last executing test programs: 26.545002529s ago: executing program 0 (id=1): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001400), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) fdatasync(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x0, &(0x7f0000000240)=0x3) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff02) 25.760818602s ago: executing program 0 (id=29): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000700)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000740)=0x8000, 0x12) 22.270748964s ago: executing program 0 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 21.899272031s ago: executing program 32 (id=76): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 4.290449244s ago: executing program 3 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0019000001"], 0x38}}, 0x0) 4.200703697s ago: executing program 3 (id=144): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpgrp(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 4.140736716s ago: executing program 2 (id=145): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x9, 0x2) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 4.003454483s ago: executing program 2 (id=147): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="8b52ef390e9e2300be3a2af70a90873c07e498c1948a73baa5fd2ef0d27381f4997703a87254b2d3d571c31bb2b6d10c2c0134d9e48cd6421e6eee4aea04cfd014f5193718f3b61f6b15dfa3e75b3414fa1d42a4ca016aa453d16e659c1a28c44a0b52cfb5f5db2fbaeb91629342733da34d115166d860d80ddd8501f8e1e132a1048c45cd013e77f51b5878e203a6c1667dca61eddebd1e19392ee5fc21e55f0b19defd45efce8f309d7dbcfac1a2ad869ed1528935d4772b8060d46388e99f621e", 0xc2}, {&(0x7f00000002c0)="bb0318ee883669e71f32479ac5c7cb23a936efa1a33e57abe578eb5269b8aedf47f81ba0ebd878178873a8db7cc9192db0a71d30a3ddb4", 0x37}, {&(0x7f0000000580)="a8598ead7a8948ea2fe5bb6a785716e0dd51360e1efc2c47038158086be972fec092bfc2b1550912d9fe3f6bbfa583696f81acd50663607124f4e74eb9e106d2dc053eb9369cdffe", 0x48}, {&(0x7f00000008c0)="5084765fddfd89353ce70b844de993e5028902fd608d39d848d764fa981806dd602341a099b33ecde5ea01772199353471741cccd3b9c21a03ea03b5048f44bea87ab0677130ccba162c556432767058b97fb68a5c1db610591dae7570a21ead1320aca297d77581c34e8a1392e38660a2f76c8fe4a6d26463f3175ab04f7be36916dcdb7b25fe9de9d83ef743c918d8835347dccede460b72552b944afd2961f2", 0xa1}, {&(0x7f0000001300)="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", 0x1000}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812fe381b6b3c234824a4a4475f9ee81286836e549ff446b0004adc6b16981ea546cd24f", 0x66}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad9785983", 0xfffffe37}, {&(0x7f0000000b80)="8d75938ba9bc695806fede7eee392592a6014e55025d4c6612fbb793e3ed010000000000000007aab6dc2d3668aa974f67dad537a2d75fcac54500000000000000000000000000000000d70f7cae577664b818df8e9b4e81ef2a362d8b04feea468d93805102ab8deb693659820db4e251", 0x71}, {&(0x7f00000003c0)="16045824dd2a94bf2f96ae62898fb4dc037f8a7983d99731c12bbe057986e3b93990468577b6d8b14f2b2e6cb0caf4ae6f8f4f9919129f10973137f8629e263da85977f5a9db524c8792e50093d9f2c6a576f11576a96f8dcea214f62f04", 0x5e}, {&(0x7f0000000640)="230424dec422c5d17b7b04b7e8b50878f33c5e3acaae48bf88c6ffe9fb1dddf4afacfe71ad8e5f70a1c739c04f7a74730dba019da14ef750a2efbdc92e3c36655080bdbaa214923bd3d2d40c3bf9b8a4a6263d1cfdba0d159310c049cfdc7a8da7c48c23031517c21b077f97b5ea2b4583711b986e11edd73e30b1a67d20d446b27425622b7fe0768721129a98ebda9c5d2c3984", 0x94}], 0x6}}], 0x3, 0xc0) 3.750215321s ago: executing program 2 (id=151): r0 = io_uring_setup(0x175c, &(0x7f000009df80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3.469284539s ago: executing program 3 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0019000001"], 0x38}}, 0x0) 3.337622513s ago: executing program 2 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.146535255s ago: executing program 2 (id=157): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) kexec_load(0xc770, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) 2.869259121s ago: executing program 3 (id=161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x0, &(0x7f0000000040)}) setfsgid(0x0) 2.628747393s ago: executing program 3 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000001c0)={0x7, 0x7, 0x3ff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) 2.520212312s ago: executing program 4 (id=164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f00000043c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 2.460830197s ago: executing program 3 (id=165): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000080)={0x1, 0x200009, 0x20000, {r0}}, 0x20) 2.370317742s ago: executing program 5 (id=78): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff02) 2.369093801s ago: executing program 1 (id=166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.132693024s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000fa997e5c9812f836f74c75c2ea0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x50) 2.132472147s ago: executing program 5 (id=168): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 1.995870285s ago: executing program 4 (id=169): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x15}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}]}, 0x4c}}, 0x0) 1.804225374s ago: executing program 4 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 1.706369742s ago: executing program 1 (id=171): r0 = syz_io_uring_setup(0x265, &(0x7f0000000000)={0x0, 0x241f, 0x2, 0x3, 0x227}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x483d, 0x3727, 0x5, &(0x7f0000000100)={[0xffffffffffffffa3]}, 0x8) 725.663525ms ago: executing program 1 (id=172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c0017"], 0x38}}, 0x0) 650.145939ms ago: executing program 4 (id=173): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 629.862638ms ago: executing program 5 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = dup(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000012000100000000000000000000000000000000000000ffff0000000000080000e000000014"], 0x3c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x5, 0x0, 0x2, 0x4, 0x2, 0xd}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) read(0xffffffffffffffff, 0x0, 0x2006) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r3], 0x20}}, 0x0) 426.940099ms ago: executing program 2 (id=175): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x10, r0, 0x59fa3000) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x0, [], 0x0, "75db64cf7310f9"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe85, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000004000000bb7f1a007600feff000020009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x26) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001e80)={'ip6tnl0\x00', &(0x7f0000001e00)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x6, 0x2cd8, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x1, 0x80, 0x5, 0x5018}}) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000017c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, r6) 426.695991ms ago: executing program 4 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, 0x0, 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_io_uring_setup(0x2fc3, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x20008040) 