last executing test programs: 14.85860085s ago: executing program 2 (id=2992): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='9', 0x1}], 0x1) splice(r3, 0x0, r5, 0x0, 0x4, 0x0) 14.727428216s ago: executing program 2 (id=2994): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x1) 14.584805512s ago: executing program 2 (id=2995): keyctl$join(0x2, &(0x7f00000001c0)={'syz', 0x2}) 14.407970291s ago: executing program 2 (id=2996): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) 14.301352576s ago: executing program 2 (id=2998): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(0x0, 0x0) 14.076062846s ago: executing program 2 (id=2999): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=']) 6.196184896s ago: executing program 4 (id=3040): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=']) 6.018485814s ago: executing program 4 (id=3042): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0xb, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) write(r4, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) 5.855444832s ago: executing program 4 (id=3045): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 5.794225704s ago: executing program 4 (id=3046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x490}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x10000000}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) 5.523791027s ago: executing program 4 (id=3049): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00), 0x0, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYRESHEX]) 5.412971593s ago: executing program 4 (id=3050): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x20}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.389080823s ago: executing program 1 (id=3051): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=']) 5.23604334s ago: executing program 1 (id=3052): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.090163617s ago: executing program 3 (id=3053): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 5.063544818s ago: executing program 1 (id=3054): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0xb, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) write(r4, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x21, 0x0, 0x4) 4.792115651s ago: executing program 1 (id=3055): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f00000031c0), 0x0, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 4.720800124s ago: executing program 0 (id=3056): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) 3.951856289s ago: executing program 3 (id=3057): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000640)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x40) 3.92750415s ago: executing program 1 (id=3058): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 3.832215405s ago: executing program 0 (id=3059): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00), 0x0, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYRESHEX]) 3.696030331s ago: executing program 3 (id=3060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xfa08, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3, 0x0, 0x8000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = io_uring_setup(0x217b, &(0x7f0000000240)={0x0, 0x1001, 0x2000, 0x20000000, 0xfffffffe}) close(r6) clock_nanosleep(0x8, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, 0x0, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x2000000, 0x3}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 3.664042542s ago: executing program 0 (id=3061): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$fuseblk(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x3818000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=']) 3.452182932s ago: executing program 0 (id=3062): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='k', 0x1}], 0x1) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) 635.48772ms ago: executing program 3 (id=3063): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0x4}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 543.966265ms ago: executing program 0 (id=3064): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0) 337.509624ms ago: executing program 0 (id=3065): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) 216.06362ms ago: executing program 1 (id=3066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIFJR0EM9xiQtodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJvtJjHNphOzvx9s9n1n3t15nszXu++7G0DHGsj+JBE7IuL3iOirVxc3GKg/Xb96fvzG1fPjSczPv/FXkre7dvX8eNm0fN32ojKYRqQfJ8VGFps5e+7kWK02eaaoD8+eemd45uy5p947NXZi8sTk6dEjRw4fGnn2mdGn25Jnlte1fR9O79/78luXXh0/duntn7/N4t1RrG/Mo10GssT/ns81r3u83Rur2M6GctJdYSCsSldEZLurJz//+6Irbu68vnjpo0qDA9ZVdm/asvTquXlgE0ui6giAapQ3+uzzb/m4Q12PDeHK8/UPQFne14tHfU13pEWbnqbPt+00EBHH5v75MnvEOo1DAAA0+nT8i6O9EfHBjW9eyfoefQtr0rgvf/4j/7urmEPpj4i7I2J3RNwTEXsi4t6IvO39EfHAGuO5tf+TXl7jWy4r6/89V8xtLe7/lb2/6O8qajvz/HuS41O1yYPF/2QwerZk9ZFltvH9i799ttS6xv5f9si2X/YFizgudzcN0E2MzY7lndI2uHIxYl93q/yThZmAJCL2RsS+1b31rrIw9cTX+5dqtHL+rVxcXSTLmP8qS28uy38umvIvJY3zk1O3zE8Ob43a5MHh8qi41S+/fvL6Utu/vfzb58pk/blh/zc36U8a52tn2rv92zz+097kzXyeubdY9v7Y7OyZkYje5GheX7R89OZry3rZPjv+Bw+0Pv93F6/J8n8wIrKD+KGIeDgiHilifzQiHouIA8vk+NMLK+cfaUX7/2LERMvr38Lx37T/V1/oOvnjd0tt/7/t/8N5abBYkl//VtAqnOx61hzgWv53AAAA8H+R5t+BT9KhhXKaDg3Vv8O/J+5Ka9Mzs08en3739ET9u/L90ZOWI119xXhobao2OZLMFe9YHx8dLcaKy/HSQ8W48edd2/L60Ph0baLi3KHTbV/i/M/82VV1dMA629Zy6WjvHQ8EqEDz7zXTxdULr4WLAWxWfq8NnWuF87+pO6AzAJuJ+z90rlbn/4WmurkA2Jzc/6FzOf+hQ6U/VB0BUCH3f+hIa/ld/zoWtm6MMKopbNSdkhciykK6IeJRWKdC1VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vg3AAD//5wI5wQ=") 191.079911ms ago: executing program 3 (id=3067): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f00000031c0), 0x0, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 0s ago: executing program 3 (id=3068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x8, 0x8, 0x5, 0xa000000, {{0x5, 0x4, 0x0, 0x14, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @rand_addr=0x64010102}}}}) kernel console output (not intermixed with test programs): :50:50:50:50 [ 67.133353][ T4194] device veth0_vlan entered promiscuous mode [ 67.154010][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.163397][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.172670][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.182530][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.197675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.237528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.258474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.269538][ T4194] device veth1_vlan entered promiscuous mode [ 67.283009][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.300547][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.319844][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.330443][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.341719][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.351265][ T4196] device veth0_macvtap entered promiscuous mode [ 67.374829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.397144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.408896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.433512][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.445470][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.455772][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.467203][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.479360][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.496522][ T4196] device veth1_macvtap entered promiscuous mode [ 67.515221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.523649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.533022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.545146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.554196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.582878][ T4194] device veth0_macvtap entered promiscuous mode [ 67.617278][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.626198][ T4239] Bluetooth: hci0: command 0x040f tx timeout [ 67.636487][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.638230][ T4239] Bluetooth: hci1: command 0x040f tx timeout [ 67.652336][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.661302][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.699123][ T4239] Bluetooth: hci3: command 0x040f tx timeout [ 67.705632][ T4239] Bluetooth: hci2: command 0x040f tx timeout [ 67.713937][ T4194] device veth1_macvtap entered promiscuous mode [ 67.737477][ T4239] Bluetooth: hci4: command 0x040f tx timeout [ 67.760477][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.771410][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.785769][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.801054][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.811654][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.822559][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.834372][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.856338][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.871655][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.885049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.907530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.917130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.925982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.955727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.975837][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.987187][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.998121][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.012664][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.024888][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.036537][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.048887][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.070976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.083411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.107519][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.143844][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.158132][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.168712][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.179722][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.191709][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.202651][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.213378][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.225353][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.248427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.261578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.273366][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.286309][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.296514][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.311352][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.330188][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.344636][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.357244][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.373796][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.384284][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.400549][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.414855][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.438751][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.458160][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.478726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.487078][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.493498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.509501][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.529833][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.539585][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.554872][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.563878][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.565382][ T4309] loop2: detected capacity change from 0 to 40427 [ 68.584463][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.594938][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.611876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.621340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.693173][ T4309] F2FS-fs (loop2): invalid crc value [ 68.723304][ T1489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.751778][ T1489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.780618][ T4309] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 68.781506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.915261][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.952776][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.989486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.993424][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.018089][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.047445][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.059450][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.070579][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.100572][ T4309] F2FS-fs (loop2): Start checkpoint disabled! [ 69.102990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.145873][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.149017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.166541][ T4309] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 69.238298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.264986][ T4317] attempt to access beyond end of device [ 69.264986][ T4317] loop2: rw=2049, want=45112, limit=40427 [ 69.500575][ T4326] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.699204][ T2335] Bluetooth: hci1: command 0x0419 tx timeout [ 69.705680][ T2335] Bluetooth: hci0: command 0x0419 tx timeout [ 69.798678][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 69.809187][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 69.830418][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 69.909796][ T4340] netlink: 'syz.4.18': attribute type 13 has an invalid length. [ 69.935679][ T4339] Zero length message leads to an empty skb [ 70.123056][ T4350] loop5: detected capacity change from 0 to 7 [ 70.148301][ T4350] Dev loop5: unable to read RDB block 7 [ 70.285072][ T4350] loop5: unable to read partition table [ 70.591698][ T4350] loop5: partition table beyond EOD, truncated [ 70.886064][ T4350] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 70.889368][ T4361] mmap: syz.2.13 (4361): VmData 49471488 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 71.142157][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.148737][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.653566][ T4385] capability: warning: `syz.2.35' uses deprecated v2 capabilities in a way that may be insecure [ 71.764430][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 72.300058][ T4406] netlink: 'syz.1.45': attribute type 13 has an invalid length. [ 72.582243][ T4377] loop4: detected capacity change from 0 to 40427 [ 72.636665][ T4402] loop2: detected capacity change from 0 to 512 [ 72.765647][ T4377] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 72.795689][ T4377] F2FS-fs (loop4): Unrecognized mount option "barrier" or missing value [ 72.804028][ T4402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 72.917135][ T4402] System zones: 1-12 [ 72.982005][ T4402] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.42: error while reading EA inode 32 err=-116 [ 73.071958][ T4402] EXT4-fs (loop2): Remounting filesystem read-only [ 73.089141][ T4402] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.144713][ T4402] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.42: error while reading EA inode 32 err=-116 [ 73.161110][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 73.204145][ T4402] EXT4-fs (loop2): Remounting filesystem read-only [ 73.252882][ T4402] EXT4-fs (loop2): 1 orphan inode deleted [ 73.282431][ T4402] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 73.620962][ T4431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.017037][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 75.046493][ T4451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.61'. [ 75.657126][ T4451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 75.854049][ T4451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.61'. [ 76.535399][ T4475] fuse: Bad value for 'rootmode' [ 76.961790][ T4493] loop5: detected capacity change from 0 to 7 [ 76.971550][ T4493] Dev loop5: unable to read RDB block 7 [ 76.977177][ T4493] loop5: unable to read partition table [ 76.991847][ T4493] loop5: partition table beyond EOD, truncated [ 76.998327][ T4493] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 77.454287][ T4509] fuse: Bad value for 'rootmode' [ 77.469496][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.477960][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.684321][ T4518] loop5: detected capacity change from 0 to 7 [ 77.694835][ T4316] Dev loop5: unable to read RDB block 7 [ 77.701754][ T4316] loop5: unable to read partition table [ 77.708555][ T4316] loop5: partition table beyond EOD, truncated [ 77.728005][ T4518] Dev loop5: unable to read RDB block 7 [ 77.753751][ T4518] loop5: unable to read partition table [ 77.762176][ T4518] loop5: partition table beyond EOD, truncated [ 77.778015][ T4518] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 78.538829][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.576887][ T4535] loop2: detected capacity change from 0 to 40427 [ 78.604388][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.613367][ T4535] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 78.620594][ T4535] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 78.634178][ T4535] F2FS-fs (loop2): invalid crc value [ 78.660000][ T4535] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 78.756438][ T4535] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 78.763800][ T4535] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.946709][ T4542] attempt to access beyond end of device [ 78.946709][ T4542] loop2: rw=2049, want=55008, limit=40427 [ 79.036725][ T4535] attempt to access beyond end of device [ 79.036725][ T4535] loop2: rw=524288, want=53504, limit=40427 [ 79.050512][ T4535] attempt to access beyond end of device [ 79.050512][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.063575][ T4535] attempt to access beyond end of device [ 79.063575][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.075492][ T4535] attempt to access beyond end of device [ 79.075492][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.086862][ T4535] attempt to access beyond end of device [ 79.086862][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.098268][ T4535] attempt to access beyond end of device [ 79.098268][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.109637][ T4535] attempt to access beyond end of device [ 79.109637][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.121091][ T4535] attempt to access beyond end of device [ 79.121091][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.132481][ T4535] attempt to access beyond end of device [ 79.132481][ T4535] loop2: rw=0, want=53256, limit=40427 [ 79.396384][ T4465] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.407258][ T4465] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.416321][ T4465] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.425225][ T4465] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.654555][ T4465] syz.4.66 (4465) used greatest stack depth: 19520 bytes left [ 80.011475][ T4556] loop5: detected capacity change from 0 to 7 [ 80.067544][ T4316] Dev loop5: unable to read RDB block 7 [ 80.073564][ T4316] loop5: unable to read partition table [ 80.116044][ T4316] loop5: partition table beyond EOD, truncated [ 80.296927][ T4556] Dev loop5: unable to read RDB block 7 [ 80.305393][ T4556] loop5: unable to read partition table [ 80.331549][ T4556] loop5: partition table beyond EOD, truncated [ 80.343025][ T4556] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 80.769398][ T4575] loop1: detected capacity change from 0 to 1024 [ 81.007497][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 81.382090][ T7] cfg80211: failed to load regulatory.db [ 83.434888][ T4636] loop5: detected capacity change from 0 to 7 [ 83.541508][ T4636] Dev loop5: unable to read RDB block 7 [ 83.547220][ T4636] loop5: unable to read partition table [ 83.578255][ T4636] loop5: partition table beyond EOD, truncated [ 83.597951][ T4636] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 84.718624][ T4673] overlayfs: workdir and upperdir must be separate subtrees [ 85.902962][ T4694] fuse: Bad value for 'rootmode' [ 87.308382][ T4710] loop1: detected capacity change from 0 to 512 [ 87.398480][ T4710] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 87.421383][ T4710] System zones: 0-2, 18-18, 34-35 [ 87.442201][ T4710] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodioread_nolock,discard,debug,,errors=continue. Quota mode: writeback. [ 87.530614][ T4710] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.768090][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 90.085171][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 93.772457][ T4778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.198'. [ 96.702243][ T4804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 97.240177][ T4816] netlink: 'syz.0.211': attribute type 13 has an invalid length. [ 99.077105][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 103.595942][ T4899] bridge0: port 3(syz_tun) entered blocking state [ 103.638478][ T4899] bridge0: port 3(syz_tun) entered disabled state [ 103.687067][ T4899] device syz_tun entered promiscuous mode [ 103.920258][ T4906] loop4: detected capacity change from 0 to 512 [ 106.765380][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.829084][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.895728][ T4955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.929052][ T4955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.274'. [ 109.027689][ C0] sched: RT throttling activated [ 112.597382][ T5049] loop0: detected capacity change from 0 to 512 [ 113.401437][ T5055] overlayfs: failed to resolve './file0': -2 [ 114.145393][ T5067] loop0: detected capacity change from 0 to 512 [ 114.816745][ T5084] fuse: Bad value for 'rootmode' [ 117.065814][ T5113] fuse: Bad value for 'rootmode' [ 117.779059][ T5121] overlayfs: failed to resolve './file1': -2 [ 118.554207][ T5136] netlink: 'syz.4.352': attribute type 13 has an invalid length. [ 118.704831][ T5140] loop5: detected capacity change from 0 to 7 [ 118.795961][ T5140] Dev loop5: unable to read RDB block 7 [ 118.811940][ T5140] loop5: unable to read partition table [ 118.872818][ T5140] loop5: partition table beyond EOD, truncated [ 118.914413][ T5140] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 119.716597][ T3561] Dev loop5: unable to read RDB block 7 [ 119.729256][ T3561] loop5: unable to read partition table [ 119.809355][ T3561] loop5: partition table beyond EOD, truncated [ 120.035505][ T5157] overlayfs: failed to resolve './file1': -2 [ 121.174092][ T5173] netlink: 'syz.1.365': attribute type 13 has an invalid length. [ 123.326324][ T5192] loop5: detected capacity change from 0 to 7 [ 123.375152][ T5192] Dev loop5: unable to read RDB block 7 [ 123.413278][ T5192] loop5: unable to read partition table [ 123.443680][ T5192] loop5: partition table beyond EOD, truncated [ 124.146733][ T5192] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 126.948908][ T5238] loop5: detected capacity change from 0 to 7 [ 126.961761][ T5238] Dev loop5: unable to read RDB block 7 [ 127.038451][ T5238] loop5: unable to read partition table [ 127.062448][ T5238] loop5: partition table beyond EOD, truncated [ 127.168348][ T5238] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 132.065475][ T5339] netlink: 'syz.3.434': attribute type 13 has an invalid length. [ 132.581693][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.588054][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.836130][ T5372] loop5: detected capacity change from 0 to 7 [ 132.885746][ T5372] Dev loop5: unable to read RDB block 7 [ 132.914805][ T5372] loop5: unable to read partition table [ 132.961174][ T5372] loop5: partition table beyond EOD, truncated [ 132.985666][ T5372] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 133.207286][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 133.645349][ T5396] loop4: detected capacity change from 0 to 1024 [ 133.679966][ T5396] ======================================================= [ 133.679966][ T5396] WARNING: The mand mount option has been deprecated and [ 133.679966][ T5396] and is ignored by this kernel. Remove the mand [ 133.679966][ T5396] option from the mount to silence this warning. [ 133.679966][ T5396] ======================================================= [ 133.894342][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 133.908609][ T5396] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.050832][ T5396] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.460: Allocating blocks 385-513 which overlap fs metadata [ 134.159108][ T5395] EXT4-fs (loop4): pa ffff88801cbc0e00: logic 16, phys. 129, len 24 [ 134.167454][ T5395] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 134.751564][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 140.777971][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 140.942039][ T5563] fuse: Bad value for 'rootmode' [ 141.856970][ T5583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 141.998323][ T5585] fuse: Bad value for 'rootmode' [ 142.932519][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 142.960012][ T5595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'. [ 142.996069][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 143.036456][ T5595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'. [ 144.736294][ T5610] fuse: Bad value for 'rootmode' [ 155.903979][ T5693] loop5: detected capacity change from 0 to 7 [ 155.931241][ T4316] Dev loop5: unable to read RDB block 7 [ 155.937101][ T4316] loop5: unable to read partition table [ 155.968055][ T4316] loop5: partition table beyond EOD, truncated [ 156.007295][ T5693] Dev loop5: unable to read RDB block 7 [ 156.024565][ T5693] loop5: unable to read partition table [ 156.062019][ T5693] loop5: partition table beyond EOD, truncated [ 156.117780][ T5693] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 157.646776][ T5712] loop0: detected capacity change from 0 to 512 [ 157.840399][ T5714] loop0: detected capacity change from 0 to 1024 [ 157.969070][ T5714] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.010682][ T5714] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.600: Allocating blocks 385-513 which overlap fs metadata [ 158.096421][ T5713] EXT4-fs (loop0): pa ffff88801cbc0ee0: logic 16, phys. 129, len 24 [ 158.104597][ T5713] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 160.244772][ T5744] loop5: detected capacity change from 0 to 7 [ 160.267995][ T5744] Dev loop5: unable to read RDB block 7 [ 160.273637][ T5744] loop5: unable to read partition table [ 160.300558][ T5744] loop5: partition table beyond EOD, truncated [ 160.339545][ T5744] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 161.052113][ T5753] loop1: detected capacity change from 0 to 1024 [ 161.225005][ T5753] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.257537][ T5753] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.615: Allocating blocks 385-513 which overlap fs metadata [ 161.362110][ T5752] EXT4-fs (loop1): pa ffff88801cbc0380: logic 16, phys. 129, len 24 [ 161.370509][ T5752] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 165.160036][ T5803] loop5: detected capacity change from 0 to 7 [ 165.202513][ T5803] Dev loop5: unable to read RDB block 7 [ 165.240477][ T5803] loop5: unable to read partition table [ 165.272936][ T5803] loop5: partition table beyond EOD, truncated [ 165.328918][ T5803] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 165.624459][ T3561] Dev loop5: unable to read RDB block 7 [ 165.639301][ T3561] loop5: unable to read partition table [ 165.655410][ T3561] loop5: partition table beyond EOD, truncated [ 167.440824][ T5825] loop4: detected capacity change from 0 to 512 [ 169.098795][ T5837] loop5: detected capacity change from 0 to 7 [ 169.127018][ T5837] Dev loop5: unable to read RDB block 7 [ 169.155871][ T5837] loop5: unable to read partition table [ 169.191346][ T5837] loop5: partition table beyond EOD, truncated [ 169.227941][ T5837] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 169.510445][ T3561] Dev loop5: unable to read RDB block 7 [ 169.516068][ T3561] loop5: unable to read partition table [ 169.542590][ T3561] loop5: partition table beyond EOD, truncated [ 173.768878][ T5888] netlink: 'syz.0.674': attribute type 13 has an invalid length. [ 173.892709][ T5890] loop5: detected capacity change from 0 to 7 [ 173.925917][ T5890] Dev loop5: unable to read RDB block 7 [ 173.953195][ T5890] loop5: unable to read partition table [ 173.982058][ T5890] loop5: partition table beyond EOD, truncated [ 174.062610][ T5890] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 174.467830][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 174.666955][ T5907] loop5: detected capacity change from 0 to 7 [ 174.725568][ T5907] Dev loop5: unable to read RDB block 7 [ 174.752441][ T5907] loop5: unable to read partition table [ 174.781905][ T5907] loop5: partition table beyond EOD, truncated [ 174.827852][ T5907] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 175.210578][ T3561] Dev loop5: unable to read RDB block 7 [ 175.216220][ T3561] loop5: unable to read partition table [ 175.236892][ T3561] loop5: partition table beyond EOD, truncated [ 175.508677][ T5918] netlink: 'syz.1.687': attribute type 13 has an invalid length. [ 181.339175][ T5971] loop5: detected capacity change from 0 to 7 [ 181.375890][ T5971] Dev loop5: unable to read RDB block 7 [ 181.398422][ T5971] loop5: unable to read partition table [ 181.404243][ T5971] loop5: partition table beyond EOD, truncated [ 181.463735][ T5974] fuse: Bad value for 'rootmode' [ 181.482343][ T5971] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 183.454477][ T5990] loop0: detected capacity change from 0 to 1024 [ 183.587991][ T5990] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.723904][ T5990] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.713: Allocating blocks 385-513 which overlap