last executing test programs: 8m9.607896449s ago: executing program 2 (id=1014): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xfffffffd, @loopback, 0xfff}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8m8.7456361s ago: executing program 2 (id=1017): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000280)="b18b478e80a338a325f0193bdd227b7abb3fe45918dc3bbf0cd67e27905960b0f5c17fd1148d99324c9ce74983f297cab7fe72f61cd72255e976708f7ffff3ad827aa36124", 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000ff7f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 8m8.479263195s ago: executing program 2 (id=1019): r0 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000002c0)={0x1, 0x102, 0x4, {0x4a4, 0x4, 0x780000, 0xfcad}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x209c0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000280)={0x5, &(0x7f0000000380)=[{0xd, 0x8, 0xff, 0x9e}, {0x1000, 0x9, 0x7, 0x5}, {0xf, 0x3, 0x3, 0xd9}, {0xc, 0x4, 0x1, 0x10000}, {0x3d1, 0x81, 0x7, 0x80000000}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8m7.319928103s ago: executing program 2 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) io_submit(r4, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) 8m4.971587261s ago: executing program 2 (id=1024): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf"], 0xd8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9804", @ANYRES16, @ANYBLOB="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"/1066], 0x498}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 7m55.430558008s ago: executing program 2 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x38) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) 7m40.324635832s ago: executing program 32 (id=1045): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x38) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) 17.891196168s ago: executing program 1 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff030000050021000600000018011a80300002802c00018008000f0008000000080011007a80000008002000ff01000008000400"], 0x1c0}, 0x1, 0xba01}, 0x8000) 17.554331417s ago: executing program 1 (id=2237): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 16.962980491s ago: executing program 1 (id=2238): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 15.172975256s ago: executing program 1 (id=2243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 13.55414513s ago: executing program 1 (id=2251): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1c, 0x0}, 0x40048d0) 13.376796931s ago: executing program 1 (id=2253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) 10.203391065s ago: executing program 0 (id=2264): r0 = socket$netlink(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10.074448083s ago: executing program 0 (id=2265): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000280)="b18b478e80a338a325f0193bdd227b7abb3fe45918dc3bbf0cd67e27905960b0f5c17fd1148d99324c9ce74983f297cab7fe72f61cd72255e976708f7ffff3ad827aa36124", 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000ff7f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 9.864704915s ago: executing program 0 (id=2268): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) socket$kcm(0x2, 0x3, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e610edca2bec9912c9997b8202036b99ec44077b59f61172b54b70b17ceece55ff5c0ef500541fdbbb7c75f2cba0be88ad21ef04db3b0072f4df970e1b7924e4b6e6e2f5d62b9c9034a30041781a5d230f981ded92dcbcecd201fb40835837c204fc44dd1a8fe460bc1b14080ab4ededf487adceb55d7549cf4b429c57ba0382940eb5cf35ea9ca058a9e20b580d96295b47d78e34264b666100f6cb8bdd770770c8a8ea5e25658949ce86cf5f7be1b5c763"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0xfffff000, 0x4, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x6, 0x9}, &(0x7f0000000100)=0x8) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x18, &(0x7f0000000000), 0x8) 9.731433903s ago: executing program 0 (id=2269): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}, 0x2}], 0x1, 0x2, 0x0) 8.74966952s ago: executing program 0 (id=2273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 7.619015426s ago: executing program 3 (id=2277): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) socket$kcm(0x2, 0x3, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e610edca2bec9912c9997b8202036b99ec44077b59f61172b54b70b17ceece55ff5c0ef500541fdbbb7c75f2cba0be88ad21ef04db3b0072f4df970e1b7924e4b6e6e2f5d62b9c9034a30041781a5d230f981ded92dcbcecd201fb40835837c204fc44dd1a8fe460bc1b14080ab4ededf487adceb55d7549cf4b429c57ba0382940eb5cf35ea9ca058a9e20b580d96295b47d78e34264b666100f6cb8bdd770770c8a8ea5e25658949ce86cf5f7be1b5c763"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0xfffff000, 0x4, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x6, 0x9}, &(0x7f0000000100)=0x8) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x18, &(0x7f0000000000), 0x8) 7.243320188s ago: executing program 3 (id=2278): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x0) 6.275876954s ago: executing program 3 (id=2279): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9804", @ANYRES16, @ANYBLOB="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"], 0x498}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.432477274s ago: executing program 4 (id=2281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x490040, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) socket$netlink(0x10, 0x3, 0x14) 3.705683064s ago: executing program 4 (id=2282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.439743978s ago: executing program 4 (id=2283): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080002735"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07007706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.002816733s ago: executing program 4 (id=2284): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000280)="b18b478e80a338a325f0193bdd227b7abb3fe45918dc3bbf0cd67e27905960b0f5c17fd1148d99324c9ce74983f297cab7fe72f61cd72255e976708f7ffff3ad827aa36124", 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000ff7f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.959396425s ago: executing program 0 (id=2285): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) socket$kcm(0x2, 0x3, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e610edca2bec9912c9997b8202036b99ec44077b59f61172b54b70b17ceece55ff5c0ef500541fdbbb7c75f2cba0be88ad21ef04db3b0072f4df970e1b7924e4b6e6e2f5d62b9c9034a30041781a5d230f981ded92dcbcecd201fb40835837c204fc44dd1a8fe460bc1b14080ab4ededf487adceb55d7549cf4b429c57ba0382940eb5cf35ea9ca058a9e20b580d96295b47d78e34264b666100f6cb8bdd770770c8a8ea5e25658949ce86cf5f7be1b5c763"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r5, 0xfffff000, 0x4, 0x1}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x6, 0x9}, &(0x7f0000000100)=0x8) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x18, &(0x7f0000000000), 0x8) 1.643460294s ago: executing program 3 (id=2286): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 1.561933559s ago: executing program 4 (id=2287): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) readv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1) splice(r0, &(0x7f0000000040)=0x10, r2, 0x0, 0x807, 0x0) 531.783289ms ago: executing program 4 (id=2288): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 515.64733ms ago: executing program 3 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x40000) 0s ago: executing program 3 (id=2290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff030000050021000600000018011a80300002802c00018008000f0008000000080011007a80000008002000ff010000080004000c0000"], 0x1c0}, 0x1, 0xba01}, 0x8000) kernel console output (not intermixed with test programs): is supported read-only [ 287.954677][ T7732] ufs: ufs_fill_super(): bad magic number [ 288.735693][ T7739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.567'. [ 289.856653][ T7749] loop1: detected capacity change from 0 to 1024 [ 289.870340][ T7750] loop3: detected capacity change from 0 to 512 [ 289.943606][ T5780] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.986737][ T7750] EXT4-fs (loop3): 1 orphan inode deleted [ 290.007666][ T7750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.121185][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 290.171666][ T7750] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.219573][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:1: Failed to release dquot type 1 [ 290.769840][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 290.818139][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:3: Failed to release dquot type 1 [ 291.069131][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.166164][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 291.259658][ T7767] loop1: detected capacity change from 0 to 256 [ 291.363793][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.574'. [ 291.454165][ T7776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.577'. [ 292.356539][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 292.519716][ T7796] loop1: detected capacity change from 0 to 512 [ 292.552957][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 292.572953][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.596253][ T5864] usb 3-1: config 0 has no interfaces? [ 292.611029][ T7796] EXT4-fs (loop1): 1 orphan inode deleted [ 292.627110][ T5864] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 292.631922][ T992] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 292.650521][ T7796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.651060][ T992] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 1 [ 292.690071][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.707934][ T7796] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.724194][ T5864] usb 3-1: config 0 descriptor?? [ 292.988158][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.036857][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.291257][ T59] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 293.332555][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 1 [ 293.412358][ T7803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.458785][ T7803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.586091][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.750003][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.585'. [ 294.036014][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 294.742694][ T5814] usb 3-1: USB disconnect, device number 4 [ 295.072149][ T7822] ufs: You didn't specify the type of your ufs filesystem [ 295.072149][ T7822] [ 295.072149][ T7822] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 295.072149][ T7822] [ 295.072149][ T7822] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 295.103301][ T7822] ufs: ufstype=old is supported read-only [ 295.110612][ T7822] ufs: ufs_fill_super(): bad magic number [ 295.956089][ T7829] loop3: detected capacity change from 0 to 512 [ 296.094869][ T7829] EXT4-fs (loop3): 1 orphan inode deleted [ 296.135566][ T7829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.195211][ T7829] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.228567][ T992] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.292015][ T992] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 1 [ 296.989614][ T992] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 297.053539][ T992] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 1 [ 