last executing test programs: 4.849948079s ago: executing program 0 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 4.546781188s ago: executing program 0 (id=240): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x3, r1}) 4.376752603s ago: executing program 0 (id=244): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 4.007520169s ago: executing program 0 (id=251): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 3.731338455s ago: executing program 2 (id=254): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x3, r1}) 3.663777464s ago: executing program 2 (id=256): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 3.534019149s ago: executing program 1 (id=258): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='ext4_mballoc_prealloc\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 3.504444024s ago: executing program 2 (id=259): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) socketpair(0x2c, 0x4, 0xb, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000008000000040000000940"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001880), 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) close(r0) 3.296245392s ago: executing program 1 (id=261): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 2.827351082s ago: executing program 1 (id=265): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x4}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x12d8df94, 0x101300) 2.566271364s ago: executing program 4 (id=268): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000050900020073797a320000b6340e00002c000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a3100000000140000001100010000000000000000000e00000aa256b97ef5"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) 2.43914425s ago: executing program 4 (id=269): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 2.299265326s ago: executing program 4 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8810) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000580)=ANY=[], 0xffdd) 1.842346268s ago: executing program 1 (id=271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xa, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x0, 0x2e, 0x61, 0x5f, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x32}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 1.700852s ago: executing program 0 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) unshare(0x64000600) 1.635204376s ago: executing program 3 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.576461527s ago: executing program 2 (id=274): socket$kcm(0x2, 0x200000000000001, 0x106) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.372289658s ago: executing program 3 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.282916353s ago: executing program 4 (id=276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 733.303288ms ago: executing program 3 (id=277): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, 0x0, 0x68cd42, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x3, r1}) 639.991882ms ago: executing program 1 (id=278): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x33, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 579.883211ms ago: executing program 2 (id=279): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000050900020073797a320000b6340e00002c000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a3100000000140000001100010000000000000000000e00000aa256b97ef5"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x7, 0x3}) 549.252168ms ago: executing program 3 (id=280): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 431.38786ms ago: executing program 1 (id=281): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4}) syz_open_dev$usbfs(0x0, 0x12d8df94, 0x101300) 416.707873ms ago: executing program 4 (id=282): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000200)='./file1\x00', 0x12, &(0x7f0000000480)=ANY=[], 0x5, 0xa66, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0xd3bc) creat(&(0x7f0000000c40)='./file1\x00', 0x180) 413.286742ms ago: executing program 2 (id=283): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 349.047694ms ago: executing program 3 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0x30) 238.530104ms ago: executing program 0 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000bb7f1a00c600feff0000000a95000000000000fc"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 142.200779ms ago: executing program 3 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 4 (id=287): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.22' (ED25519) to the list of known hosts. [ 69.778140][ T5806] cgroup: Unknown subsys name 'net' [ 69.930901][ T5806] cgroup: Unknown subsys name 'cpuset' [ 69.939285][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.321661][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.432575][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439437][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.503390][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.512594][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.528877][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.537922][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.545943][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.553555][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.562493][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.571715][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.573075][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.586650][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.593950][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.603905][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.613063][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.613781][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.620984][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.635316][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.654711][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.665656][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.673004][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.686163][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.700662][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.709754][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.723745][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.731235][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.746627][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.357209][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 