last executing test programs: 7.641279773s ago: executing program 2 (id=817): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RMKNOD(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x488d5) 5.894022709s ago: executing program 3 (id=831): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x0, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 5.732627885s ago: executing program 0 (id=832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000001540)=""/4091, 0x0, 0xffb, 0x1}, 0x28) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 5.665932612s ago: executing program 3 (id=833): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) 5.595662208s ago: executing program 0 (id=834): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x3, 0x0, 0x0) 5.532519195s ago: executing program 3 (id=835): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x54, 0x1) 5.404670458s ago: executing program 0 (id=836): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x20000000) 5.362211022s ago: executing program 3 (id=837): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500"], 0x0, 0x35, 0x0, 0x1}, 0x28) 5.306328958s ago: executing program 0 (id=838): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000000, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x10, r6, 0x1, 0xfd, 0x6, @remote}, 0x14) 4.864655692s ago: executing program 2 (id=839): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) 4.045029624s ago: executing program 2 (id=841): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@acl}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 3.744499094s ago: executing program 1 (id=842): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) 3.599402499s ago: executing program 1 (id=843): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) 3.48919523s ago: executing program 2 (id=844): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 3.466088182s ago: executing program 1 (id=845): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 3.297561859s ago: executing program 1 (id=846): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0xa1f, &(0x7f0000001500)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010526", 0x9e9, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f, 0xc, "9df8869c24c505b7d471402a31e6ea98307116e5d84627360d9f4ded8e743b0a5631de7eb2af6781b38261e2ca88016e2bf001896cdfa7fc8170ab9adb87a391d8e02124fa9dfc4d572402ea66f17f88eeb6f25953faff57b27820bfe984332773e6f52bd6"}, {0x22}, {0x18, 0x10, "164812996b35d1b9e2f009bfa0918189ad27dd4a3d46585c7d16ce907c5504011d36dea981a80b504f997c2ed526ad05711a33c9b09415e65278bdb063fd5588fc70a76509a5aa4aab42b570d3da4dc3da6880bc1677389dae6d0f72189dd3807350da1da304211d879a6b952cc3ae70ff339f7dc3891b890464a8f8e817e7dfb439eb3e"}, {0x0, 0x11, "b5fbe47cdb0b36345cc09f83e901dae4e362a963a13d4e5a77cd4635f762afac9637356d83e8410668207a283af51ec73dcccd5e34b888c9d6caf39b588d14ba163d0397375dfb1cb3f3a525b67095c43745f91ac908c1af4a0e62cc0730bb558e8a52746023e8f17ff22a41f825a7acb5902c8b2983e30fa5c18e28bcbc5ef7151c720cb0bf141365"}, {0xe, 0x19, "37ee356bee650bdd6af02cea4cad621cf827ed7ecb805aac800dcc61eae89f6d389087b862cf9558a7a289b4b959ba78102a42520fabfcd675eb5da12d23af9b213046ebfe548c661623d918704b93e0e8c093bb33c345ed4ef134f209875aae46e8c5687fead9814b3add68478c4ca286bb4e3419e54c20df53b7c7f256093a0e04867445fd011a78cfad22ac7ad2db83e0648fe231839ae93cc75254879267f4327ef43aa4739e70f9578f96825c35f9642d3f4df76bd6ff7612674ae9189c4cceedccc72228c1"}, {0x5, 0x17, "2890ab98d2047b0789f6e5e4ab99c79937d655f7876ca184567615000e9ac4aedcbeccbec4fa8ffeec4e3e94d0da137df21b2b6d4b16ae78bcb72d4f797d51192b56f4bf2922764899880660eedc0194bffc872df8a661bb891a4d118f560e11c5eaab7fe8e436799d26d5fda68bd1ef3763f9b93693a2a8282aab9b9962124857784bb5462c3d76113cc913796214e0f2f9ea8e6bde667578b5c1293ff8cc710816c5be206317edfa4b99e90e5ddc976669468bdd6cbbb350e24da202"}, {0x1f, 0xa, "0f078023085bc803dc3c68c0c4e6e790e139b1650b0dbd28073aae4aa7d13e92eab598a25147b369a7d2585c1d562f2c40b6b20c730e4236a6b856e36eb32ae0902a49e36d8c2cf4ef89c55cde367a37d5bacda3"}, {0x1f, 0x4, "87b62409876b32a091ad326971e24d0c74d96b20f59e34c1afef8d39b944eb7f0a49"}, {0x1, 0xcc, "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"}]}}}}}}, 0x0) 3.147376614s ago: executing program 2 (id=847): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RMKNOD(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x488d5) 3.146651074s ago: executing program 1 (id=848): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x805, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r5) 2.812564508s ago: executing program 3 (id=849): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) 2.681285811s ago: executing program 0 (id=850): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 5.69095ms ago: executing program 3 (id=851): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") 1.76611ms ago: executing program 0 (id=852): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) 1.3293ms ago: executing program 2 (id=853): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)={0x28, r6, 0x309, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 0s ago: executing program 1 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffd2) r1 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x400}) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000000) io_uring_enter(r1, 0x5e4c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001040)=@security={'security\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x248, 0x0, 0x128, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@ip={@broadcast, @private=0xa010100, 0xffffffff, 0xff, 'tunl0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x1}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x400, 0x4, 0x1, 0x1}}, @common=@ttl={{0x28}, {0x2, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x4, 0xb, [0xa, 0x1d, 0x39, 0x3e, 0x0, 0x3c, 0xa, 0x14, 0x3d, 0x3b, 0xc, 0x1b, 0x9, 0x6, 0x20, 0x3f], 0x1, 0x39, 0x72}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'dvmrp0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0xff, 0x0, 0x1}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x5, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x4, 0x1, 0x6, 0x2, 0x6], 0x2, 0x1}, {0x4, [0x4, 0x3, 0x0, 0x0, 0x7, 0x7]}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0xe91b, 0x7c]}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. [ 69.533210][ T5778] cgroup: Unknown subsys name 'net' [ 69.692485][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.174324][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.369675][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.376330][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.298479][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.310514][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.318754][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.326935][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.334688][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.341933][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.350824][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.360036][ T5805] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.368056][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.375424][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.392744][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.396677][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.410042][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.415891][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.424315][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.433373][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.440464][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.446742][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.454686][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.484225][ T5805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.492297][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.499685][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.509207][ T5805] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.517060][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.915532][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 77.053261][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 77.081581][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 77.106590][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.113737][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.122158][ T5788] bridge_slave_0: entered allmulticast mode [ 77.129900][ T5788] bridge_slave_0: entered promiscuous mode [ 77.142280][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.149464][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.157400][ T5788] bridge_slave_1: entered allmulticast mode [ 77.164377][ T5788] bridge_slave_1: entered promiscuous mode [ 77.205763][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 77.244861][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.258364][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.320937][ T5788] team0: Port device team_slave_0 added [ 77.346991][ T5788] team0: Port device team_slave_1 added [ 77.421039][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.428484][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.436482][ T5790] bridge_slave_0: entered allmulticast mode [ 77.443690][ T5790] bridge_slave_0: entered promiscuous mode [ 77.486045][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.493190][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.500729][ T5791] bridge_slave_0: entered allmulticast mode [ 77.508104][ T5791] bridge_slave_0: entered promiscuous mode [ 77.516416][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.523528][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.531395][ T5790] bridge_slave_1: entered allmulticast mode [ 77.538327][ T5790] bridge_slave_1: entered promiscuous mode [ 77.545710][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.552678][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.578759][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.590977][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.598368][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.605900][ T5789] bridge_slave_0: entered allmulticast mode [ 77.612705][ T5789] bridge_slave_0: entered promiscuous mode [ 77.620174][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.627504][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.634647][ T5791] bridge_slave_1: entered allmulticast mode [ 77.642017][ T5791] bridge_slave_1: entered promiscuous mode [ 77.660607][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.667826][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.694277][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.711143][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.718448][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.725845][ T5789] bridge_slave_1: entered allmulticast mode [ 77.732649][ T5789] bridge_slave_1: entered promiscuous mode [ 77.789927][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.814155][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.825596][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.848011][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.859550][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.910964][ T5790] team0: Port device team_slave_0 added [ 77.919430][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.953559][ T5791] team0: Port device team_slave_0 added [ 77.982269][ T5790] team0: Port device team_slave_1 added [ 78.015144][ T5789] team0: Port device team_slave_0 added [ 78.024138][ T5791] team0: Port device team_slave_1 added [ 78.034301][ T5788] hsr_slave_0: entered promiscuous mode [ 78.041708][ T5788] hsr_slave_1: entered promiscuous mode [ 78.076074][ T5789] team0: Port device team_slave_1 added [ 78.098742][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.106430][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.133302][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.173855][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.180945][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.207796][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.230667][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.237750][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.264016][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.296736][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.303723][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.330295][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.343396][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.350575][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.376514][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.388575][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.395641][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.421621][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.486140][ T5805] Bluetooth: hci0: command tx timeout [ 78.491345][ T51] Bluetooth: hci3: command tx timeout [ 78.518794][ T5790] hsr_slave_0: entered promiscuous mode [ 78.525209][ T5790] hsr_slave_1: entered promiscuous mode [ 78.531531][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.539883][ T5790] Cannot create hsr debugfs directory [ 78.580088][ T51] Bluetooth: hci2: command tx timeout [ 78.585580][ T5805] Bluetooth: hci1: command tx timeout [ 78.614024][ T5791] hsr_slave_0: entered promiscuous mode [ 78.620670][ T5791] hsr_slave_1: entered promiscuous mode [ 78.627069][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.634631][ T5791] Cannot create hsr debugfs directory [ 78.697472][ T5789] hsr_slave_0: entered promiscuous mode [ 78.703798][ T5789] hsr_slave_1: entered promiscuous mode [ 78.710567][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.718202][ T5789] Cannot create hsr debugfs directory [ 78.953935][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.988455][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.998610][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.020837][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.093679][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.103783][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.128992][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.140590][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.212323][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.249224][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.277050][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.287828][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.333008][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.342768][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.371078][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.380828][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.468412][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.527646][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.544903][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.557915][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.565342][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.608796][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.618148][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.625392][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.649590][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.670095][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.677298][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.688712][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.695899][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.723682][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.772364][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.779534][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.795638][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.827620][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.834747][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.860259][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.885000][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.957706][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.964903][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.000967][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.008194][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.077015][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.301988][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.364232][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.469602][ T5790] veth0_vlan: entered promiscuous mode [ 80.507487][ T5788] veth0_vlan: entered promiscuous mode [ 80.523273][ T5790] veth1_vlan: entered promiscuous mode [ 80.542260][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.560201][ T5788] veth1_vlan: entered promiscuous mode [ 80.575679][ T51] Bluetooth: hci3: command tx timeout [ 80.575730][ T5805] Bluetooth: hci0: command tx timeout [ 80.588118][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.629881][ T5791] veth0_vlan: entered promiscuous mode [ 80.646092][ T5805] Bluetooth: hci1: command tx timeout [ 80.647377][ T51] Bluetooth: hci2: command tx timeout [ 80.654781][ T5791] veth1_vlan: entered promiscuous mode [ 80.678306][ T5790] veth0_macvtap: entered promiscuous mode [ 80.697385][ T5790] veth1_macvtap: entered promiscuous mode [ 80.723583][ T5788] veth0_macvtap: entered promiscuous mode [ 80.744350][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.771644][ T5788] veth1_macvtap: entered promiscuous mode [ 80.786775][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.802609][ T5789] veth0_vlan: entered promiscuous mode [ 80.818231][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.830750][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.840258][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.849782][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.890678][ T5789] veth1_vlan: entered promiscuous mode [ 80.904757][ T5791] veth0_macvtap: entered promiscuous mode [ 80.919761][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.930685][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.943406][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.964302][ T5791] veth1_macvtap: entered promiscuous mode [ 80.993045][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.005766][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.018386][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.050783][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.055175][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.069216][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.080328][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.089248][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.098147][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.169417][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.171593][ T5789] veth0_macvtap: entered promiscuous mode [ 81.181820][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.188406][ T5789] veth1_macvtap: entered promiscuous mode [ 81.204424][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.215356][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.226592][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.237418][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.249543][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.261034][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.272542][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.282532][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.293274][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.306358][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.341478][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.352248][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.363926][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.376118][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.386168][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.396640][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.410478][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.423153][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.433055][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.442128][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.452041][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.490095][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.500970][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.511446][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.522351][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.533533][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.547626][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.564912][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.619355][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.645543][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.654306][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.695671][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.738849][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.786348][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.824736][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.850606][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.952024][ T2938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.974247][ T2938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.075881][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.099648][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.223200][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.252958][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.319915][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.338429][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.617259][ T5900] syz.2.9[5900]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.631316][ T5900] loop2: detected capacity change from 0 to 256 [ 82.645472][ T51] Bluetooth: hci3: command tx timeout [ 82.650992][ T51] Bluetooth: hci0: command tx timeout [ 82.726534][ T51] Bluetooth: hci1: command tx timeout [ 82.732630][ T5805] Bluetooth: hci2: command tx timeout [ 84.726056][ T5805] Bluetooth: hci0: command tx timeout [ 84.731568][ T51] Bluetooth: hci3: command tx timeout [ 84.771515][ T5934] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.784892][ T5934] netlink: 59 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.794468][ T5934] netlink: 59 bytes leftover after parsing attributes in process `syz.2.21'. [ 84.808407][ T51] Bluetooth: hci2: command tx timeout [ 84.808417][ T5805] Bluetooth: hci1: command tx timeout [ 84.875653][ T5936] netlink: 'syz.0.23': attribute type 4 has an invalid length. [ 84.883293][ T5936] netlink: 'syz.0.23': attribute type 5 has an invalid length. [ 84.891922][ T5936] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.23'. [ 85.507376][ T5955] loop2: detected capacity change from 0 to 256 [ 85.880895][ T5961] netlink: 44 bytes leftover after parsing attributes in process `syz.3.34'. [ 85.892417][ T5961] netlink: 59 bytes leftover after parsing attributes in