297.109945][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.285355][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.595'. [ 297.328160][ T7846] loop3: detected capacity change from 0 to 256 [ 299.146697][ T7870] ufs: You didn't specify the type of your ufs filesystem [ 299.146697][ T7870] [ 299.146697][ T7870] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 299.146697][ T7870] [ 299.146697][ T7870] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 299.177913][ T7870] ufs: ufstype=old is supported read-only [ 299.185322][ T7870] ufs: ufs_fill_super(): bad magic number [ 299.632278][ T7871] loop3: detected capacity change from 0 to 512 [ 299.826162][ T7871] EXT4-fs (loop3): 1 orphan inode deleted [ 299.849652][ T2958] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 299.860467][ T2958] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 1 [ 299.888292][ T7871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.987774][ T7871] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.169711][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.606'. [ 300.339554][ T7882] 9pnet_fd: Insufficient options for proto=fd [ 300.574716][ T992] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 300.611200][ T992] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 1 [ 300.652683][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.659804][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'. [ 300.831845][ T7888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.902856][ T7890] macvlan2: entered promiscuous mode [ 301.068870][ T7890] macvlan2: entered allmulticast mode [ 301.077039][ T7890] bond1: (slave macvlan2): Opening slave failed [ 301.819576][ T7904] loop2: detected capacity change from 0 to 4096 [ 301.986000][ T7904] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 301.997877][ T7904] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 302.021297][ T7904] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 302.033868][ T7904] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 302.047050][ T7904] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 302.072453][ T7904] ntfs: volume version 3.1. [ 302.106075][ T7904] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 302.118352][ T7904] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 302.141898][ T7904] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 302.153410][ T7904] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 302.164807][ T7904] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 302.692904][ T7911] ufs: You didn't specify the type of your ufs filesystem [ 302.692904][ T7911] [ 302.692904][ T7911] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 302.692904][ T7911] [ 302.692904][ T7911] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 302.724243][ T7911] ufs: ufstype=old is supported read-only [ 302.731645][ T7911] ufs: ufs_fill_super(): bad magic number [ 303.392368][ T7916] 9pnet_fd: Insufficient options for proto=fd [ 303.493209][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'. [ 303.545863][ T7920] loop3: detected capacity change from 0 to 512 [ 303.629881][ T7920] EXT4-fs (loop3): 1 orphan inode deleted [ 303.646176][ T2958] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 1 [ 303.685924][ T7920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.711227][ T7920] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.319787][ T7933] loop1: detected capacity change from 0 to 4096 [ 304.349595][ T7342] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:10: Failed to release dquot type 1 [ 304.555015][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.634032][ T7933] ntfs: volume version 3.1. [ 306.083074][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 306.252661][ T7955] 9pnet_fd: Insufficient options for proto=fd [ 306.273025][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 306.286999][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.628'. [ 306.296438][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.313379][ T5860] usb 4-1: config 0 has no interfaces? [ 306.319056][ T5860] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 306.333080][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.370251][ T5860] usb 4-1: config 0 descriptor?? [ 306.480322][ T7960] fuse: Bad value for 'fd' [ 306.551425][ T7962] loop2: detected capacity change from 0 to 512 [ 306.606880][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.667068][ T7962] EXT4-fs (loop2): 1 orphan inode deleted [ 306.673944][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.702567][ T992] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:5: Failed to release dquot type 1 [ 306.725122][ T7962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.769766][ T7962] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.987460][ T7942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.996341][ T7942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.009404][ T5860] usb 4-1: USB disconnect, device number 3 [ 307.215674][ T59] __quota_error: 23 callbacks suppressed [ 307.215689][ T59] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 307.237034][ T59] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 1 [ 307.491762][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.829516][ T7973] loop3: detected capacity change from 0 to 512 [ 308.910787][ T7979] loop2: detected capacity change from 0 to 4096 [ 308.989309][ T7979] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 309.001341][ T7979] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 309.024672][ T7979] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 309.037152][ T7979] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 309.051314][ T7979] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 309.097691][ T7979] ntfs: volume version 3.1. [ 309.146599][ T7979] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 309.161078][ T7979] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 309.190302][ T7979] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 309.202575][ T7979] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 309.485718][ T7973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.605300][ T7973] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.902709][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.637'. [ 311.033794][ T8002] ufs: You didn't specify the type of your ufs filesystem [ 311.033794][ T8002] [ 311.033794][ T8002] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 311.033794][ T8002] [ 311.033794][ T8002] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 311.064888][ T8002] ufs: ufstype=old is supported read-only [ 311.073863][ T8002] ufs: ufs_fill_super(): bad magic number [ 312.108011][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.481147][ T8013] loop1: detected capacity change from 0 to 512 [ 312.590186][ T8013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.625419][ T8013] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.713028][ T5814] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 312.785762][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.923012][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 312.930661][ T5814] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.951286][ T5814] usb 3-1: config 0 has no interfaces? [ 312.961258][ T5814] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 312.999689][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.084323][ T8022] loop1: detected capacity change from 0 to 4129 [ 313.101854][ T8022] __ntfs_error: 5 callbacks suppressed [ 313.101871][ T8022] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 313.119324][ T8022] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 313.132881][ T8022] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 313.144434][ T8022] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 313.157535][ T8022] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 313.178421][ T8022] ntfs: volume version 3.1. [ 313.184733][ T8022] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 313.196799][ T8022] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 313.213462][ T8022] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 313.224635][ T8022] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 313.235988][ T8022] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 313.348052][ T5814] usb 3-1: config 0 descriptor?? [ 313.550214][ T8015] loop3: detected capacity change from 0 to 32768 [ 313.575817][ T8007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.611438][ T8007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.856093][ T8007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.864973][ T8007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.879895][ T27] usb 3-1: USB disconnect, device number 5 [ 315.299577][ T8041] loop2: detected capacity change from 0 to 512 [ 315.498584][ T8041] EXT4-fs (loop2): 1 orphan inode deleted [ 315.529561][ T2958] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 1 [ 315.562136][ T8041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.774139][ T8041] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.523559][ T2958] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:7: Failed to release dquot type 1 [ 316.735524][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.758325][ T8055] loop3: detected capacity change from 0 to 512 [ 317.199379][ T8055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.317953][ T8055] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.423786][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430245][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.526102][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.921469][ T5152] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 319.143143][ T5152] usb 4-1: Using ep0 maxpacket: 32 [ 319.156967][ T5152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.167891][ T5152] usb 4-1: config 0 has no interfaces? [ 319.174301][ T5152] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 319.184017][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.935671][ T8081] loop2: detected capacity change from 0 to 136 [ 319.949355][ T5152] usb 4-1: config 0 descriptor?? [ 320.165604][ T8087] loop1: detected capacity change from 0 to 512 [ 320.304000][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.353954][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.388951][ T8087] EXT4-fs (loop1): 1 orphan inode deleted [ 320.413529][ T49] __quota_error: 6 callbacks suppressed [ 320.413547][ T49] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 320.428597][ T8087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.506927][ T8087] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.575075][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:3: Failed to release dquot type 1 [ 320.659766][ T8092] loop2: detected capacity change from 0 to 512 [ 320.696794][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.705829][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.812383][ T8092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.861864][ T8092] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.949766][ T5845] usb 4-1: USB disconnect, device number 4 [ 321.024185][ T1117] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 321.050025][ T1117] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:6: Failed to release dquot type 1 [ 