last executing test programs: 8.470431691s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000000040)=""/44, 0x3c) 8.279543752s ago: executing program 1 (id=7): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 8.058379793s ago: executing program 1 (id=8): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prctl$PR_GET_SPECULATION_CTRL(0x34, 0x1000000, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000280)='net/udp\x00') recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast, @in=@multicast1}}, {{@in6=@initdev}}}, &(0x7f0000000480)=0xe8) socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='kmem_cache_free\x00', r6}, 0xfffffd5f) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=@framed={{}, [@map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x91) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000140), 0xfcb8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) 7.398964289s ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000280)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}]}, 0xff, 0x493, &(0x7f0000000640)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 5.819702431s ago: executing program 0 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) removexattr(0x0, 0x0) 5.299947475s ago: executing program 0 (id=10): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 4.931659626s ago: executing program 1 (id=11): unshare(0x6020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(r0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x20) 4.765936352s ago: executing program 0 (id=12): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 4.391958322s ago: executing program 1 (id=13): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x51}, [@call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x80) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 4.391693335s ago: executing program 0 (id=14): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 4.237317117s ago: executing program 0 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b0000010902"], 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 4.047860303s ago: executing program 3 (id=4): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x4622, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="280000000000000029000000390000003b020200000000000000000100000000000000000000000023a93ac3b431131f41d7708b"], 0x28}, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x10}}], 0x28}}], 0x2, 0x0) 3.568298748s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() 2.648163101s ago: executing program 3 (id=16): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e28, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000b8fe8000000000000000000000000000aa4e200e22"], 0x0) 2.486013901s ago: executing program 5 (id=6): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.458753018s ago: executing program 4 (id=17): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x453, 0x200, 0x70bd39, 0xa0000000, "7235e637ebd6"}, 0x18}, 0x1, 0x0, 0x0, 0x404c090}, 0x20000000) 2.233118901s ago: executing program 3 (id=18): r0 = socket(0x10, 0x2, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) ptrace$setopts(0x4200, 0x0, 0x8, 0x56) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x2}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=' \x01\x00'}}) 2.183943597s ago: executing program 2 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.936350895s ago: executing program 5 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) sendmsg$AUDIT_USER_AVC(r3, 0xffffffffffffffff, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r5, 0x0) 1.051336189s ago: executing program 0 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet(0x2, 0x1, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") syz_usb_connect(0x0, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 47.737107ms ago: executing program 1 (id=22): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 46.638125ms ago: executing program 4 (id=23): r0 = socket(0x10, 0x803, 0x0) unshare(0x22020600) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) 0s ago: executing program 5 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x39) write$binfmt_script(r4, &(0x7f0000000080), 0x208e24b) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 83.920171][ T5816] cgroup: Unknown subsys name 'net' [ 84.049683][ T5816] cgroup: Unknown subsys name 'cpuset' [ 84.058510][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.609368][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.841345][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.864131][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.872656][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.897501][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.915773][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.923435][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.934063][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.941305][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.949347][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.956915][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.968350][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.975967][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.986395][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.995576][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.003299][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.022020][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.074713][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.089608][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.097942][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.098468][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.109288][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.119050][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.123224][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.136625][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.144354][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.152524][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.164119][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.165303][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.171626][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.179429][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.192268][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.192927][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.207350][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.222690][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.230603][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.246615][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.769762][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.790658][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.818562][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.889465][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.985341][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.064149][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.125815][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.133496][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.141646][ T5837] bridge_slave_0: entered allmulticast mode [ 91.148963][ T5837] bridge_slave_0: entered promiscuous mode [ 