last executing test programs: 3.588458181s ago: executing program 3 (id=228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60", @ANYRES32=0x41424344, @ANYBLOB], 0x0) 3.451992326s ago: executing program 3 (id=229): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000001100)) 3.414027228s ago: executing program 3 (id=231): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001480)={0x100, 0x1b, 0x2, 0x70bd29, 0x25dfdbff, "", [@nested={0xe1, 0x56, 0x0, 0x1, [@typed={0x14, 0xb4, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0xbe}, @generic="d830ef56770b77f9d6657da9235f126871532a91f35c8adf5db200e005f1360e8e448c75264f8cfd4f148db77c23a3e30abe45a2da5cb428e6228d78ea135fc71108e736e27ef9dd09cd658f0a027ccfc851c21c58f186174d7124a5e28f4eed6dd02d64e1cfb9143387f7518b9116b707d8dcc47bd28202c810a4c501d0910b1055e19aa3e6484b93ae", @typed={0x8, 0xbc, 0x0, 0x0, @uid}, @generic="2c5d49a836c5802cbd47c9c6419ee78a531d12e8aaefa34c000315bc53fc6f7ab166e755b6329ba0b732df77aa3a85", @nested={0x4, 0x101}]}, @nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @fd}]}]}, 0x100}], 0x1}, 0x0) 3.188029657s ago: executing program 3 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.10949124s ago: executing program 3 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3b, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 3.023500634s ago: executing program 3 (id=237): mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000001980)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x7, 0x2, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x80, 0x3ff, 0x3}}) r2 = openat2(0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x9a, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0c000000030000f707c721000800000008000400", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="01000000040000000400"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) pause() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r4 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd733, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x10007ffffffff}, 0x18) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r4, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.765939086s ago: executing program 2 (id=251): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80c1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.709145479s ago: executing program 1 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5ff, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 1.543938485s ago: executing program 2 (id=255): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setfsgid(0xee00) socket(0x2, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffff01000000c1"], 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000c00)={r5, 0x6, 0xd700, 0x1}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x27, 0x2, 0x26d4, 0x3, 0xc, "1d295d89e3ff1a9e30cfbe022a00002073cf47", 0xffff, 0xd}) 1.516878397s ago: executing program 0 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3b, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 1.44593043s ago: executing program 1 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.124066473s ago: executing program 1 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.103176674s ago: executing program 0 (id=259): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b000100"], 0x110}}, 0x40040) 1.032339577s ago: executing program 2 (id=260): syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 904.106512ms ago: executing program 1 (id=261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 903.867393ms ago: executing program 2 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 768.972558ms ago: executing program 1 (id=263): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="08000000001f009e", 0x8}], 0x1}}], 0x2, 0x4000) 753.608529ms ago: executing program 2 (id=264): creat(&(0x7f0000000100)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x2000, 0x0) 640.125554ms ago: executing program 0 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_ringparam={0x11, 0x200, 0x7ff, 0x80, 0xff, 0xd, 0x7, 0x7, 0x9}}) 568.020477ms ago: executing program 2 (id=266): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) fsopen(0x0, 0x1) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80400) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x121081, 0x0) bind$802154_raw(r1, &(0x7f00000005c0)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, 0x0}, 0x20) 567.748487ms ago: executing program 1 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000000000), 0x80) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf, 0x5, 0x8, 0x1, 0xc, 0xc1ba2cb}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48801}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000000040)=0x10040a4, 0x4) sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/127, 0xffffffffffffff02}, 0xdb30}], 0x1, 0x40002040, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 468.642681ms ago: executing program 0 (id=268): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) 176.826473ms ago: executing program 0 (id=269): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x2) 0s ago: executing program 0 (id=270): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a00000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 66.793133][ T5771] cgroup: Unknown subsys name 'net' [ 