fs metadata [ 183.823089][ T5989] EXT4-fs (loop0): pa ffff8880741be7e0: logic 16, phys. 129, len 24 [ 183.831477][ T5989] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 185.867861][ T2335] Bluetooth: hci0: command 0x0406 tx timeout [ 185.874062][ T2335] Bluetooth: hci2: command 0x0406 tx timeout [ 185.892886][ T2335] Bluetooth: hci1: command 0x0406 tx timeout [ 185.910989][ T2335] Bluetooth: hci4: command 0x0406 tx timeout [ 185.930412][ T2335] Bluetooth: hci3: command 0x0406 tx timeout [ 186.130921][ T6014] loop5: detected capacity change from 0 to 7 [ 186.162164][ T6014] Dev loop5: unable to read RDB block 7 [ 186.193195][ T6014] loop5: unable to read partition table [ 186.234943][ T6014] loop5: partition table beyond EOD, truncated [ 186.283828][ T6014] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 187.372827][ T6023] fuse: Bad value for 'rootmode' [ 187.557782][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 190.179751][ T6058] loop2: detected capacity change from 0 to 1024 [ 190.250804][ T6058] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.349978][ T6058] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.745: Allocating blocks 385-513 which overlap fs metadata [ 190.421860][ T6057] EXT4-fs (loop2): pa ffff8880741be620: logic 16, phys. 129, len 24 [ 190.430050][ T6057] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 194.024692][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.031125][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.176220][ T6116] loop3: detected capacity change from 0 to 1024 [ 196.290678][ T6116] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.395322][ T6116] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.772: Allocating blocks 385-513 which overlap fs metadata [ 196.461341][ T6115] EXT4-fs (loop3): pa ffff88801cbc02a0: logic 16, phys. 129, len 24 [ 196.469453][ T6115] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 200.301234][ T6165] loop4: detected capacity change from 0 to 512 [ 205.722161][ T6229] loop2: detected capacity change from 0 to 1024 [ 205.814111][ T6229] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.865480][ T6229] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.819: Allocating blocks 385-513 which overlap fs metadata [ 205.975218][ T6228] EXT4-fs (loop2): pa ffff88801cbc00e0: logic 16, phys. 129, len 24 [ 205.983521][ T6228] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 208.677139][ T6258] loop1: detected capacity change from 0 to 1024 [ 208.846960][ T6258] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.896702][ T6258] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.831: Allocating blocks 385-513 which overlap fs metadata [ 208.988232][ T6257] EXT4-fs (loop1): pa ffff8880741beb60: logic 16, phys. 129, len 24 [ 208.996313][ T6257] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 209.214823][ T6268] fuse: Bad value for 'rootmode' [ 209.398589][ T6276] futex_wake_op: syz.1.834 tries to shift op by -1; fix this program [ 210.553721][ T6288] loop5: detected capacity change from 0 to 7 [ 210.584605][ T6288] Dev loop5: unable to read RDB block 7 [ 210.598094][ T6288] loop5: unable to read partition table [ 210.603896][ T6288] loop5: partition table beyond EOD, truncated [ 210.696000][ T6288] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 210.957581][ T6299] loop3: detected capacity change from 0 to 1024 [ 211.147118][ T6299] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.214431][ T6299] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.845: Allocating blocks 385-513 which overlap fs metadata [ 211.300280][ T6298] EXT4-fs (loop3): pa ffff8880741bed20: logic 16, phys. 129, len 24 [ 211.308481][ T6298] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 211.450849][ T6306] fuse: Bad value for 'rootmode' [ 213.495878][ T6323] loop0: detected capacity change from 0 to 1024 [ 213.718646][ T6323] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.785950][ T6323] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.855: Allocating blocks 385-513 which overlap fs metadata [ 213.848773][ T6322] EXT4-fs (loop0): pa ffff88801cbc02a0: logic 16, phys. 129, len 24 [ 213.856862][ T6322] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 215.024761][ T6357] loop4: detected capacity change from 0 to 1024 [ 215.192111][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.225124][ T6357] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.870: Allocating blocks 385-513 which overlap fs metadata [ 215.256116][ T6356] EXT4-fs (loop4): pa ffff88801cbc0380: logic 16, phys. 129, len 24 [ 215.264331][ T6356] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 215.561573][ T6364] loop4: detected capacity change from 0 to 1024 [ 215.690231][ T6364] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.790540][ T6364] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.871: Allocating blocks 385-513 which overlap fs metadata [ 215.879885][ T6363] EXT4-fs (loop4): pa ffff8880741beee0: logic 16, phys. 129, len 24 [ 215.888121][ T6363] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 216.881583][ T6397] loop3: detected capacity change from 0 to 1024 [ 216.986735][ T6397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.067363][ T6397] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.886: Allocating blocks 385-513 which overlap fs metadata [ 217.169925][ T6396] EXT4-fs (loop3): pa ffff88801cbc0ee0: logic 16, phys. 129, len 24 [ 217.178129][ T6396] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 217.381068][ T6407] loop5: detected capacity change from 0 to 7 [ 217.411523][ T6407] Dev loop5: unable to read RDB block 7 [ 217.417163][ T6407] loop5: unable to read partition table [ 217.469019][ T6407] loop5: partition table beyond EOD, truncated [ 217.478088][ T6407] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 217.685172][ T4461] Bluetooth: hci5: Frame reassembly failed (-84) [ 217.703137][ T4461] Bluetooth: hci5: Frame reassembly failed (-84) [ 217.828277][ T3561] Dev loop5: unable to read RDB block 7 [ 217.834276][ T3561] loop5: unable to read partition table [ 217.854319][ T3561] loop5: partition table beyond EOD, truncated [ 218.114592][ T6427] loop5: detected capacity change from 0 to 7 [ 218.138089][ T6427] Dev loop5: unable to read RDB block 7 [ 218.145215][ T6427] loop5: unable to read partition table [ 218.171176][ T6427] loop5: partition table beyond EOD, truncated [ 218.218955][ T6427] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 219.707908][ T4231] Bluetooth: hci5: command 0x1003 tx timeout [ 219.714980][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 220.295618][ T6471] loop5: detected capacity change from 0 to 7 [ 220.518465][ T6471] Dev loop5: unable to read RDB block 7 [ 220.687591][ T6471] loop5: unable to read partition table [ 220.693473][ T6471] loop5: partition table beyond EOD, truncated [ 220.700814][ T6471] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 220.809102][ T3561] Dev loop5: unable to read RDB block 7 [ 220.814742][ T3561] loop5: unable to read partition table [ 220.843046][ T3561] loop5: partition table beyond EOD, truncated [ 220.984780][ T6480] fuse: Bad value for 'rootmode' [ 221.675340][ T6503] loop2: detected capacity change from 0 to 1024 [ 221.777805][ T2335] Bluetooth: hci5: command 0x1001 tx timeout [ 221.783918][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 221.869310][ T6503] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.966615][ T6503] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.933: Allocating blocks 385-513 which overlap fs metadata [ 222.020455][ T6502] EXT4-fs (loop2): pa ffff88801cbc00e0: logic 16, phys. 129, len 24 [ 222.028545][ T6502] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 222.403739][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 222.443293][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.942'. [ 222.489027][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 222.519603][ T6525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.942'. [ 222.841516][ T6536] fuse: Bad value for 'rootmode' [ 223.867867][ T4224] Bluetooth: hci5: command 0x1009 tx timeout [ 228.602287][ T6602] loop3: detected capacity change from 0 to 512 [ 231.433915][ T6670] fuse: Bad value for 'rootmode' [ 231.625580][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'. [ 233.645780][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 233.714758][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 233.777853][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1043'. [ 233.815220][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1043'. [ 236.457391][ T6794] fuse: Bad value for 'rootmode' [ 243.676743][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 243.723432][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1103'. [ 243.755715][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 243.775020][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1103'. [ 248.429024][ T6953] netlink: 'syz.1.1144': attribute type 13 has an invalid length. [ 249.415581][ T6983] netlink: 'syz.4.1159': attribute type 13 has an invalid length. [ 254.242820][ T7037] loop0: detected capacity change from 0 to 1024 [ 254.388712][ T7037] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.501319][ T7037] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1187: Allocating blocks 385-513 which overlap fs metadata [ 254.619017][ T7036] EXT4-fs (loop0): pa ffff88801cbc0e00: logic 16, phys. 129, len 24 [ 254.627137][ T7036] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 255.122985][ T7057] loop4: detected capacity change from 0 to 512 [ 255.459865][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.466191][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.865967][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 255.915653][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1204'. [ 255.959259][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 256.007919][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1204'. [ 258.165097][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 258.204549][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1221'. [ 258.245223][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 258.275461][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1221'. [ 264.532939][ T7215] netlink: 'syz.1.1264': attribute type 13 has an invalid length. [ 266.342141][ T7254] loop1: detected capacity change from 0 to 256 [ 268.373707][ T7294] loop1: detected capacity change from 0 to 2048 [ 268.567822][ T7294] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.150092][ T7306] netlink: 'syz.3.1312': attribute type 13 has an invalid length. [ 269.980184][ T7334] netlink: 'syz.4.1323': attribute type 13 has an invalid length. [ 271.771850][ T7364] netlink: 'syz.0.1338': attribute type 13 has an invalid length. [ 275.329225][ T7411] fuse: Bad value for 'rootmode' [ 278.721866][ T7462] loop0: detected capacity change from 0 to 1024 [ 278.825485][ T7462] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.848247][ T7462] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1385: Allocating blocks 385-513 which overlap fs metadata [ 278.870339][ T7461] EXT4-fs (loop0): pa ffff8880741bed20: logic 16, phys. 129, len 24 [ 278.878590][ T7461] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 279.475507][ T7475] loop3: detected capacity change from 0 to 512 [ 281.482913][ T7539] loop5: detected capacity change from 0 to 7 [ 281.504312][ T4316] Dev loop5: unable to read RDB block 7 [ 281.510671][ T4316] loop5: unable to read partition table [ 281.516467][ T4316] loop5: partition table beyond EOD, truncated [ 282.033948][ T7539] Dev loop5: unable to read RDB block 7 [ 282.077748][ T7539] loop5: unable to read partition table [ 282.083588][ T7539] loop5: partition table beyond EOD, truncated [ 282.116049][ T7539] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 285.806084][ T7599] fuse: Bad value for 'rootmode' [ 286.030720][ T7606] loop5: detected capacity change from 0 to 7 [ 286.084824][ T7606] Dev loop5: unable to read RDB block 7 [ 286.118148][ T7606] loop5: unable to read partition table [ 286.153622][ T7606] loop5: partition table beyond EOD, truncated [ 286.204420][ T7606] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 286.768758][ T7623] loop5: detected capacity change from 0 to 7 [ 286.822236][ T4316] Dev loop5: unable to read RDB block 7 [ 286.842739][ T4316] loop5: unable to read partition table [ 286.858790][ T4316] loop5: partition table beyond EOD, truncated [ 286.938065][ T7623] Dev loop5: unable to read RDB block 7 [ 286.953662][ T7623] loop5: unable to read partition table [ 286.999460][ T7623] loop5: partition table beyond EOD, truncated [ 287.060036][ T7623] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 287.210898][ T7632] fuse: Bad value for 'rootmode' [ 288.081554][ T3561] Dev loop5: unable to read RDB block 7 [ 288.087242][ T3561] loop5: unable to read partition table [ 288.119611][ T3561] loop5: partition table beyond EOD, truncated [ 294.750415][ T7736] netlink: 'syz.2.1506': attribute type 13 has an invalid length. [ 295.473872][ T7758] loop3: detected capacity change from 0 to 512 [ 297.779946][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 297.823591][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'. [ 297.853902][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 297.904032][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1529'. [ 299.516720][ T7815] loop0: detected capacity change from 0 to 1024 [ 300.125897][ T7815] EXT4-fs (loop0): Ignoring removed nobh option [ 300.132998][ T7815] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 300.143587][ T7815] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 300.189551][ T7812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1541'. [ 301.661307][ T7827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 301.816905][ T7830] loop5: detected capacity change from 0 to 7 [ 301.854019][ T7830] Dev loop5: unable to read RDB block 7 [ 301.877523][ T7830] loop5: unable to read partition table [ 301.952405][ T7830] loop5: partition table beyond EOD, truncated [ 302.052390][ T7830] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 302.778892][ T7851] loop0: detected capacity change from 0 to 1024 [ 303.411160][ T7851] EXT4-fs (loop0): Ignoring removed nobh option [ 303.422602][ T7851] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 303.433337][ T7851] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 303.705143][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 303.748023][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1561'. [ 303.761054][ T7859] loop0: detected capacity change from 0 to 256 [ 303.781940][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 303.817701][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1561'. [ 304.349316][ T7872] netlink: 'syz.3.1567': attribute type 13 has an invalid length. [ 304.460699][ T7880] fuse: Unknown parameter '&' [ 305.321248][ T7913] syz.4.1584[7913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.321920][ T7913] syz.4.1584[7913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.757969][ T7912] loop2: detected capacity change from 0 to 512 [ 307.268917][ T7932] loop5: detected capacity change from 0 to 7 [ 307.284593][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 307.287895][ T7932] Dev loop5: unable to read RDB block 7 [ 307.318484][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 307.324771][ T7932] loop5: unable to read partition table [ 307.359724][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 307.403800][ T7932] loop5: partition table beyond EOD, truncated [ 307.436440][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1595'. [ 307.453698][ T7932] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 308.149696][ T7965] loop1: detected capacity change from 0 to 1024 [ 308.304398][ T7965] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.340217][ T7965] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1611: Allocating blocks 385-513 which overlap fs metadata [ 308.428849][ T7962] EXT4-fs (loop1): pa ffff88801cbc0000: logic 16, phys. 129, len 24 [ 308.437494][ T7962] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 309.900488][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 310.020540][ T8008] loop0: detected capacity change from 0 to 1024 [ 310.058826][ T8008] EXT4-fs (loop0): Ignoring removed nobh option [ 310.082861][ T8008] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 310.143981][ T8008] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 311.750381][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1639'. [ 311.873532][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 311.893239][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 311.912731][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 311.931337][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1642'. [ 313.607360][ T8076] loop3: detected capacity change from 0 to 1024 [ 313.722719][ T8076] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.744666][ T8076] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1659: Allocating blocks 385-513 which overlap fs metadata [ 313.795736][ T8084] EXT4-fs (loop3): pa ffff8880741be700: logic 16, phys. 129, len 24 [ 313.804792][ T8084] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 315.333091][ T8098] loop2: detected capacity change from 0 to 1024 [ 315.365111][ T8100] loop3: detected capacity change from 0 to 1024 [ 315.510987][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 315.555062][ T8100] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 315.558103][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1669'. [ 315.567497][ T8098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 315.621092][ T8100] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1667: Allocating blocks 385-513 which overlap fs metadata [ 315.650822][ T8098] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1666: Allocating blocks 385-513 which overlap fs metadata [ 315.651106][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 315.675762][ T8099] EXT4-fs (loop3): pa ffff88801cbc00e0: logic 16, phys. 129, len 24 [ 315.683874][ T8099] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 315.697751][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1669'. [ 315.722561][ T8097] EXT4-fs (loop2): pa ffff88801cbc0ee0: logic 16, phys. 129, len 24 [ 315.730787][ T8097] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 316.155296][ T8122] loop0: detected capacity change from 0 to 1024 [ 316.299523][ T8122] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.665178][ T8136] loop5: detected capacity change from 0 to 7 [ 316.687515][ T4316] Dev loop5: unable to read RDB block 7 [ 316.691671][ T8140] loop0: detected capacity change from 0 to 1024 [ 316.694144][ T4316] loop5: unable to read partition table [ 316.761902][ T4316] loop5: partition table beyond EOD, truncated [ 316.790383][ T8136] Dev loop5: unable to read RDB block 7 [ 316.796003][ T8136] loop5: unable to read partition table [ 316.862853][ T8140] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.883457][ T8136] loop5: partition table beyond EOD, truncated [ 316.910205][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.916523][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.939606][ T8140] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1681: Allocating blocks 385-513 which overlap fs metadata [ 316.979769][ T8136] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 317.035742][ T8138] EXT4-fs (loop0): pa ffff8880741bee00: logic 16, phys. 129, len 24 [ 317.044099][ T8138] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 318.714011][ T8174] loop1: detected capacity change from 0 to 1024 [ 318.838453][ T8174] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.871716][ T8174] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1685: Allocating blocks 385-513 which overlap fs metadata [ 319.028788][ T8191] EXT4-fs (loop1): pa ffff8880741beb60: logic 16, phys. 129, len 24 [ 319.036895][ T8191] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 319.283708][ T8197] xt_bpf: check failed: parse error [ 319.489876][ T8198] loop1: detected capacity change from 0 to 256 [ 319.657961][ T8198] FAT-fs (loop1): Directory bread(block 64) failed [ 319.665025][ T8198] FAT-fs (loop1): Directory bread(block 65) failed [ 319.718133][ T8198] FAT-fs (loop1): Directory bread(block 66) failed [ 319.724718][ T8198] FAT-fs (loop1): Directory bread(block 67) failed [ 319.768486][ T8198] FAT-fs (loop1): Directory bread(block 68) failed [ 319.775059][ T8198] FAT-fs (loop1): Directory bread(block 69) failed [ 319.817745][ T8198] FAT-fs (loop1): Directory bread(block 70) failed [ 319.824371][ T8198] FAT-fs (loop1): Directory bread(block 71) failed [ 319.873920][ T8198] FAT-fs (loop1): Directory bread(block 72) failed [ 319.898033][ T8198] FAT-fs (loop1): Directory bread(block 73) failed [ 319.946863][ T8206] loop3: detected capacity change from 0 to 1024 [ 320.049078][ T8206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.150479][ T8206] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1708: Allocating blocks 385-513 which overlap fs metadata [ 320.257311][ T8205] EXT4-fs (loop3): pa ffff8880741be7e0: logic 16, phys. 129, len 24 [ 320.265510][ T8205] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 321.351590][ T8232] loop1: detected capacity change from 0 to 1024 [ 321.497154][ T8232] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.536669][ T8232] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1720: Allocating blocks 385-513 which overlap fs metadata [ 321.678952][ T8232] EXT4-fs (loop1): pa ffff8880741be8c0: logic 16, phys. 129, len 24 [ 321.687034][ T8232] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 323.163120][ T8250] loop5: detected capacity change from 0 to 7 [ 323.183801][ T4316] Dev loop5: unable to read RDB block 7 [ 323.190230][ T4316] loop5: unable to read partition table [ 323.196010][ T4316] loop5: partition table beyond EOD, truncated [ 323.269388][ T8250] Dev loop5: unable to read RDB block 7 [ 323.289586][ T8250] loop5: unable to read partition table [ 323.328918][ T8250] loop5: partition table beyond EOD, truncated [ 323.375805][ T8250] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 323.459068][ T8244] loop1: detected capacity change from 0 to 40427 [ 323.513381][ T8244] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 323.538051][ T8244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 323.619399][ T8244] F2FS-fs (loop1): Found nat_bits in checkpoint [ 323.724593][ T8261] loop3: detected capacity change from 0 to 1024 [ 323.747489][ T8244] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 323.761637][ T8244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 323.903712][ T4182] handle_bad_sector: 1250 callbacks suppressed [ 323.903730][ T4182] attempt to access beyond end of device [ 323.903730][ T4182] loop1: rw=2049, want=45104, limit=40427 [ 323.977816][ T8261] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.636238][ T8285] loop3: detected capacity change from 0 to 1024 [ 324.705904][ T8285] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.796754][ T8285] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1742: Allocating blocks 385-513 which overlap fs metadata [ 324.895358][ T8284] EXT4-fs (loop3): pa ffff8880741be380: logic 16, phys. 129, len 24 [ 324.903843][ T8284] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 325.972706][ T8319] loop1: detected capacity change from 0 to 128 [ 326.072164][ T8319] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.107846][ T8319] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.237209][ T8324] loop4: detected capacity change from 0 to 1024 [ 326.322141][ T8324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.424734][ T8324] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.1755: Allocating blocks 385-513 which overlap fs metadata [ 326.561499][ T8323] EXT4-fs (loop4): pa ffff8880741bed20: logic 16, phys. 129, len 24 [ 326.569670][ T8323] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 327.152475][ T8343] loop4: detected capacity change from 0 to 1024 [ 327.314706][ T8343] EXT4-fs (loop4): Ignoring removed nobh option [ 327.321858][ T8343] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 327.332546][ T8343] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 328.713339][ T8364] overlayfs: failed to resolve './file1': -2 [ 329.446448][ T8392] loop3: detected capacity change from 0 to 1024 [ 329.564722][ T8392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.030220][ T8406] overlayfs: failed to resolve './file0': -2 [ 332.482802][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.490130][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.702716][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.751420][ T8422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.209432][ T8422] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.219004][ T8422] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.228375][ T8422] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.237813][ T8422] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.367658][ T8458] netlink: 'syz.4.1812': attribute type 13 has an invalid length. [ 334.507292][ T8460] binder: Unknown parameter 'context' [ 334.886364][ T8479] loop3: detected capacity change from 0 to 1024 [ 334.988792][ T8479] EXT4-fs (loop3): Ignoring removed nobh option [ 335.000494][ T8479] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 335.010366][ T8479] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 335.855137][ T8497] loop0: detected capacity change from 0 to 1024 [ 335.868313][ T8502] binder: Unknown parameter 'context' [ 336.008483][ T8506] loop2: detected capacity change from 0 to 512 [ 336.028613][ T8497] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.066881][ T8506] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1833: inode has both inline data and extents flags [ 336.122984][ T8506] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1833: couldn't read orphan inode 15 (err -117) [ 336.140423][ T8497] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.1827: Allocating blocks 385-513 which overlap fs metadata [ 336.195728][ T8506] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 336.221084][ T8494] EXT4-fs (loop0): pa ffff8880741be2a0: logic 16, phys. 129, len 24 [ 336.229605][ T8494] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 336.433333][ T8515] syz.4.1835[8515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.433471][ T8515] syz.4.1835[8515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 336.449577][ T8515] overlayfs: overlapping lowerdir path [ 338.648012][ T8557] loop2: detected capacity change from 0 to 512 [ 339.074817][ T8565] syz.4.1851[8565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.075545][ T8565] syz.4.1851[8565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.108191][ T8565] overlayfs: overlapping lowerdir path [ 340.572532][ T8582] binder: Unknown parameter 'context' [ 340.598624][ T8579] loop1: detected capacity change from 0 to 256 [ 340.727409][ T8579] FAT-fs (loop1): Directory bread(block 64) failed [ 340.783299][ T8579] FAT-fs (loop1): Directory bread(block 65) failed [ 340.853619][ T8579] FAT-fs (loop1): Directory bread(block 66) failed [ 340.895767][ T8579] FAT-fs (loop1): Directory bread(block 67) failed [ 340.903196][ T8579] FAT-fs (loop1): Directory bread(block 68) failed [ 340.910100][ T8579] FAT-fs (loop1): Directory bread(block 69) failed [ 340.916703][ T8579] FAT-fs (loop1): Directory bread(block 70) failed [ 340.923319][ T8579] FAT-fs (loop1): Directory bread(block 71) failed [ 340.935135][ T8579] FAT-fs (loop1): Directory bread(block 72) failed [ 340.942077][ T8579] FAT-fs (loop1): Directory bread(block 73) failed [ 340.986411][ T8585] loop2: detected capacity change from 0 to 1024 [ 341.066734][ T26] audit: type=1800 audit(1763528725.155:2): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1859" name="bus" dev="loop1" ino=1048596 res=0 errno=0 [ 341.148880][ T8585] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.288807][ T8585] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1862: Allocating blocks 385-513 which overlap fs metadata [ 341.395021][ T8584] EXT4-fs (loop2): pa ffff88801cbc0380: logic 16, phys. 129, len 24 [ 341.403292][ T8584] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 341.525418][ T8601] loop4: detected capacity change from 0 to 512 [ 342.118205][ T8624] syz.3.1874[8624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.118893][ T8624] syz.3.1874[8624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.467393][ T8642] loop2: detected capacity change from 0 to 1024 [ 343.708500][ T8642] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.798588][ T8642] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1883: Allocating blocks 385-513 which overlap fs metadata [ 343.959739][ T8641] EXT4-fs (loop2): pa ffff88801cbc02a0: logic 16, phys. 129, len 24 [ 343.968182][ T8641] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 344.035731][ T8656] overlayfs: failed to resolve './file1': -2 [ 344.040509][ T8658] syz.4.1890[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.043174][ T8658] syz.4.1890[8658] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.111329][ T8658] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 344.375048][ T8666] loop3: detected capacity change from 0 to 1024 [ 344.530485][ T8666] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 344.664320][ T8666] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.189376][ T8693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1905'. [ 345.297241][ T8697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1907'. [ 345.349958][ T8697] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1907'. [ 347.169939][ T26] audit: type=1326 audit(1763528731.265:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 347.307722][ T26] audit: type=1326 audit(1763528731.295:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 347.455147][ T26] audit: type=1326 audit(1763528731.295:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 347.588051][ T26] audit: type=1326 audit(1763528731.295:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 347.698403][ T26] audit: type=1326 audit(1763528731.295:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 347.802183][ T26] audit: type=1326 audit(1763528731.295:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 347.938011][ T26] audit: type=1326 audit(1763528731.295:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 348.078007][ T26] audit: type=1326 audit(1763528731.295:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 348.206430][ T8765] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1939'. [ 348.242820][ T26] audit: type=1326 audit(1763528731.295:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 348.261373][ T8765] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1939'. [ 348.380052][ T26] audit: type=1326 audit(1763528731.295:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8729 comm="syz.3.