74.388125][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 74.470739][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 74.601881][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 74.699832][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 74.722629][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.729982][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.738731][ T5833] bridge_slave_0: entered allmulticast mode [ 74.745843][ T5833] bridge_slave_0: entered promiscuous mode [ 74.780814][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.788169][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.795334][ T5824] bridge_slave_0: entered allmulticast mode [ 74.802693][ T5824] bridge_slave_0: entered promiscuous mode [ 74.810429][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.817688][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.824843][ T5824] bridge_slave_1: entered allmulticast mode [ 74.832392][ T5824] bridge_slave_1: entered promiscuous mode [ 74.840319][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.847649][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.854806][ T5833] bridge_slave_1: entered allmulticast mode [ 74.862054][ T5833] bridge_slave_1: entered promiscuous mode [ 74.925112][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.933408][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.940791][ T5816] bridge_slave_0: entered allmulticast mode [ 74.948256][ T5816] bridge_slave_0: entered promiscuous mode [ 74.980142][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.002639][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.009852][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.017000][ T5816] bridge_slave_1: entered allmulticast mode [ 75.024293][ T5816] bridge_slave_1: entered promiscuous mode [ 75.042859][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.055599][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.109090][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.183873][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.193752][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.201649][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.208966][ T5817] bridge_slave_0: entered allmulticast mode [ 75.215976][ T5817] bridge_slave_0: entered promiscuous mode [ 75.236581][ T5824] team0: Port device team_slave_0 added [ 75.245312][ T5824] team0: Port device team_slave_1 added [ 75.263458][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.293045][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.300550][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.307946][ T5817] bridge_slave_1: entered allmulticast mode [ 75.315249][ T5817] bridge_slave_1: entered promiscuous mode [ 75.322287][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.329569][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.336807][ T5829] bridge_slave_0: entered allmulticast mode [ 75.344042][ T5829] bridge_slave_0: entered promiscuous mode [ 75.366161][ T5833] team0: Port device team_slave_0 added [ 75.398950][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.406112][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.413430][ T5829] bridge_slave_1: entered allmulticast mode [ 75.420506][ T5829] bridge_slave_1: entered promiscuous mode [ 75.444067][ T5833] team0: Port device team_slave_1 added [ 75.451662][ T5816] team0: Port device team_slave_0 added [ 75.480598][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.487609][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.514103][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.538495][ T5816] team0: Port device team_slave_1 added [ 75.559127][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.580921][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.588757][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.614885][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.637974][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.644928][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.671831][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.682616][ T5831] Bluetooth: hci1: command tx timeout [ 75.685145][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.695195][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.721557][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.734796][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.748275][ T5823] Bluetooth: hci0: command tx timeout [ 75.748716][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.753976][ T5831] Bluetooth: hci2: command tx timeout [ 75.766945][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.827851][ T5831] Bluetooth: hci4: command tx timeout [ 75.833522][ T5831] Bluetooth: hci3: command tx timeout [ 75.842373][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.849354][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.875356][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.888028][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.894972][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.921388][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.949040][ T5817] team0: Port device team_slave_0 added [ 75.956703][ T5829] team0: Port device team_slave_0 added [ 75.965620][ T5829] team0: Port device team_slave_1 added [ 75.990410][ T5817] team0: Port device team_slave_1 added [ 