process `syz.3.34'. [ 85.914958][ T5961] netlink: 59 bytes leftover after parsing attributes in process `syz.3.34'. [ 86.734440][ T27] cfg80211: failed to load regulatory.db [ 87.124026][ T5992] loop2: detected capacity change from 0 to 256 [ 88.079622][ T6014] netlink: 'syz.1.60': attribute type 4 has an invalid length. [ 88.105327][ T6014] netlink: 'syz.1.60': attribute type 5 has an invalid length. [ 88.121860][ T6014] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.60'. [ 88.739396][ T6030] loop3: detected capacity change from 0 to 256 [ 89.472004][ T6045] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 89.485543][ T6045] netlink: 'syz.1.73': attribute type 5 has an invalid length. [ 89.493242][ T6045] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.73'. [ 90.489128][ T6066] loop1: detected capacity change from 0 to 256 [ 93.810567][ T6094] loop0: detected capacity change from 0 to 512 [ 93.897635][ T6094] EXT4-fs (loop0): 1 truncate cleaned up [ 93.910168][ T6094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.579790][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.515249][ C0] sched: RT throttling activated [ 106.238837][ T28] audit: type=1326 audit(1763516090.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 106.560045][ T28] audit: type=1326 audit(1763516090.530:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 106.605641][ T28] audit: type=1326 audit(1763516090.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 106.732695][ T28] audit: type=1326 audit(1763516090.530:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 106.772695][ T6194] Zero length message leads to an empty skb [ 106.796906][ T28] audit: type=1326 audit(1763516090.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 106.855823][ T28] audit: type=1326 audit(1763516090.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 106.923112][ T28] audit: type=1326 audit(1763516090.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 106.978165][ T28] audit: type=1326 audit(1763516090.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 107.040441][ T28] audit: type=1326 audit(1763516090.540:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 107.123330][ T28] audit: type=1326 audit(1763516090.540:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6185 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 111.313193][ T6255] loop1: detected capacity change from 0 to 256 [ 111.640160][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 111.640175][ T28] audit: type=1326 audit(1763516096.200:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e1b8f6c9 code=0x7ffc0000 [ 111.712421][ T28] audit: type=1326 audit(1763516096.200:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fa8e1b8f6c9 code=0x7ffc0000 [ 111.749925][ T28] audit: type=1326 audit(1763516096.200:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e1b8f6c9 code=0x7ffc0000 [ 111.790627][ T28] audit: type=1326 audit(1763516096.200:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e1b8f6c9 code=0x7ffc0000 [ 112.231011][ T6274] 9pnet_fd: Insufficient options for proto=fd [ 112.721035][ T6291] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 112.768055][ T6291] netlink: 'syz.1.175': attribute type 5 has an invalid length. [ 112.787486][ T6291] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.175'. [ 112.943532][ T6301] 9pnet_fd: Insufficient options for proto=fd [ 113.573822][ T6320] netlink: 'syz.2.190': attribute type 4 has an invalid length. [ 113.621755][ T6320] netlink: 'syz.2.190': attribute type 5 has an invalid length. [ 113.633726][ T6320] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.190'. [ 114.159746][ T6349] tmpfs: Unknown parameter 'mpo' [ 114.463176][ T6355] loop3: detected capacity change from 0 to 8192 [ 114.470497][ T6355] ======================================================= [ 114.470497][ T6355] WARNING: The mand mount option has been deprecated and [ 114.470497][ T6355] and is ignored by this kernel. Remove the mand [ 114.470497][ T6355] option from the mount to silence this warning. [ 114.470497][ T6355] ======================================================= [ 116.330298][ T6387] netlink: 'syz.1.221': attribute type 4 has an invalid length. [ 116.345257][ T6387] netlink: 'syz.1.221': attribute type 5 has an invalid length. [ 116.352960][ T6387] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.221'. [ 117.313020][ T6391] loop1: detected capacity change from 0 to 40427 [ 117.343352][ T6391] F2FS-fs (loop1): Invalid segment count (1) [ 117.355723][ T6391] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.385669][ T6391] F2FS-fs (loop1): Unrecognized mount option "whint_mode=off" or missing value [ 117.557904][ T6399] tmpfs: Bad value for 'mpol' [ 118.490599][ T6420] tmpfs: Bad value for 'mpol' [ 120.461778][ T6463] loop3: detected capacity change from 0 to 16 [ 120.503717][ T6463] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 123.982171][ T6493] netlink: 44 bytes leftover after parsing attributes in process `syz.1.269'. [ 124.016649][ T6493] netlink: 59 bytes leftover after parsing attributes in process `syz.1.269'. [ 124.050146][ T6493] netlink: 59 bytes leftover after parsing attributes in process `syz.1.269'. [ 124.608892][ T6503] loop0: detected capacity change from 0 to 256 [ 127.922477][ T28] audit: type=1326 audit(1763516112.420:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.254354][ T28] audit: type=1326 audit(1763516112.420:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.471665][ T28] audit: type=1326 audit(1763516112.420:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.501514][ T28] audit: type=1326 audit(1763516112.420:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.541352][ T28] audit: type=1326 audit(1763516112.430:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.572382][ T28] audit: type=1326 audit(1763516112.430:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.697866][ T28] audit: type=1326 audit(1763516112.430:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.726309][ T28] audit: type=1326 audit(1763516112.430:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.753865][ T28] audit: type=1326 audit(1763516112.430:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 128.810212][ T28] audit: type=1326 audit(1763516112.430:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.3.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f773718f6c9 code=0x7ffc0000 [ 129.347997][ T6562] loop3: detected capacity change from 0 to 256 [ 131.053715][ T6581] netlink: 44 bytes leftover after parsing attributes in process `syz.1.306'. [ 131.065372][ T6581] netlink: 59 bytes leftover after parsing attributes in process `syz.1.306'. [ 131.091947][ T6581] netlink: 59 bytes leftover after parsing attributes in process `syz.1.306'. [ 131.705208][ T6595] loop3: detected capacity change from 0 to 256 [ 131.824883][ T6597] loop1: detected capacity change from 0 to 256 [ 131.908585][ T6595] exfat: Deprecated parameter 'utf8' [ 131.914252][ T6595] exfat: Deprecated parameter 'namecase' [ 131.976272][ T6595] exfat: Deprecated parameter 'utf8' [ 132.129011][ T6595] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 132.667357][ T6610] netlink: 44 bytes leftover after parsing attributes in process `syz.3.318'. [ 132.704621][ T6610] netlink: 59 bytes leftover after parsing attributes in process `syz.3.318'. [ 132.726429][ T6610] netlink: 59 bytes leftover after parsing attributes in process `syz.3.318'. [ 132.816242][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.822659][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.063242][ T6625] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.394168][ T6625] loop0: detected capacity change from 0 to 