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b03e76c9 code=0x7ffc0000 [ 348.923755][ T8800] loop5: detected capacity change from 0 to 7 [ 348.953187][ T8800] Dev loop5: unable to read RDB block 7 [ 348.983163][ T8800] loop5: unable to read partition table [ 349.013388][ T8800] loop5: partition table beyond EOD, truncated [ 349.097910][ T8800] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 351.079168][ T8859] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1980'. [ 351.151304][ T8859] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1980'. [ 351.492700][ T8876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1986'. [ 352.948330][ T8894] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1992'. [ 353.521313][ T8909] loop4: detected capacity change from 0 to 1024 [ 353.758733][ T8909] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.030500][ T8941] loop4: detected capacity change from 0 to 512 [ 356.512898][ T8980] loop2: detected capacity change from 0 to 512 [ 357.126360][ T9004] overlayfs: failed to resolve './file1': -2 [ 357.142563][ T9003] loop2: detected capacity change from 0 to 1024 [ 357.191203][ T9003] EXT4-fs (loop2): Ignoring removed nobh option [ 357.211748][ T9003] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 357.221429][ T9003] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 357.263612][ T9006] loop4: detected capacity change from 0 to 1024 [ 357.428128][ T9006] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 358.567377][ T9049] binder: Unknown parameter 'context' [ 358.639309][ T9052] overlayfs: failed to resolve './file1': -2 [ 360.191010][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 360.224490][ T9095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2080'. [ 360.260758][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 360.290297][ T9095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2080'. [ 360.753742][ T9125] overlayfs: failed to resolve './file1': -2 [ 363.217888][ T4239] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 363.230893][ T9170] binder: Unknown parameter 'context' [ 364.281382][ T9189] loop0: detected capacity change from 0 to 512 [ 364.288094][ T4239] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 364.318712][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.363087][ T4239] usb 5-1: config 0 descriptor?? [ 364.432278][ T4239] usb 5-1: selecting invalid altsetting 1 [ 364.489526][ T9196] loop5: detected capacity change from 0 to 7 [ 364.528649][ T9196] Dev loop5: unable to read RDB block 7 [ 364.534275][ T9196] loop5: unable to read partition table [ 364.537443][ T9199] loop0: detected capacity change from 0 to 1024 [ 364.550726][ T9200] overlayfs: missing 'lowerdir' [ 364.550901][ T4239] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 364.587861][ T9196] loop5: partition table beyond EOD, truncated [ 364.612563][ T9196] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 364.635427][ T9199] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.645099][ T4239] usb 5-1: USB disconnect, device number 2 [ 364.667966][ T9199] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.2126: Allocating blocks 385-513 which overlap fs metadata [ 364.683215][ T9197] EXT4-fs (loop0): pa ffff8880741be1c0: logic 16, phys. 129, len 24 [ 364.691287][ T9197] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 364.871192][ T4699] udevd[4699]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.894550][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 364.938401][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 364.970986][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 365.001720][ T9208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2128'. [ 365.324382][ T9228] loop3: detected capacity change from 0 to 512 [ 365.609898][ T9239] binder: Unknown parameter 'context' [ 366.589185][ T9248] overlayfs: failed to resolve './file1': -2 [ 367.575633][ T9264] loop3: detected capacity change from 0 to 1024 [ 367.715305][ T9268] loop2: detected capacity change from 0 to 1024 [ 367.794666][ T9264] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 367.962752][ T9268] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 368.011620][ T9268] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.2155: Allocating blocks 385-513 which overlap fs metadata [ 368.115494][ T9266] EXT4-fs (loop2): pa ffff88801cbc0380: logic 16, phys. 129, len 24 [ 368.123906][ T9266] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 369.549474][ T9312] binder: Unknown parameter 'context' [ 369.554594][ T9308] loop2: detected capacity change from 0 to 1024 [ 369.711619][ T9315] loop4: detected capacity change from 0 to 512 [ 369.721652][ T9308] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 369.815236][ T9308] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.2171: Allocating blocks 385-513 which overlap fs metadata [ 369.900565][ T9305] EXT4-fs (loop2): pa ffff8880741be000: logic 16, phys. 129, len 24 [ 369.908929][ T9305] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 370.904212][ T9343] binder: Unknown parameter 'context' [ 370.929131][ T9344] overlayfs: failed to resolve './file1': -2 [ 373.133173][ T9364] overlayfs: failed to resolve './file1': -2 [ 373.994033][ T9380] loop0: detected capacity change from 0 to 1024 [ 374.089804][ T9385] /dev/loop0: Can't open blockdev [ 374.143271][ T9380] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.581871][ T9399] overlayfs: failed to resolve './file1': -2 [ 374.949908][ T9411] loop5: detected capacity change from 0 to 7 [ 374.960603][ T9411] Dev loop5: unable to read RDB block 7 [ 374.966215][ T9411] loop5: unable to read partition table [ 375.001154][ T9414] loop0: detected capacity change from 0 to 1024 [ 375.007965][ T9411] loop5: partition table beyond EOD, truncated [ 375.014153][ T9411] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 375.120869][ T9414] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.706123][ T9430] overlayfs: failed to resolve './file1': -2 [ 376.635132][ T9452] loop0: detected capacity change from 0 to 1024 [ 376.736895][ T9452] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.826950][ T9464] loop5: detected capacity change from 0 to 7 [ 376.828692][ T9452] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.2236: Allocating blocks 385-513 which overlap fs metadata [ 376.851936][ T9464] Dev loop5: unable to read RDB block 7 [ 376.857736][ T9464] loop5: unable to read partition table [ 376.863544][ T9464] loop5: partition table beyond EOD, truncated [ 376.885913][ T9464] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 376.935199][ T9449] EXT4-fs (loop0): pa ffff8880741bee00: logic 16, phys. 129, len 24 [ 376.944226][ T9449] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 377.907789][ T9489] loop1: detected capacity change from 0 to 1024 [ 378.749483][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.755984][ T9489] EXT4-fs (loop1): Ignoring removed nobh option [ 378.772914][ T9489] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 378.782537][ T9489] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 378.788571][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.999828][ T9499] binder: Unknown parameter 'context' [ 379.085919][ T9501] loop5: detected capacity change from 0 to 7 [ 379.125997][ T9501] Dev loop5: unable to read RDB block 7 [ 379.150644][ T9501] loop5: unable to read partition table [ 379.177795][ T9501] loop5: partition table beyond EOD, truncated [ 379.228867][ T9501] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 379.470319][ T3561] Dev loop5: unable to read RDB block 7 [ 379.497807][ T3561] loop5: unable to read partition table [ 379.503624][ T3561] loop5: partition table beyond EOD, truncated [ 379.709109][ T9513] loop5: detected capacity change from 0 to 7 [ 379.741010][ T9513] Dev loop5: unable to read RDB block 7 [ 379.746704][ T9513] loop5: unable to read partition table [ 379.780284][ T9513] loop5: partition table beyond EOD, truncated [ 379.807828][ T9513] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 381.885533][ T9540] loop5: detected capacity change from 0 to 7 [ 381.922505][ T9540] Dev loop5: unable to read RDB block 7 [ 381.947682][ T9540] loop5: unable to read partition table [ 381.963960][ T9540] loop5: partition table beyond EOD, truncated [ 381.992187][ T9540] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 382.227287][ T9550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2275'. [ 382.283942][ T9550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2275'. [ 382.367824][ T3561] Dev loop5: unable to read RDB block 7 [ 382.373459][ T3561] loop5: unable to read partition table [ 382.394377][ T3561] loop5: partition table beyond EOD, truncated [ 382.443245][ T9554] loop2: detected capacity change from 0 to 1024 [ 382.596202][ T9554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.620942][ T9554] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.2278: Allocating blocks 385-513 which overlap fs metadata [ 382.695930][ T9553] EXT4-fs (loop2): pa ffff88801cbc0000: logic 16, phys. 129, len 24 [ 382.704313][ T9553] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 383.196829][ T9570] loop1: detected capacity change from 0 to 1024 [ 383.923979][ T9570] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 384.064412][ T9570] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.2284: Allocating blocks 385-513 which overlap fs metadata [ 384.304968][ T9570] EXT4-fs (loop1): pa ffff8880741be0e0: logic 16, phys. 129, len 24 [ 384.313635][ T9570] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 384.673007][ T9598] loop5: detected capacity change from 0 to 7 [ 384.705889][ T9598] Dev loop5: unable to read RDB block 7 [ 384.717945][ T9598] loop5: unable to read partition table [ 384.733067][ T9598] loop5: partition table beyond EOD, truncated [ 384.777909][ T9598] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 384.875046][ T9604] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 384.905846][ T9604] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 385.671973][ T9624] loop4: detected capacity change from 0 to 1024 [ 386.317336][ T9624] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 386.363595][ T9624] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.2303: Allocating blocks 385-513 which overlap fs metadata [ 386.480246][ T9622] EXT4-fs (loop4): pa ffff8880741be380: logic 16, phys. 129, len 24 [ 386.488411][ T9622] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 386.689605][ T9637] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 386.773364][ T9637] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.248053][ T9659] loop0: detected capacity change from 0 to 1024 [ 387.335545][ T9659] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.411863][ T9659] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3871: comm syz.0.2314: Allocating blocks 385-513 which overlap fs metadata [ 387.498763][ T9657] EXT4-fs (loop0): pa ffff88801cbc0540: logic 16, phys. 129, len 24 [ 387.506911][ T9657] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 388.015361][ T9680] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 388.043927][ T9680] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 388.447507][ T9695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2328'. [ 388.480480][ T9695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2328'. [ 388.589086][ T9700] loop5: detected capacity change from 0 to 7 [ 388.606496][ T9700] Dev loop5: unable to read RDB block 7 [ 388.625377][ T9700] loop5: unable to read partition table [ 388.653110][ T9700] loop5: partition table beyond EOD, truncated [ 388.709299][ T9700] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 389.054741][ T3561] Dev loop5: unable to read RDB block 7 [ 389.066255][ T3561] loop5: unable to read partition table [ 389.091906][ T3561] loop5: partition table beyond EOD, truncated [ 391.045404][ T9744] loop5: detected capacity change from 0 to 7 [ 391.061404][ T4316] Dev loop5: unable to read RDB block 7 [ 391.082168][ T4316] loop5: unable to read partition table [ 391.114169][ T4316] loop5: partition table beyond EOD, truncated [ 391.145360][ T9744] Dev loop5: unable to read RDB block 7 [ 391.151496][ T9744] loop5: unable to read partition table [ 391.177725][ T9744] loop5: partition table beyond EOD, truncated [ 391.195101][ T9744] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 391.422618][ T3561] Dev loop5: unable to read RDB block 7 [ 391.437706][ T3561] loop5: unable to read partition table [ 391.452022][ T9751] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2340'. [ 391.461348][ T3561] loop5: partition table beyond EOD, truncated [ 394.974124][ T9796] loop5: detected capacity change from 0 to 7 [ 395.006235][ T4316] Dev loop5: unable to read RDB block 7 [ 395.013248][ T4316] loop5: unable to read partition table [ 395.031916][ T4316] loop5: partition table beyond EOD, truncated [ 395.051016][ T9796] Dev loop5: unable to read RDB block 7 [ 395.056606][ T9796] loop5: unable to read partition table [ 395.089066][ T9796] loop5: partition table beyond EOD, truncated [ 395.114906][ T9796] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 395.349010][ T3561] Dev loop5: unable to read RDB block 7 [ 395.354633][ T3561] loop5: unable to read partition table [ 395.392793][ T3561] loop5: partition table beyond EOD, truncated [ 395.836866][ T9807] loop4: detected capacity change from 0 to 1024 [ 395.972223][ T9812] loop3: detected capacity change from 0 to 512 [ 395.999978][ T9807] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.069835][ T9807] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.2373: Allocating blocks 385-513 which overlap fs metadata [ 396.202651][ T9805] EXT4-fs (loop4): pa ffff88801cbc00e0: logic 16, phys. 129, len 24 [ 396.210787][ T9805] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 396.351683][ T9825] loop3: detected capacity change from 0 to 1024 [ 396.431238][ T9829] loop5: detected capacity change from 0 to 7 [ 396.602337][ T9829] Dev loop5: unable to read RDB block 7 [ 396.623788][ T9829] loop5: unable to read partition table [ 396.632903][ T9825] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.634567][ T9829] loop5: partition table beyond EOD, [ 396.662344][ T9825] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.2384: Allocating blocks 385-513 which overlap fs metadata [ 396.932645][ T9829] truncated [ 397.064596][ T9829] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 397.387818][ T9825] EXT4-fs (loop3): pa ffff88801cbc0e00: logic 16, phys. 129, len 24 [ 397.395992][ T9825] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 397.737014][ T9853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2394'. [ 397.755083][ T9853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2394'. [ 397.784690][ T9856] loop1: detected capacity change from 0 to 512 [ 399.899722][ T9879] loop4: detected capacity change from 0 to 1024 [ 400.030431][ T9879] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 400.086512][ T9879] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.2404: Allocating blocks 385-513 which overlap fs metadata [ 400.174715][ T9886] overlayfs: failed to resolve './file1': -2 [ 400.193234][ T9877] EXT4-fs (loop4): pa ffff8880741bed20: logic 16, phys. 129, len 24 [ 400.201513][ T9877] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 400.323641][ T9888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2407'. [ 400.353386][ T9888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2407'. [ 400.651913][ T9894] loop4: detected capacity change from 0 to 1024 [ 401.029512][ T9894] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 401.425261][ T9910] overlayfs: failed to resolve './file1': -2 [ 401.458809][ T9912] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2419'. [ 401.499702][ T9912] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2419'. [ 401.575215][ T9915] loop1: detected capacity change from 0 to 1024 [ 401.640021][ T9920] loop5: detected capacity change from 0 to 7 [ 401.650150][ T9920] Dev loop5: unable to read RDB block 7 [ 401.656151][ T9920] loop5: unable to read partition table [ 401.668117][ T9920] loop5: partition table beyond EOD, truncated [ 401.698724][ T9920] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 401.720556][ T9915] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 401.788864][ T9915] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.2420: Allocating blocks 385-513 which overlap fs metadata [ 401.820305][ T9913] EXT4-fs (loop1): pa ffff8880741be8c0: logic 16, phys. 129, len 24 [ 401.828730][ T9913] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 402.241184][ T3561] Dev loop5: unable to read RDB block 7 [ 402.252811][ T3561] loop5: unable to read partition table [ 402.269312][ T3561] loop5: partition table beyond EOD, truncated [ 402.467806][ T9939] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2429'. [ 402.799849][ T9949] overlayfs: failed to resolve './file1': -2 [ 408.062553][ T9977] loop0: detected capacity change from 0 to 1024 [ 408.275820][ T9977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 408.331949][ T9991] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2441'. [ 408.423572][ T9992] binder: Unknown parameter 'context' [ 409.202625][T10016] loop0: detected capacity change from 0 to 1024 [ 409.386570][T10016] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 409.477693][T10027] /dev/loop0: Can't open blockdev [ 410.036502][T10040] loop1: detected capacity change from 0 to 1024 [ 410.072584][T10040] EXT4-fs (loop1): Ignoring removed nobh option [ 410.086524][T10040] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 410.096611][T10040] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 410.948194][T10049] loop0: detected capacity change from 0 to 1024 [ 411.046536][T10049] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.604818][T10113] loop1: detected capacity change from 0 to 1024 [ 416.619577][T10117] binder: Unknown parameter 'context' [ 416.854668][T10113] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 418.643595][T10148] overlayfs: failed to resolve './file1': -2 [ 418.909522][T10153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2518'. [ 418.934429][T10153] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2518'. [ 419.083785][T10155] binder: Unknown parameter 'context' [ 419.327280][T10160] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2521'. [ 420.287166][T10177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2530'. [ 420.317091][T10177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2530'. [ 422.118023][T10204] loop5: detected capacity change from 0 to 7 [ 422.165071][ T4316] Dev loop5: unable to read RDB block 7 [ 422.181075][ T4316] loop5: unable to read partition table [ 422.208492][T10205] loop4: detected capacity change from 0 to 1024 [ 422.217389][ T4316] loop5: partition table beyond EOD, truncated [ 422.253120][T10205] EXT4-fs (loop4): Ignoring removed nobh option [ 422.273570][T10204] Dev loop5: unable to read RDB block 7 [ 422.280900][T10204] loop5: unable to read partition table [ 422.288878][T10204] loop5: partition table beyond EOD, truncated [ 422.303931][T10205] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 422.358105][T10204] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 422.395905][T10205] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 422.422275][T10214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2543'. [ 422.432196][T10214] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2543'. [ 422.894475][T10224] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2548'. [ 423.436962][T10240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2555'. [ 423.484494][T10240] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2555'. [ 423.783133][T10249] loop5: detected capacity change from 0 to 7 [ 423.835971][T10249] Dev loop5: unable to read RDB block 7 [ 423.877755][T10249] loop5: unable to read partition table [ 423.898082][T10249] loop5: partition table beyond EOD, truncated [ 423.916738][T10249] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 425.068375][T10269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2569'. [ 425.107781][T10269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2569'. [ 425.486388][T10277] loop5: detected capacity change from 0 to 7 [ 425.539820][ T4316] Dev loop5: unable to read RDB block 7 [ 425.555776][ T4316] loop5: unable to read partition table [ 425.571622][ T4316] loop5: partition table beyond EOD, truncated [ 425.599498][T10277] Dev loop5: unable to read RDB block 7 [ 425.606328][T10277] loop5: unable to read partition table [ 425.637878][T10277] loop5: partition table beyond EOD, truncated [ 425.667321][T10277] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 431.268444][T10321] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2593'. [ 433.128363][T10338] loop5: detected capacity change from 0 to 7 [ 433.138009][T10338] Dev loop5: unable to read RDB block 7 [ 433.149312][T10338] loop5: unable to read partition table [ 433.169244][T10338] loop5: partition table beyond EOD, truncated [ 433.179261][T10342] binder: Unknown parameter 'context' [ 433.206309][T10338] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 433.275696][T10345] loop3: detected capacity change from 0 to 1024 [ 433.384376][T10345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.224279][T10375] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2614'. [ 435.433542][T10377] loop3: detected capacity change from 0 to 1024 [ 435.511756][T10377] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.651604][T10382] loop5: detected capacity change from 0 to 7 [ 435.667064][T10382] Dev loop5: unable to read RDB block 7 [ 435.674755][T10382] loop5: unable to read partition table [ 435.695199][T10382] loop5: partition table beyond EOD, truncated [ 435.717789][T10382] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 438.377118][T10423] loop5: detected capacity change from 0 to 7 [ 438.399070][T10423] Dev loop5: unable to read RDB block 7 [ 438.412861][T10423] loop5: unable to read partition table [ 438.457159][T10423] loop5: partition table beyond EOD, truncated [ 438.470309][T10423] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 438.849171][ T3561] Dev loop5: unable to read RDB block 7 [ 438.854808][ T3561] loop5: unable to read partition table [ 438.870353][ T3561] loop5: partition table beyond EOD, truncated [ 439.780463][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.786814][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.813300][T10455] loop5: detected capacity change from 0 to 7 [ 439.824970][T10455] Dev loop5: unable to read RDB block 7 [ 439.830745][T10455] loop5: unable to read partition table [ 439.836523][T10455] loop5: partition table beyond EOD, truncated [ 439.857740][T10455] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 440.592823][T10464] loop5: detected capacity change from 0 to 7 [ 440.632974][ T4316] Dev loop5: unable to read RDB block 7 [ 440.638822][ T4316] loop5: unable to read partition table [ 440.677486][ T4316] loop5: partition table beyond EOD, truncated [ 440.696769][T10464] Dev loop5: unable to read RDB block 7 [ 440.710736][T10464] loop5: unable to read partition table [ 440.716521][T10464] loop5: partition table beyond EOD, truncated [ 440.793926][T10464] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 441.397227][T10467] loop1: detected capacity change from 0 to 1024 [ 441.518689][T10467] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 442.611666][T10496] loop1: detected capacity change from 0 to 1024 [ 442.739457][T10496] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 444.465668][T10529] loop3: detected capacity change from 0 to 1024 [ 444.504654][T10529] EXT4-fs (loop3): Ignoring removed nobh option [ 444.511599][T10529] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 444.521748][T10529] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 444.646882][T10530] loop5: detected capacity change from 0 to 7 [ 444.721059][T10530] Dev loop5: unable to read RDB block 7 [ 444.782640][T10530] loop5: unable to read partition table [ 444.797659][T10530] loop5: partition table beyond EOD, truncated [ 444.804655][T10530] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 445.856828][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2693'. [ 445.943103][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2693'. [ 446.352054][T10568] loop1: detected capacity change from 0 to 1024 [ 446.821294][T10568] EXT4-fs (loop1): Ignoring removed nobh option [ 446.822528][T10569] loop5: detected capacity change from 0 to 7 [ 446.832013][T10568] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 446.843625][T10568] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 446.855817][T10569] Dev loop5: unable to read RDB block 7 [ 446.861472][T10569] loop5: unable to read partition table [ 446.867233][T10569] loop5: partition table beyond EOD, truncated [ 446.874285][T10569] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 447.214066][ T3561] Dev loop5: unable to read RDB block 7 [ 447.227618][ T3561] loop5: unable to read partition table [ 447.243921][ T3561] loop5: partition table beyond EOD, truncated [ 447.283063][T10576] binder: Unknown parameter 'context' [ 448.408675][T10599] loop1: detected capacity change from 0 to 1024 [ 448.581351][T10599] EXT4-fs (loop1): Ignoring removed nobh option [ 448.607491][T10599] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 448.618196][T10599] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 449.814372][T10612] loop5: detected capacity change from 0 to 7 [ 449.842625][T10612] Dev loop5: unable to read RDB block 7 [ 449.862867][T10612] loop5: unable to read partition table [ 449.893475][T10612] loop5: partition table beyond EOD, truncated [ 449.930857][T10612] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 450.980403][ T3561] Dev loop5: unable to read RDB block 7 [ 450.986134][ T3561] loop5: unable to read partition table [ 451.031454][ T3561] loop5: partition table beyond EOD, truncated [ 451.350089][T10629] loop0: detected capacity change from 0 to 1024 [ 451.451839][T10629] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 454.106323][T10657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2732'. [ 459.248642][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2755'. [ 459.278000][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2755'. [ 459.312110][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2755'. [ 459.341788][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2755'. [ 459.412645][T10711] fuseblk: Bad value for 'fd' [ 459.502045][T10713] loop5: detected capacity change from 0 to 7 [ 459.526032][T10713] Dev loop5: unable to read RDB block 7 [ 459.542429][T10713] loop5: unable to read partition table [ 459.565143][T10713] loop5: partition table beyond EOD, truncated [ 459.603245][T10713] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 460.104036][T10722] overlayfs: failed to resolve './file1': -2 [ 460.660898][T10735] loop5: detected capacity change from 0 to 7 [ 460.678632][T10735] Dev loop5: unable to read RDB block 7 [ 460.684262][T10735] loop5: unable to read partition table [ 460.711255][T10735] loop5: partition table beyond EOD, truncated [ 460.717482][T10735] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 462.287256][T10748] fuseblk: Bad value for 'fd' [ 462.397382][T10750] overlayfs: failed to resolve './file1': -2 [ 462.920051][T10759] loop5: detected capacity change from 0 to 7 [ 462.963561][ T4316] Dev loop5: unable to read RDB block 7 [ 462.993364][ T4316] loop5: unable to read partition table [ 463.038036][ T4316] loop5: partition table beyond EOD, truncated [ 463.047889][T10759] Dev loop5: unable to read RDB block 7 [ 463.053499][T10759] loop5: unable to read partition table [ 463.076272][T10759] loop5: partition table beyond EOD, truncated [ 463.112752][T10759] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 463.338666][ T3561] Dev loop5: unable to read RDB block 7 [ 463.347670][ T3561] loop5: unable to read partition table [ 463.367400][ T3561] loop5: partition table beyond EOD, truncated [ 463.900038][T10772] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2782'. [ 465.037109][T10782] binder: Unknown parameter 'context' [ 465.341908][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 465.361003][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2789'. [ 465.401548][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 465.422478][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2789'. [ 466.109223][T10795] overlayfs: failed to resolve './file1': -2 [ 468.879546][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 468.888916][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'. [ 468.922584][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 468.969602][T10811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'. [ 470.173578][T10827] binder: Unknown parameter 'context' [ 470.729113][T10834] loop0: detected capacity change from 0 to 1024 [ 470.864112][T10834] EXT4-fs (loop0): Ignoring removed nobh option [ 470.876355][T10834] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 470.887165][T10834] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 471.835476][T10861] overlayfs: failed to resolve './file1': -2 [ 474.067312][T10913] overlayfs: failed to resolve './file1': -2 [ 475.050292][T10930] loop4: detected capacity change from 0 to 1024 [ 475.158290][T10930] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 475.608629][T10941] fuseblk: Unknown parameter 'fd0x0000000000000008' [ 480.219048][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2881'. [ 480.245127][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2881'. [ 