321.068015][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.240376][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.795125][ T8118] loop1: detected capacity change from 0 to 512 [ 323.604594][ T8118] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 323.614967][ T8118] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 323.624820][ T8118] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 323.671563][ T8118] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 323.679757][ T8118] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 323.687787][ T8118] EXT4-fs (loop1): failed to initialize system zone (-117) [ 323.695233][ T8118] EXT4-fs (loop1): mount failed [ 324.250104][ T8126] 9pnet_fd: Insufficient options for proto=fd [ 325.046441][ T8135] loop1: detected capacity change from 0 to 256 [ 325.054242][ T8135] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 325.299562][ T8135] loop1: detected capacity change from 0 to 128 [ 325.323023][ T8135] EXT4-fs (loop1): Test dummy encryption mode enabled [ 325.383492][ T8135] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.397793][ T8135] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.086917][ T8143] loop3: detected capacity change from 0 to 512 [ 326.170800][ T8144] loop2: detected capacity change from 0 to 512 [ 326.411280][ T8144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.433327][ T8143] EXT4-fs (loop3): 1 orphan inode deleted [ 326.635236][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.743206][ T8144] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.825175][ T8143] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.220007][ T59] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 327.641801][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 1 [ 327.964150][ T59] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 327.993087][ T59] EXT4-fs error (device loop3): ext4_release_dquot:6985: comm kworker/u4:4: Failed to release dquot type 1 [ 328.017916][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.031229][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.061435][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 329.520245][ T8183] loop2: detected capacity change from 0 to 2048 [ 329.578057][ T8183] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 329.605125][ T8183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.912084][ T8185] 9pnet_fd: Insufficient options for proto=fd [ 330.869752][ T8192] loop3: detected capacity change from 0 to 128 [ 330.935806][ T8192] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 331.042654][ T8192] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 331.094838][ T8193] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 331.678272][ T8198] loop3: detected capacity change from 0 to 512 [ 331.696172][ T5152] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 331.712574][ T8198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.728378][ T8198] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.903671][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.033114][ T5152] usb 3-1: Using ep0 maxpacket: 32 [ 332.046646][ T5152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.058642][ T5152] usb 3-1: config 0 has no interfaces? [ 332.068508][ T5152] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 332.078393][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.110819][ T5152] usb 3-1: config 0 descriptor?? [ 333.928571][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.962179][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.285878][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.294898][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.316191][ T5864] usb 3-1: USB disconnect, device number 6 [ 335.597863][ T8224] loop3: detected capacity change from 0 to 32768 [ 335.798768][ T8238] loop2: detected capacity change from 0 to 512 [ 335.994299][ T8238] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.698: inode has both inline data and extents flags [ 336.008755][ T8238] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.698: couldn't read orphan inode 15 (err -117) [ 336.027243][ T8238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.227069][ T8236] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 336.234076][ T8236] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.244283][ T8236] vhci_hcd vhci_hcd.0: Device attached [ 336.753197][ T8237] vhci_hcd: connection closed [ 336.757627][ T49] vhci_hcd: stop threads [ 336.811367][ T5152] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 337.016262][ T49] vhci_hcd: release socket [ 337.146801][ T49] vhci_hcd: disconnect device [ 339.317796][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.523010][ T5864] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 342.064123][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 342.115399][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.217680][ T5152] vhci_hcd: vhci_device speed not set [ 342.238084][ T5864] usb 4-1: config 0 has no interfaces? [ 342.328629][ T5864] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 342.587081][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.633940][ T5864] usb 4-1: config 0 descriptor?? [ 343.014129][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.074168][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.594269][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.606401][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.175140][ T9] usb 4-1: USB disconnect, device number 5 [ 345.578294][ T8312] loop3: detected capacity change from 0 to 128 [ 345.990594][ T8316] Bluetooth: MGMT ver 1.22 [ 348.136286][ T8332] loop3: detected capacity change from 0 to 4096 [ 349.419508][ T8332] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 349.431475][ T8332] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 349.445383][ T8332] ntfs: (device loop3): map_mft_record(): Failed with error code 4. [ 349.455895][ T8332] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -4. Marking corrupt inode 0xa as bad. Run chkdsk. [ 349.468977][ T8332] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 349.480361][ T8332] ntfs: (device loop3): map_mft_record(): Failed with error code 4. [ 349.488429][ T8332] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -4. Marking corrupt inode 0x4 as bad. Run chkdsk. [ 349.501485][ T8332] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table. [ 349.512327][ T8332] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files. [ 349.977524][ T8344] 9pnet_fd: Insufficient options for proto=fd [ 350.221707][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.735'. [ 351.756377][ T5152] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 352.082936][ T5152] usb 3-1: Using ep0 maxpacket: 32 [ 352.252117][ T5152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.464488][ T5152] usb 3-1: config 0 has no interfaces? [ 352.580846][ T5152] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 352.671933][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.989790][ T5152] usb 3-1: config 0 descriptor?? [ 353.347529][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.402745][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.732512][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.741752][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.087830][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.747'. [ 355.938092][ T5845] usb 3-1: USB disconnect, device number 7 [ 356.142358][ T8398] loop2: detected capacity change from 0 to 128 [ 356.769269][ T8414] loop2: detected capacity change from 0 to 256 [ 357.669160][ T8402] loop3: detected capacity change from 0 to 32768 [ 358.243208][ T5845] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 358.903058][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 358.912002][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.922748][ T5845] usb 3-1: config 0 has no interfaces? [ 358.928658][ T5845] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 358.939068][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.952568][ T5845] usb 3-1: config 0 descriptor?? [ 359.181564][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.220910][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.782123][ T8440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.783087][ T8440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.301112][ T8436] tty tty3: ldisc open failed (-12), clearing slot 2 [ 361.471860][ T5152] usb 3-1: USB disconnect, device number 8 [ 364.310862][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 365.865639][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'. [ 366.946149][ T8486] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 367.334585][ T8496] ufs: You didn't specify the type of your ufs filesystem [ 367.334585][ T8496] [ 367.334585][ T8496] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 367.334585][ T8496] [ 367.334585][ T8496] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 367.457378][ T8496] ufs: ufstype=old is supported read-only [ 367.464869][ T8496] ufs: ufs_fill_super(): bad magic number [ 368.753842][ T8510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.788'. [ 368.777023][ T8510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.788'. [ 369.658102][ T8500] loop3: detected capacity change from 0 to 32768 [ 369.912293][ T8518] syz.1.791 uses obsolete (PF_INET,SOCK_PACKET) [ 370.276140][ T8529] ufs: You didn't specify the type of your ufs filesystem [ 370.276140][ T8529] [ 370.276140][ T8529] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 370.276140][ T8529] [ 370.276140][ T8529] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 370.307647][ T8529] ufs: ufstype=old is supported read-only [ 370.323193][ T8529] ufs: ufs_fill_super(): bad magic number [ 371.299689][ T8530] loop3: detected capacity change from 0 to 512 [ 371.375263][ T8530] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 371.385293][ T8530] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 371.395167][ T8530] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 371.444629][ T8530] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 371.452746][ T8530] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 371.461236][ T8530] EXT4-fs (loop3): failed to initialize system zone (-117) [ 371.469019][ T8530] EXT4-fs (loop3): mount failed [ 372.406066][ T8539] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 373.187380][ T8548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 373.205016][ T8548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 373.729562][ T8542] IPVS: sh: FWM 3 0x00000003 - no destination available [ 373.762940][ T5152] IPVS: starting estimator thread 0... [ 373.775761][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 373.883611][ T8559] IPVS: using max 16 ests per chain, 38400 per kthread [ 373.954481][ T8563] ufs: You didn't specify the type of your ufs filesystem [ 373.954481][ T8563] [ 373.954481][ T8563] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 373.954481][ T8563] [ 373.954481][ T8563] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 373.985572][ T8563] ufs: ufstype=old is supported read-only [ 373.993040][ T8563] ufs: ufs_fill_super(): bad magic number [ 375.899447][ T8569] loop2: detected capacity change from 0 to 8192 [ 375.996144][ T8569] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 