91.203651][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.210939][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.219040][ T5837] bridge_slave_1: entered allmulticast mode [ 91.226073][ T5837] bridge_slave_1: entered promiscuous mode [ 91.261042][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.268266][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.275673][ T5838] bridge_slave_0: entered allmulticast mode [ 91.282699][ T5838] bridge_slave_0: entered promiscuous mode [ 91.339904][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.353241][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.363276][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.371263][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.378992][ T5838] bridge_slave_1: entered allmulticast mode [ 91.387155][ T5838] bridge_slave_1: entered promiscuous mode [ 91.393819][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.401169][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.408601][ T5827] bridge_slave_0: entered allmulticast mode [ 91.416150][ T5827] bridge_slave_0: entered promiscuous mode [ 91.443001][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.450214][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.457548][ T5832] bridge_slave_0: entered allmulticast mode [ 91.464764][ T5832] bridge_slave_0: entered promiscuous mode [ 91.496244][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.503388][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.511744][ T5827] bridge_slave_1: entered allmulticast mode [ 91.519376][ T5827] bridge_slave_1: entered promiscuous mode [ 91.565125][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.572285][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.580410][ T5841] bridge_slave_0: entered allmulticast mode [ 91.596196][ T5841] bridge_slave_0: entered promiscuous mode [ 91.611876][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.620427][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.636134][ T5832] bridge_slave_1: entered allmulticast mode [ 91.643318][ T5832] bridge_slave_1: entered promiscuous mode [ 91.723522][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.737889][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.756891][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.777635][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.785279][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.792481][ T5841] bridge_slave_1: entered allmulticast mode [ 91.800215][ T5841] bridge_slave_1: entered promiscuous mode [ 91.841696][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.870828][ T5837] team0: Port device team_slave_0 added [ 91.880009][ T5837] team0: Port device team_slave_1 added [ 91.888437][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.946475][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.965913][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.036163][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.083128][ T5849] Bluetooth: hci0: command tx timeout [ 92.083129][ T5830] Bluetooth: hci1: command tx timeout [ 92.123608][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.131201][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.157742][ T5830] Bluetooth: hci3: command tx timeout [ 92.163549][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.177951][ T5838] team0: Port device team_slave_0 added [ 92.186668][ T5827] team0: Port device team_slave_0 added [ 92.193862][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.204010][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.230090][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.240845][ T5830] Bluetooth: hci5: command tx timeout [ 92.275118][ T5832] team0: Port device team_slave_0 added [ 92.281182][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.288608][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.296401][ T5839] bridge_slave_0: entered allmulticast mode [ 92.303514][ T5839] bridge_slave_0: entered promiscuous mode [ 92.313331][ T5838] team0: Port device team_slave_1 added [ 92.319187][ T5830] Bluetooth: hci4: command tx timeout [ 92.319198][ T5849] Bluetooth: hci2: command tx timeout [ 92.321578][ T5827] team0: Port device team_slave_1 added [ 92.364971][ T5832] team0: Port device team_slave_1 added [ 92.371210][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.379084][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.386602][ T5839] bridge_slave_1: entered allmulticast mode [ 92.393476][ T5839] bridge_slave_1: entered promiscuous mode [ 92.429675][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.436733][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.462756][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.476554][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.483531][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.510383][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.525155][ T5841] team0: Port device team_slave_0 added [ 92.561981][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.589025][ T5841] team0: Port device team_slave_1 added [ 92.605640][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.612622][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.639074][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.652093][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.659333][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.685566][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.699297][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.718794][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.725937][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.752161][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.811124][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.818514][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.844825][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.871045][ T5837] hsr_slave_0: entered promiscuous mode [ 92.877940][ T5837] hsr_slave_1: entered promiscuous mode [ 92.896208][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.903192][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.930644][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.973533][ T5839] team0: Port device team_slave_0 added [ 93.004494][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.011480][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.046945][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.062163][ T5832] hsr_slave_0: entered promiscuous mode [ 93.069401][ T5832] hsr_slave_1: entered promiscuous mode [ 93.076491][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.084245][ T5832] Cannot create hsr debugfs directory [ 93.091419][ T5839] team0: Port device team_slave_1 added [ 93.135832][ T5827] hsr_slave_0: entered promiscuous mode [ 93.142326][ T5827] hsr_slave_1: entered promiscuous mode [ 93.148852][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.156763][ T5827] Cannot create hsr debugfs directory [ 93.170247][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.177354][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.203697][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.217368][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.224726][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.251557][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.326817][ T5838] hsr_slave_0: entered promiscuous mode [ 93.333278][ T5838] hsr_slave_1: entered promiscuous mode [ 93.340166][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.347899][ T5838] Cannot create hsr debugfs directory [ 93.424846][ T5841] hsr_slave_0: entered promiscuous mode [ 93.431914][ T5841] hsr_slave_1: entered promiscuous mode [ 93.439008][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.447359][ T5841] Cannot create hsr debugfs directory [ 93.572321][ T5839] hsr_slave_0: entered promiscuous mode [ 93.579702][ T5839] hsr_slave_1: entered promiscuous mode [ 93.586848][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.595343][ T5839] Cannot create hsr debugfs directory [ 93.901070][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.930996][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.963086][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.993799][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.051653][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.078504][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.089843][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.113325][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.154221][ T5830] Bluetooth: hci1: command tx timeout [ 94.154309][ T5849] Bluetooth: hci0: command tx timeout [ 94.187248][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.204555][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.233005][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.239847][ T5849] Bluetooth: hci3: command tx timeout [ 94.249551][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.291224][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.316080][ T5849] Bluetooth: hci5: command tx timeout [ 94.338073][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.369890][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.395036][ T5849] Bluetooth: hci2: command tx timeout [ 94.395562][ T5830] Bluetooth: hci4: command tx timeout [ 94.403158][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.419263][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.441834][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.455137][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.462378][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.497966][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.505144][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.572218][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.608964][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.655012][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.666858][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.683626][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.722199][ T5838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.733038][ T5838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.777706][ T5838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.788433][ T5838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.888831][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.941992][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.980825][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.003785][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.011031][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.057932][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.074550][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.081715][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.123240][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.130495][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.149887][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.182230][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.189446][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.258838][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.272863][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.295492][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.302655][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.328054][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.335254][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.353016][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.376251][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.409932][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.417781][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.439675][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.446893][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.472984][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.533521][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.597204][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.604397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.617308][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.624515][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.879748][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.895646][ T5837] veth0_vlan: entered promiscuous mode [ 95.951767][ T5837] veth1_vlan: entered promiscuous mode [ 96.073853][ T5837] veth0_macvtap: entered promiscuous mode [ 96.154558][ T5837] veth1_macvtap: entered promiscuous mode [ 96.168145][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.234787][ T5830] Bluetooth: hci0: command tx timeout [ 96.240273][ T5830] Bluetooth: hci1: command tx timeout [ 96.249293][ T5827] veth0_vlan: entered promiscuous mode [ 96.263266][ T5827] veth1_vlan: entered promiscuous mode [ 96.277845][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.306128][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.314316][ T5830] Bluetooth: hci3: command tx timeout [ 96.330245][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.379659][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.388931][ T5841] veth0_vlan: entered promiscuous mode [ 96.395066][ T5830] Bluetooth: hci5: command tx timeout [ 96.415959][ T5841] veth1_vlan: entered promiscuous mode [ 96.447711][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.457107][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.473526][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.484520][ T5830] Bluetooth: hci4: command tx timeout [ 96.485870][ T5849] Bluetooth: hci2: command tx timeout [ 96.494362][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.518969][ T5827] veth0_macvtap: entered promiscuous mode [ 96.557238][ T5827] veth1_macvtap: entered promiscuous mode [ 96.635297][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.650252][ T117] cfg80211: failed to load regulatory.db [ 96.690989][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.707096][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.720596][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.736137][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.770658][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.805175][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.858490][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.877481][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.893994][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.902768][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.925336][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.933340][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.947661][ T5841] veth0_macvtap: entered promiscuous mode [ 96.990082][ T5841] veth1_macvtap: entered promiscuous mode [ 