512 [ 133.458755][ T6625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.614215][ T6625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.766381][ T6625] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.978701][ T6641] netlink: 44 bytes leftover after parsing attributes in process `syz.1.330'. [ 134.006850][ T6641] netlink: 59 bytes leftover after parsing attributes in process `syz.1.330'. [ 134.050108][ T6641] netlink: 59 bytes leftover after parsing attributes in process `syz.1.330'. [ 134.630421][ T6649] netlink: 'syz.1.335': attribute type 4 has an invalid length. [ 134.655491][ T6649] netlink: 'syz.1.335': attribute type 5 has an invalid length. [ 134.663176][ T6649] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.335'. [ 134.819872][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.987573][ T6666] loop0: detected capacity change from 0 to 16 [ 135.995468][ T6666] erofs: Unknown parameter 'sched_switch' [ 139.203140][ T5800] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.333138][ T6686] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 139.363245][ T6686] netlink: 'syz.2.350': attribute type 5 has an invalid length. [ 139.383067][ T6686] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 140.005369][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 140.028707][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 140.073971][ T6706] 9pnet: Could not find request transport: 0xffffffffffffffff [ 140.077935][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 140.098000][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.358'. [ 140.263682][ T6711] loop0: detected capacity change from 0 to 16 [ 140.275549][ T6711] erofs: Unknown parameter 'sched_switch' [ 141.112552][ T6714] netlink: 'syz.2.362': attribute type 4 has an invalid length. [ 141.171281][ T6714] netlink: 'syz.2.362': attribute type 5 has an invalid length. [ 141.225410][ T6714] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.362'. [ 144.020620][ T6734] 9pnet_fd: Insufficient options for proto=fd [ 144.481340][ T6739] loop0: detected capacity change from 0 to 512 [ 144.614335][ T6739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.716159][ T6739] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.930069][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.060518][ T6754] loop2: detected capacity change from 0 to 16 [ 145.071774][ T6754] erofs: Unknown parameter 'sched_switch' [ 146.973766][ T5797] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.346519][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 147.355716][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 147.373928][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 147.383324][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.379'. [ 148.468564][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 148.468600][ T28] audit: type=1326 audit(1763516132.890:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 148.949935][ T28] audit: type=1326 audit(1763516132.890:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 148.972329][ T28] audit: type=1326 audit(1763516132.890:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 149.010027][ T28] audit: type=1326 audit(1763516132.890:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 149.123895][ T28] audit: type=1326 audit(1763516132.890:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 149.191672][ T28] audit: type=1326 audit(1763516132.890:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 149.231178][ T28] audit: type=1326 audit(1763516132.980:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 149.316496][ T28] audit: type=1326 audit(1763516132.980:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 149.558715][ T6802] loop2: detected capacity change from 0 to 16 [ 149.746803][ T6802] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 155.173290][ T6852] netlink: 44 bytes leftover after parsing attributes in process `syz.0.418'. [ 155.202649][ T6852] netlink: 59 bytes leftover after parsing attributes in process `syz.0.418'. [ 155.229554][ T6852] netlink: 59 bytes leftover after parsing attributes in process `syz.0.418'. [ 156.635921][ T5843] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 156.848859][ T5843] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.867399][ T5843] usb 1-1: not running at top speed; connect to a high speed hub [ 156.893822][ T5843] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 156.904910][ T5843] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 156.927551][ T5843] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 156.955381][ T5843] usb 1-1: config 129 has no interface number 0 [ 156.963676][ T5843] usb 1-1: config 129 has no interface number 1 [ 156.982039][ T5843] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 157.016466][ T5843] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 157.048813][ T5843] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 157.072246][ T5843] usb 1-1: config 129 interface 135 has no altsetting 0 [ 157.092464][ T5843] usb 1-1: config 129 interface 5 has no altsetting 0 [ 157.117070][ T5843] usb 1-1: string descriptor 0 read error: -22 [ 157.129346][ T5843] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 157.155319][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.218489][ T5843] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 157.229218][ T5843] usb 1-1: MIDIStreaming interface descriptor not found [ 157.418013][ T5850] usb 1-1: USB disconnect, device number 2 [ 160.219935][ T6899] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 160.990141][ T6912] loop2: detected capacity change from 0 to 256 [ 166.359095][ T6928] loop2: detected capacity change from 0 to 16 [ 166.454328][ T6928] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 169.395308][ T6941] loop2: detected capacity change from 0 to 256 [ 169.764596][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 169.784842][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.455'. [ 169.794319][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 169.805804][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.455'. [ 172.509431][ T6964] 9pnet_fd: Insufficient options for proto=fd [ 174.609809][ T6977] loop3: detected capacity change from 0 to 256 [ 181.079939][ T7000] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 181.105277][ T7000] netlink: 'syz.2.473': attribute type 5 has an invalid length. [ 181.113080][ T7000] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.473'. [ 184.168572][ T7026] loop3: detected capacity change from 0 to 256 [ 187.093102][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 187.135319][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 187.171752][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 187.199594][ T7053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.498'. [ 189.032780][ T7089] loop3: detected capacity change from 0 to 256 [ 191.060994][ T7121] loop2: detected capacity change from 0 to 16 [ 191.092980][ T7121] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 194.251487][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259235][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.768319][ T7153] loop1: detected capacity change from 0 to 256 [ 198.658379][ T7189] loop3: detected capacity change from 0 to 16 [ 198.686341][ T7189] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 198.716507][ T5797] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.946915][ T7188] loop2: detected capacity change from 0 to 512 [ 199.023183][ T7188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.141208][ T7188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.186796][ T7188] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.878025][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.751126][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 200.780430][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.569'. [ 200.800837][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 200.820320][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.569'. [ 201.449423][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 201.449452][ T5105] Bluetooth: hci2: command 0x0406 tx timeout [ 201.455689][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 201.461634][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 202.006167][ T7235] loop2: detected capacity change from 0 to 16 [ 202.016730][ T7235] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 202.855491][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 202.875324][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'. [ 202.884391][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 202.915448][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'. [ 203.070382][ T7246] netlink: 128 bytes leftover after parsing attributes in process `syz.0.581'. [ 203.089915][ T7246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.581'. [ 207.397199][ T7296] loop3: detected capacity change from 0 to 512 [ 207.576395][ T7296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.817545][ T7296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.971836][ T7296] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.151150][ T7295] overlayfs: failed to resolve './bus': -2 [ 208.873579][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.426240][ T7337] netlink: 'syz.0.617': attribute type 4 has an invalid length. [ 210.433959][ T7337] netlink: 'syz.0.617': attribute type 5 has an invalid length. [ 210.492523][ T7337] __nla_validate_parse: 6 callbacks suppressed [ 210.492536][ T7337] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.617'. [ 210.802531][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 210.848009][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 210.881466][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 210.942532][ T7342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.620'. [ 211.373550][ T7353] netlink: 116 bytes leftover after parsing attributes in process `syz.3.625'. [ 211.575821][ T7359] loop0: detected capacity change from 0 to 16 [ 211.610450][ T7359] erofs: (device loop0): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 212.714769][ T7373] loop1: detected capacity change from 0 to 256 [ 214.445859][ T5800] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.923118][ T7385] fuse: Unknown parameter 'context' [ 218.228910][ T7406] loop1: detected capacity change from 0 to 16 [ 218.307520][ T7406] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 219.867520][ T7422] netlink: 44 bytes leftover after parsing attributes in process `syz.1.654'. [ 221.557428][ T7449] loop1: detected capacity change from 0 to 256 [ 224.388915][ T7466] loop2: detected capacity change from 0 to 512 [ 224.451106][ T7466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.466044][ T7470] netlink: 'syz.0.672': attribute type 4 has an invalid length. [ 224.496854][ T7470] netlink: 'syz.0.672': attribute type 5 has an invalid length. [ 224.504649][ T7470] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.672'. [ 224.671214][ T7466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.739254][ T7466] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.384588][ T7489] loop1: detected capacity change from 0 to 256 [ 225.791119][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.179183][ T7491] netlink: 44 bytes leftover after parsing attributes in process `syz.0.683'. [ 226.220717][ T7491] netlink: 59 bytes leftover after parsing attributes in process `syz.0.683'. [ 228.101304][ T7499] loop3: detected capacity change from 0 to 512 [ 228.194390][ T7499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.279041][ T7499] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.540873][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.973285][ T7526] netlink: 'syz.0.696': attribute type 4 has an invalid length. [ 229.981074][ T7526] netlink: 'syz.0.696': attribute type 5 has an invalid length. [ 230.026154][ T7526] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.696'. [ 230.294568][ T7530] loop2: detected capacity change from 0 to 256 [ 230.935426][ T7532] loop1: detected capacity change from 0 to 512 [ 231.001034][ T7532] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 231.087606][ T7532] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 231.150567][ T7532] EXT4-fs (loop1): 1 truncate cleaned up [ 231.197314][ T7532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.475963][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.493143][ T7551] loop1: detected capacity change from 0 to 512 [ 232.550367][ T7551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.619506][ T7551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.687727][ T7551] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.928952][ T7560] loop0: detected capacity change from 0 to 512 [ 232.967524][ T7560] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 233.000000][ T7560] EXT4-fs (loop0): 1 truncate cleaned up [ 233.018584][ T7560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.145639][ T28] audit: type=1326 audit(1763516217.431:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.183418][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.193820][ T28] audit: type=1326 audit(1763516217.459:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.276104][ T28] audit: type=1326 audit(1763516217.459:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.306748][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.375515][ T28] audit: type=1326 audit(1763516217.459:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.450768][ T28] audit: type=1326 audit(1763516217.459:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.473859][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 233.514526][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'. [ 233.524343][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'. [ 233.547211][ T28] audit: type=1326 audit(1763516217.486:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.575050][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'. [ 233.584784][ T28] audit: type=1326 audit(1763516217.486:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.619141][ T28] audit: type=1326 audit(1763516217.486:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.735344][ T28] audit: type=1326 audit(1763516217.486:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.758255][ T28] audit: type=1326 audit(1763516217.486:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1985d8f6c9 code=0x7ffc0000 [ 233.936954][ T7577] loop1: detected capacity change from 0 to 256 [ 234.887172][ T7592] loop1: detected capacity change from 0 to 512 [ 235.011408][ T7592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.049688][ T7592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.085722][ T7592] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.610126][ T7613] loop3: detected capacity change from 0 to 256 [ 236.164916][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.047856][ T7634] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 237.089302][ T7634] netlink: 'syz.1.739': attribute type 5 has an invalid length. [ 237.114001][ T7634] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.739'. [ 237.694321][ T7646] loop1: detected capacity change from 0 to 256 [ 238.488663][ T7663] netlink: 'syz.1.751': attribute type 4 has an invalid length. [ 238.511061][ T7663] netlink: 'syz.1.751': attribute type 5 has an invalid