76.082859][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.090120][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.116250][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.134146][ T5824] hsr_slave_0: entered promiscuous mode [ 76.141146][ T5824] hsr_slave_1: entered promiscuous mode [ 76.164415][ T5833] hsr_slave_0: entered promiscuous mode [ 76.171339][ T5833] hsr_slave_1: entered promiscuous mode [ 76.177557][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 76.183359][ T5833] Cannot create hsr debugfs directory [ 76.201437][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.208922][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.234920][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.254313][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.262151][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.288373][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.300801][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.307933][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.334177][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.350132][ T5816] hsr_slave_0: entered promiscuous mode [ 76.356420][ T5816] hsr_slave_1: entered promiscuous mode [ 76.362765][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 76.368553][ T5816] Cannot create hsr debugfs directory [ 76.441108][ T5829] hsr_slave_0: entered promiscuous mode [ 76.448176][ T5829] hsr_slave_1: entered promiscuous mode [ 76.454315][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 76.460672][ T5829] Cannot create hsr debugfs directory [ 76.606000][ T5817] hsr_slave_0: entered promiscuous mode [ 76.612770][ T5817] hsr_slave_1: entered promiscuous mode [ 76.619163][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 76.624897][ T5817] Cannot create hsr debugfs directory [ 77.099027][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.116570][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.127980][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.148938][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.206071][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.218458][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.234463][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.244951][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.349384][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.361995][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.372519][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.383931][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.487117][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.501872][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.513315][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.524372][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.571872][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.635597][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.647304][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.659493][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.675116][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.737054][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.747567][ T5831] Bluetooth: hci1: command tx timeout [ 77.793268][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.800608][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.827573][ T5823] Bluetooth: hci0: command tx timeout [ 77.830315][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.833054][ T5831] Bluetooth: hci2: command tx timeout [ 77.840146][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.875493][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.890545][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.908172][ T5823] Bluetooth: hci4: command tx timeout [ 77.913631][ T5831] Bluetooth: hci3: command tx timeout [ 77.954955][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.995056][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.024981][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.045097][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.063155][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.070372][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.094320][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.101456][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.112884][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.120012][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.137188][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.158364][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.165546][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.175084][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.182221][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.204074][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.211298][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.354762][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.394698][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.401937][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.460826][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.468078][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.661639][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.939328][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.022741][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.155232][ T5817] veth0_vlan: entered promiscuous mode [ 79.190719][ T5833] veth0_vlan: entered promiscuous mode [ 79.215711][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.231213][ T5817] veth1_vlan: entered promiscuous mode [ 79.246878][ T5833] veth1_vlan: entered promiscuous mode [ 79.323267][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.334131][ T5824] veth0_vlan: entered promiscuous mode [ 79.372496][ T5824] veth1_vlan: entered promiscuous mode [ 79.389706][ T5829] veth0_vlan: entered promiscuous mode [ 79.405008][ T5829] veth1_vlan: entered promiscuous mode [ 79.416450][ T5833] veth0_macvtap: entered promiscuous mode [ 79.453439][ T5817] veth0_macvtap: entered