376.014345][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.809'. [ 376.078433][ T8569] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 376.221006][ T8569] REISERFS (device loop2): using ordered data mode [ 376.308556][ T8569] reiserfs: using flush barriers [ 376.410906][ T8569] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 376.478108][ T8569] REISERFS (device loop2): checking transaction log (loop2) [ 376.520887][ T8569] REISERFS (device loop2): Using r5 hash to sort names [ 376.548705][ T8569] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 376.726252][ T8585] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "ÿÿ184467440737095516150xffffffffffffffff18446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Çÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ" [ 376.762027][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.809'. [ 378.365947][ T8600] loop3: detected capacity change from 0 to 4096 [ 378.389503][ T8601] ufs: You didn't specify the type of your ufs filesystem [ 378.389503][ T8601] [ 378.389503][ T8601] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 378.389503][ T8601] [ 378.389503][ T8601] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 378.420908][ T8601] ufs: ufstype=old is supported read-only [ 378.428583][ T8601] ufs: ufs_fill_super(): bad magic number [ 378.512271][ T8600] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 378.524345][ T8600] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 378.542090][ T8600] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 378.553811][ T8600] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 378.567193][ T8600] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 378.602498][ T8600] ntfs: volume version 3.1. [ 378.617469][ T8600] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 378.630148][ T8600] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 378.647067][ T8600] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 378.658342][ T8600] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 378.669846][ T8600] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 378.864415][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.895278][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.113361][ T8636] ufs: You didn't specify the type of your ufs filesystem [ 381.113361][ T8636] [ 381.113361][ T8636] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 381.113361][ T8636] [ 381.113361][ T8636] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 381.144299][ T8636] ufs: ufstype=old is supported read-only [ 381.151716][ T8636] ufs: ufs_fill_super(): bad magic number [ 384.717755][ T8667] loop3: detected capacity change from 0 to 4124 [ 384.740010][ T8667] __ntfs_error: 6 callbacks suppressed [ 384.740026][ T8667] ntfs: (device loop3): check_mft_mirror(): Incomplete multi sector transfer detected in mft mirror record 0. [ 384.757739][ T8667] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 384.771207][ T8667] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 384.782824][ T8667] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 384.796548][ T8667] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 384.830049][ T8667] ntfs: volume version 3.1. [ 384.836876][ T8667] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 384.849075][ T8667] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 384.863193][ T8667] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 384.874361][ T8667] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 384.885745][ T8667] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 385.104700][ T8674] loop2: detected capacity change from 0 to 512 [ 385.120854][ T8674] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 385.130795][ T8674] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 385.140804][ T8674] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 385.209644][ T8674] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 385.217874][ T8674] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 385.226542][ T8674] EXT4-fs (loop2): failed to initialize system zone (-117) [ 385.234282][ T8674] EXT4-fs (loop2): mount failed [ 386.841814][ T8686] loop2: detected capacity change from 0 to 4096 [ 387.130270][ T8686] ntfs: volume version 3.1. [ 389.225919][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'. [ 390.400677][ T8720] ufs: You didn't specify the type of your ufs filesystem [ 390.400677][ T8720] [ 390.400677][ T8720] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 390.400677][ T8720] [ 390.400677][ T8720] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 390.431616][ T8720] ufs: ufstype=old is supported read-only [ 390.437902][ T8720] ufs: ufs_fill_super(): bad magic number [ 391.247857][ T5864] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 391.695393][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 391.704707][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 391.724086][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 391.747524][ T5864] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 391.763425][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.797980][ T5864] usb 3-1: config 0 descriptor?? [ 391.822675][ T5864] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 392.019738][ T8733] loop3: detected capacity change from 0 to 32768 [ 392.094246][ T5122] bcm5974 3-1:0.0: could not read from device [ 392.104857][ T5122] bcm5974 3-1:0.0: could not read from device [ 392.498964][ T5122] bcm5974 3-1:0.0: could not read from device [ 392.557014][ T5864] usb 3-1: USB disconnect, device number 9 [ 396.671310][ T8786] loop2: detected capacity change from 0 to 4096 [ 396.691416][ T8786] __ntfs_error: 22 callbacks suppressed [ 396.691435][ T8786] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 396.709120][ T8786] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 396.722951][ T8786] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 396.734828][ T8786] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 396.747922][ T8786] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 396.761807][ T8786] ntfs: volume version 3.1. [ 396.766875][ T8786] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 396.779142][ T8786] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 396.793771][ T8786] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 396.805045][ T8786] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 396.816406][ T8786] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 399.896471][ T8803] loop2: detected capacity change from 0 to 32768 [ 402.382037][ T8833] ufs: You didn't specify the type of your ufs filesystem [ 402.382037][ T8833] [ 402.382037][ T8833] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 402.382037][ T8833] [ 402.382037][ T8833] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 402.413118][ T8833] ufs: ufstype=old is supported read-only [ 402.420535][ T8833] ufs: ufs_fill_super(): bad magic number [ 405.077190][ T8846] loop3: detected capacity change from 0 to 4096 [ 405.147321][ T8846] __ntfs_error: 6 callbacks suppressed [ 405.147385][ T8846] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 405.165002][ T8846] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 405.179774][ T8846] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 405.191418][ T8846] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 405.204821][ T8846] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 405.220660][ T8846] ntfs: volume version 3.1. [ 405.241787][ T8846] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 405.254356][ T8846] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 405.269947][ T8846] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 405.281116][ T8846] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 405.292531][ T8846] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 406.640627][ T8856] netlink: 48 bytes leftover after parsing attributes in process `syz.2.893'. [ 407.026448][ T8856] netlink: 'syz.2.893': attribute type 10 has an invalid length. [ 407.060741][ T8856] syz_tun: entered promiscuous mode [ 407.074891][ T8856] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 408.914954][ T8878] ufs: You didn't specify the type of your ufs filesystem [ 408.914954][ T8878] [ 408.914954][ T8878] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 408.914954][ T8878] [ 408.914954][ T8878] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 408.945909][ T8878] ufs: ufstype=old is supported read-only [ 408.951987][ T8878] ufs: ufs_fill_super(): bad magic number [ 411.010292][ T8883] loop2: detected capacity change from 0 to 32768 [ 411.107149][ T8883] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.391277][ T8883] XFS (loop2): Ending clean mount [ 411.681778][ T8883] XFS (loop2): Quotacheck needed: Please wait. [ 412.485327][ T8883] XFS (loop2): Quotacheck: Done. [ 414.051569][ T5766] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 416.317767][ T8937] loop2: detected capacity change from 0 to 4096 [ 416.694394][ T8937] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 419.033492][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 419.046553][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.918'. [ 419.366397][ T8969] ufs: You didn't specify the type of your ufs filesystem [ 419.366397][ T8969] [ 419.366397][ T8969] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 419.366397][ T8969] [ 419.366397][ T8969] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 419.397640][ T8969] ufs: ufstype=old is supported read-only [ 419.405035][ T8969] ufs: ufs_fill_super(): bad magic number [ 420.197101][ T7342] ntfs3: loop2: ino=9, ntfs3_write_inode failed, -22. [ 420.220465][ T5766] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 421.422179][ T8988] loop2: detected capacity change from 0 to 256 [ 422.527365][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 422.617476][ T8992] loop3: detected capacity change from 0 to 32768 [ 422.633981][ T8992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.928 (8992) [ 422.688956][ T8992] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 422.719355][ T8992] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 422.755443][ T8992] BTRFS info (device loop3): using free space tree [ 423.778280][ T8992] BTRFS info (device loop3): enabling ssd optimizations [ 423.793360][ T8992] BTRFS info (device loop3): auto enabling async discard [ 424.068840][ T9019] ptrace attach of "./syz-executor exec"[5766] was attempted by " [ 424.159015][ T5767] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 424.567141][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 425.652482][ T9044] overlayfs: failed to resolve './file0': -2 [ 427.174563][ T9053] ufs: You didn't specify the type of your ufs filesystem [ 427.174563][ T9053] [ 427.174563][ T9053] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 427.174563][ T9053] [ 427.174563][ T9053] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 427.205415][ T9053] ufs: ufstype=old is supported read-only [ 427.211556][ T9053] ufs: ufs_fill_super(): bad magic number [ 430.366790][ T9091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.948'. [ 431.569607][ T9099] ufs: You didn't specify the type of your ufs filesystem [ 431.569607][ T9099] [ 431.569607][ T9099] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 431.569607][ T9099] [ 431.569607][ T9099] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 431.600432][ T9099] ufs: ufstype=old is supported read-only [ 431.606582][ T9099] ufs: ufs_fill_super(): bad magic number [ 432.050210][ T9111] netlink: 172 bytes leftover after parsing attributes in process `syz.0.953'. [ 432.070405][ T9111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.953'. [ 432.624419][ T9120] netlink: 180 bytes leftover after parsing attributes in process `syz.2.955'. [ 432.637643][ T9118] netlink: 180 bytes leftover after parsing attributes in process `syz.2.955'. [ 432.649662][ T9118] netlink: 180 bytes leftover after parsing attributes in process `syz.2.955'. [ 433.463431][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.957'. [ 437.366962][ T9142] process 'memfd:£Ÿn´dRi5¬Îáˆ[@8×Î 9I“=µç\'LæÒŽ¼)JtTDqϺå1õ È>É\…L¿Ï‘ßMó^T*' started with executable stack [ 437.969913][ T9161] loop2: detected capacity change from 0 to 32768 [ 438.612537][ T5864] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 438.823037][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 438.835558][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.877407][ T5864] usb 3-1: config 0 has no interfaces? [ 438.897671][ T5864] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 438.941474][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.004730][ T5864] usb 3-1: config 0 descriptor?? [ 439.721794][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.745679][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.086151][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.095202][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.319338][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.325776][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.337692][ T9] usb 3-1: USB disconnect, device number 10 [ 441.428675][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 441.455138][ T9188] loop3: detected capacity change from 0 to 32768 [ 442.627154][ T9205] loop2: detected capacity change from 0 to 32768 [ 444.070922][ T9228] loop2: detected capacity change from 0 to 512 [ 444.175599][ T9228] EXT4-fs (loop2): 1 orphan inode deleted [ 444.188316][ T9228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.202095][ T9228] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.223358][ T49] __quota_error: 6 callbacks suppressed [ 444.223375][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 444.370444][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:3: Failed to release dquot type 1 [ 445.235636][ T49] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 445.265365][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6985: comm kworker/u4:3: Failed to release dquot type 1 [ 445.303551][ T5766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.732125][ T9239] loop3: detected capacity change from 0 to 32768 [ 447.570123][ T9245] loop2: detected capacity change from 0 to 32768 [ 447.723162][ T9245] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 448.987318][ T9245] XFS (loop2): Starting recovery (logdev: internal) [ 449.233185][ T9245] XFS (loop2): Ending recovery (logdev: internal) [ 449.514469][ T5766] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 449.535842][ T9280] loop3: detected capacity change from 0 to 4096 [ 449.680999][ T9280] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 449.818397][ T9280] ntfs3: loop3: mft corrupted [ 449.901665][ T9280] ntfs3: loop3: Failed to load $MFT. [ 450.959258][ T9280] loop3: detected capacity change from 0 to 32768 [ 451.221238][ T9289] loop2: detected capacity change from 0 to 4096 [ 451.246470][ T9289] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 451.258482][ T9289] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 451.273404][ T9289] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 451.285182][ T9289] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 451.298323][ T9289] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 451.316971][ T9289] ntfs: volume version 3.1. [ 451.333786][ T9289] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 451.345896][ T9289] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 451.360066][ T9289] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 451.371654][ T9289] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 451.383051][ T9289] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 452.062902][ T5152] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 452.263034][ T5152] usb 4-1: Using ep0 maxpacket: 32 [ 452.358278][ T9298] ufs: You didn't specify the type of your ufs filesystem [ 452.358278][ T9298] [ 452.358278][ T9298] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 452.358278][ T9298] [ 452.358278][ T9298] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 452.389307][ T9298] ufs: ufstype=old is supported read-only [ 452.396919][ T9298] ufs: ufs_fill_super(): bad magic number [ 452.789414][ T5152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.883014][ T5152] usb 4-1: config 0 has no interfaces? [ 452.888598][ T5152] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 452.951428][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.002432][ T9300] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 453.054762][ T5152] usb 4-1: config 0 descriptor?? [ 453.294350][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.319745][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.737599][ T9308] loop2: detected capacity change from 0 to 512 [ 453.773720][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.784754][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.936912][ T9308] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 453.947225][ T9308] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 453.957339][ T9308] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 454.029602][ T9308] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 454.038006][ T9308] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 454.046140][ T9308] EXT4-fs (loop2): failed to initialize system zone (-117) [ 454.053671][ T9308] EXT4-fs (loop2): mount failed [ 456.243117][ T27] usb 4-1: USB disconnect, device number 6 [ 458.240873][ T9348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1018'. [ 464.340003][ T9402] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1030'. [ 467.667698][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'. [ 468.869173][ T9436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1042'. [ 471.962380][ T9455] loop2: detected capacity change from 0 to 128 [ 471.987129][ T9455] EXT4-fs (loop2): Test dummy encryption mode enabled [ 472.037848][ T9455] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.055895][ T9455] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 472.307716][ T9468] fuse: Bad value for 'fd' [ 473.686563][ T9474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'. [ 474.083468][ T9476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1051'. [ 476.778113][ T9495] fuse: Bad value for 'fd' [ 484.586628][ T9544] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1068'. [ 484.945650][ T9552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1072'. [ 486.237725][ T9449] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.308285][ T9562] 9pnet_fd: Insufficient options for proto=fd [ 487.499170][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 487.510095][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 487.522190][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 487.530787][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.540275][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 487.547923][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.897594][ T9449] bond0: (slave syz_tun): Releasing backup interface [ 488.121073][ T9583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1082'. [ 488.241189][ T992] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.275644][ T9571] chnl_net:caif_netlink_parms(): no params data found [ 488.649500][ T992] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.357569][ T9571] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.365826][ T9571] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.373213][ T9571] bridge_slave_0: entered allmulticast mode [ 489.380751][ T9571] bridge_slave_0: entered promiscuous mode [ 489.389839][ T9571] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.397594][ T9571] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.405028][ T9571] bridge_slave_1: entered allmulticast mode [ 489.412655][ T9571] bridge_slave_1: entered promiscuous mode [ 489.435076][ T9595] 9pnet_fd: Insufficient options for proto=fd [ 489.546001][ T992] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.084886][ T5778] Bluetooth: hci4: command tx timeout [ 490.563154][ T9571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.628919][ T992] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.838150][ T9571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.048441][ T9571] team0: Port device team_slave_0 added [ 491.082033][ T9571] team0: Port device team_slave_1 added [ 491.302537][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.329541][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.380801][ T9571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.407075][ T9571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.443089][ T9571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.494461][ T9619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1088'. [ 491.522954][ T9571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.999949][ T9571] hsr_slave_0: entered promiscuous mode [ 492.017584][ T9571] hsr_slave_1: entered promiscuous mode [ 492.044879][ T9571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.052522][ T9571] Cannot create hsr debugfs directory [ 492.112922][ T5778] Bluetooth: hci4: command tx timeout [ 494.193085][ T5778] Bluetooth: hci4: command tx timeout [ 496.099983][ T9571] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.141436][ T9571] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.187112][ T9571] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 496.260375][ T9571] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 496.273359][ T5778] Bluetooth: hci4: command tx timeout [ 496.797585][ T9698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1101'. [ 499.782917][ T992] hsr_slave_0: left promiscuous mode [ 499.843183][ T992] hsr_slave_1: left promiscuous mode [ 500.351331][ T992] veth1_macvtap: left promiscuous mode [ 500.390463][ T992] veth0_macvtap: left promiscuous mode [ 500.427401][ T992] veth1_vlan: left promiscuous mode [ 500.460852][ T992] veth0_vlan: left promiscuous mode [ 501.723402][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.729955][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.915588][ T992] bond1 (unregistering): Released all slaves [ 504.661762][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'. [ 509.265963][ T992] bond0 (unregistering): Released all slaves [ 510.373402][ T9571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.474907][ T9808] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 510.633021][ T9571] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.607259][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.614596][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.010026][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.017290][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.100962][ T992] IPVS: stop unused estimator thread 0... [ 515.149695][ T9571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.203422][ T9571] veth0_vlan: entered promiscuous mode [ 516.246037][ T9571] veth1_vlan: entered promiscuous mode [ 516.387137][ T9571] veth0_macvtap: entered promiscuous mode [ 516.530039][ T9571] veth1_macvtap: entered promiscuous mode [ 516.960109][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.009849][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.052857][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.180835][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.203560][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.233127][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.268545][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.606753][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.818353][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.992224][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.240808][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.417991][ T9571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.589341][ T9571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.728853][ T9571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.795252][ T9571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.822997][ T9571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.831787][ T9571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.904987][ T9571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.157800][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.224948][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.945667][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.993535][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.335169][ T9928] loop4: detected capacity change from 0 to 4096 [ 522.391719][ T9928] __ntfs_error: 6 callbacks suppressed [ 522.391739][ T9928] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 522.412755][ T9928] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 522.427026][ T9928] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 522.438624][ T9928] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 522.451742][ T9928] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 522.475260][ T9928] ntfs: volume version 3.1. [ 522.484664][ T9928] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 522.496794][ T9928] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 522.517056][ T9928] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 522.528248][ T9928] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 522.539623][ T9928] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 523.534697][ T9943] ufs: You didn't specify the type of your ufs filesystem [ 523.534697][ T9943] [ 523.534697][ T9943] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 523.534697][ T9943] [ 523.534697][ T9943] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 523.565758][ T9943] ufs: ufstype=old is supported read-only [ 523.575401][ T9943] ufs: ufs_fill_super(): bad magic number [ 525.204944][ T9951] ufs: You didn't specify the type of your ufs filesystem [ 525.204944][ T9951] [ 525.204944][ T9951] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 525.204944][ T9951] [ 525.204944][ T9951] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 525.236157][ T9951] ufs: ufstype=old is supported read-only [ 525.244199][ T9951] ufs: ufs_fill_super(): bad magic number [ 526.887410][ T9965] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 528.613722][ T9983] fuse: Bad value for 'fd' [ 532.244857][T10022] ptrace attach of "./syz-executor exec"[5767] was attempted by " [ 533.840390][T10043] loop4: detected capacity change from 0 to 256 [ 537.160598][T10082] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 538.460354][T10085] loop4: detected capacity change from 0 to 4096 [ 538.588120][T10085] __ntfs_error: 6 callbacks suppressed [ 538.588136][T10085] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 538.633417][T10085] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 538.755474][T10085] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 538.800775][T10085] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 538.889262][T10085] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 538.920092][T10085] ntfs: volume version 3.1. [ 538.974789][T10085] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 539.147372][T10085] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 539.450149][T10085] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 539.540367][T10085] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 539.589830][T10085] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 541.884101][T10137] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 543.310922][T10145] fuse: Bad value for 'group_id' [ 545.325173][T10169] loop4: detected capacity change from 0 to 4096 [ 545.402954][T10169] __ntfs_error: 6 callbacks suppressed [ 545.402972][T10169] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 545.532258][T10169] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 545.576116][T10169] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 545.602890][T10169] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 545.627288][T10169] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 545.655326][T10169] ntfs: volume version 3.1. [ 545.670688][T10169] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 545.696450][T10169] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 545.808368][T10169] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 545.836148][T10169] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 545.848350][T10169] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 547.298173][T10199] fuse: Bad value for 'group_id' [ 549.543262][T10219] loop4: detected capacity change from 0 to 256 [ 550.396038][T10236] loop4: detected capacity change from 0 to 512 [ 550.441829][T10236] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 550.451797][T10236] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 550.461773][T10236] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 550.621305][T10236] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 550.629445][T10236] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 550.638569][T10236] EXT4-fs (loop4): failed to initialize system zone (-117) [ 550.646515][T10236] EXT4-fs (loop4): mount failed [ 551.423537][T10245] fuse: Bad value for 'group_id' [ 552.531324][T10253] loop4: detected capacity change from 0 to 32768 [ 560.350578][T10330] loop4: detected capacity change from 0 to 4096 [ 560.585664][T10330] __ntfs_error: 6 callbacks suppressed [ 560.585683][T10330] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 560.699230][T10330] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 560.772824][T10330] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 560.786822][T10330] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 560.862876][T10330] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 560.950574][T10330] ntfs: volume version 3.1. [ 561.012868][T10330] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 561.097085][T10330] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 561.238730][T10330] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 561.300638][T10330] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 561.381046][T10330] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 563.159660][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.166769][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.324128][T10572] fuse: Unknown parameter 'grou00000000000000000000' [ 593.395938][T10640] fuse: Unknown parameter 'grou00000000000000000000' [ 604.725108][T10751] atomic_op ffff888021156998 conn xmit_atomic 0000000000000000 [ 611.433249][T10797] fuse: Unknown parameter 'group_i00000000000000000000' [ 611.632867][T10787] Bluetooth: hci4: command 0x0406 tx timeout [ 612.381656][T10814] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 614.471131][T10831] overlayfs: failed to resolve './file0': -2 [ 618.186858][T10862] ptrace attach of "./syz-executor exec"[5767] was attempted by " [ 623.914301][T10901] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 624.608848][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.763068][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.243290][T10935] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 632.680710][T10958] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 637.543691][T11013] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1400'. [ 637.553084][T11013] 0·: renamed from hsr0 (while UP) [ 637.560411][T11013] 0·: entered allmulticast mode [ 637.565372][T11013] hsr_slave_0: entered allmulticast mode [ 637.571453][T11013] hsr_slave_1: entered allmulticast mode [ 637.577584][T11013] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 637.597181][T11013] RDS: rds_bind could not find a transport for fe80::12, load rds_tcp or rds_rdma? [ 639.170194][T11031] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (33) [ 646.304149][T11116] syz_tun: entered promiscuous mode [ 648.750444][T11131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1435'. [ 649.893614][T11142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1439'. [ 653.056841][T11172] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1448'. [ 653.301485][T11177] mmap: syz.3.1449 (11177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 653.348284][T11177] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 653.356262][T11177] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1449'. [ 653.365294][T11177] team0: entered promiscuous mode [ 653.370328][T11177] team_slave_0: entered promiscuous mode [ 653.376281][T11177] team_slave_1: entered promiscuous mode [ 653.382367][T11177] bridge0: port 3(team0) entered blocking state [ 653.388803][T11177] bridge0: port 3(team0) entered disabled state [ 653.395262][T11177] team0: entered allmulticast mode [ 653.400420][T11177] team_slave_0: entered allmulticast mode [ 653.406260][T11177] team_slave_1: entered allmulticast mode [ 653.414447][T11177] bridge0: port 3(team0) entered blocking state [ 653.420842][T11177] bridge0: port 3(team0) entered forwarding state [ 654.417493][T11189] fuse: Bad value for 'group_id' [ 656.244896][T11213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1457'. [ 660.297852][T11232] fuse: Bad value for 'group_id' [ 660.977450][T11239] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 661.329390][T11245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1466'. [ 664.442643][T11269] fuse: Bad value for 'group_id' [ 664.462208][T11272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1476'. [ 667.098197][T11293] netlink: 4796 bytes leftover after parsing attributes in process `syz.3.1482'. [ 668.321527][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1486'. [ 682.246993][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 686.102313][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.109208][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.187606][ T9481] IPVS: starting estimator thread 0... [ 686.282781][T11439] IPVS: using max 18 ests per chain, 43200 per kthread [ 686.371787][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1531'. [ 687.113197][ T9] IPVS: starting estimator thread 0... [ 687.126721][T11453] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 