66.952423][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.271138][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.874918][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.886891][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.906282][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.915556][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.926693][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.936379][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.991129][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.999696][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.008942][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.019342][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.027411][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.035705][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.044049][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.053512][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.061163][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.068311][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.086327][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.108728][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.125573][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.148375][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.156085][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.164142][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.173470][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.182121][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.462866][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 70.526750][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 70.615008][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.622369][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.630960][ T5780] bridge_slave_0: entered allmulticast mode [ 70.638387][ T5780] bridge_slave_0: entered promiscuous mode [ 70.647054][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.654182][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.661561][ T5780] bridge_slave_1: entered allmulticast mode [ 70.668394][ T5780] bridge_slave_1: entered promiscuous mode [ 70.751572][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.781935][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.789325][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.796803][ T5784] bridge_slave_0: entered allmulticast mode [ 70.803384][ T5784] bridge_slave_0: entered promiscuous mode [ 70.813149][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.854395][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.861810][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.869452][ T5784] bridge_slave_1: entered allmulticast mode [ 70.876536][ T5784] bridge_slave_1: entered promiscuous mode [ 70.899499][ T5780] team0: Port device team_slave_0 added [ 70.960059][ T5780] team0: Port device team_slave_1 added [ 70.992853][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.021778][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.029198][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.055585][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.067581][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 71.081264][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.102803][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 71.112385][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.119634][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.145602][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.211694][ T5784] team0: Port device team_slave_0 added [ 71.254296][ T5784] team0: Port device team_slave_1 added [ 71.293389][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.299973][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.325112][ T5780] hsr_slave_0: entered promiscuous mode [ 71.332086][ T5780] hsr_slave_1: entered promiscuous mode [ 71.346988][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.354054][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.380171][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.421264][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.428509][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.455328][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.511126][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.518525][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.525785][ T5783] bridge_slave_0: entered allmulticast mode [ 71.534046][ T5783] bridge_slave_0: entered promiscuous mode [ 71.562660][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.569945][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.577525][ T5785] bridge_slave_0: entered allmulticast mode [ 71.584178][ T5785] bridge_slave_0: entered promiscuous mode [ 71.603364][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.610756][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.618341][ T5783] bridge_slave_1: entered allmulticast mode [ 71.624949][ T5783] bridge_slave_1: entered promiscuous mode [ 71.650987][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.658192][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.665360][ T5785] bridge_slave_1: entered allmulticast mode [ 71.672470][ T5785] bridge_slave_1: entered promiscuous mode [ 71.735121][ T5784] hsr_slave_0: entered promiscuous mode [ 71.742441][ T5784] hsr_slave_1: entered promiscuous mode [ 71.748720][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.757320][ T5784] Cannot create hsr debugfs directory [ 71.773297][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.785374][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.804117][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.840528][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.913615][ T5783] team0: Port device team_slave_0 added [ 71.941393][ T5785] team0: Port device team_slave_0 added [ 71.951046][ T5785] team0: Port device team_slave_1 added [ 71.959189][ T5783] team0: Port device team_slave_1 added [ 72.012135][ T5781] Bluetooth: hci0: command tx timeout [ 72.035161][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.042397][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.068942][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.086236][ T5781] Bluetooth: hci1: command tx timeout [ 72.112478][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.120009][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.146871][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.165690][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.173351][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.199475][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.216114][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.223118][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.249619][ T51] Bluetooth: hci3: command tx timeout [ 72.250907][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.255297][ T5781] Bluetooth: hci2: command tx timeout [ 72.388617][ T5783] hsr_slave_0: entered promiscuous mode [ 72.394888][ T5783] hsr_slave_1: entered promiscuous mode [ 72.401100][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.408851][ T5783] Cannot create hsr debugfs directory [ 72.418050][ T5785] hsr_slave_0: entered promiscuous mode [ 72.424157][ T5785] hsr_slave_1: entered promiscuous mode [ 72.430939][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.438647][ T5785] Cannot create hsr debugfs directory [ 72.511346][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.548882][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.588750][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.598846][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.737587][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.774906][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.785000][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.797120][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.932788][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.946243][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.961574][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.986959][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.005334][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.090810][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.102437][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.114135][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.124288][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.140705][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.163543][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.170898][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.200896][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.208202][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.232234][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.279306][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.311799][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.318961][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.353762][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.360971][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.494199][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.553619][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.620984][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.628246][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.671646][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.683269][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.690530][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.754139][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.772969][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.780157][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.827739][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.834924][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.875793][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.053744][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.072453][ T5780] veth0_vlan: entered promiscuous mode [ 74.087367][ T5781] Bluetooth: hci0: command tx timeout [ 74.119137][ T5780] veth1_vlan: entered promiscuous mode [ 74.166409][ T5781] Bluetooth: hci1: command tx timeout [ 74.255327][ T5780] veth0_macvtap: entered promiscuous mode [ 74.293182][ T5780] veth1_macvtap: entered promiscuous mode [ 74.326589][ T5781] Bluetooth: hci2: command tx timeout [ 74.332071][ T5781] Bluetooth: hci3: command tx timeout [ 74.345074][ T5784] veth0_vlan: entered promiscuous mode [ 74.385792][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.429287][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.439407][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.452608][ T5784] veth1_vlan: entered promiscuous mode [ 74.478537][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.489254][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.498954][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.507821][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.532739][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.602029][ T5784] veth0_macvtap: entered promiscuous mode [ 74.643699][ T5784] veth1_macvtap: entered promiscuous mode [ 74.661097][ T5783] veth0_vlan: entered promiscuous mode [ 74.699463][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.718132][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.728797][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.737407][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.750342][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.774293][ T5783] veth1_vlan: entered promiscuous mode [ 74.802290][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.813849][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.826062][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.858671][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.873516][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.882369][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.891753][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.911788][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.934956][ T5785] veth0_vlan: entered promiscuous mode [ 74.935324][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.992651][ T5785] veth1_vlan: entered promiscuous mode [ 75.003723][ T5783] veth0_macvtap: entered promiscuous mode [ 75.050999][ T5783] veth1_macvtap: entered promiscuous mode [ 75.131738][ T5785] veth0_macvtap: entered promiscuous mode [ 