97.023281][ T5832] veth0_vlan: entered promiscuous mode [ 97.063031][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.064431][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.081804][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.092137][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.105343][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.113199][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.126985][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.157550][ T5832] veth1_vlan: entered promiscuous mode [ 97.165902][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.177015][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.187409][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.198323][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.214981][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.245513][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.259551][ T5832] veth0_macvtap: entered promiscuous mode [ 97.269093][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.278543][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.292571][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301788][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.330255][ T5832] veth1_macvtap: entered promiscuous mode [ 97.438153][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.460589][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.482952][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.493611][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.503739][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.514495][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.525829][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.553440][ T5838] veth0_vlan: entered promiscuous mode [ 97.568090][ T5839] veth0_vlan: entered promiscuous mode [ 97.623886][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.639370][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.649458][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.660795][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.671079][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.682712][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.696801][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.712697][ T5838] veth1_vlan: entered promiscuous mode [ 97.724748][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.744349][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.762376][ T5839] veth1_vlan: entered promiscuous mode [ 97.798992][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.809655][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.821369][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.831008][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.869758][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.894658][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.930798][ T5839] veth0_macvtap: entered promiscuous mode [ 97.978826][ T5937] loop1: detected capacity change from 0 to 512 [ 97.992566][ T5839] veth1_macvtap: entered promiscuous mode [ 98.001767][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.007275][ T5937] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.017034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.023374][ T3419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.042070][ T5937] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.048843][ T3419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.089923][ T5937] EXT4-fs (loop1): 1 truncate cleaned up [ 98.099666][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.133119][ T5838] veth0_macvtap: entered promiscuous mode [ 98.256078][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.278268][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.291917][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.310991][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.337587][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.354803][ T5849] Bluetooth: hci1: command tx timeout [ 98.360716][ T5830] Bluetooth: hci0: command tx timeout [ 98.367409][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.387257][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.398503][ T5849] Bluetooth: hci3: command tx timeout [ 98.412761][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.446707][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.474253][ T5849] Bluetooth: hci5: command tx timeout [ 98.477445][ T5838] veth1_macvtap: entered promiscuous mode [ 98.664953][ T5849] Bluetooth: hci2: command tx timeout [ 98.671236][ T5849] Bluetooth: hci4: command tx timeout [ 98.930918][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.975256][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.001979][ T5943] loop2: detected capacity change from 0 to 512 [ 99.011714][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.032867][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.044228][ T5943] EXT4-fs: Ignoring removed orlov option [ 99.086315][ T5943] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.3: casefold flag without casefold feature [ 99.103985][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.144005][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.167212][ T5943] EXT4-fs (loop2): Remounting filesystem read-only [ 99.184189][ T5943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.197329][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.219849][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.258184][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.737774][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.789662][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.833829][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.890991][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.947582][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.013972][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.050967][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.132436][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.193766][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.224229][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.274105][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.304056][ T29] audit: type=1326 audit(1733433045.203:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 100.354063][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.403638][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.434432][ T29] audit: type=1326 audit(1733433045.233:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 100.477044][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.545534][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.593521][ T29] audit: type=1326 audit(1733433045.233:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5950 comm="syz.0.