promiscuous mode [ 79.464909][ T5817] veth1_macvtap: entered promiscuous mode [ 79.473425][ T5833] veth1_macvtap: entered promiscuous mode [ 79.557140][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.569431][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.590028][ T5824] veth0_macvtap: entered promiscuous mode [ 79.604943][ T5829] veth0_macvtap: entered promiscuous mode [ 79.616256][ T5824] veth1_macvtap: entered promiscuous mode [ 79.626609][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.636281][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.644118][ T5816] veth0_vlan: entered promiscuous mode [ 79.676532][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.706952][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.716038][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.725844][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.735535][ T5829] veth1_macvtap: entered promiscuous mode [ 79.747182][ T5816] veth1_vlan: entered promiscuous mode [ 79.764569][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.772834][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.782701][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.810024][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.818949][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.831018][ T5831] Bluetooth: hci1: command tx timeout [ 79.852095][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.861485][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.880806][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.890394][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.908318][ T5831] Bluetooth: hci2: command tx timeout [ 79.908488][ T5823] Bluetooth: hci0: command tx timeout [ 79.918108][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.936455][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.984515][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.993189][ T5823] Bluetooth: hci3: command tx timeout [ 79.995165][ T5831] Bluetooth: hci4: command tx timeout [ 80.003999][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.031507][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.045043][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.078435][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.087471][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.108983][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.112345][ T5816] veth0_macvtap: entered promiscuous mode [ 80.124039][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.127867][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.180502][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.194855][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.199405][ T5816] veth1_macvtap: entered promiscuous mode [ 80.256629][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.304308][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.336615][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.382784][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.389451][ T5940] loop0: detected capacity change from 0 to 256 [ 80.393518][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.410683][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.419556][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.481352][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.485099][ T5940] FAT-fs (loop0): Directory bread(block 64) failed [ 80.501228][ T5940] FAT-fs (loop0): Directory bread(block 65) failed [ 80.508083][ T5940] FAT-fs (loop0): Directory bread(block 66) failed [ 80.515222][ T5940] FAT-fs (loop0): Directory bread(block 67) failed [ 80.525620][ T5923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.527216][ T5940] FAT-fs (loop0): Directory bread(block 68) failed [ 80.544664][ T5923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.552957][ T5940] FAT-fs (loop0): Directory bread(block 69) failed [ 80.566185][ T5940] FAT-fs (loop0): Directory bread(block 70) failed [ 80.569051][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.576313][ T5940] FAT-fs (loop0): Directory bread(block 71) failed [ 80.589733][ T5940] FAT-fs (loop0): Directory bread(block 72) failed [ 80.598450][ T5940] FAT-fs (loop0): Directory bread(block 73) failed [ 80.649747][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.674910][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.762086][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.781014][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.838799][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.846643][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.965538][ T5945] syzkaller0: entered promiscuous mode [ 80.972143][ T5945] syzkaller0: entered allmulticast mode [ 80.983909][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.992542][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.002377][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.011549][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.140324][ T5949] Bluetooth: MGMT ver 1.23 [ 81.148498][ T5949] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 81.275312][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.407286][ T5951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.602503][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.662670][ T5957] fuse: Bad value for 'fd' [ 81.767424][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 81.810592][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.851101][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.883510][ T5889] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 81.917478][ T5831] Bluetooth: hci1: command tx timeout [ 81.927012][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.989722][ T5831] Bluetooth: hci2: command tx timeout [ 82.000612][ T5831] Bluetooth: hci0: command tx timeout [ 82.023174][ T5889] usb 2-1: config 0 descriptor?? [ 82.068363][ T5831] Bluetooth: hci3: command tx timeout [ 82.068528][ T5823] Bluetooth: hci4: command tx timeout [ 82.523811][ T5889] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 82.691576][ T5934] usb 2-1: USB disconnect, device number 2 [ 83.390548][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.026574][ T5987] loop1: detected capacity change from 0 to 256 [ 84.060325][ T5987] ======================================================= [ 84.060325][ T5987] WARNING: The mand mount option has been deprecated and [ 84.060325][ T5987] and is ignored by this kernel. Remove the mand [ 84.060325][ T5987] option from the mount to silence this warning. [ 84.060325][ T5987] ======================================================= [ 84.186483][ T5987] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 84.398172][ T5983] batman_adv: batadv0: Adding interface: dummy0 [ 84.426294][ T5983] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.453427][ T5983] batman_adv: batadv0: Interface activated: dummy0 [ 84.472730][ T5987] batadv0: mtu less than device minimum [ 84.492441][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.504928][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.516918][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.528890][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.540767][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.552642][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.564648][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.576353][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.588244][ T5987] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 84.796448][ T5998] syzkaller0: entered promiscuous mode [ 84.824669][ T5998] syzkaller0: entered allmulticast mode [ 85.077653][ T792] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.093023][ T6014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.249010][ T792] usb 4-1: Using ep0 maxpacket: 32 [ 85.275070][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.291905][ T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.305639][ T792] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.329713][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.384107][ T792] usb 4-1: config 0 descriptor?? [ 85.833890][ T792] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 86.014668][ T5905] usb 4-1: USB disconnect, device number 2 [ 86.330450][ T6044] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 86.795755][ T10] cfg80211: failed to load regulatory.db [ 87.927631][ T5905] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.137812][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 88.177741][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.197516][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.211592][ T5905] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 88.221110][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.247928][ T5905] usb 3-1: config 0 descriptor?? [ 88.749644][ T5905] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 88.969840][ T5963] usb 3-1: USB disconnect, device number 2 [ 90.008576][ T6115] wg2: entered promiscuous mode [ 90.018109][ T6115] wg2: entered allmulticast mode [ 90.634483][ T6141] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 92.195886][ T6172] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 92.242922][ T6169] syzkaller0: entered promiscuous mode [ 92.257559][ T6169] syzkaller0: entered allmulticast mode [ 92.454500][ T6180] loop1: detected capacity change from 0 to 256 [ 92.553837][ T6180] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 92.708463][ T6190] fuse: Unknown parameter '00000000000000000000' [ 94.000498][ T6208] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 94.022018][ T6198] pim6reg1: entered promiscuous mode [ 94.048478][ T6198] pim6reg1: entered allmulticast mode [ 94.323310][ T6219] fuse: Unknown parameter '00000000000000000000' [ 94.493334][ T6222] loop1: detected capacity change from 0 to 256 [ 94.573983][ T6222] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 94.871751][ T6236] veth0_vlan: entered allmulticast mode [ 94.959532][ T6237] ÿÿÿÿÿÿ: renamed from vlan1 [ 95.182300][ T6245] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 95.657518][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.760189][ T6263] loop2: detected capacity change from 0 to 256 [ 95.817593][ T6263] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d) [ 95.837791][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 95.860075][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.883098][ T55] usb 5-1: no configurations [ 95.905486][ T55] usb 5-1: can't read configurations, error -22 [ 95.932172][ T6263] batman_adv: batadv0: Adding interface: dummy0 [ 95.965290][ T6263] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.017499][ T6263] batman_adv: batadv0: Interface activated: dummy0 [ 96.397226][ T6283] fuse: Unknown parameter 'user00000000000000000000' [ 96.798599][ T6292] loop3: detected capacity change from 0 to 512 [ 96.849324][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.136: inode has both inline data and extents flags [ 96.867169][ T6292] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.136: couldn't read orphan inode 15 (err -117) [ 96.894177][ T6292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.962641][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.201878][ T6300] loop2: detected capacity change from 0 to 512 [ 97.220166][ T6300] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.250896][ T6300] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.298874][ T6300] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.335927][ T6300] EXT4-fs (loop2): 1 truncate cleaned up [ 97.410765][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.541098][ T6308] loop3: detected capacity change from 0 to 2048 [ 97.595543][ T6308] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 97.605044][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.645153][ T5964] udevd[5964]: incorrect nilfs2 checksum on /dev/loop3 [ 97.669730][ T6313] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.724668][ T6308] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 97.756843][ T6308] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 97.769818][ T6308] Remounting filesystem read-only [ 97.775024][ T6308] NILFS (loop3): error -5 truncating bmap (ino=15) [ 97.816437][ T6318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.868998][ T5829] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 99.132125][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.140304][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.151002][ T6329] bridge0: entered allmulticast mode [ 99.159392][ T6330] bridge_slave_1: left allmulticast mode [ 99.165155][ T6330] bridge_slave_1: left promiscuous mode [ 99.173054][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.186787][ T6330] bridge_slave_0: left allmulticast mode [ 99.194307][ T6330] bridge_slave_0: left promiscuous mode [ 99.200818][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.339034][ T6337] fuse: Unknown parameter 'user00000000000000000000' [ 100.026099][ T6354] loop2: detected capacity change from 0 to 2048 [ 100.073801][ T6354] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.169813][ T6356] loop3: detected capacity change from 0 to 512 [ 100.176702][ T6359] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.207862][ T6356] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.227009][ T6354] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952 [ 100.287715][ T6356] EXT4-fs (loop3): 1 truncate cleaned up [ 100.309434][ T6354] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15) [ 100.325666][ T6354] Remounting filesystem read-only [ 100.347473][ T6354] NILFS (loop2): error -5 truncating bmap (ino=15) [ 100.347675][ T6356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.512544][ T6367] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 100.538874][ T5816] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 100.613230][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.874068][ T6382] bridge0: entered promiscuous mode [ 100.879477][ T6382] bridge0: entered allmulticast mode [ 101.693971][ T6391] fuse: Unknown parameter 'user00000000000000000000' [ 101.818799][ T6393] loop3: detected capacity change from 0 to 512 [ 101.914267][ T6393] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.173: inode has both inline data and extents flags [ 102.008393][ T6393] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.173: couldn't read orphan inode 15 (err -117) [ 102.064342][ T6399] pim6reg1: entered promiscuous mode [ 102.076898][ T6399] pim6reg1: entered allmulticast mode [ 102.084961][ T6393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.153591][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.321979][ T6408] loop3: detected capacity change from 0 to 512 [ 102.356519][ T6408] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.373384][ T6410] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 102.442240][ T6408] EXT4-fs (loop3): 1 truncate cleaned up [ 102.469374][ T6408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.739549][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.838035][ T6441] pim6reg1: entered promiscuous mode [ 103.864041][ T6441] pim6reg1: entered allmulticast mode [ 103.896941][ T6443] pim6reg1: entered promiscuous mode [ 103.907622][ T6443] pim6reg1: entered allmulticast mode [ 104.006890][ T6453] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 104.148430][ T6457] loop4: detected capacity change from 0 to 512 [ 104.174963][ T6457] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.195: inode has both inline data and extents flags [ 104.242473][ T6457] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.195: couldn't read orphan inode 15 (err -117) [ 104.263353][ T6457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.370431][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.023503][ T6492] loop4: detected capacity change from 0 to 512 [ 105.051598][ T6492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.076825][ T6492] EXT4-fs (loop4): 1 truncate cleaned up [ 105.100878][ T6492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.167065][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.369423][ T6497] loop4: detected capacity change from 0 to 512 [ 105.395933][ T6497] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.209: inode has both inline data and extents flags [ 105.419100][ T6497] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.209: couldn't read orphan inode 15 (err -117) [ 105.456352][ T6497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.507212][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.363789][ T6514] loop1: detected capacity change from 0 to 512 [ 106.405612][ T6514] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.215: inode has both inline data and extents flags [ 106.430586][ T6514] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.215: couldn't read orphan inode 15 (err -117) [ 106.444591][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.546914][ T6521] loop2: detected capacity change from 0 to 512 [ 106.565249][ T6521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.575922][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.728848][ T6521] EXT4-fs (loop2): 1 truncate cleaned up [ 106.739884][ T6521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.969323][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.002199][ T6537] overlayfs: failed to resolve './file1/file0': -2 [ 107.311895][ T6550] loop1: detected capacity change from 0 to 512 [ 107.361802][ T6550] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.230: inode has both inline data and extents flags [ 107.445886][ T6550] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.230: couldn't read orphan inode 15 (err -117) [ 107.462300][ T6550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.580271][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.893625][ T6569] overlayfs: overlapping lowerdir path [ 108.114157][ T6580] loop0: detected