75.177868][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.189313][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.200711][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.217022][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.230523][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.244553][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.247494][ T5785] veth1_macvtap: entered promiscuous mode [ 75.267816][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.347937][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.364858][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.376306][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.396126][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.407928][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.435304][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.437678][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.455244][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.461200][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.477688][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.500972][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.524311][ T5870] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6'. [ 75.533891][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.540382][ T5870] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6'. [ 75.546677][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.575669][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.595813][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.611872][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.622932][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.632392][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.683402][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.708212][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.718677][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.730418][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.746240][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.758866][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.777748][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.850693][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.876394][ T5876] syz.3.8[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.885984][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.893857][ T5876] loop3: detected capacity change from 0 to 512 [ 75.894726][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.939719][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.988029][ T5876] EXT4-fs error (device loop3): ext4_xattr_inode_iget:444: inode #11: comm syz.3.8: iget: bad extra_isize 90 (inode size 256) [ 76.024668][ T5876] EXT4-fs (loop3): Remounting filesystem read-only [ 76.064846][ T5876] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.101026][ T5876] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 76.115885][ T5876] EXT4-fs (loop3): 1 orphan inode deleted [ 76.125251][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.167011][ T5781] Bluetooth: hci0: command tx timeout [ 76.246415][ T5781] Bluetooth: hci1: command tx timeout [ 76.299974][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.343346][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.394576][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.397598][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.412377][ T5781] Bluetooth: hci3: command tx timeout [ 76.417947][ T51] Bluetooth: hci2: command tx timeout [ 76.427925][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.455168][ T5884] loop1: detected capacity change from 0 to 128 [ 76.509494][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.530420][ T5884] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.546657][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.577196][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.598761][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.661339][ T5884] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.712404][ T5886] dns_resolver: Unsupported content type (231) [ 77.397045][ T5901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14'. [ 77.962889][ T5897] loop1: detected capacity change from 0 to 32768 [ 78.151170][ T5911] loop1: detected capacity change from 0 to 512 [ 78.172674][ T5907] xt_hashlimit: size too large, truncated to 1048576 [ 78.256535][ T51] Bluetooth: hci0: command tx timeout [ 78.269074][ T5911] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.17: iget: bad extra_isize 90 (inode size 256) [ 78.327409][ T51] Bluetooth: hci1: command tx timeout [ 78.343743][ T5911] EXT4-fs (loop1): Remounting filesystem read-only [ 78.387140][ T5911] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 78.420269][ T5911] EXT4-fs (loop1): 1 orphan inode deleted [ 78.457243][ T5911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.490521][ T51] Bluetooth: hci2: command tx timeout [ 78.496184][ T5781] Bluetooth: hci3: command tx timeout [ 78.752180][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.114611][ T5920] loop2: detected capacity change from 0 to 512 [ 79.126049][ T5920] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.140833][ T5920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.184559][ T5920] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.19: inode has both inline data and extents flags [ 79.200216][ T5920] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.19: couldn't read orphan inode 15 (err -117) [ 79.214860][ T5920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.604800][ T5927] loop0: detected capacity change from 0 to 256 [ 79.653699][ T5927] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.659153][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.831375][ T27] audit: type=1800 audit(1764533801.320:2): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 79.898422][ T5932] process 'syz.2.26' launched './file0' with NULL argv: empty string added [ 80.176644][ T27] audit: type=1326 audit(1764533801.