] bcachefs (loop0): done initializing freespace [ 138.742610][ T8623] bcachefs (loop0): reading snapshots table [ 138.742679][ T8623] bcachefs (loop0): reading snapshots done [ 138.786343][ T8623] bcachefs (loop0): done starting filesystem [ 138.923557][ T6527] bcachefs (loop0): shutting down [ 138.923616][ T6527] bcachefs (loop0): going read-only [ 138.923666][ T6527] bcachefs (loop0): finished waiting for writes to stop [ 138.984202][ T8660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.991316][ T6527] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 139.013178][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 139.260248][ T6527] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 139.265432][ T6527] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 139.266202][ T6527] bcachefs (loop0): marking filesystem clean [ 139.292175][ T6527] bcachefs (loop0): shutdown complete [ 140.043821][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 140.043930][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 140.229485][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 140.229592][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 140.445637][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 140.445733][ T8676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'. [ 140.446186][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 140.522738][ T8698] netlink: 'syz.0.577': attribute type 10 has an invalid length. [ 140.593812][ T8698] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.697959][ T8707] loop5: detected capacity change from 0 to 4096 [ 140.713674][ T8707] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 140.763071][ T8707] ntfs3(loop5): Failed to load $MFT (-22). [ 140.865843][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.873344][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.924358][ T8734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.943029][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 142.624632][ T8751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.631236][ T8751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.773596][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.596'. [ 143.134120][ T8766] netlink: 'syz.4.601': attribute type 10 has an invalid length. [ 143.248497][ T8770] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.289148][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.289209][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.472131][ T8776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 143.472253][ T8776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 143.477370][ T8776] vhci_hcd vhci_hcd.0: Device attached [ 144.152523][ T8789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.519151][ T8781] team0 (unregistering): Port device team_slave_0 removed [ 144.536341][ T8781] team0 (unregistering): Port device team_slave_1 removed [ 144.914568][ T8777] vhci_hcd: connection closed [ 144.998823][ T305] vhci_hcd: stop threads [ 144.999379][ T305] vhci_hcd: release socket [ 145.004670][ T305] vhci_hcd: disconnect device [ 145.029456][ T6537] vhci_hcd: vhci_device speed not set [ 145.210026][ T8803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.220271][ T31] audit: type=1326 audit(145.841:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8796 comm="syz.5.611" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83d5cc28 code=0x0 [ 145.226937][ T8803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.434418][ T8805] __nla_validate_parse: 2 callbacks suppressed [ 145.436331][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 145.440039][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 145.564262][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 145.564347][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 145.652381][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 145.652486][ T8805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.613'. [ 145.662527][ T8810] netlink: 'syz.4.614': attribute type 10 has an invalid length. [ 145.723570][ T7263] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 146.129472][ T6606] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.205446][ T8818] loop4: detected capacity change from 0 to 32768 [ 146.713029][ T8818] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 146.732387][ T8818] allowing incompatible features above 0.0: (unknown version) [ 146.732437][ T8818] features: atomic_nlink [ 146.732494][ T8818] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 146.732540][ T8818] bcachefs (loop4): initializing new filesystem [ 146.735863][ T8818] bcachefs (loop4): going read-write [ 146.784335][ T6606] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 146.786638][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.786718][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.786748][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.787836][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.787890][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.787919][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.789332][ T8818] bcachefs (loop4): marking superblocks [ 146.793376][ T8818] bcachefs (loop4): initializing freespace [ 