316.957359ms ago: executing program 1 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 151.250192ms ago: executing program 1 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=179): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fremovexattr(r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 58.846399][ T5821] cgroup: Unknown subsys name 'net' [ 58.993772][ T5821] cgroup: Unknown subsys name 'cpuset' [ 59.003772][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.372650][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.218619][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.226869][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.236817][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.237352][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.254081][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.272509][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.285023][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.290731][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.292894][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.309940][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.310027][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.324891][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.325784][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.334714][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.341706][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.347511][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.355771][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.361432][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.376589][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.387618][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.394988][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.403689][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.411422][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.447880][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.456717][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.464260][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.464557][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.494930][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.511571][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.522643][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.754420][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 64.897168][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 64.985938][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.995061][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.002759][ T5836] bridge_slave_0: entered allmulticast mode [ 65.010197][ T5836] bridge_slave_0: entered promiscuous mode [ 65.018421][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 65.043823][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.051087][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.058314][ T5836] bridge_slave_1: entered allmulticast mode [ 65.065484][ T5836] bridge_slave_1: entered promiscuous mode [ 65.124681][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.141936][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.166040][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.173504][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.181284][ T5847] bridge_slave_0: entered allmulticast mode [ 65.187894][ T5847] bridge_slave_0: entered promiscuous mode [ 65.225911][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.233398][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.241112][ T5847] bridge_slave_1: entered allmulticast mode [ 65.247755][ T5847] bridge_slave_1: entered promiscuous mode [ 65.269709][ T5836] team0: Port device team_slave_0 added [ 65.322468][ T5836] team0: Port device team_slave_1 added [ 65.340479][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 65.353678][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.366282][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.385665][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.392937][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.400674][ T5831] bridge_slave_0: entered allmulticast mode [ 65.407447][ T5831] bridge_slave_0: entered promiscuous mode [ 65.427062][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 65.452382][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.462319][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.470560][ T5831] bridge_slave_1: entered allmulticast mode [ 65.477699][ T5831] bridge_slave_1: entered promiscuous mode [ 65.496370][ T5847] team0: Port device team_slave_0 added [ 65.504653][ T5847] team0: Port device team_slave_1 added [ 65.512249][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.520487][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.547961][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.594437][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.602131][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.629102][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.676898][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.703331][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.711258][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.740128][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.752852][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.760008][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.788010][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.802588][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.887530][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.895376][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.903103][ T5832] bridge_slave_0: entered allmulticast mode [ 65.910435][ T5832] bridge_slave_0: entered promiscuous mode [ 65.927593][ T5831] team0: Port device team_slave_0 added [ 65.947897][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.955649][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.963129][ T5833] bridge_slave_0: entered allmulticast mode [ 65.970608][ T5833] bridge_slave_0: entered promiscuous mode [ 65.986090][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.993421][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.001595][ T5832] bridge_slave_1: entered allmulticast mode [ 66.008271][ T5832] bridge_slave_1: entered promiscuous mode [ 66.026303][ T5836] hsr_slave_0: entered promiscuous mode [ 66.033583][ T5836] hsr_slave_1: entered promiscuous mode [ 66.042310][ T5831] team0: Port device team_slave_1 added [ 66.048815][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.057057][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.064505][ T5833] bridge_slave_1: entered allmulticast mode [ 66.071989][ T5833] bridge_slave_1: entered promiscuous mode [ 66.123019][ T5847] hsr_slave_0: entered promiscuous mode [ 66.129403][ T5847] hsr_slave_1: entered promiscuous mode [ 66.136352][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.145197][ T5847] Cannot create hsr debugfs directory [ 66.153705][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.167453][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.231630][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.238645][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.266204][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.280922][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.295924][ T5832] team0: Port device team_slave_0 added [ 66.307684][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.315567][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.343717][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.357398][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.375137][ T5832] team0: Port device team_slave_1 added [ 66.424221][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.432902][ T5840] Bluetooth: hci3: command tx timeout [ 66.435923][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.468660][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.488551][ T5833] team0: Port device team_slave_0 added [ 66.499915][ T5840] Bluetooth: hci4: command tx timeout [ 66.499923][ T5844] Bluetooth: hci0: command tx timeout [ 66.500338][ T5844] Bluetooth: hci1: command tx timeout [ 66.520702][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.528395][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.560063][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.578841][ T5833] team0: Port device team_slave_1 added [ 66.589742][ T5844] Bluetooth: hci2: command tx timeout [ 66.673705][ T5831] hsr_slave_0: entered promiscuous mode [ 66.681511][ T5831] hsr_slave_1: entered promiscuous mode [ 66.687790][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.695488][ T5831] Cannot create hsr debugfs directory [ 66.706939][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.714281][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.740843][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.753613][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.760767][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.786866][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.847387][ T5832] hsr_slave_0: entered promiscuous mode [ 66.854669][ T5832] hsr_slave_1: entered promiscuous mode [ 66.861390][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.869160][ T5832] Cannot create hsr debugfs directory [ 67.001809][ T5833] hsr_slave_0: entered promiscuous mode [ 67.008243][ T5833] hsr_slave_1: entered promiscuous mode [ 67.018116][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.026959][ T5833] Cannot create hsr debugfs directory [ 67.074939][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.113925][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.126993][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.165412][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.241788][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.276063][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.286727][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.322476][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.379165][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.392582][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.408281][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.419369][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.489491][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.514507][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.525552][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.537998][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.618774][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.638753][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.663069][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.675990][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.687595][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.763173][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.781795][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.803952][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.822666][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.830113][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.861988][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.869120][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.885111][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.892454][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.905018][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.915991][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.923281][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.997459][ T5847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.009560][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.028295][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.066235][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.089622][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.096961][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.111116][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.138616][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.146327][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.194088][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.256939][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.302869][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.337337][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.344540][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.366904][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.374325][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.387933][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.395647][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.442208][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.450002][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.482236][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.501845][ T5844] Bluetooth: hci3: command tx timeout [ 68.546627][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.580846][ T5142] Bluetooth: hci0: command tx timeout [ 68.586507][ T5840] Bluetooth: hci1: command tx timeout [ 68.586649][ T5844] Bluetooth: hci4: command tx timeout [ 68.596641][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.664008][ T5844] Bluetooth: hci2: command tx timeout [ 68.746346][ T5847] veth0_vlan: entered promiscuous mode [ 68.786078][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.820524][ T5847] veth1_vlan: entered promiscuous mode [ 68.900980][ T5847] veth0_macvtap: entered promiscuous mode [ 68.945320][ T5847] veth1_macvtap: entered promiscuous mode [ 68.997912][ T5831] veth0_vlan: entered promiscuous mode [ 69.019121][ T5831] veth1_vlan: entered promiscuous mode [ 69.043850][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.058602][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.085062][ T5836] veth0_vlan: entered promiscuous mode [ 69.107560][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.121552][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.130779][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.139519][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.148821][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.175887][ T5836] veth1_vlan: entered promiscuous mode [ 69.204837][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.231846][ T5831] veth0_macvtap: entered promiscuous mode [ 