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 80.248183][ T27] audit: type=1326 audit(1764533801.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.160114][ T27] audit: type=1326 audit(1764533801.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.246701][ T27] audit: type=1326 audit(1764533801.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.269163][ T27] audit: type=1326 audit(1764533801.640:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.294606][ T27] audit: type=1326 audit(1764533801.640:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.322126][ T27] audit: type=1326 audit(1764533801.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.346585][ T27] audit: type=1326 audit(1764533801.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.391683][ T27] audit: type=1326 audit(1764533801.640:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 81.541585][ T5944] loop2: detected capacity change from 0 to 512 [ 81.548444][ T788] cfg80211: failed to load regulatory.db [ 81.648766][ T5944] EXT4-fs error (device loop2): ext4_xattr_inode_iget:444: inode #11: comm syz.2.30: iget: bad extra_isize 90 (inode size 256) [ 81.670474][ T5944] EXT4-fs (loop2): Remounting filesystem read-only [ 81.677923][ T5944] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 81.690001][ T5944] EXT4-fs (loop2): 1 orphan inode deleted [ 81.701283][ T5944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.929000][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.221447][ T5954] loop1: detected capacity change from 0 to 1024 [ 82.277693][ T5954] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 82.304590][ T5954] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.337224][ T5954] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.346817][ T5954] EXT4-fs (loop1): orphan cleanup on readonly fs [ 82.391376][ T5954] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.35: Inode bitmap for bg 0 marked uninitialized [ 82.477418][ T5954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.540972][ T5954] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 82.681059][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.741667][ T5952] loop2: detected capacity change from 0 to 32768 [ 82.839893][ T5952] loop2: p9 p11 p16 [ 82.935569][ T5961] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 82.964918][ T5961] Cannot find add_set index 0 as target [ 84.396585][ T5972] loop3: detected capacity change from 0 to 128 [ 84.430351][ T5972] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.445411][ T5972] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.691091][ T2976] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 85.016367][ T5991] mmap: syz.1.50 (5991) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.244147][ T5989] loop3: detected capacity change from 0 to 32768 [ 85.298189][ T5989] loop3: p9 p11 p16 [ 85.390778][ T27] audit: type=1326 audit(1764533806.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.426266][ T27] audit: type=1326 audit(1764533806.890:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.491430][ T27] audit: type=1326 audit(1764533806.890:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.555107][ T27] audit: type=1326 audit(1764533806.890:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.619225][ T27] audit: type=1326 audit(1764533806.890:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.661456][ T6008] loop0: detected capacity change from 0 to 2048 [ 85.668869][ T27] audit: type=1326 audit(1764533806.890:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.696954][ T27] audit: type=1326 audit(1764533806.890:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.730668][ T27] audit: type=1326 audit(1764533806.890:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 85.774154][ T6008] Alternate GPT is invalid, using primary GPT. [ 85.781376][ T6008] loop0: p2 p3 p7 [ 85.793168][ T6010] loop2: detected capacity change from 0 to 512 [ 85.815526][ T6010] ======================================================= [ 85.815526][ T6010] WARNING: The mand mount option has been deprecated and [ 85.815526][ T6010] and is ignored by this kernel. Remove the mand [ 85.815526][ T6010] option from the mount to silence this warning. [ 85.815526][ T6010] ======================================================= [ 85.914768][ T6010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.927890][ T6010] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.960798][ T6010] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #2: comm syz.2.60: corrupted inode contents [ 85.979462][ T6010] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #2: comm syz.2.60: mark_inode_dirty error [ 85.995013][ T6010] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #2: comm syz.2.60: corrupted inode contents [ 86.071549][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.232728][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 87.253256][ T6025] netlink: 'syz.1.63': attribute type 3 has an invalid length. [ 87.449297][ T6030] veth0: entered promiscuous mode [ 87.476533][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 88.037900][ T6049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.126978][ T6050] loop1: detected capacity change from 0 to 1024 [ 88.516081][ T6050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.926196][ T6050] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.033376][ T6050] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.74: lblock 3 mapped to illegal pblock 3 (length 3) [ 89.081593][ T6050] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 89.099752][ T6050] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.099752][ T6050] [ 89.155340][ T11] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 89.193152][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 89.214085][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 89.214085][ T11] [ 