146.798562][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.798606][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.798635][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.803297][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.803337][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.803365][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.819701][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.819802][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.819832][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.828488][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.828551][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.828586][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.830644][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.830683][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.830711][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.832562][ T6606] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.832601][ T6606] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.832629][ T6606] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.977886][ T6606] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 146.977952][ T6606] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 146.977996][ T6606] usb 1-1: Product: syz [ 146.978023][ T6606] usb 1-1: Manufacturer: syz [ 146.978049][ T6606] usb 1-1: SerialNumber: syz [ 146.983264][ T6606] usb 1-1: config 0 descriptor?? [ 147.019636][ T6606] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 147.024926][ T8818] bcachefs (loop4): done initializing freespace [ 147.622065][ T8818] bcachefs (loop4): reading snapshots table [ 147.623839][ T8818] bcachefs (loop4): reading snapshots done [ 147.674561][ T6606] usb 1-1: USB disconnect, device number 2 [ 147.685977][ T6606] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 147.713075][ T8818] bcachefs (loop4): done starting filesystem [ 147.835349][ T6526] bcachefs (loop4): shutting down [ 147.835413][ T6526] bcachefs (loop4): going read-only [ 147.835443][ T6526] bcachefs (loop4): finished waiting for writes to stop [ 147.920797][ T6526] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 148.010274][ T6526] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 148.013684][ T6526] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 148.014436][ T6526] bcachefs (loop4): marking filesystem clean [ 148.038839][ T8845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.050890][ T6526] bcachefs (loop4): shutdown complete [ 148.392040][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.410293][ T8856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.564796][ T8857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 148.565004][ T8857] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 148.668776][ T8858] vlan1: entered promiscuous mode [ 148.669888][ T8858] vlan1: entered allmulticast mode [ 148.670000][ T8858] veth0_vlan: entered allmulticast mode [ 149.217395][ T8862] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 150.213335][ T8874] tipc: Started in network mode [ 150.213398][ T8874] tipc: Node identity 7f000001, cluster identity 4711 [ 150.229743][ T8874] tipc: Enabled bearer , priority 10 [ 151.034492][ T8873] loop0: detected capacity change from 0 to 32768 [ 151.181331][ T8873] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 151.185821][ T8873] allowing incompatible features above 0.0: (unknown version) [ 151.188137][ T8873] features: atomic_nlink [ 151.218579][ T8873] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 151.218653][ T8873] bcachefs (loop0): initializing new filesystem [ 151.222087][ T8873] bcachefs (loop0): going read-write [ 151.280349][ T8871] loop4: detected capacity change from 0 to 65536 [ 151.290267][ T8871] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.319848][ T8873] bcachefs (loop0): marking superblocks [ 151.328651][ T6329] tipc: Node number set to 2130706433 [ 151.343973][ T8871] XFS (loop4): Ending clean mount [ 151.346803][ T8871] XFS (loop4): Quotacheck needed: Please wait. [ 151.355685][ T41] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 151.355844][ T41] XFS (loop4): Unmount and run xfs_repair [ 151.355878][ T41] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.355908][ T41] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.355931][ T41] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.355951][ T41] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.355972][ T41] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.355992][ T41] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.356012][ T41] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.356032][ T41] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.356052][ T41] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.356075][ T41] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 151.365190][ T8873] bcachefs (loop0): initializing freespace [ 151.383681][ T8873] bcachefs (loop0): done initializing freespace [ 151.393646][ T8871] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 151.395038][ T8873] bcachefs (loop0): reading snapshots table [ 151.395110][ T8873] bcachefs (loop0): reading snapshots done [ 151.436653][ T8873] bcachefs (loop0): done starting filesystem [ 151.438519][ T8871] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 151.438587][ T8871] XFS (loop4): Unmount and run xfs_repair [ 151.438609][ T8871] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.438632][ T8871] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.438654][ T8871] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.438675][ T8871] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.438696][ T8871] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.438716][ T8871] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.438737][ T8871] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.438758][ T8871] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.438778][ T8871] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.438816][ T8871] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 151.438915][ T8871] XFS (loop4): page discard on page 00000000105faf6e, inode 0x2a, pos 64512. [ 151.442109][ T8871] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 151.442158][ T8871] XFS (loop4): Unmount and run xfs_repair [ 151.442178][ T8871] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.442201][ T8871] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.442222][ T8871] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.442243][ T8871] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.442263][ T8871] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.442284][ T8871] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.442304][ T8871] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.442325][ T8871] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.442345][ T8871] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.442369][ T8871] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 151.442451][ T8871] XFS (loop4): page discard on page 00000000e7d80ce4, inode 0x2a, pos 65536. [ 151.445608][ T8871] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 151.445652][ T8871] XFS (loop4): Unmount and run xfs_repair [ 151.445672][ T8871] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.445693][ T8871] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.445714][ T8871] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.445735][ T8871] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.445755][ T8871] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.445776][ T8871] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.445796][ T8871] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.445816][ T8871] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.445837][ T8871] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.445869][ T8871] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 151.445954][ T8871] XFS (loop4): page discard on page 00000000650b561e, inode 0x2a, pos 98304. [ 151.452595][ T8871] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 151.452642][ T8871] XFS (loop4): Unmount and run xfs_repair [ 151.452663][ T8871] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.452685][ T8871] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.452707][ T8871] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.452727][ T8871] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.452748][ T8871] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.452769][ T8871] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.452789][ T8871] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.452810][ T8871] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.452830][ T8871] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.452864][ T8871] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 151.452955][ T8871] XFS (loop4): page discard on page 000000008db2eeb5, inode 0x2a, pos 114688. [ 151.456800][ T8871] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 151.456846][ T8871] XFS (loop4): Unmount and run xfs_repair [ 151.456876][ T8871] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.456902][ T8871] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.456926][ T8871] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.456947][ T8871] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.456967][ T8871] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.456988][ T8871] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.457009][ T8871] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.457029][ T8871] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.457050][ T8871] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.457073][ T8871] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 151.457152][ T8871] XFS (loop4): page discard on page 00000000feac8c66, inode 0x2a, pos 122880. [ 151.463148][ T8871] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x100/0x1d4, xfs_agf block 0x1 [ 151.463194][ T8871] XFS (loop4): Unmount and run xfs_repair [ 151.467421][ T8871] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 151.467446][ T8871] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 151.467468][ T8871] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 151.467489][ T8871] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 01 00 00 04 ................ [ 151.467509][ T8871] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 151.467530][ T8871] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 151.467551][ T8871] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.467571][ T8871] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.468407][ T8871] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.468437][ T8871] XFS (loop4): metadata I/O error in "xfs_read_agf+0x238/0x58c" at daddr 0x1 len 1 error 74 [ 151.468521][ T8871] XFS (loop4): page discard on page 00000000b3833505, inode 0x2a, pos 126976. [ 151.568005][ T6527] bcachefs (loop0): shutting down [ 151.568039][ T6527] bcachefs (loop0): going read-only [ 151.568068][ T6527] bcachefs (loop0): finished waiting for writes to stop [ 151.612717][ T6526] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.616386][ T6526] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 151.665148][ T6527] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 151.779391][ T6527] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 151.796174][ T6527] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 151.796913][ T6527] bcachefs (loop0): marking filesystem clean [ 151.897415][ T6527] bcachefs (loop0): shutdown complete [ 