69.251157][ T5832] veth0_vlan: entered promiscuous mode [ 69.271119][ T5831] veth1_macvtap: entered promiscuous mode [ 69.287303][ T5832] veth1_vlan: entered promiscuous mode [ 69.325834][ T5836] veth0_macvtap: entered promiscuous mode [ 69.352127][ T5836] veth1_macvtap: entered promiscuous mode [ 69.363681][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.386735][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.415228][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.427128][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.445242][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.473832][ T5833] veth0_vlan: entered promiscuous mode [ 69.481982][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.492926][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.504504][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.516106][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.525357][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.534452][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.543657][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.561351][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.572115][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.575336][ T5832] veth0_macvtap: entered promiscuous mode [ 69.596573][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.608047][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.618653][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.630157][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.641833][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.666317][ T5832] veth1_macvtap: entered promiscuous mode [ 69.675771][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.688275][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.699991][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.711934][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.726581][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.737720][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.747158][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.756641][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.765753][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.767238][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.792673][ T5833] veth1_vlan: entered promiscuous mode [ 69.838034][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.872051][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.882671][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.894631][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.905272][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.916021][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.928012][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.947471][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.980131][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.991397][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.002796][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.029651][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.039533][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.051273][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.063145][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.171081][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.180106][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.187948][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.197775][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.210055][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.224044][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.275547][ T5833] veth0_macvtap: entered promiscuous mode [ 70.286445][ T5833] veth1_macvtap: entered promiscuous mode [ 70.303523][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.314286][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.324469][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.335306][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.345389][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.356030][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.366068][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.376672][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.386927][ T29] audit: type=1326 audit(1730892263.985:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 70.388083][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.420806][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.431365][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.441750][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.452553][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.462785][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.473515][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.483455][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.489757][ T29] audit: type=1326 audit(1730892263.985:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 70.494041][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.527573][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.542059][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.550949][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.559685][ T29] audit: type=1326 audit(1730892263.995:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 70.582679][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.591633][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.602452][ T5844] Bluetooth: hci3: command tx timeout [ 70.610837][ T29] audit: type=1326 audit(1730892263.995:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 70.634848][ T29] audit: type=1326 audit(1730892263.995:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.2.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 70.660554][ T5844] Bluetooth: hci4: command tx timeout [ 70.661637][ T5840] Bluetooth: hci0: command tx timeout [ 70.665995][ T5844] Bluetooth: hci1: command tx timeout [ 70.706190][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.706893][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 70.714669][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.741183][ T5844] Bluetooth: hci2: command tx timeout [ 70.847314][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.847819][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.862448][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.864874][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.993339][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.005926][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.092369][ T5930] loop2: detected capacity change from 0 to 4096 [ 71.153749][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.167580][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.197878][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.277438][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.278041][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.285455][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.370334][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.395239][ T5941] loop3: detected capacity change from 0 to 1024 [ 71.414982][ T29] audit: type=1800 audit(1730892264.995:7): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 