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 100.672053][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.680178][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.720193][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.751548][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.771596][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.812692][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.843970][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.875336][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.916410][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.937827][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.948258][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.959373][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.970945][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.017165][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.129806][ T5838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.174143][ T5838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.190702][ T5838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.222253][ T29] audit: type=1326 audit(1733433046.123:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 101.243986][ T5838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.244487][ T29] audit: type=1326 audit(1733433046.123:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 101.275100][ T29] audit: type=1326 audit(1733433046.123:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 101.297429][ T29] audit: type=1326 audit(1733433046.123:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 101.320520][ T29] audit: type=1326 audit(1733433046.123:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 101.343893][ T29] audit: type=1326 audit(1733433046.123:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 101.367641][ T29] audit: type=1326 audit(1733433046.123:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243cf7ff19 code=0x7ffc0000 [ 101.489122][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.530748][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.544173][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.551993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.684467][ T5963] loop1: detected capacity change from 0 to 1024 [ 101.869101][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.897305][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.975089][ T117] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.992063][ T5963] EXT4-fs: Ignoring removed orlov option [ 102.002923][ T5963] EXT4-fs (loop1): Test dummy encryption mode enabled [ 102.032909][ T5963] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 102.085600][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.122061][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.178694][ T5963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.403261][ T5977] overlayfs: failed to resolve './file2': -2 [ 102.885393][ T3419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.914308][ T117] usb 1-1: config 0 has no interfaces? [ 102.947761][ T117] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.966400][ T3419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.017224][ T117] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.094260][ T117] usb 1-1: Manufacturer: syz [ 103.212751][ T117] usb 1-1: config 0 descriptor?? [ 103.372602][ T5963] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 103.559154][ T5897] usb 1-1: USB disconnect, device number 2 [ 103.662893][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.492951][ T5998] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.13: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 105.473815][ T6006] loop0: detected capacity change from 0 to 512 [ 105.847242][ T5837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.949014][ T6010] loop5: detected capacity change from 0 to 128 [ 106.144449][ T6006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 106.158282][ T6006] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.307028][ T6016] [ 106.309610][ T6016] ============================= [ 106.315098][ T6016] WARNING: suspicious RCU usage [ 106.320427][ T6016] 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 Not tainted [ 106.328339][ T6016] ----------------------------- [ 106.333215][ T6016] kernel/events/callchain.c:162 suspicious rcu_dereference_check() usage! [ 106.342505][ T6016] [ 106.342505][ T6016] other info that might help us debug this: [ 106.342505][ T6016] [ 106.352844][ T6016] [ 106.352844][ T6016] rcu_scheduler_active = 2, debug_locks = 1 [ 106.361111][ T6016] 1 lock held by syz.1.22/6016: [ 106.366064][ T6016] #0: ffffffff8e1bab80 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x345/0x770 [ 106.377335][ T6016] [ 106.377335][ T6016] stack backtrace: [ 106.383262][ T6016] CPU: 0 UID: 0 PID: 6016 Comm: syz.1.22 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 106.393817][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.403922][ T6016] Call Trace: [ 106.407269][ T6016] [ 106.410236][ T6016] dump_stack_lvl+0x16c/0x1f0 [ 106.414984][ T6016] lockdep_rcu_suspicious+0x210/0x3c0 [ 106.420420][ T6016] get_callchain_entry+0x26d/0x3e0 [ 106.425599][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.431324][ T6016] get_perf_callchain+0xdb/0x760 [ 106.436338][ T6016] ? __pfx_get_perf_callchain+0x10/0x10 [ 106.441983][ T6016] __bpf_get_stack+0x4b0/0xa20 [ 106.446821][ T6016] ? __pfx___bpf_get_stack+0x10/0x10 [ 106.452261][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.457978][ T6016] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 106.463675][ T6016] bpf_get_stack+0x32/0x40 [ 106.468158][ T6016] bpf_get_stack_raw_tp+0x124/0x160 [ 106.473414][ T6016] bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 106.478925][ T6016] bpf_prog_test_run_syscall+0x3b1/0x770 [ 106.484636][ T6016] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 106.490869][ T6016] ? fput+0x67/0x440 [ 106.494828][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.500590][ T6016] ? __bpf_prog_get+0xa0/0x290 [ 106.505412][ T6016] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 106.511639][ T6016] __sys_bpf+0xfc9/0x49c0 [ 106.516040][ T6016] ? __pfx___sys_bpf+0x10/0x10 [ 106.520887][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.526603][ T6016] ? __schedule+0xe60/0x5ad0 [ 106.531287][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.537013][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.542726][ T6016] ? do_futex+0x123/0x350 [ 106.547112][ T6016] ? __pfx_do_futex+0x10/0x10 [ 106.551863][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.557581][ T6016] ? xfd_validate_state+0x5d/0x180 [ 106.562747][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.568456][ T6016] ? rcu_is_watching+0x12/0xc0 [ 106.573298][ T6016] __x64_sys_bpf+0x78/0xc0 [ 106.577780][ T6016] ? srso_alias_return_thunk+0x5/0xfbef5 [ 106.583494][ T6016] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.588757][ T6016] do_syscall_64+0xcd/0x250 [ 106.593327][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.599287][ T6016] RIP: 0033:0x7f4ca9f7ff19 [ 106.603744][ T6016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.623415][ T6016] RSP: 002b:00007f4caacb1058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.631983][ T6016] RAX: ffffffffffffffda RBX: 00007f4caa145fa0 RCX: 00007f4ca9f7ff19 [ 106.640005][ T6016] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 106.648026][ T6016] RBP: 00007f4ca9ff3986 R08: 0000000000000000 R09: 0000000000000000 [ 106.656069][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.664261][ T6016] R13: 0000000000000000 R14: 00007f4caa145fa0 R15: 00007ffebee47ba8 [ 106.672300][ T6016] [ 106.691287][ T6017] syz.5.24: attempt to access beyond end of device [ 106.691287][ T6017] loop5: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 108.690855][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.