152.006782][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.412900][ T8930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.836070][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.836395][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.896690][ T8938] loop1: detected capacity change from 0 to 4096 [ 152.914362][ T8938] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 152.934342][ T8938] ntfs3(loop1): Failed to load $MFT (-22). [ 152.945820][ T8940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.946300][ T8940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.063804][ T8936] warning: `syz.5.644' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.170284][ T8923] Process accounting resumed [ 153.309662][ T8956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.315581][ T8944] loop1: detected capacity change from 0 to 32768 [ 153.436195][ T8944] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 153.436254][ T8944] allowing incompatible features above 0.0: (unknown version) [ 153.436283][ T8944] features: atomic_nlink [ 153.436333][ T8944] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 153.436371][ T8944] bcachefs (loop1): initializing new filesystem [ 153.442455][ T8944] bcachefs (loop1): going read-write [ 153.498965][ T8944] bcachefs (loop1): marking superblocks [ 153.526298][ T8944] bcachefs (loop1): initializing freespace [ 153.539074][ T8944] bcachefs (loop1): done initializing freespace [ 153.540127][ T8944] bcachefs (loop1): reading snapshots table [ 153.541902][ T8944] bcachefs (loop1): reading snapshots done [ 153.570659][ T8944] bcachefs (loop1): done starting filesystem [ 153.638268][ T6530] bcachefs (loop1): shutting down [ 153.639102][ T6530] bcachefs (loop1): going read-only [ 153.639154][ T6530] bcachefs (loop1): finished waiting for writes to stop [ 153.651295][ T8977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.681600][ T6530] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 153.734338][ T6530] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 153.737958][ T6530] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 153.742025][ T6530] bcachefs (loop1): marking filesystem clean [ 153.766403][ T6530] bcachefs (loop1): shutdown complete [ 154.578414][ T9002] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.675329][ T9007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.725693][ T9009] IPv6: addrconf: prefix option has invalid lifetime [ 154.855800][ T9011] input: syz0 as /devices/virtual/input/input3 [ 155.073768][ T9003] loop0: detected capacity change from 0 to 32768 [ 155.131764][ T8982] Process accounting resumed [ 155.194401][ T9003] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 155.194456][ T9003] allowing incompatible features above 0.0: (unknown version) [ 155.196491][ T9003] features: atomic_nlink [ 155.196543][ T9003] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 155.196581][ T9003] bcachefs (loop0): initializing new filesystem [ 155.201486][ T9003] bcachefs (loop0): going read-write [ 155.238579][ T9003] bcachefs (loop0): marking superblocks [ 155.243814][ T9003] bcachefs (loop0): initializing freespace [ 155.279684][ T9003] bcachefs (loop0): done initializing freespace [ 155.280676][ T9003] bcachefs (loop0): reading snapshots table [ 155.280736][ T9003] bcachefs (loop0): reading snapshots done [ 155.314127][ T9003] bcachefs (loop0): done starting filesystem [ 155.343242][ T9033] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 155.345955][ T9033] netlink: 224 bytes leftover after parsing attributes in process `syz.4.676'. [ 155.445151][ T41] Bluetooth: hci6: Frame reassembly failed (-84) [ 155.462506][ T6527] bcachefs (loop0): shutting down [ 155.464314][ T6527] bcachefs (loop0): going read-only [ 155.465944][ T6527] bcachefs (loop0): finished waiting for writes to stop [ 155.615107][ T6527] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4 [ 156.360979][ T6527] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 156.364071][ T6527] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 156.364807][ T6527] bcachefs (loop0): marking filesystem clean [ 156.450771][ T6527] bcachefs (loop0): shutdown complete [ 156.455903][ T9044] Bluetooth: Invalid byte 00 after esc byte [ 157.488514][ T6545] Bluetooth: hci6: command 0x1003 tx timeout [ 157.488812][ T6540] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 157.700534][ T9057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.327045][ T9055] Process accounting resumed [ 158.518574][ T6545] Bluetooth: hci7: command 0x1003 tx timeout [ 158.518832][ T6094] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 158.814029][ T9068] loop2: detected capacity change from 0 to 32768 [ 158.932821][ T9074] netlink: 'syz.4.690': attribute type 12 has an invalid length. [ 159.622640][ T9068] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 159.622702][ T9068] allowing incompatible features above 0.0: (unknown version) [ 159.622732][ T9068] features: atomic_nlink [ 159.622790][ T9068] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 159.622829][ T9068] bcachefs (loop2): initializing new filesystem [ 159.636645][ T9068] bcachefs (loop2): going read-write [ 159.690037][ T9068] bcachefs (loop2): marking superblocks [ 159.712281][ T9068] bcachefs (loop2): initializing freespace [ 159.716329][ T9068] bcachefs (loop2): done initializing freespace [ 159.723044][ T9068] bcachefs (loop2): reading snapshots table [ 159.723198][ T9068] bcachefs (loop2): reading snapshots done [ 159.748075][ T9068] bcachefs (loop2): done starting filesystem [ 159.806710][ T6529] bcachefs (loop2): shutting down [ 159.808659][ T6529] bcachefs (loop2): going read-only [ 159.810349][ T6529] bcachefs (loop2): finished waiting for writes to stop [ 159.818113][ T9070] Bluetooth: MGMT ver 1.23 [ 159.858848][ T6529] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 159.965315][ T6529] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 159.969987][ T6529] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 159.970721][ T6529] bcachefs (loop2): marking filesystem clean [ 160.031253][ T6529] bcachefs (loop2): shutdown complete [ 160.488621][ T6545] Bluetooth: hci6: command 0x1003 tx timeout [ 160.495840][ T6540] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 160.531048][ T9099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.491922][ T9117] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 161.491962][ T9117] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.492051][ T9117] vhci_hcd vhci_hcd.0: Device attached [ 161.515454][ T9120] vhci_hcd: connection closed [ 161.515846][ T545] vhci_hcd: stop threads [ 161.526516][ T545] vhci_hcd: release socket [ 161.526575][ T545] vhci_hcd: disconnect device [ 161.631109][ T9123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.698'. [ 161.631462][ T9123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.698'. [ 162.209556][ T9123] Process accounting resumed [ 162.401044][ T9138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.703'. [ 162.401352][ T9133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.703'. [ 162.450225][ T9140] IPv6: addrconf: prefix option has invalid lifetime [ 162.765577][ T7262] Bluetooth: hci6: Frame reassembly failed (-84) [ 163.214570][ T9157] fuse: Unknown parameter '0x0000000000000007' [ 163.787932][ T9153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.195653][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.715'. [ 164.196023][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.715'. [ 164.838481][ T6545] Bluetooth: hci6: command 0xfc11 tx timeout [ 164.838795][ T6540] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 165.394134][ T9166] Process accounting resumed [ 167.288253][ T9184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.719'. [ 167.288827][ T9184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.719'. [ 167.408520][ T6636] Process accounting resumed [ 167.410646][ T6636] Process accounting resumed [ 167.419849][ T9175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.718'. [ 167.422659][ T9175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.718'. [ 167.448929][ T9191] IPv6: addrconf: prefix option has invalid lifetime [ 167.604946][ T9199] capability: warning: `syz.5.725' uses deprecated v2 capabilities in a way that may be insecure [ 167.777870][ T9205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.933877][ T6536] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 168.462967][ T6536] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 168.488515][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.488592][ T6536] usb 1-1: config 0 has no interfaces? [ 168.494332][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.494389][ T6536] usb 1-1: config 0 has no interfaces? [ 168.500002][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.500053][ T6536] usb 1-1: config 0 has no interfaces? [ 168.507459][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.685052][ T6536] usb 1-1: config 0 has no interfaces? [ 168.706489][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.706550][ T6536] usb 1-1: config 0 has no interfaces? [ 168.864772][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 169.070645][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.074827][ T6536] usb 1-1: config 0 has no interfaces? [ 169.414342][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.417278][ T6536] usb 1-1: config 0 has no interfaces? [ 169.425966][ T6536] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.428779][ T6536] usb 1-1: config 0 has no interfaces? [ 169.432902][ T6536] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 169.435399][ T6536] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 169.437882][ T6536] usb 1-1: Product: syz [ 169.439162][ T6536] usb 1-1: Manufacturer: syz [ 169.440538][ T6536] usb 1-1: SerialNumber: syz [ 169.576812][ T6536] usb 1-1: config 0 descriptor?? [ 170.250642][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.730'. [ 170.250725][ T9231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.730'. [ 170.672112][ T6606] usb 1-1: USB disconnect, device number 3 [ 170.852551][ T9229] Process accounting resumed [ 170.962152][ T9246] input: syz0 as /devices/virtual/input/input4 [ 171.051376][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.051709][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.637489][ T9254] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.941938][ T9265] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.942120][ T9265] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 174.009845][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 174.010702][ T9266] IPVS: Error joining to the multicast group [ 174.226962][ T9274] IPv6: addrconf: prefix option has invalid lifetime [ 175.173256][ T9283] Process accounting resumed [ 175.300445][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.300788][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.547438][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 175.551483][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 175.628531][ T6329] Process accounting resumed [ 175.633264][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 175.633356][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 