71.435675][ T5941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.676731][ T5949] Process accounting resumed [ 71.685037][ T5941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.692316][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.747087][ T5941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.808652][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 71.835670][ T5956] loop0: detected capacity change from 0 to 128 [ 71.840246][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 71.878744][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.898574][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.905414][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.998676][ T5956] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.018178][ T5956] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.482916][ T5979] netlink: 'syz.3.26': attribute type 39 has an invalid length. [ 72.517887][ T5832] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 72.567170][ T5985] loop3: detected capacity change from 0 to 128 [ 72.595036][ T5832] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 72.661675][ T5844] Bluetooth: hci3: command tx timeout [ 72.669269][ T5832] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.702779][ T5990] syz.3.26: attempt to access beyond end of device [ 72.702779][ T5990] loop3: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 72.717357][ T5832] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 72.734224][ T5832] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 72.748763][ T5844] Bluetooth: hci1: command tx timeout [ 72.750951][ T5142] Bluetooth: hci0: command tx timeout [ 72.754312][ T5844] Bluetooth: hci4: command tx timeout [ 72.767345][ T5977] syz.3.26: attempt to access beyond end of device [ 72.767345][ T5977] loop3: rw=524288, sector=145, nr_sectors = 24 limit=128 [ 72.770679][ T5832] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.806784][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 72.831043][ T5844] Bluetooth: hci2: command tx timeout [ 72.840148][ T5832] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 72.882893][ T5832] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 72.951938][ T5832] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 72.972774][ T5832] EXT4-fs error (device loop0): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 73.028542][ T5998] loop4: detected capacity change from 0 to 512 [ 73.065172][ T5994] netlink: 'syz.2.34': attribute type 10 has an invalid length. [ 73.080210][ T5998] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.35: corrupted xattr block 255: invalid header [ 73.096214][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.103721][ T5998] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 73.104752][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.113504][ T5998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.133481][ T5998] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.35: corrupted xattr block 255: invalid header [ 73.188457][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.195734][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.204181][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.211409][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.231445][ T5994] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 73.249117][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.386686][ T29] audit: type=1326 audit(1730892267.005:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cc57e719 code=0x7ffc0000 [ 73.410226][ T29] audit: type=1326 audit(1730892267.025:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cc57e719 code=0x7ffc0000 [ 73.441093][ T2947] kworker/u8:8: attempt to access beyond end of device [ 73.441093][ T2947] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 73.455720][ T2947] kworker/u8:8: attempt to access beyond end of device [ 73.455720][ T2947] loop3: rw=1, sector=185, nr_sectors = 1 limit=128 [ 73.465174][ T29] audit: type=1326 audit(1730892267.065:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09cc57e719 code=0x7ffc0000 [ 73.469838][ T2947] Buffer I/O error on dev loop3, logical block 185, lost async page write [ 73.548631][ T29] audit: type=1326 audit(1730892267.065:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.4.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cc57e719 code=0x7ffc0000 [ 73.676409][ T6009] Zero length message leads to an empty skb [ 73.817765][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 74.389320][ T6042] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 74.402711][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.410489][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.461771][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.469507][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.477877][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.485385][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.502094][ T6013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 74.510151][ T6042] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 74.519545][ T6013] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 74.675247][ T6013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 74.710326][ T6013] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 74.772781][ T6058] loop4: detected capacity change from 0 to 736 [ 74.885434][ T6013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 74.897271][ T6013] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 74.919781][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 74.946282][ T6013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.985038][ T6013] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 75.081384][ T6013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.087381][ T6013] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 75.386815][ T6087] netlink: 'syz.3.64': attribute type 7 has an invalid length. [ 75.869261][ T5832] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.059530][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.099301][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.139396][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.167204][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.190003][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.201679][ T2925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.220877][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.240891][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.248355][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.278765][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.298927][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.317127][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.327324][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.336113][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.344728][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.352654][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.378979][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.390464][ T2925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.399296][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.410880][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.430138][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.439803][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.447393][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.479741][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.508190][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.529819][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.541295][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.554584][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.570264][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.578666][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.588081][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.608657][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.618160][ T2925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.629404][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.629448][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.629478][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.629503][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.629528][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.629554][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.630404][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.726105][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.768450][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.791635][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.815899][ T2925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.827608][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.852931][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.873463][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 76.943556][ T5884] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 77.105588][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.138599][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.420197][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.450519][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.86'. [ 77.469924][ T2925] bridge_slave_1: left allmulticast mode [ 77.476593][ T2925] bridge_slave_1: left promiscuous mode [ 77.485443][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.598878][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.611107][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.618683][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.650257][ T2925] bridge_slave_0: left allmulticast mode [ 77.655979][ T2925] bridge_slave_0: left promiscuous mode [ 77.665629][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.670087][ T6174] loop4: detected capacity change from 0 to 4096 [ 77.811335][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.819057][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.820057][ T6174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.826581][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.848052][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.849224][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 77.849241][ T29] audit: type=1326 audit(1730892271.395:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 77.856484][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.892056][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.966891][ T29] audit: type=1326 audit(1730892271.405:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.069844][ T29] audit: type=1326 audit(1730892271.405:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.132126][ T29] audit: type=1326 audit(1730892271.405:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.257282][ T29] audit: type=1326 audit(1730892271.405:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.302252][ T29] audit: type=1326 audit(1730892271.405:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.335846][ T29] audit: type=1326 audit(1730892271.405:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.384794][ T29] audit: type=1326 audit(1730892271.405:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.408117][ T29] audit: type=1326 audit(1730892271.405:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.455447][ T29] audit: type=1326 audit(1730892271.405:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.1.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe85277e719 code=0x7ffc0000 [ 78.524173][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.638192][ T6195] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.828886][ T6200] loop1: detected capacity change from 0 to 512 [ 78.848498][ T6200] EXT4-fs: Ignoring removed orlov option [ 78.873675][ T6205] netlink: 64 bytes leftover after parsing attributes in process `syz.3.99'. [ 78.900428][ T6204] syz.3.99[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.900526][ T6204] syz.3.99[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.900900][ T6206] xt_hashlimit: size too large, truncated to 1048576 [ 78.990068][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.000723][ T6200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.044099][ T6200] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.057134][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.125835][ T2925] bond0 (unregistering): Released all slaves [ 79.590652][ T6200] xt_CT: No such helper "pptp" [ 79.969885][ T5840] Bluetooth: hci1: command tx timeout [ 80.690999][ T2925] hsr_slave_0: left promiscuous mode [ 80.749805][ T2925] hsr_slave_1: left promiscuous mode [ 80.756392][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.825992][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.845534][ T2925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.889921][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.997187][ T2925] veth1_macvtap: left promiscuous mode [ 81.039964][ T2925] veth0_macvtap: left promiscuous mode [ 81.066735][ T2925] veth1_vlan: left promiscuous mode [ 81.099523][ T2925] veth0_vlan: left promiscuous mode [ 82.023213][ T5840] Bluetooth: hci1: command tx timeout [ 82.761765][ T51] cfg80211: failed to load regulatory.db [ 84.438295][ T5840] Bluetooth: hci1: command tx timeout [ 86.291668][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 86.509381][ T5844] Bluetooth: hci1: command tx timeout [ 86.583233][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 89.004803][ T6148] chnl_net:caif_netlink_parms(): no params data found [ 89.145219][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.218555][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 89.218573][ T29] audit: type=1326 audit(1730892282.835:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.257450][ T6237] loop2: detected capacity change from 0 to 512 [ 89.319405][ T29] audit: type=1326 audit(1730892282.835:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.391469][ T29] audit: type=1326 audit(1730892282.835:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.415164][ T29] audit: type=1326 audit(1730892282.835:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.418835][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.437829][ T29] audit: type=1326 audit(1730892282.835:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.490871][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.508952][ T29] audit: type=1326 