length. [ 238.533105][ T7663] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.751'. [ 239.221157][ T7669] loop3: detected capacity change from 0 to 512 [ 239.383894][ T7669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.425826][ T7669] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.497100][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.337855][ T7692] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 242.367894][ T7692] netlink: 'syz.1.765': attribute type 5 has an invalid length. [ 242.390660][ T7692] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.765'. [ 243.667950][ T7706] loop3: detected capacity change from 0 to 16 [ 243.744934][ T7706] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 245.492196][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 245.517092][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 245.537299][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 245.559049][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 245.574411][ T7723] bridge0: port 3(syz_tun) entered blocking state [ 245.603380][ T7723] bridge0: port 3(syz_tun) entered disabled state [ 245.622566][ T7723] syz_tun: entered allmulticast mode [ 245.670588][ T7723] syz_tun: entered promiscuous mode [ 245.682387][ T7723] bridge0: port 3(syz_tun) entered blocking state [ 245.689297][ T7723] bridge0: port 3(syz_tun) entered forwarding state [ 247.918501][ T7750] loop0: detected capacity change from 0 to 512 [ 247.941222][ T7750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.042904][ T7751] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.064083][ T7751] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 248.413543][ T7750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.650401][ T7750] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.871469][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.898961][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 248.898974][ T28] audit: type=1326 audit(1763516231.968:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 248.985914][ T28] audit: type=1326 audit(1763516231.968:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.040078][ T28] audit: type=1326 audit(1763516231.968:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.093889][ T28] audit: type=1326 audit(1763516231.968:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.153976][ T28] audit: type=1326 audit(1763516231.968:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.190674][ T7760] loop0: detected capacity change from 0 to 512 [ 249.206908][ T28] audit: type=1326 audit(1763516231.968:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.272330][ T7760] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 249.277379][ T28] audit: type=1326 audit(1763516231.968:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.336885][ T7760] EXT4-fs (loop0): 1 truncate cleaned up [ 249.343252][ T28] audit: type=1326 audit(1763516231.968:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.349031][ T28] audit: type=1326 audit(1763516231.968:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.393396][ T28] audit: type=1326 audit(1763516231.987:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fb20118f6c9 code=0x7ffc0000 [ 249.417169][ T7760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.538467][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.998448][ T7790] loop3: detected capacity change from 0 to 512 [ 252.127774][ T7790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 252.172162][ T7790] EXT4-fs (loop3): 1 truncate cleaned up [ 252.193220][ T7793] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 252.204576][ T7790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.568281][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.564172][ T7816] loop0: detected capacity change from 0 to 512 [ 253.587468][ T7816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 253.623249][ T7816] EXT4-fs (loop0): 1 truncate cleaned up [ 253.651164][ T7816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.008965][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.268326][ T7853] loop3: detected capacity change from 0 to 8192 [ 255.727827][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 255.757130][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'. [ 255.801909][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 255.810751][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'. [ 256.049826][ T7863] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 256.169966][ T7865] 9pnet: p9_errstr2errno: server reported unknown error  [ 257.862176][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.868585][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.907025][ T7881] loop2: detected capacity change from 0 to 512 [ 257.957748][ T7881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.051307][ T7881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.092498][ T7881] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.375105][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.289134][ T7911] loop3: detected capacity change from 0 to 16 [ 260.346835][ T7911] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 260.448683][ T5800] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.645518][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 262.667684][ T7922] netlink: 'syz.1.854': attribute type 3 has an invalid length. [ 262.699407][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'. [ 262.742093][ T7922] loop1: detected capacity change from 0 to 512 [ 262.759704][ T7921] netlink: 'syz.1.854': attribute type 3 has an invalid length. [ 262.822185][ T7922] ------------[ cut here ]------------ [ 262.827990][ T7922] EA inode 11 i_nlink=2 [ 262.832488][ T7922] WARNING: CPU: 1 PID: 7922 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 262.847081][ T7922] Modules linked in: [ 262.851155][ T7922] CPU: 1 PID: 7922 Comm: syz.1.854 Not tainted syzkaller #0 [ 262.858705][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.868841][ T7922] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 262.875836][ T7922] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 262.895576][ T7922] RSP: 0018:ffffc9000433f1c0 EFLAGS: 00010246 [ 262.901747][ T7922] RAX: a8da675fa2527100 RBX: 0000000000000002 RCX: 0000000000080000 [ 262.909802][ T7922] RDX: ffffc9000ed01000 RSI: 000000000002f6dc RDI: 000000000002f6dd [ 262.917823][ T7922] RBP: ffffc9000433f2b8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 262.925962][ T7922] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 262.934006][ T7922] R13: ffff88805e4022a8 R14: ffff88805e4020b0 R15: ffff88805e402100 [ 262.942092][ T7922] FS: 00007fb2020486c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 262.951161][ T7922] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.957778][ T7922] CR2: 00002000008ab030 CR3: 000000002d9ce000 CR4: 00000000003506e0 [ 262.965882][ T7922] Call Trace: [ 262.969200][ T7922] [ 262.972197][ T7922] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 262.978022][ T7922] ? ext4_xattr_inode_iget+0x3df/0x600 [ 262.983633][ T7922] ext4_xattr_set_entry+0xcda/0x1e90 [ 262.989000][ T7922] ext4_xattr_ibody_set+0x254/0x6a0 [ 262.994309][ T7922] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 263.000289][ T7922] __ext4_expand_extra_isize+0x306/0x400 [ 263.006066][ T7922] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 263.011598][ T7922] ext4_evict_inode+0x7ed/0xea0 [ 263.016575][ T7922] ? _raw_spin_unlock+0x28/0x40 [ 263.021490][ T7922] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 263.027564][ T7922] ? do_raw_spin_unlock+0x121/0x230 [ 263.032823][ T7922] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 263.038862][ T7922] evict+0x486/0x870 [ 263.042805][ T7922] ? __lock_acquire+0x7c80/0x7c80 [ 263.047897][ T7922] ? proc_nr_inodes+0x230/0x230 [ 263.052883][ T7922] ? do_raw_spin_unlock+0x121/0x230 [ 263.058166][ T7922] ? _raw_spin_unlock+0x28/0x40 [ 263.063135][ T7922] ? iput+0x70a/0x920 [ 263.067182][ T7922] ext4_orphan_cleanup+0xbd4/0x1400 [ 263.072504][ T7922] ? ext4_orphan_del+0xba0/0xba0 [ 263.077490][ T7922] ? ext4_register_li_request+0x183/0x940 [ 263.083368][ T7922] ? errseq_check_and_advance+0x66/0x120 [ 263.089066][ T7922] ext4_fill_super+0x5de4/0x66c0 [ 263.094140][ T7922] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 263.100432][ T7922] ? __might_sleep+0xe0/0xe0 [ 263.105117][ T7922] ? read_lock_is_recursive+0x20/0x20 [ 263.110560][ T7922] ? snprintf+0xdb/0x120 [ 263.114939][ T7922] ? vscnprintf+0x80/0x80 [ 263.119328][ T7922] ? down_write+0x162/0x1f0 [ 263.123905][ T7922] ? down_read_killable+0x340/0x340 [ 263.129194][ T7922] ? setup_bdev_super+0x56b/0x660 [ 263.134251][ T7922] get_tree_bdev+0x3e4/0x510 [ 263.139001][ T7922] ? vfs_parse_fs_string+0x160/0x160 [ 263.144322][ T7922] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 263.150747][ T7922] ? setup_bdev_super+0x660/0x660 [ 263.155813][ T7922] ? apparmor_capable+0x137/0x1a0 [ 263.160949][ T7922] ? bpf_lsm_capable+0x9/0x10 [ 263.165674][ T7922] ? security_capable+0x89/0xb0 [ 263.170614][ T7922] vfs_get_tree+0x8c/0x280 [ 263.175064][ T7922] do_new_mount+0x24b/0xa40 [ 263.179688][ T7922] __se_sys_mount+0x2da/0x3c0 [ 263.184402][ T7922] ? __x64_sys_mount+0xc0/0xc0 [ 263.189207][ T7922] ? lockdep_hardirqs_on+0x98/0x150 [ 263.194475][ T7922] ? __x64_sys_mount+0x20/0xc0 [ 263.199273][ T7922] do_syscall_64+0x55/0xb0 [ 263.203793][ T7922] ? clear_bhb_loop+0x40/0x90 [ 263.208507][ T7922] ? clear_bhb_loop+0x40/0x90 [ 263.213259][ T7922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.219185][ T7922] RIP: 0033:0x7fb201190e6a [ 263.223705][ T7922] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.243369][ T7922] RSP: 002b:00007fb202047e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.251907][ T7922] RAX: ffffffffffffffda RBX: 00007fb202047ef0 RCX: 00007fb201190e6a [ 263.259939][ T7922] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb202047eb0 [ 263.267998][ T7922] RBP: 0000200000000180 R08: 00007fb202047ef0 R09: 0000000000800700 [ 263.276053][ T7922] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 263.284420][ T7922] R13: 00007fb202047eb0 R14: 0000000000000473 R15: 0000200000000680 [ 263.292497][ T7922] [ 263.295554][ T7922] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.302857][ T7922] CPU: 1 PID: 7922 Comm: syz.1.854 Not tainted syzkaller #0 [ 263.310160][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.320254][ T7922] Call Trace: [ 263.323557][ T7922] [ 263.326506][ T7922] dump_stack_lvl+0x16c/0x230 [ 263.331238][ T7922] ? show_regs_print_info+0x20/0x20 [ 263.336475][ T7922] ? load_image+0x3b0/0x3b0 [ 263.341024][ T7922] panic+0x2c0/0x710 [ 263.344960][ T7922] ? bpf_jit_dump+0xd0/0xd0 [ 263.349512][ T7922] __warn+0x2e0/0x470 [ 263.353520][ T7922] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 263.359539][ T7922] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 263.365566][ T7922] report_bug+0x2be/0x4f0 [ 263.369943][ T7922] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 263.375964][ T7922] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 263.381983][ T7922] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 263.387996][ T7922] handle_bug+0xcf/0x120 [ 263.392273][ T7922] exc_invalid_op+0x1a/0x50 [ 263.396809][ T7922] asm_exc_invalid_op+0x1a/0x20 [ 263.401697][ T7922] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 263.408317][ T7922] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 c6 3b 9a ff 49 8b 37 48 c7 c7 a0 c3 be 8a 89 da e8 c5 5d 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 6f 1d 2c 08 [ 263.427951][ T7922] RSP: 0018:ffffc9000433f1c0 EFLAGS: 00010246 [ 263.434028][ T7922] RAX: a8da675fa2527100 RBX: 0000000000000002 RCX: 0000000000080000 [ 263.442004][ T7922] RDX: ffffc9000ed01000 RSI: 000000000002f6dc RDI: 000000000002f6dd [ 263.449980][ T7922] RBP: ffffc9000433f2b8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 263.457966][ T7922] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 263.465951][ T7922] R13: ffff88805e4022a8 R14: ffff88805e4020b0 R15: ffff88805e402100 [ 263.473961][ T7922] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 263.479613][ T7922] ? ext4_xattr_inode_iget+0x3df/0x600 [ 263.485085][ T7922] ext4_xattr_set_entry+0xcda/0x1e90 [ 263.490423][ T7922] ext4_xattr_ibody_set+0x254/0x6a0 [ 263.495643][ T7922] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 263.501575][ T7922] __ext4_expand_extra_isize+0x306/0x400 [ 263.507219][ T7922] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 263.512692][ T7922] ext4_evict_inode+0x7ed/0xea0 [ 263.517544][ T7922] ? _raw_spin_unlock+0x28/0x40 [ 263.522404][ T7922] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 263.528306][ T7922] ? do_raw_spin_unlock+0x121/0x230 [ 263.533508][ T7922] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 263.539406][ T7922] evict+0x486/0x870 [ 263.543315][ T7922] ? __lock_acquire+0x7c80/0x7c80 [ 263.548358][ T7922] ? proc_nr_inodes+0x230/0x230 [ 263.553213][ T7922] ? do_raw_spin_unlock+0x121/0x230 [ 263.558423][ T7922] ? _raw_spin_unlock+0x28/0x40 [ 263.563278][ T7922] ? iput+0x70a/0x920 [ 263.567266][ T7922] ext4_orphan_cleanup+0xbd4/0x1400 [ 263.572482][ T7922] ? ext4_orphan_del+0xba0/0xba0 [ 263.577450][ T7922] ? ext4_register_li_request+0x183/0x940 [ 263.583214][ T7922] ? errseq_check_and_advance+0x66/0x120 [ 263.588876][ T7922] ext4_fill_super+0x5de4/0x66c0 [ 263.593858][ T7922] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 263.600154][ T7922] ? __might_sleep+0xe0/0xe0 [ 263.604771][ T7922] ? read_lock_is_recursive+0x20/0x20 [ 263.610154][ T7922] ? snprintf+0xdb/0x120 [ 263.614409][ T7922] ? vscnprintf+0x80/0x80 [ 263.618760][ T7922] ? down_write+0x162/0x1f0 [ 263.623291][ T7922] ? down_read_killable+0x340/0x340 [ 263.628537][ T7922] ? setup_bdev_super+0x56b/0x660 [ 263.633581][ T7922] get_tree_bdev+0x3e4/0x510 [ 263.638183][ T7922] ? vfs_parse_fs_string+0x160/0x160 [ 263.643484][ T7922] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 263.649743][ T7922] ? setup_bdev_super+0x660/0x660 [ 263.654808][ T7922] ? apparmor_capable+0x137/0x1a0 [ 263.659856][ T7922] ? bpf_lsm_capable+0x9/0x10 [ 263.664548][ T7922] ? security_capable+0x89/0xb0 [ 263.669418][ T7922] vfs_get_tree+0x8c/0x280 [ 263.673850][ T7922] do_new_mount+0x24b/0xa40 [ 263.678376][ T7922] __se_sys_mount+0x2da/0x3c0 [ 263.683064][ T7922] ? __x64_sys_mount+0xc0/0xc0 [ 263.687842][ T7922] ? lockdep_hardirqs_on+0x98/0x150 [ 263.693049][ T7922] ? __x64_sys_mount+0x20/0xc0 [ 263.697818][ T7922] do_syscall_64+0x55/0xb0 [ 263.702249][ T7922] ? clear_bhb_loop+0x40/0x90 [ 263.706937][ T7922] ? clear_bhb_loop+0x40/0x90 [ 263.711626][ T7922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.717532][ T7922] RIP: 0033:0x7fb201190e6a [ 263.721962][ T7922] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.741597][ T7922] RSP: 002b:00007fb202047e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.750028][ T7922] RAX: ffffffffffffffda RBX: 00007fb202047ef0 RCX: 00007fb201190e6a [ 263.758007][ T7922] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb202047eb0 [ 263.766000][ T7922] RBP: 0000200000000180 R08: 00007fb202047ef0 R09: 0000000000800700 [ 263.774008][ T7922] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 263.782015][ T7922] R13: 00007fb202047eb0 R14: 0000000000000473 R15: 0000200000000680 [ 263.790011][ T7922] [ 263.793415][ T7922] Kernel Offset: disabled [ 263.797829][ T7922] Rebooting in 86400 seconds..