capacity change from 0 to 512 [ 108.132314][ T6580] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.244: inode has both inline data and extents flags [ 108.150842][ T6580] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.244: couldn't read orphan inode 15 (err -117) [ 108.226041][ T6580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.386798][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.425159][ T6595] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 108.748896][ T6610] overlayfs: overlapping lowerdir path [ 108.897079][ T6616] loop1: detected capacity change from 0 to 512 [ 108.912801][ T6616] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.943934][ T6616] EXT4-fs (loop1): 1 truncate cleaned up [ 108.966992][ T6616] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.099897][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.280760][ T6627] loop1: detected capacity change from 0 to 512 [ 109.305274][ T6627] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.261: inode has both inline data and extents flags [ 109.398197][ T6632] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 109.435262][ T6627] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.261: couldn't read orphan inode 15 (err -117) [ 109.502979][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.556041][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.877040][ T6647] overlayfs: overlapping lowerdir path [ 110.612833][ T6600] veth0_vlan: entered allmulticast mode [ 110.631976][ T6601] ªªªªªª: renamed from vlan0 [ 110.806467][ T6656] pim6reg1: entered promiscuous mode [ 110.851012][ T6656] pim6reg1: entered allmulticast mode [ 111.607140][ T6671] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 111.883959][ T6680] overlayfs: overlapping lowerdir path [ 112.075880][ T6687] loop4: detected capacity change from 0 to 2048 [ 112.100019][ T6687] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.161753][ T6692] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.211971][ T6687] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 112.249964][ T6687] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 112.275470][ T6687] Remounting filesystem read-only [ 112.283942][ T6687] NILFS (loop4): error -5 truncating bmap (ino=15) [ 112.321231][ T6698] [ 112.323719][ T6698] ============================= [ 112.328714][ T6698] WARNING: suspicious RCU usage [ 112.333628][ T6698] syzkaller #0 Not tainted [ 112.338850][ T6698] ----------------------------- [ 112.343708][ T6698] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 112.352935][ T6698] [ 112.352935][ T6698] other info that might help us debug this: [ 112.352935][ T6698] [ 112.363526][ T6698] [ 112.363526][ T6698] rcu_scheduler_active = 2, debug_locks = 1 [ 112.371697][ T6698] 1 lock held by syz.3.286/6698: [ 112.376666][ T6698] #0: ffffffff8df3b900 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 112.386986][ T6698] [ 112.386986][ T6698] stack backtrace: [ 112.393959][ T6698] CPU: 0 UID: 0 PID: 6698 Comm: syz.3.286 Not tainted syzkaller #0 PREEMPT(full) [ 112.393983][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.394001][ T6698] Call Trace: [ 112.394009][ T6698] [ 112.394017][ T6698] dump_stack_lvl+0x189/0x250 [ 112.394052][ T6698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.394078][ T6698] ? __pfx__printk+0x10/0x10 [ 112.394112][ T6698] lockdep_rcu_suspicious+0x140/0x1d0 [ 112.394140][ T6698] get_callchain_entry+0x2b6/0x3c0 [ 112.394168][ T6698] get_perf_callchain+0xb3/0x820 [ 112.394199][ T6698] ? __pfx_get_perf_callchain+0x10/0x10 [ 112.394225][ T6698] ? futex_unqueue+0x22/0x240 [ 112.394244][ T6698] ? futex_unqueue+0x22/0x240 [ 112.394261][ T6698] ? futex_unqueue+0x22/0x240 [ 112.394286][ T6698] __bpf_get_stack+0x45b/0xaa0 [ 112.394321][ T6698] ? __pfx___bpf_get_stack+0x10/0x10 [ 112.394359][ T6698] bpf_get_stack+0x33/0x50 [ 112.394382][ T6698] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 112.394403][ T6698] bpf_get_stack_raw_tp+0x1a9/0x220 [ 112.394433][ T6698] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 112.394450][ T6698] bpf_prog_run_pin_on_cpu+0x143/0x470 [ 112.394482][ T6698] bpf_prog_test_run_syscall+0x312/0x4b0 [ 112.394507][ T6698] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 112.394529][ T6698] ? __fget_files+0x2a/0x420 [ 112.394557][ T6698] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 112.394583][ T6698] bpf_prog_test_run+0x2c7/0x340 [ 112.394605][ T6698] __sys_bpf+0x562/0x860 [ 112.394625][ T6698] ? __pfx___sys_bpf+0x10/0x10 [ 112.394664][ T6698] ? rcu_is_watching+0x15/0xb0 [ 112.394698][ T6698] __x64_sys_bpf+0x7c/0x90 [ 112.394725][ T6698] do_syscall_64+0xfa/0xfa0 [ 112.394758][ T6698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.394776][ T6698] ? clear_bhb_loop+0x60/0xb0 [ 112.394798][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.394815][ T6698] RIP: 0033:0x7f2c5518f6c9 [ 112.394831][ T6698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.394845][ T6698] RSP: 002b:00007f2c560c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.394865][ T6698] RAX: ffffffffffffffda RBX: 00007f2c553e5fa0 RCX: 00007f2c5518f6c9 [ 112.394879][ T6698] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 112.394890][ T6698] RBP: 00007f2c55211f91 R08: 0000000000000000 R09: 0000000000000000 [ 112.394901][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.394911][ T6698] R13: 00007f2c553e6038 R14: 00007f2c553e5fa0 R15: 00007ffcaa900e68 [ 112.394942][ T6698] [ 112.660023][ T5824] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 112.793125][ T6702] loop4: detected capacity change from 0 to 512 [ 112.844633][ T6702] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.287: inode has both inline data and extents flags [ 112.865459][ T6702] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.287: couldn't read orphan inode 15 (err -117) [ 112.899717][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.957659][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.