audit(1730892282.835:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.538421][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.547690][ T6148] bridge_slave_0: entered allmulticast mode [ 89.555877][ T6148] bridge_slave_0: entered promiscuous mode [ 89.579796][ T6237] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.583396][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.599878][ T29] audit: type=1326 audit(1730892282.875:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.633356][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.644407][ T6148] bridge_slave_1: entered allmulticast mode [ 89.674251][ T6148] bridge_slave_1: entered promiscuous mode [ 89.682719][ T29] audit: type=1326 audit(1730892282.875:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.758263][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.848529][ T29] audit: type=1326 audit(1730892282.875:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 89.885993][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.940505][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.955654][ T29] audit: type=1326 audit(1730892282.875:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7feea817e719 code=0x7ffc0000 [ 90.055442][ T6148] team0: Port device team_slave_0 added [ 90.094476][ T6148] team0: Port device team_slave_1 added [ 90.114285][ T6259] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 90.281714][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.289154][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.314574][ T6273] loop4: detected capacity change from 0 to 512 [ 90.347853][ T6273] EXT4-fs: Ignoring removed orlov option [ 90.359281][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.399732][ T6273] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.405388][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.429735][ T6273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.462966][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.481731][ T6273] EXT4-fs (loop4): 1 orphan inode deleted [ 90.490236][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.507589][ T6278] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 90.515877][ T6273] EXT4-fs (loop4): 1 truncate cleaned up [ 90.522506][ T6273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.540173][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.545331][ T6273] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 90.547663][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.565268][ T6273] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 90.587943][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.595220][ T6278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.602816][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.610243][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.651250][ T6278] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.701418][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.077862][ T6295] loop4: detected capacity change from 0 to 128 [ 91.181285][ T6148] hsr_slave_0: entered promiscuous mode [ 91.188601][ T6148] hsr_slave_1: entered promiscuous mode [ 91.199202][ T6295] ======================================================= [ 91.199202][ T6295] WARNING: The mand mount option has been deprecated and [ 91.199202][ T6295] and is ignored by this kernel. Remove the mand [ 91.199202][ T6295] option from the mount to silence this warning. [ 91.199202][ T6295] ======================================================= [ 91.240155][ T6148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.248809][ T6148] Cannot create hsr debugfs directory [ 91.415124][ T6295] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 91.419545][ T6304] loop3: detected capacity change from 0 to 512 [ 91.458752][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 91.475160][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 91.489271][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.497189][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.507418][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.522695][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.535832][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.547432][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.559112][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.569375][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.581447][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.612804][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.669119][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 91.726920][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 92.167535][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 92.175327][ T5885] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 92.230433][ T5885] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.614005][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.131'. [ 92.753818][ T6148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.796899][ T6148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.806009][ T6322] loop4: detected capacity change from 0 to 512 [ 92.820613][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.891883][ T6148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.926137][ T6148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.942234][ T6322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.984753][ T6322] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.022105][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.059084][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.139452][ T6148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.150123][ T6148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.167887][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.175079][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.183910][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.191104][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.993211][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.027804][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.041846][ T6347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 94.258683][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 94.258710][ T29] audit: type=1326 audit(1730892287.865:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.355354][ T29] audit: type=1326 audit(1730892287.865:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.454100][ T29] audit: type=1326 audit(1730892287.875:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.519668][ T29] audit: type=1326 audit(1730892287.875:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.607967][ T6148] veth0_vlan: entered promiscuous mode [ 94.625570][ T29] audit: type=1326 audit(1730892287.875:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.680794][ T6148] veth1_vlan: entered promiscuous mode [ 94.689921][ T29] audit: type=1326 audit(1730892287.875:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.735869][ T29] audit: type=1326 audit(1730892287.875:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.778178][ T6148] veth0_macvtap: entered promiscuous mode [ 94.789340][ T6148] veth1_macvtap: entered promiscuous mode [ 94.798669][ T29] audit: type=1326 audit(1730892287.875:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.852683][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.886587][ T29] audit: type=1326 audit(1730892287.885:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.922403][ T29] audit: type=1326 audit(1730892287.885:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6354 comm="syz.3.