687.163066][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 687.263021][T11454] IPVS: using max 26 ests per chain, 62400 per kthread [ 688.004256][T11469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 689.744347][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1550'. [ 695.616756][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1563'. [ 697.153783][T11558] fuse: Unknown parameter 'user_id00000000000000000000' [ 698.416854][ T5860] IPVS: starting estimator thread 0... [ 698.447360][T11566] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 698.533146][T11569] IPVS: using max 16 ests per chain, 38400 per kthread [ 699.011975][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1573'. [ 699.189337][T11579] fuse: Unknown parameter 'user_id00000000000000000000' [ 701.182457][T11598] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 701.215440][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 702.884174][T11607] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 703.740986][T11621] fuse: Unknown parameter 'user_id00000000000000000000' [ 706.110504][T11650] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 707.016746][T11657] fuse: Bad value for 'fd' [ 708.193970][T11670] fuse: Unknown parameter 'grou00000000000000000000' [ 711.170672][T11693] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 712.195513][T11697] fuse: Bad value for 'fd' [ 725.754652][T11808] UBIFS error (pid: 11808): cannot open "ubifs", error -22 [ 730.331259][T11855] fuse: Unknown parameter 'group_i00000000000000000000' [ 733.636548][T11889] fuse: Unknown parameter 'group_id00000000000000000000' [ 734.383135][T11895] fuse: Unknown parameter '00000000000000000003' [ 738.173316][T11921] fuse: Unknown parameter 'group_id00000000000000000000' [ 738.457581][T11925] fuse: Unknown parameter '00000000000000000003' [ 742.940852][T11957] fuse: Unknown parameter 'fd00000000000000000003' [ 743.258227][T11964] fuse: Unknown parameter 'group_id00000000000000000000' [ 744.744417][T11983] overlayfs: failed to clone upperpath [ 746.580515][T12005] fuse: Bad value for 'user_id' [ 747.709958][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.716534][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.865220][T12013] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 751.311443][T12042] fuse: Bad value for 'user_id' [ 756.260607][T12091] fuse: Bad value for 'user_id' [ 759.360777][T12112] ip6gre1: entered promiscuous mode [ 759.388290][T12112] ip6gre1: entered allmulticast mode [ 759.888885][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 759.937258][ T5152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.348652][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.390087][ T5152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.745593][T12125] fuse: Bad value for 'fd' [ 760.913167][ T5152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 764.602859][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 765.885734][T12175] fuse: Bad value for 'fd' [ 767.364421][T12185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1753'. [ 771.234213][T12207] fuse: Bad value for 'fd' [ 773.712801][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.729948][T12261] fuse: Bad value for 'fd' [ 779.294667][T12272] 9pnet_fd: Insufficient options for proto=fd [ 780.093471][T12274] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 782.885903][T12314] fuse: Bad value for 'fd' [ 786.845895][T12336] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 788.824161][T12365] fuse: Bad value for 'fd' [ 791.632897][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.676029][T12407] fuse: Invalid rootmode [ 798.502073][T12460] fuse: Invalid rootmode [ 802.129175][T12494] fuse: Invalid rootmode [ 803.228458][T12516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1842'. [ 803.248283][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 806.590861][T12539] fuse: Bad value for 'rootmode' [ 809.662169][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.668727][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.513514][T12587] fuse: Bad value for 'rootmode' [ 812.956486][T12604] overlayfs: failed to clone upperpath [ 814.864566][T12621] netlink: 'syz.4.1874': attribute type 10 has an invalid length. [ 814.872439][T12621] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1874'. [ 814.881483][T12621] team0: entered promiscuous mode [ 814.886588][T12621] team_slave_0: entered promiscuous mode [ 814.892381][T12621] team_slave_1: entered promiscuous mode [ 814.898444][T12621] bridge0: port 3(team0) entered blocking state [ 814.904824][T12621] bridge0: port 3(team0) entered disabled state [ 814.911215][T12621] team0: entered allmulticast mode [ 814.916436][T12621] team_slave_0: entered allmulticast mode [ 814.922210][T12621] team_slave_1: entered allmulticast mode [ 814.930395][T12621] bridge0: port 3(team0) entered blocking state [ 814.936770][T12621] bridge0: port 3(team0) entered forwarding state [ 815.622727][T12626] fuse: Bad value for 'rootmode' [ 816.242135][T12633] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 820.776012][T12663] fuse: Unknown parameter 'use00000000000000000000' [ 825.015900][T12700] fuse: Unknown parameter 'use00000000000000000000' [ 825.829379][T12712] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 826.192808][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 828.477100][T12741] fuse: Unknown parameter 'use00000000000000000000' [ 829.041755][T12751] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 833.528297][T12767] capability: warning: `syz.3.1922' uses 32-bit capabilities (legacy support in use) [ 837.220070][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1931'. [ 839.744250][T12818] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 843.246493][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1941'. [ 846.308444][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 846.308462][ T28] audit: type=1326 audit(1769315701.591:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.385196][ T28] audit: type=1326 audit(1769315701.631:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.438536][ T28] audit: type=1326 audit(1769315701.631:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.492765][ T28] audit: type=1326 audit(1769315701.631:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.542920][ T28] audit: type=1326 audit(1769315701.631:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.771392][ T28] audit: type=1326 audit(1769315701.631:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.795701][ T28] audit: type=1326 audit(1769315701.631:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.838823][ T28] audit: type=1326 audit(1769315701.631:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 846.882555][T12868] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 846.950064][ T28] audit: type=1326 audit(1769315701.631:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 847.325180][T12870] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 847.513126][ T28] audit: type=1326 audit(1769315701.631:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12857 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde9899acb9 code=0x7ffc0000 [ 850.159880][T12898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1961'. [ 850.169291][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 850.481664][ T5778] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 853.451780][T12926] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 854.917860][T12946] fuse: Unknown parameter 'user_id00000000000000000000' [ 857.046670][T12972] UBIFS error (pid: 12972): cannot open "ubifs", error -22 [ 857.326810][T12969] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 857.627008][T12979] fuse: Unknown parameter 'user_id00000000000000000000' [ 860.206700][T13001] UBIFS error (pid: 13001): cannot open "ubifs", error -22 [ 860.218700][T13003] ptrace attach of "./syz-executor exec"[9571] was attempted by " [ 861.070274][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 862.480108][T13033] ptrace attach of "./syz-executor exec"[5768] was attempted by " [ 870.373266][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.510782][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.695562][T13128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2033'. [ 875.810782][T13140] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 878.590224][ T5152] libceph: connect (1)[c::]:6789 error -101 [ 878.717880][T13153] ceph: No mds server is up or the cluster is laggy [ 878.750145][ T5152] libceph: mon0 (1)[c::]:6789 connect error [ 880.702258][T13185] ptrace attach of "./syz-executor exec"[5769] was attempted by " [ 882.344653][T13211] netlink: 416 bytes leftover after parsing attributes in process `syz.1.2059'. [ 883.241816][T13227] fuse: Unknown parameter '0x0000000000000003' [ 884.765092][T13238] UBIFS error (pid: 13238): cannot open "ubifs", error -22 [ 885.770578][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 887.372548][T13259] fuse: Unknown parameter '0x0000000000000003' [ 887.816199][T13264] UBIFS error (pid: 13264): cannot open "ubifs", error -22 [ 889.877281][T13294] UBIFS error (pid: 13294): cannot open "ubifs", error -22 [ 890.163492][T13299] fuse: Unknown parameter '0x0000000000000003' [ 895.962865][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 896.300541][T13346] fuse: Unknown parameter '0x0000000000000003' [ 900.592017][T13392] fuse: Unknown parameter 'fd0x0000000000000003' [ 903.228922][T13420] fuse: Unknown parameter 'fd0x0000000000000003' [ 905.894790][T13457] fuse: Unknown parameter 'fd0x0000000000000003' [ 912.894099][T13534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2168'. [ 912.903452][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'. [ 912.913213][T13534] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 917.317151][T13593] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 917.323965][T13593] PKCS7: Only support pkcs7_signedData type [ 917.337054][T13593] xt_CT: You must specify a L4 protocol and not use inversions on it [ 918.033143][T13582] sctp: failed to load transform for md5: -2 [ 919.532412][ T5778] Bluetooth: hci1: unexpected event for opcode 0x7574 [ 922.471364][T13659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2213'. [ 922.490873][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 922.507803][T13659] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 922.675263][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 922.675279][ T28] audit: type=1326 audit(1769315777.961:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 922.797165][ T28] audit: type=1326 audit(1769315777.961:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 922.840503][ T28] audit: type=1326 audit(1769315777.991:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 922.933709][ T28] audit: type=1326 audit(1769315778.001:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 922.998436][ T28] audit: type=1326 audit(1769315778.001:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 923.084115][ T28] audit: type=1326 audit(1769315778.001:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 923.213549][ T28] audit: type=1326 audit(1769315778.001:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 923.272936][ T28] audit: type=1326 audit(1769315778.001:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 923.311396][ T28] audit: type=1326 audit(1769315778.001:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 923.348232][ T28] audit: type=1326 audit(1769315778.001:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f8274b9acb9 code=0x7ffc0000 [ 925.103130][T13698] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 925.109894][T13698] PKCS7: Only support pkcs7_signedData type [ 925.121812][T13698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.444206][T13720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2235'. [ 927.467174][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2235'. [ 927.518185][T13720] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 928.045242][T13727] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 928.051719][T13727] PKCS7: Only support pkcs7_signedData type [ 928.967169][T13731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2239'. [ 929.086163][T13731] geneve2: entered promiscuous mode [ 930.473213][T13749] UBIFS error (pid: 13749): cannot open "ubifs", error -22 [ 930.829929][T13763] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 930.844216][T13763] PKCS7: Only support pkcs7_signedData type [ 931.705995][T13765] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 931.742701][T13765] batadv3: entered promiscuous mode [ 931.766706][T13765] batadv3: entered allmulticast mode [ 931.797104][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.803538][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.815151][T13765] team0: Port device batadv3 added [ 932.172201][ T7342] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 932.182793][ T7342] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 933.693924][T13793] UBIFS error (pid: 13793): cannot open "ubifs", error -22 [ 934.090051][T13799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 934.108864][T13799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 934.117624][T13799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 934.164203][T13799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 934.173724][T13799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 934.182310][T13799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 935.108201][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.222519][T13798] chnl_net:caif_netlink_parms(): no params data found [ 935.457835][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.604505][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.670355][T13798] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.691634][T13798] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.706362][T13798] bridge_slave_0: entered allmulticast mode [ 935.722986][T13798] bridge_slave_0: entered promiscuous mode [ 935.758158][T13798] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.785168][T13798] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.815086][T13798] bridge_slave_1: entered allmulticast mode [ 935.845807][T13798] bridge_slave_1: entered promiscuous mode [ 935.897031][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.412435][ T5778] Bluetooth: hci0: command tx timeout [ 937.025130][T13798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.085655][T13798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.278036][T13798] team0: Port device team_slave_0 added [ 937.289901][T13798] team0: Port device team_slave_1 added [ 937.465322][T13798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.499341][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.550090][T13798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.594131][T13798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.602745][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 937.661982][T13798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.487256][ T5778] Bluetooth: hci0: command tx timeout [ 939.398215][T13798] hsr_slave_0: entered promiscuous mode [ 939.434613][T13798] hsr_slave_1: entered promiscuous mode [ 940.512710][T13799] Bluetooth: hci0: command tx timeout [ 942.624831][T13799] Bluetooth: hci0: command tx timeout [ 944.830999][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 945.163569][ T12] bond0: (slave wlan1): Releasing backup interface [ 945.210475][ T12] ------------[ cut here ]------------ [ 945.216723][ T12] WARNING: CPU: 1 PID: 12 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 945.228002][ T12] Modules linked in: [ 945.231972][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 945.239776][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.250284][ T12] Workqueue: netns cleanup_net [ 945.255750][ T12] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 945.263090][ T12] Code: 7c 2d 00 00 74 08 48 89 df e8 98 29 d8 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a1 8f 85 00 e8 2c 02 80 f7 <0f> 0b eb c5 48 c7 c1 ac 0e 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 945.283195][ T12] RSP: 0018:ffffc90000117548 EFLAGS: 00010293 [ 945.289332][ T12] RAX: ffffffff8a0710f4 RBX: ffff88805d0bd598 RCX: ffff88801b645a00 [ 945.298230][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.306695][ T12] RBP: 0000000000000000 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 945.315278][ T12] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: ffff88805d0bec08 [ 945.323706][ T12] R13: 1ffff1100ba17ab3 R14: ffff88805d0be3c0 R15: dffffc0000000000 [ 945.331727][ T12] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 945.341108][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.348070][ T12] CR2: 00007fa857010fe8 CR3: 000000002ee50000 CR4: 00000000003506e0 [ 945.356143][ T12] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 945.359478][ T12] [ 945.362522][ T12] ? trace_drv_return_void+0x1c0/0x1c0 [ 945.368124][ T12] unregister_netdevice_many_notify+0x133d/0x1900 [ 945.374653][ T12] ? lock_chain_count+0x20/0x20 [ 945.379568][ T12] ? unregister_netdevice_many+0x20/0x20 [ 945.385743][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 945.391551][ T12] ? __lock_acquire+0x7d40/0x7d40 [ 945.396947][ T12] unregister_netdevice_queue+0x32c/0x370 [ 945.402859][ T12] ? list_netdevice+0x730/0x730 [ 945.407780][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 945.413633][ T12] _cfg80211_unregister_wdev+0x16b/0x580 [ 945.419377][ T12] ieee80211_remove_interfaces+0x49e/0x690 [ 945.425320][ T12] ? ieee80211_do_stop+0x1e20/0x1e20 [ 945.430677][ T12] ? rcu_is_watching+0x15/0xb0 [ 945.435593][ T12] ieee80211_unregister_hw+0x5d/0x2a0 [ 945.441075][ T12] mac80211_hwsim_del_radio+0x289/0x480 [ 945.446794][ T12] ? rhashtable_remove_fast+0xc00/0xc00 [ 945.452437][ T12] hwsim_exit_net+0x58d/0x650 [ 945.457226][ T12] ? hwsim_init_net+0x90/0x90 [ 945.461965][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 945.467927][ T12] cleanup_net+0x70a/0xbb0 [ 945.472406][ T12] ? ops_free_list+0x3b0/0x3b0 [ 945.477637][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.482977][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 945.489175][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 945.495022][ T12] process_scheduled_works+0xa5d/0x15d0 [ 945.500668][ T12] ? assign_work+0x430/0x430 [ 945.505405][ T12] ? assign_work+0x3d0/0x430 [ 945.510062][ T12] worker_thread+0xa55/0xfc0 [ 945.514969][ T12] kthread+0x2fa/0x390 [ 945.519085][ T12] ? pr_cont_work+0x560/0x560 [ 945.523903][ T12] ? kthread_blkcg+0xd0/0xd0 [ 945.528551][ T12] ret_from_fork+0x48/0x80 [ 945.533099][ T12] ? kthread_blkcg+0xd0/0xd0 [ 945.537761][ T12] ret_from_fork_asm+0x11/0x20 [ 945.542645][ T12] [ 945.545727][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 945.553049][ T12] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 945.560457][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 945.570558][ T12] Workqueue: netns cleanup_net [ 945.575395][ T12] Call Trace: [ 945.578704][ T12] [ 945.581667][ T12] dump_stack_lvl+0x18c/0x250 [ 945.586399][ T12] ? show_regs_print_info+0x20/0x20 [ 945.591651][ T12] ? load_image+0x400/0x400 [ 945.596215][ T12] panic+0x2dc/0x730 [ 945.600166][ T12] ? bpf_jit_dump+0xd0/0xd0 [ 945.604718][ T12] ? ret_from_fork_asm+0x11/0x20 [ 945.609690][ T12] __warn+0x2e0/0x470 [ 945.613800][ T12] ? ieee80211_link_release_channel+0x154/0x180 [ 945.620091][ T12] ? ieee80211_link_release_channel+0x154/0x180 [ 945.626367][ T12] report_bug+0x2be/0x4f0 [ 945.630739][ T12] ? ieee80211_link_release_channel+0x154/0x180 [ 945.637005][ T12] ? ieee80211_link_release_channel+0x154/0x180 [ 945.643274][ T12] ? ieee80211_link_release_channel+0x156/0x180 [ 945.649534][ T12] handle_bug+0xcf/0x120 [ 945.653819][ T12] exc_invalid_op+0x1a/0x50 [ 945.658362][ T12] asm_exc_invalid_op+0x1a/0x20 [ 945.663231][ T12] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 945.670115][ T12] Code: 7c 2d 00 00 74 08 48 89 df e8 98 29 d8 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a1 8f 85 00 e8 2c 02 80 f7 <0f> 0b eb c5 48 c7 c1 ac 0e 8b 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 945.689743][ T12] RSP: 0018:ffffc90000117548 EFLAGS: 00010293 [ 945.695836][ T12] RAX: ffffffff8a0710f4 RBX: ffff88805d0bd598 RCX: ffff88801b645a00 [ 945.703835][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.711824][ T12] RBP: 0000000000000000 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 945.719848][ T12] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: ffff88805d0bec08 [ 945.727847][ T12] R13: 1ffff1100ba17ab3 R14: ffff88805d0be3c0 R15: dffffc0000000000 [ 945.735850][ T12] ? ieee80211_link_release_channel+0x154/0x180 [ 945.742116][ T12] ? ieee80211_link_release_channel+0x154/0x180 [ 945.748371][ T12] ? trace_drv_return_void+0x1c0/0x1c0 [ 945.753851][ T12] unregister_netdevice_many_notify+0x133d/0x1900 [ 945.760293][ T12] ? lock_chain_count+0x20/0x20 [ 945.765177][ T12] ? unregister_netdevice_many+0x20/0x20 [ 945.770845][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 945.776605][ T12] ? __lock_acquire+0x7d40/0x7d40 [ 945.781669][ T12] unregister_netdevice_queue+0x32c/0x370 [ 945.787418][ T12] ? list_netdevice+0x730/0x730 [ 945.792298][ T12] ? kernfs_remove_by_name_ns+0x117/0x150 [ 945.798049][ T12] _cfg80211_unregister_wdev+0x16b/0x580 [ 945.803709][ T12] ieee80211_remove_interfaces+0x49e/0x690 [ 945.809551][ T12] ? ieee80211_do_stop+0x1e20/0x1e20 [ 945.814860][ T12] ? rcu_is_watching+0x15/0xb0 [ 945.819660][ T12] ieee80211_unregister_hw+0x5d/0x2a0 [ 945.825062][ T12] mac80211_hwsim_del_radio+0x289/0x480 [ 945.830641][ T12] ? rhashtable_remove_fast+0xc00/0xc00 [ 945.836223][ T12] hwsim_exit_net+0x58d/0x650 [ 945.840923][ T12] ? hwsim_init_net+0x90/0x90 [ 945.845624][ T12] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 945.851451][ T12] cleanup_net+0x70a/0xbb0 [ 945.855899][ T12] ? ops_free_list+0x3b0/0x3b0 [ 945.860697][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 945.865916][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 945.871665][ T12] ? process_scheduled_works+0x96f/0x15d0 [ 945.877416][ T12] process_scheduled_works+0xa5d/0x15d0 [ 945.883035][ T12] ? assign_work+0x430/0x430 [ 945.887656][ T12] ? assign_work+0x3d0/0x430 [ 945.892301][ T12] worker_thread+0xa55/0xfc0 [ 945.896982][ T12] kthread+0x2fa/0x390 [ 945.901093][ T12] ? pr_cont_work+0x560/0x560 [ 945.905801][ T12] ? kthread_blkcg+0xd0/0xd0 [ 945.910409][ T12] ret_from_fork+0x48/0x80 [ 945.914845][ T12] ? kthread_blkcg+0xd0/0xd0 [ 945.919457][ T12] ret_from_fork_asm+0x11/0x20 [ 945.924256][ T12] [ 945.927898][ T12] Kernel Offset: disabled [ 945.932332][ T12] Rebooting in 86400 seconds..