175.830246][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 175.830334][ T9281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.749'. [ 176.559957][ T9310] IPv6: addrconf: prefix option has invalid lifetime [ 176.743529][ T9318] random: crng reseeded on system resumption [ 176.867433][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.753'. [ 176.955229][ T9323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.056377][ T9323] bond0: (slave rose0): Enslaving as an active interface with an up link [ 177.965746][ T9364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.966150][ T9364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.141255][ T9370] IPv6: addrconf: prefix option has invalid lifetime [ 178.451460][ T9375] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.603213][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.776'. [ 179.603610][ T9397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.776'. [ 180.154923][ T6606] Process accounting resumed [ 180.330717][ T9403] netlink: 'syz.5.779': attribute type 4 has an invalid length. [ 180.334067][ T9403] netlink: 'syz.5.779': attribute type 5 has an invalid length. [ 180.336451][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.5.779'. [ 180.804331][ T9428] ieee802154 phy0 wpan0: encryption failed: -22 [ 182.039421][ T9447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.791'. [ 182.042360][ T9440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.791'. [ 182.167754][ T9454] nbd: socks must be embedded in a SOCK_ITEM attr [ 182.534064][ T9471] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 182.534136][ T9471] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 182.556086][ T9463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.629368][ T9473] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.428513][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 183.729281][ T9499] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 183.729485][ T9499] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 184.268537][ T9502] IPv6: addrconf: prefix option has invalid lifetime [ 184.409079][ T9506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.808308][ T9521] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.918831][ T6545] Bluetooth: hci6: command 0x1003 tx timeout [ 184.920852][ T6540] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 184.996737][ T9527] IPv6: addrconf: prefix option has invalid lifetime [ 185.363693][ T9545] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 185.364474][ T9545] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 185.370152][ T9550] syz_tun: entered allmulticast mode [ 185.395546][ T9547] syz_tun: left allmulticast mode [ 185.439625][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.841'. [ 185.543447][ T9557] sctp: [Deprecated]: syz.1.842 (pid 9557) Use of int in max_burst socket option. [ 185.543447][ T9557] Use struct sctp_assoc_value instead [ 185.611237][ T9559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.071813][ T9589] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.848257][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c6cb04c5: rx timeout, send abort [ 186.850210][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000c6cb04c5: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 186.909650][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 186.909718][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 186.909752][ T9602] netlink: 'syz.4.858': attribute type 6 has an invalid length. [ 187.155568][ T9590] netlink: 64 bytes leftover after parsing attributes in process `syz.0.853'. [ 187.159013][ T9599] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 187.399639][ T9626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.485759][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.863'. [ 187.486203][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.863'. [ 187.719180][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.316355][ T9636] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.424828][ T9648] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 188.625160][ T9655] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 188.825476][ T9673] nbd: illegal input index -1 [ 188.855835][ T9665] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 188.855924][ T9665] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 188.876314][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 188.905354][ T9676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.922541][ T9679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.886'. [ 189.673981][ T9707] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.674185][ T9707] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 190.317609][ T9710] IPv6: addrconf: prefix option has invalid lifetime [ 190.347479][ T9716] input: syz0 as /devices/virtual/input/input5 [ 190.423658][ T9718] tipc: Enabled bearer , priority 10 [ 190.500387][ T9718] tipc: Resetting bearer [ 190.588669][ T9717] tipc: Resetting bearer [ 190.713015][ T9733] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.382482][ T9737] netlink: 'syz.4.909': attribute type 2 has an invalid length. [ 191.382548][ T9737] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 192.075823][ T9746] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 192.175927][ T9734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.259442][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.912'. [ 203.078068][ T9717] tipc: Disabling bearer [ 203.100511][ T9737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.106885][ T9741] veth0_to_team: entered promiscuous mode [ 203.106955][ T9741] veth0_to_team: entered allmulticast mode [ 203.113937][ T9749] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 203.116053][ T9749] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 203.238950][ T9762] IPv6: addrconf: prefix option has invalid lifetime [ 203.475429][ T9770] tipc: Resetting bearer [ 203.477367][ T9770] tipc: Resetting bearer [ 203.510655][ T9784] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.618478][ T7263] tipc: Resetting bearer [ 203.730052][ T9798] bridge_slave_0: left allmulticast mode [ 203.730130][ T9798] bridge_slave_0: left promiscuous mode [ 203.730260][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.763125][ T9798] bridge_slave_1: left allmulticast mode [ 203.763194][ T9798] bridge_slave_1: left promiscuous mode [ 203.763293][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.809713][ T9805] netlink: 'syz.5.925': attribute type 10 has an invalid length. [ 203.814964][ T9798] bond0: (slave bond_slave_0): Releasing backup interface [ 203.845959][ T9798] bond0: (slave bond_slave_1): Releasing backup interface [ 203.897779][ T9798] team0: Port device team_slave_0 removed [ 203.910620][ T9798] team0: Port device team_slave_1 removed [ 203.915200][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.917465][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.925335][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.927600][ T9798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.945124][ T9798] bond0: (slave wlan1): Releasing backup interface [ 204.055996][ T9801] team0: Mode changed to "loadbalance" [ 204.075311][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.301556][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.301621][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.416083][ T9821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.926'. [ 204.416458][ T9821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.926'. [ 204.522547][ T6606] Process accounting resumed [ 205.133568][ T9828] IPv6: addrconf: prefix option has invalid lifetime [ 205.392072][ T9845] tipc: Enabled bearer , priority 0 [ 205.418073][ T9845] syzkaller0: entered promiscuous mode [ 205.418142][ T9845] syzkaller0: entered allmulticast mode [ 205.513199][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.513266][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.519059][ T9845] tipc: Resetting bearer [ 205.529401][ T9850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.566108][ T9844] tipc: Resetting bearer [ 205.663784][ T9844] tipc: Disabling bearer [ 206.456304][ T9906] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.724018][ T9926] netlink: 148 bytes leftover after parsing attributes in process `syz.1.949'. [ 206.724093][ T9926] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.845114][ T9937] smc: net device bond0 applied user defined pnetid SYZ2 [ 207.034135][ T9943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.070123][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 207.239657][ T9956] netlink: 60 bytes leftover after parsing attributes in process `syz.5.960'. [ 207.242465][ T9953] netlink: 60 bytes leftover after parsing attributes in process `syz.5.960'. [ 207.316798][ T9962] team0: No ports can be present during mode change [ 207.877115][ T9990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.974'. [ 207.885300][ T9985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.974'. [ 207.930026][ T9991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.961179][ T9994] netlink: 68 bytes leftover after parsing attributes in process `syz.2.978'. [ 208.410669][T10016] netlink: 60 bytes leftover after parsing attributes in process `syz.0.987'. [ 208.425326][T10018] tipc: Started in network mode [ 208.425399][T10018] tipc: Node identity 7f000001, cluster identity 4711 [ 208.426883][T10018] tipc: Enabled bearer , priority 10 [ 209.508220][ T6329] tipc: Node number set to 2130706433 [ 209.753685][T10052] IPv6: addrconf: prefix option has invalid lifetime [ 210.106417][T10078] geneve2: entered promiscuous mode [ 210.484219][T10104] __nla_validate_parse: 1 callbacks suppressed [ 210.484480][T10104] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1024'. [ 210.485849][T10099] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1024'. [ 210.508004][T10103] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1026'. [ 210.508069][T10103] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 211.268537][T10161] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.536487][T10181] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 211.536586][T10181] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 211.552803][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1044'. [ 211.552912][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1044'. [ 211.609845][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1044'. [ 211.609953][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1044'. [ 211.713605][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1044'. [ 211.714403][T10173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1044'. [ 212.165731][T10219] IPv6: addrconf: prefix option has invalid lifetime [ 212.916975][T10223] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.147073][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.152099][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.238481][ T6540] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 213.387595][T10265] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.040481][T10268] Process accounting resumed [ 