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f765e57e719 code=0x7ffc0000 [ 94.930102][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.976662][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.999545][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.015666][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.027548][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.038440][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.051276][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.085301][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.095623][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.106642][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.117009][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.143848][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.159124][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.195730][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.205779][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.233041][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.254513][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.305119][ T6377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.153'. [ 95.371390][ T6148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.384064][ T6148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.393210][ T6148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.402059][ T6148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.599001][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.657493][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.758428][ T6396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.163'. [ 95.782021][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.817076][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.332698][ T6410] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 96.374323][ T6410] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 96.417884][ T6410] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 97.918872][ T6423] hsr_slave_0 (unregistering): left promiscuous mode [ 98.441311][ T6439] [ 98.443690][ T6439] ============================= [ 98.448540][ T6439] [ BUG: Invalid wait context ] [ 98.453408][ T6439] 6.12.0-rc6-next-20241106-syzkaller #0 Not tainted [ 98.460001][ T6439] ----------------------------- [ 98.464836][ T6439] syz.2.175/6439 is trying to lock: [ 98.470010][ T6439] ffff8880629a3a00 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 98.478878][ T6439] other info that might help us debug this: [ 98.484747][ T6439] context-{5:5} [ 98.488182][ T6439] 2 locks held by syz.2.175/6439: [ 98.493190][ T6439] #0: ffff8880b863e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 98.503185][ T6439] #1: ffffffff8e93c160 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 98.512741][ T6439] stack backtrace: [ 98.516445][ T6439] CPU: 0 UID: 0 PID: 6439 Comm: syz.2.175 Not tainted 6.12.0-rc6-next-20241106-syzkaller #0 [ 98.526571][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.536728][ T6439] Call Trace: [ 98.540002][ T6439] [ 98.542942][ T6439] dump_stack_lvl+0x241/0x360 [ 98.547633][ T6439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.552831][ T6439] ? __pfx__printk+0x10/0x10 [ 98.557405][ T6439] ? fixup_exception+0x110a/0x1d10 [ 98.562504][ T6439] __lock_acquire+0x15a8/0x2100 [ 98.567340][ T6439] lock_acquire+0x1ed/0x550 [ 98.571822][ T6439] ? trie_delete_elem+0x96/0x6a0 [ 98.576742][ T6439] ? __pfx_lock_acquire+0x10/0x10 [ 98.581748][ T6439] ? __lock_acquire+0x1397/0x2100 [ 98.586756][ T6439] _raw_spin_lock_irqsave+0xd5/0x120 [ 98.592040][ T6439] ? trie_delete_elem+0x96/0x6a0 [ 98.596992][ T6439] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 98.602909][ T6439] ? __pfx_lock_acquire+0x10/0x10 [ 98.607934][ T6439] ? bpf_trace_run4+0x244/0x590 [ 98.612785][ T6439] trie_delete_elem+0x96/0x6a0 [ 98.617556][ T6439] ? __pfx___cant_migrate+0x10/0x10 [ 98.623284][ T6439] ? bpf_trace_run4+0x244/0x590 [ 98.628134][ T6439] bpf_prog_2c29ac5cdc6b1842+0x43/0x47 [ 98.633586][ T6439] bpf_trace_run4+0x334/0x590 [ 98.638255][ T6439] ? rcu_read_lock_sched_held+0x8d/0x130 [ 98.643870][ T6439] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 98.649941][ T6439] ? __pfx_bpf_trace_run4+0x10/0x10 [ 98.655144][ T6439] ? __pfx_probe_sched_switch+0x10/0x10 [ 98.660685][ T6439] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 98.667343][ T6439] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 98.673395][ T6439] __traceiter_sched_switch+0x98/0xd0 [ 98.678748][ T6439] __schedule+0x22bb/0x4c30 [ 98.683238][ T6439] ? sched_clock_cpu+0x76/0x490 [ 98.688091][ T6439] ? __pfx___schedule+0x10/0x10 [ 98.692924][ T6439] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.698900][ T6439] ? preempt_schedule+0xe1/0xf0 [ 98.703737][ T6439] preempt_schedule_common+0x84/0xd0 [ 98.709005][ T6439] preempt_schedule+0xe1/0xf0 [ 98.713666][ T6439] ? __pfx_preempt_schedule+0x10/0x10 [ 98.719091][ T6439] ? lockdep_hardirqs_on+0x99/0x150 [ 98.724311][ T6439] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 98.730199][ T6439] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 98.736530][ T6439] preempt_schedule_thunk+0x1a/0x30 [ 98.741718][ T6439] try_to_wake_up+0x9c3/0x1470 [ 98.746474][ T6439] ? __pfx_try_to_wake_up+0x10/0x10 [ 98.751650][ T6439] ? __pfx_lock_release+0x10/0x10 [ 98.756679][ T6439] ? plist_del+0x3f1/0x410 [ 98.761079][ T6439] ? do_raw_spin_unlock+0x13c/0x8b0 [ 98.766277][ T6439] wake_up_q+0xc8/0x120 [ 98.770429][ T6439] futex_wake+0x523/0x5c0 [ 98.774739][ T6439] ? __pfx_futex_wake+0x10/0x10 [ 98.779581][ T6439] do_futex+0x392/0x560 [ 98.783720][ T6439] ? bpf_raw_tracepoint_open+0x18b/0x1f0 [ 98.789338][ T6439] ? __pfx_do_futex+0x10/0x10 [ 98.794019][ T6439] ? __pfx___sys_bpf+0x10/0x10 [ 98.798788][ T6439] __se_sys_futex+0x3f9/0x480 [ 98.803554][ T6439] ? __pfx___se_sys_futex+0x10/0x10 [ 98.808760][ T6439] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.815171][ T6439] ? do_syscall_64+0x100/0x230 [ 98.820010][ T6439] ? __x64_sys_futex+0x21/0xf0 [ 98.824758][ T6439] do_syscall_64+0xf3/0x230 [ 98.829246][ T6439] ? clear_bhb_loop+0x35/0x90 [ 98.833931][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.839858][ T6439] RIP: 0033:0x7feea817e719 [ 98.844255][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.863843][ T6439] RSP: 002b:00007feea8ff70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 98.872254][ T6439] RAX: ffffffffffffffda RBX: 00007feea8336138 RCX: 00007feea817e719 [ 98.880208][ T6439] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feea833613c [ 98.888156][ T6439] RBP: 00007feea8336130 R08: 7fffffffffffffff R09: 0000000000000000 [ 98.896123][ T6439] R10: 0000000000000009 R11: 0000000000000246 R12: 00007feea833613c [ 98.904086][ T6439] R13: 0000000000000000 R14: 00007ffe233c6fa0 R15: 00007ffe233c7088 [ 98.912070][ T6439]