480.300709][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2881'. [ 480.334193][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2881'. [ 480.666442][T11011] loop0: detected capacity change from 0 to 2048 [ 480.838637][T11011] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 482.074754][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 482.124868][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2896'. [ 482.190947][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2896'. [ 482.243697][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2896'. [ 483.523739][T11049] loop5: detected capacity change from 0 to 7 [ 483.544361][T11049] Dev loop5: unable to read RDB block 7 [ 483.554628][T11049] loop5: unable to read partition table [ 483.571435][T11049] loop5: partition table beyond EOD, truncated [ 483.597957][T11049] loop_reread_partitions: partition scan of loop5 (ъщ) failed (rc=-5) [ 483.871754][ T3561] Dev loop5: unable to read RDB block 7 [ 483.877396][ T3561] loop5: unable to read partition table [ 483.902315][ T3561] loop5: partition table beyond EOD, truncated [ 485.271152][T11079] loop4: detected capacity change from 0 to 1024 [ 485.456142][T11079] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 485.629693][T11089] overlayfs: failed to resolve './file1': -2 [ 485.937106][T11108] overlayfs: failed to resolve './file1': -2 [ 486.092237][T11116] loop1: detected capacity change from 0 to 1024 [ 486.189720][T11116] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 486.279050][T11123] overlayfs: failed to resolve './file1': -2 [ 487.238658][T11150] loop4: detected capacity change from 0 to 1024 [ 487.389278][T11150] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 487.655245][T11159] overlayfs: failed to resolve './file1': -2 [ 488.144490][T10779] device syz_tun left promiscuous mode [ 488.150140][T10779] bridge0: port 3(syz_tun) entered disabled state [ 489.296952][T11175] chnl_net:caif_netlink_parms(): no params data found [ 489.714088][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.738916][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.810762][T11175] device bridge_slave_0 entered promiscuous mode [ 489.838767][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.867274][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.910670][T11175] device bridge_slave_1 entered promiscuous mode [ 489.961856][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.973737][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.221929][T11195] loop0: detected capacity change from 0 to 1024 [ 490.497981][ T4296] Bluetooth: hci3: command 0x0409 tx timeout [ 490.635672][T11195] EXT4-fs (loop0): Ignoring removed nobh option [ 490.648148][T11195] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 490.658643][T11195] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 490.692834][T11175] team0: Port device team_slave_0 added [ 490.723795][T11175] team0: Port device team_slave_1 added [ 490.989488][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.996468][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.104697][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.169760][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.176740][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.315157][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.384473][T11209] binder: Unknown parameter 'context' [ 491.690292][T11175] device hsr_slave_0 entered promiscuous mode [ 491.738443][T11175] device hsr_slave_1 entered promiscuous mode [ 491.748427][T11175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.756006][T11175] Cannot create hsr debugfs directory [ 492.394946][ T462] device hsr_slave_0 left promiscuous mode [ 492.412259][ T462] device hsr_slave_1 left promiscuous mode [ 492.422457][ T462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.438814][ T462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.489987][ T462] device bridge_slave_1 left promiscuous mode [ 492.497594][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.528338][ T462] device bridge_slave_0 left promiscuous mode [ 492.546339][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.577723][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 492.880363][T11243] loop1: detected capacity change from 0 to 1024 [ 492.952803][T11243] EXT4-fs (loop1): Ignoring removed nobh option [ 492.974240][T11243] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 492.984960][T11243] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 493.636826][T11250] binder: Unknown parameter 'context' [ 493.968882][ T462] team0 (unregistering): Port device team_slave_1 removed [ 494.024463][ T462] team0 (unregistering): Port device team_slave_0 removed [ 494.097249][ T462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.154487][ T462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.577120][ T462] bond0 (unregistering): Released all slaves [ 494.657912][ T4223] Bluetooth: hci3: command 0x040f tx timeout [ 495.505672][T11175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 495.555894][T11175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 495.597044][T11175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 495.657947][T11175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 495.829597][T11175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.877433][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.888690][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.922899][T11175] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.964935][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 495.986692][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.023890][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.031043][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.093526][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 496.168520][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 496.199006][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 496.234707][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.241873][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.268075][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 496.288379][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 496.325021][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 496.350183][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 496.388747][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 496.402048][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 496.429947][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 496.439533][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.473738][T11175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.519457][T11175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 496.530784][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 496.549154][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 496.584580][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.737819][ T4223] Bluetooth: hci3: command 0x0419 tx timeout [ 496.929663][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 496.939685][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 496.961763][T11175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.519324][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 497.533956][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.586572][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 497.608294][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.628696][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.648344][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.683281][T11175] device veth0_vlan entered promiscuous mode [ 497.725239][T11175] device veth1_vlan entered promiscuous mode [ 497.790388][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 497.808707][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 497.828676][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 497.838991][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.860117][T11175] device veth0_macvtap entered promiscuous mode [ 497.875704][T11175] device veth1_macvtap entered promiscuous mode [ 497.910173][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 497.918936][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 497.945967][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.967574][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.997787][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.017574][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.027390][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 498.057575][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.087794][T11175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.096804][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.120598][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.153022][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.170896][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.222829][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.237224][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.317239][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.337913][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.397647][T11175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.409430][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.429642][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.481091][T11175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.526461][T11175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.557597][T11175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.566325][T11175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.632569][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'. [ 498.652053][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2993'. [ 498.709719][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'. [ 498.742104][T11346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2993'. [ 498.897110][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.945590][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.986666][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.015365][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.025954][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 499.047910][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 499.860377][ T4459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.962112][ T4459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.085222][T11377] overlayfs: failed to resolve './file1': -2 [ 500.120325][ T4459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.237370][ T4459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.445214][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'. [ 500.473385][T11384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3007'. [ 500.504893][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'. [ 500.534510][T11384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3007'. [ 500.582266][T11369] chnl_net:caif_netlink_parms(): no params data found [ 500.937359][T11369] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.962661][T11369] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.984482][T11369] device bridge_slave_0 entered promiscuous mode [ 501.023680][T11369] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.043356][T11369] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.063526][T11369] device bridge_slave_1 entered promiscuous mode [ 501.147879][T11369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.199650][T11369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.230996][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.237398][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.291117][T11369] team0: Port device team_slave_0 added [ 501.306925][T11369] team0: Port device team_slave_1 added [ 501.359930][T11369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.387304][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.435930][T11369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.478330][T11369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.485392][T11369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.527487][T11369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.603910][T11369] device hsr_slave_0 entered promiscuous mode [ 501.618680][T11369] device hsr_slave_1 entered promiscuous mode [ 501.635767][T11369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.644162][T11369] Cannot create hsr debugfs directory [ 501.858365][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 502.219742][ T4459] device hsr_slave_0 left promiscuous mode [ 502.232591][ T4459] device hsr_slave_1 left promiscuous mode [ 502.267456][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.339565][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.380328][ T4459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.416360][ T4459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.462219][ T4459] device bridge_slave_1 left promiscuous mode [ 502.479226][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.552250][ T4459] device bridge_slave_0 left promiscuous mode [ 502.585367][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.678297][ T4459] device veth1_macvtap left promiscuous mode [ 502.685088][ T4459] device veth0_macvtap left promiscuous mode [ 502.723981][ T4459] device veth1_vlan left promiscuous mode [ 502.738156][ T4459] device veth0_vlan left promiscuous mode [ 503.299309][ T4459] team0 (unregistering): Port device team_slave_1 removed [ 503.335956][ T4459] team0 (unregistering): Port device team_slave_0 removed [ 503.360585][ T4459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.408773][ T4459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.576074][ T4459] bond0 (unregistering): Released all slaves [ 503.685223][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 503.728027][T11452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3022'. [ 503.777167][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 503.819495][T11452] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3022'. [ 503.938726][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 504.129900][T11369] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.158976][T11369] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.214270][T11369] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.322037][T11369] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 504.861168][T11492] loop0: detected capacity change from 0 to 1024 [ 505.294394][T11492] EXT4-fs (loop0): Ignoring removed nobh option [ 505.301302][T11492] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 505.310919][T11492] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 505.624852][T11369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.694729][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 505.718677][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.763751][T11369] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.786272][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 505.807684][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3036'. [ 505.846077][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 505.880797][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3036'. [ 