214.446280][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.446610][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.259100][T10315] Process accounting resumed [ 215.954989][T10370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.958022][T10370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.279659][ T7264] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 216.309062][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.310502][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.368645][ T6540] Bluetooth: hci6: command 0x1003 tx timeout [ 216.370771][ T6545] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 216.589513][T10408] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1117'. [ 216.594451][T10408] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 216.646982][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1120'. [ 216.972223][T10434] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.070223][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1133'. [ 217.162019][ T32] INFO: task syz-executor:6528 blocked for more than 143 seconds. [ 217.162077][ T32] Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 [ ** replaying previous printk message ** [ 217.162163][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 217.162183][ T32] task:syz-executor state:D stack:0 pid:6528 tgid:6528 ppid:1 task_flags:0x400140 flags:0x00000019 [ 217.162221][ T32] Call trace: [ 217.162237][ T32] __switch_to+0x418/0x87c (T) [ 217.162270][ T32] __schedule+0x141c/0x2a14 [ 217.162296][ T32] schedule+0xb4/0x230 [ 217.162320][ T32] __bch2_fs_stop+0x5f8/0x800 [ 217.162344][ T32] bch2_put_super+0x40/0x50 [ 217.162369][ T32] generic_shutdown_super+0x12c/0x2b8 [ 217.162394][ T32] bch2_kill_sb+0x40/0x58 [ 217.162417][ T32] deactivate_locked_super+0xc4/0x12c [ 217.162441][ T32] deactivate_super+0xe0/0x100 [ 217.162463][ T32] cleanup_mnt+0x31c/0x3ac [ 217.162487][ T32] __cleanup_mnt+0x20/0x30 [ 217.162510][ T32] task_work_run+0x1dc/0x260 [ 217.162534][ T32] do_notify_resume+0x174/0x1f4 [ 217.162560][ T32] el0_svc+0xb8/0x180 [ 217.162582][ T32] el0t_64_sync_handler+0x84/0x12c [ 217.162606][ T32] el0t_64_sync+0x198/0x19c [ 217.162675][ T32] [ 217.162675][ T32] Showing all locks held in the system: [ 217.162696][ T32] 1 lock held by khungtaskd/32: [ 217.162715][ T32] #0: ffff80008f869980 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 217.162788][ T32] 2 locks held by pr/ttyAMA0/43: [ 217.162810][ T32] 2 locks held by kworker/u8:4/232: [ 217.162831][ T32] 3 locks held by kworker/u8:8/2006: [ 217.162850][ T32] #0: ffff0000c18a2148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 217.162941][ T32] #1: ffff8000a0337bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 217.163012][ T32] #2: ffff8000928bb010 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x6c0 [ 217.163090][ T32] 2 locks held by getty/6301: [ 217.163109][ T32] #0: ffff0000d2a4c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 217.163179][ T32] #1: ffff80009ba3e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 [ 217.164426][ T32] 1 lock held by syz-executor/6528: [ 217.164446][ T32] #0: ffff0000d1f6c0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 [ 217.164525][ T32] 6 locks held by kworker/1:3/6536: [ 217.164544][ T32] #0: ffff0000c276e948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 217.164616][ T32] #1: ffff8000a1487bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 217.164688][ T32] #2: ffff0000cd6fa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x140/0x3c78 [ 217.164759][ T32] #3: ffff0000cd6fd520 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x1b68/0x3c78 [ 217.164828][ T32] #4: ffff0000cd5e8a68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x1b90/0x3c78 [ 217.164915][ T32] #5: ffff80009194a250 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x10c/0x12f4 [ 217.164991][ T32] 3 locks held by kworker/u9:8/6545: [ 217.165009][ T32] #0: ffff0000dcb05148 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 217.165143][ T32] #1: ffff8000a4437bc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 217.165216][ T32] #2: ffff0000cb940dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x144/0x628 [ 217.165298][ T32] 2 locks held by syz.4.1125/10421: [ 217.165317][ T32] #0: ffff0000dd5600a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_write+0x3c/0x4c [ 217.165387][ T32] #1: ffff0000dd5670a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: ldsem_down_write_nested+0x44/0x58 [ 217.166026][ T32] 1 lock held by syz.2.1136/10450: [ 217.166046][ T32] #0: ffff0000f14e04d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x44/0x11c [ 217.166188][ T32] [ 217.166206][ T32] ============================================= [ 217.166206][ T32] [ 217.166225][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 217.265660][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT [ 217.268649][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.271554][ T32] Call trace: [ 217.272464][ T32] show_stack+0x2c/0x3c (C) [ 217.273681][ T32] __dump_stack+0x30/0x40 [ 217.274880][ T32] dump_stack_lvl+0x30/0x12c [ 217.276225][ T32] dump_stack+0x1c/0x28 [ 217.277424][ T32] panic+0x2bc/0x7ac [ 217.278509][ T32] hung_task_panic+0x0/0x2c [ 217.279873][ T32] kthread+0x5fc/0x75c [ 217.281114][ T32] ret_from_fork+0x10/0x20 [ 217.282318][ T32] SMP: stopping secondary CPUs [ 218.343853][ T32] SMP: failed to stop secondary CPUs 0 [ 218.345550][ T32] Kernel Offset: disabled [ 218.346705][ T32] CPU features: 0x10000,00040e00,040008a1,04017203 [ 218.348440][ T32] Memory Limit: none [ 218.843028][ T32] Rebooting in 86400 seconds..