505.915214][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 505.948586][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.967711][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.974881][ T462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.017667][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 506.035279][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.159681][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.198352][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.407436][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.414608][ T462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.867590][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.927154][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.084374][T11369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.110830][T11369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.175514][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.207760][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.233811][T11525] overlayfs: failed to resolve './file1': -2 [ 507.246916][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.294401][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.365242][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.431476][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.493781][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.543871][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.568575][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.578311][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 508.053797][T11560] overlayfs: failed to resolve './file1': -2 [ 508.075865][T11369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.107941][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 508.124168][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.136305][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.240800][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.253398][T11566] loop3: detected capacity change from 0 to 128 [ 508.266561][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.374583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 508.408334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 508.490092][T11369] device veth0_vlan entered promiscuous mode [ 508.531211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.258358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.336333][T11369] device veth1_vlan entered promiscuous mode [ 509.391285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.421272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.558183][T11369] device veth0_macvtap entered promiscuous mode [ 509.603888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.631024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.658767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 509.705147][T11369] device veth1_macvtap entered promiscuous mode [ 510.518013][T11595] ODEBUG: Out of memory. ODEBUG disabled [ 512.609697][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 512.634671][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.727599][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.738905][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.795367][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.854618][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 512.907697][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.958965][T11369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.996158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 513.033490][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.064152][T11610] loop1: detected capacity change from 0 to 512 [ 513.090158][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.127618][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.167580][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.223444][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.265913][T11369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.303642][T11369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.432662][T11369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.499224][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 513.514389][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 514.050223][T11369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.124871][T11610] ------------[ cut here ]------------ [ 514.142229][T11369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.167743][T11610] EA inode 11 i_nlink=2 [ 514.168012][T11610] WARNING: CPU: 1 PID: 11610 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4be/0x520 [ 514.200940][T11369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.211390][T11369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.225404][T11610] Modules linked in: [ 514.250418][T11610] CPU: 0 PID: 11610 Comm: syz.1.3066 Not tainted syzkaller #0 [ 514.267681][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.328735][T11610] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 514.381851][T11610] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 13 e0 a2 ff 49 8b 37 48 c7 c7 80 8d 1d 8a 89 da e8 c2 53 85 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 514.420069][ T462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.436251][ T462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.491922][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 514.522118][ T4461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.537616][T11610] RSP: 0018:ffffc90002f0f140 EFLAGS: 00010246 [ 514.543729][T11610] RAX: dc9f8bbc6d6dff00 RBX: 0000000000000002 RCX: 0000000000080000 [ 514.552272][ T4461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.559951][ T4269] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 514.582090][ T462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 514.612849][T11610] RDX: ffffc90005f19000 RSI: 0000000000020720 RDI: 0000000000020721 [ 514.637640][T11610] RBP: ffffc90002f0f230 R08: dffffc0000000000 R09: ffffed1017224f2c [ 514.645744][T11610] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: ffffc90002f0f1a0 [ 514.711217][T11610] R13: ffff88805e152088 R14: dffffc0000000000 R15: ffff88805e1520c8 [ 514.757597][T11610] FS: 00007faa201016c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 514.772109][T11610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.793292][T11610] CR2: fffffffffffffffd CR3: 000000002a494000 CR4: 00000000003506f0 [ 514.815107][T11610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 514.835968][T11610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 514.844820][T11610] Call Trace: [ 514.850683][T11610] [ 514.853773][T11610] ? ext4_xattr_block_csum+0x500/0x500 [ 514.863796][T11610] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 514.872941][T11610] ? mb_cache_entry_create+0x62e/0x890 [ 514.881945][T11610] ext4_xattr_set_entry+0xed0/0x3d30 [ 514.891046][T11610] ? rcu_is_watching+0x11/0xa0 [ 514.895852][T11610] ? mb_cache_entry_create+0x676/0x890 [ 514.904725][T11610] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 514.912407][T11610] ? ext4_xattr_ibody_set+0x330/0x330 [ 514.921268][T11610] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 514.927032][T11610] ? ext4_xattr_block_find+0x500/0x500 [ 514.927978][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.935401][T11610] ext4_xattr_ibody_set+0x112/0x330 [ 514.954699][T11610] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 514.954989][ T4269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.960626][T11610] __ext4_expand_extra_isize+0x301/0x3e0 [ 514.984344][T11610] __ext4_mark_inode_dirty+0x469/0x700 [ 514.987669][ T4269] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 514.989878][T11610] ext4_evict_inode+0xa81/0x1080 [ 515.004005][T11610] ? _raw_spin_unlock+0x24/0x40 [ 515.012643][ T4269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.014587][T11610] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 515.026725][T11610] ? do_raw_spin_unlock+0x11d/0x230 [ 515.037237][T11610] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 515.044984][T11610] evict+0x485/0x870 [ 515.045734][ T4269] usb 4-1: config 0 descriptor?? [ 515.049115][T11610] ? __lock_acquire+0x7c60/0x7c60 [ 515.064909][T11610] ? proc_nr_inodes+0x320/0x320 [ 515.070114][T11610] ? do_raw_spin_unlock+0x11d/0x230 [ 515.077001][T11610] ? _raw_spin_unlock+0x24/0x40 [ 515.087930][T11610] ? iput+0x706/0x8a0 [ 515.092066][T11610] ext4_orphan_cleanup+0xaa9/0x12e0 [ 515.097416][T11610] ? ext4_orphan_del+0xb90/0xb90 [ 515.108670][T11610] ? errseq_check_and_advance+0x62/0x120 [ 515.114487][T11610] ext4_fill_super+0x92f0/0x9a60 [ 515.119657][T11610] ? ext4_mount+0x40/0x40 [ 515.124017][T11610] ? set_blocksize+0x1f1/0x370 [ 515.128971][T11610] ? sb_set_blocksize+0xa5/0xe0 [ 515.133845][T11610] mount_bdev+0x287/0x3c0 [ 515.140608][T11610] ? ext4_mount+0x40/0x40 [ 515.144973][T11610] legacy_get_tree+0xe6/0x180 [ 515.149750][T11610] ? ext4_errno_to_code+0x160/0x160 [ 515.154972][T11610] vfs_get_tree+0x88/0x270 [ 515.159675][T11610] do_new_mount+0x24a/0xa40 [ 515.164212][T11610] __se_sys_mount+0x2d6/0x3c0 [ 515.168951][T11610] ? __x64_sys_mount+0xc0/0xc0 [ 515.173737][T11610] ? syscall_enter_from_user_mode+0x2a/0x70 [ 515.180059][T11610] ? __x64_sys_mount+0x1c/0xc0 [ 515.184867][T11610] do_syscall_64+0x4c/0xa0 [ 515.189413][T11610] ? clear_bhb_loop+0x30/0x80 [ 515.194103][T11610] ? clear_bhb_loop+0x30/0x80 [ 515.199097][T11610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.205012][T11610] RIP: 0033:0x7faa21e9be6a [ 515.209529][T11610] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.229417][T11610] RSP: 002b:00007faa20100e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.239211][T11610] RAX: ffffffffffffffda RBX: 00007faa20100ef0 RCX: 00007faa21e9be6a [ 515.247209][T11610] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007faa20100eb0 [ 515.255503][T11610] RBP: 0000200000000180 R08: 00007faa20100ef0 R09: 0000000001a08700 [ 515.263952][T11610] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 515.272169][T11610] R13: 00007faa20100eb0 R14: 0000000000000470 R15: 0000200000000700 [ 515.280922][T11610] [ 515.283972][T11610] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 515.291246][T11610] CPU: 0 PID: 11610 Comm: syz.1.3066 Not tainted syzkaller #0 [ 515.298717][T11610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.308779][T11610] Call Trace: [ 515.312051][T11610] [ 515.314999][T11610] dump_stack_lvl+0x168/0x230 [ 515.319681][T11610] ? show_regs_print_info+0x20/0x20 [ 515.324884][T11610] ? load_image+0x3b0/0x3b0 [ 515.329403][T11610] panic+0x2c9/0x7f0 [ 515.333311][T11610] ? bpf_jit_dump+0xd0/0xd0 [ 515.337840][T11610] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 515.343829][T11610] __warn+0x248/0x2b0 [ 515.347818][T11610] ? ext4_xattr_inode_update_ref+0x4be/0x520 [ 515.353824][T11610] report_bug+0x1b7/0x2e0 [ 515.358178][T11610] handle_bug+0x3a/0x70 [ 515.362329][T11610] exc_invalid_op+0x16/0x40 [ 515.366832][T11610] asm_exc_invalid_op+0x16/0x20 [ 515.371697][T11610] RIP: 0010:ext4_xattr_inode_update_ref+0x4be/0x520 [ 515.378283][T11610] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 13 e0 a2 ff 49 8b 37 48 c7 c7 80 8d 1d 8a 89 da e8 c2 53 85 07 <0f> 0b 49 be 00 00 00 00 00 fc ff df 4c 8b 6c 24 10 4c 8b 7c 24 08 [ 515.397883][T11610] RSP: 0018:ffffc90002f0f140 EFLAGS: 00010246 [ 515.403968][T11610] RAX: dc9f8bbc6d6dff00 RBX: 0000000000000002 RCX: 0000000000080000 [ 515.411966][T11610] RDX: ffffc90005f19000 RSI: 0000000000020720 RDI: 0000000000020721 [ 515.419941][T11610] RBP: ffffc90002f0f230 R08: dffffc0000000000 R09: ffffed1017224f2c [ 515.427997][T11610] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: ffffc90002f0f1a0 [ 515.435970][T11610] R13: ffff88805e152088 R14: dffffc0000000000 R15: ffff88805e1520c8 [ 515.443969][T11610] ? ext4_xattr_block_csum+0x500/0x500 [ 515.449441][T11610] ? ext4_xattr_inode_iget+0x3f0/0x600 [ 515.454926][T11610] ? mb_cache_entry_create+0x62e/0x890 [ 515.460384][T11610] ext4_xattr_set_entry+0xed0/0x3d30 [ 515.465670][T11610] ? rcu_is_watching+0x11/0xa0 [ 515.470432][T11610] ? mb_cache_entry_create+0x676/0x890 [ 515.475921][T11610] ? ext4_xattr_block_set+0xd9a/0x2d30 [ 515.481393][T11610] ? ext4_xattr_ibody_set+0x330/0x330 [ 515.486780][T11610] ? __ext4_xattr_check_block+0x7d8/0x8d0 [ 515.492509][T11610] ? ext4_xattr_block_find+0x500/0x500 [ 515.497974][T11610] ext4_xattr_ibody_set+0x112/0x330 [ 515.503203][T11610] ext4_expand_extra_isize_ea+0xf9a/0x19a0 [ 515.509048][T11610] __ext4_expand_extra_isize+0x301/0x3e0 [ 515.514681][T11610] __ext4_mark_inode_dirty+0x469/0x700 [ 515.520140][T11610] ext4_evict_inode+0xa81/0x1080 [ 515.525087][T11610] ? _raw_spin_unlock+0x24/0x40 [ 515.529945][T11610] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 515.535843][T11610] ? do_raw_spin_unlock+0x11d/0x230 [ 515.541044][T11610] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 515.546934][T11610] evict+0x485/0x870 [ 515.550840][T11610] ? __lock_acquire+0x7c60/0x7c60 [ 515.555900][T11610] ? proc_nr_inodes+0x320/0x320 [ 515.560773][T11610] ? do_raw_spin_unlock+0x11d/0x230 [ 515.565983][T11610] ? _raw_spin_unlock+0x24/0x40 [ 515.570844][T11610] ? iput+0x706/0x8a0 [ 515.574849][T11610] ext4_orphan_cleanup+0xaa9/0x12e0 [ 515.580052][T11610] ? ext4_orphan_del+0xb90/0xb90 [ 515.584990][T11610] ? errseq_check_and_advance+0x62/0x120 [ 515.590648][T11610] ext4_fill_super+0x92f0/0x9a60 [ 515.595642][T11610] ? ext4_mount+0x40/0x40 [ 515.599987][T11610] ? set_blocksize+0x1f1/0x370 [ 515.604783][T11610] ? sb_set_blocksize+0xa5/0xe0 [ 515.609663][T11610] mount_bdev+0x287/0x3c0 [ 515.611043][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 515.614017][T11610] ? ext4_mount+0x40/0x40 [ 515.614046][T11610] legacy_get_tree+0xe6/0x180 [ 515.614070][T11610] ? ext4_errno_to_code+0x160/0x160 [ 515.626215][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 515.630518][T11610] vfs_get_tree+0x88/0x270 [ 515.630549][T11610] do_new_mount+0x24a/0xa40 [ 515.630580][T11610] __se_sys_mount+0x2d6/0x3c0 [ 515.643782][ T4269] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 515.647633][T11610] ? __x64_sys_mount+0xc0/0xc0 [ 515.647666][T11610] ? syscall_enter_from_user_mode+0x2a/0x70 [ 515.647689][T11610] ? __x64_sys_mount+0x1c/0xc0 [ 515.647714][T11610] do_syscall_64+0x4c/0xa0 [ 515.647732][T11610] ? clear_bhb_loop+0x30/0x80 [ 515.647752][T11610] ? clear_bhb_loop+0x30/0x80 [ 515.647774][T11610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.647795][T11610] RIP: 0033:0x7faa21e9be6a [ 515.647815][T11610] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.647832][T11610] RSP: 002b:00007faa20100e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.647855][T11610] RAX: ffffffffffffffda RBX: 00007faa20100ef0 RCX: 00007faa21e9be6a [ 515.647871][T11610] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007faa20100eb0 [ 515.647885][T11610] RBP: 0000200000000180 R08: 00007faa20100ef0 R09: 0000000001a08700 [ 515.647900][T11610] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 515.647915][T11610] R13: 00007faa20100eb0 R14: 0000000000000470 R15: 0000200000000700 [ 515.647947][T11610] [ 515.648285][T11610] Kernel Offset: disabled [ 515.779410][T11610] Rebooting in 86400 seconds..