89.233544][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.512726][ T6073] veth0: entered promiscuous mode [ 89.536811][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 89.711960][ T27] audit: type=1326 audit(1764533811.210:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 89.762806][ T27] audit: type=1326 audit(1764533811.240:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 90.151976][ T6091] loop3: detected capacity change from 0 to 512 [ 90.205652][ T6091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.241277][ T6091] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.281293][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 90.291891][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 90.332221][ T6091] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 90.342329][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 90.361174][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.92'. [ 90.371456][ T6091] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 90.390118][ T6091] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.390118][ T6091] [ 90.400005][ T6091] EXT4-fs (loop3): Total free blocks count 0 [ 90.411505][ T6091] EXT4-fs (loop3): Free/Dirty block details [ 90.431747][ T6091] EXT4-fs (loop3): free_blocks=65280 [ 90.437428][ T6091] EXT4-fs (loop3): dirty_blocks=2 [ 90.443472][ T6091] EXT4-fs (loop3): Block reservation details [ 90.451982][ T6091] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 90.474740][ T6107] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 90.560969][ T6107] team0: Port device dummy0 added [ 90.577217][ T6109] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 90.582778][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.654324][ T6109] team0: Port device dummy0 removed [ 90.881908][ T6124] veth0: entered promiscuous mode [ 90.908267][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 90.939972][ T6129] loop1: detected capacity change from 0 to 128 [ 91.183577][ T6133] netlink: 88 bytes leftover after parsing attributes in process `syz.3.99'. [ 91.242753][ T6126] lo speed is unknown, defaulting to 1000 [ 91.262303][ T6126] lo speed is unknown, defaulting to 1000 [ 91.272937][ T6126] lo speed is unknown, defaulting to 1000 [ 91.294316][ T6126] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.333512][ T6126] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.438025][ T6126] lo speed is unknown, defaulting to 1000 [ 91.440339][ T6126] lo speed is unknown, defaulting to 1000 [ 91.441803][ T6126] lo speed is unknown, defaulting to 1000 [ 91.475505][ T6126] lo speed is unknown, defaulting to 1000 [ 91.644585][ T6146] loop0: detected capacity change from 0 to 2048 [ 91.668619][ T6146] loop0: p1 < > p4 [ 91.691890][ T6146] loop0: p4 size 8388608 extends beyond EOD, truncated [ 91.713913][ T6145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.849023][ T6145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.960688][ T6145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.058369][ T6145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.080424][ T6155] loop0: detected capacity change from 0 to 1024 [ 92.081470][ T6155] EXT4-fs: Ignoring removed nobh option [ 92.118115][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.171523][ T6155] netlink: '+}[@': attribute type 4 has an invalid length. [ 92.171549][ T6155] netlink: 152 bytes leftover after parsing attributes in process `+}[@'. [ 92.209538][ T6155] .`: renamed from bond0 (while UP) [ 92.323691][ T6145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.364728][ T6145] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.381724][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.414826][ T6145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.474675][ T6145] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.667843][ T6162] loop1: detected capacity change from 0 to 8192 [ 92.703523][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 92.703539][ T27] audit: type=1800 audit(1764533814.200:31): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.111" name="file2" dev="loop1" ino=1048594 res=0 errno=0 [ 92.748869][ T6162] syz.1.111: attempt to access beyond end of device [ 92.748869][ T6162] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 92.778629][ T6162] Buffer I/O error on dev loop1, logical block 57847, async page read [ 92.791084][ T6162] syz.1.111: attempt to access beyond end of device [ 92.791084][ T6162] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 92.806435][ T6162] Buffer I/O error on dev loop1, logical block 57847, async page read [ 92.829512][ T6162] syz.1.111: attempt to access beyond end of device [ 92.829512][ T6162] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 92.873538][ T6178] Process accounting resumed [ 92.882429][ T6162] Buffer I/O error on dev loop1, logical block 57847, async page read [ 92.917544][ T6162] syz.1.111: attempt to access beyond end of device [ 92.917544][ T6162] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 92.942423][ T27] audit: type=1326 audit(1764533814.440:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 92.985126][ T6162] Buffer I/O error on dev loop1, logical block 57847, async page read [ 92.996303][ T27] audit: type=1326 audit(1764533814.440:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.036107][ T6162] syz.1.111: attempt to access beyond end of device [ 93.036107][ T6162] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 93.040515][ T27] audit: type=1326 audit(1764533814.440:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.077615][ T27] audit: type=1326 audit(1764533814.440:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.095969][ T6162] Buffer I/O error on dev loop1, logical block 57847, async page read [ 93.142428][ T6162] syz.1.111: attempt to access beyond end of device [ 93.142428][ T6162] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 93.143428][ T6187] syz.0.123[6187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.166121][ T27] audit: type=1326 audit(1764533814.440:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.181248][ T6162] Buffer I/O error on dev loop1, logical block 57847, async page read [ 93.209455][ T6187] syz.0.123[6187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.223550][ T27] audit: type=1326 audit(1764533814.440:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.256111][ T6162] syz.1.111: attempt to access beyond end of device [ 93.256111][ T6162] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 93.263164][ T27] audit: type=1326 audit(1764533814.440:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.272344][ T6190] syz.3.124[6190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.294380][ T27] audit: type=1326 audit(1764533814.440:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.294428][ T27] audit: type=1326 audit(1764533814.440:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 93.320996][ T6162] Buffer I/O error on dev loop1, logical block 57847, async page read [ 93.342470][ T6190] syz.3.124[6190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.505706][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 93.531809][ T6193] netlink: 196 bytes leftover after parsing attributes in process `syz.3.126'. [ 93.543156][ T6193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 93.558137][ T6193] netlink: 196 bytes leftover after parsing attributes in process `syz.3.126'. [ 93.693231][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.130'. [ 93.819680][ T6207] syz.3.132 uses obsolete (PF_INET,SOCK_PACKET) [ 93.841000][ T6210] netlink: 4124 bytes leftover after parsing attributes in process `syz.1.134'. [ 93.851583][ T6210] openvswitch: netlink: Flow key attr not present in new flow. [ 94.339160][ T6235] loop1: detected capacity change from 0 to 1024 [ 94.347464][ T6235] EXT4-fs: Ignoring removed orlov option [ 94.366759][ T6235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.010238][ T6257] loop3: detected capacity change from 0 to 512 [ 95.050628][ T6257] FAT-fs (loop3): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1) [ 95.153355][ T6263] loop0: detected capacity change from 0 to 512 [ 95.203563][ T6263] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 95.254732][ T6263] EXT4-fs (loop0): orphan cleanup on readonly fs [ 95.269279][ T6263] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.304441][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.321887][ T6263] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 95.389800][ T6263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.155: bg 0: block 40: padding at end of block bitmap is not set [ 95.433672][ T6263] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 95.455101][ T6274] netlink: 96 bytes leftover after parsing attributes in process `syz.1.158'. [ 95.457781][ T6263] EXT4-fs (loop0): 1 truncate cleaned up [ 95.483151][ T6263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.623204][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.969896][ T6289] loop0: detected capacity change from 0 to 512 [ 96.005116][ T6289] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.065851][ T6289] EXT4-fs (loop0): 1 orphan inode deleted [ 96.071776][ T6289] EXT4-fs (loop0): 1 truncate cleaned up [ 96.087887][ T6289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.180863][ T8] IPVS: starting estimator thread 0... [ 96.296253][ T6294] IPVS: using max 16 ests per chain, 38400 per kthread [ 96.529693][ T6301] tipc: Started in network mode [ 96.534931][ T6301] tipc: Node identity ae5a12c5ca3, cluster identity 4711 [ 96.649410][ T6301] tipc: Enabled bearer , priority 0 [ 96.813422][ T6309] lo speed is unknown, defaulting to 1000 [ 97.480775][ T6296] tipc: Disabling bearer [ 97.514000][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.677250][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 97.986993][ T6328] Zero length message leads to an empty skb [ 98.033171][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 98.033188][ T27] audit: type=1326 audit(1764533819.530:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 98.121802][ T27] audit: type=1326 audit(1764533819.560:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 98.171642][ T6335] netlink: 'syz.2.180': attribute type 7 has an invalid length. [ 98.173263][ T27] audit: type=1326 audit(1764533819.560:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 98.180211][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 98.252053][ T27] audit: type=1326 audit(1764533819.560:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b158f749 code=0x7ffc0000 [ 98.310084][ T27] audit: type=1326 audit(1764533819.600:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 98.325414][ T6331] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 98.377189][ T27] audit: type=1326 audit(1764533819.600:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 98.439797][ T27] audit: type=1326 audit(1764533819.600:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 98.527723][ T27] audit: type=1326 audit(1764533819.600:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 98.574617][ T27] audit: type=1326 audit(1764533819.600:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 98.620494][ T27] audit: type=1326 audit(1764533819.600:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 98.933316][ T6355] loop3: detected capacity change from 0 to 512 [ 98.983478][ T6355] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.053773][ T6355] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 99.095350][ T6364] loop1: detected capacity change from 0 to 1024 [ 99.106096][ T6355] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.191: Corrupt directory, running e2fsck is recommended [ 99.110663][ T6364] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.158196][ T6355] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 99.164997][ T6369] loop2: detected capacity change from 0 to 512 [ 99.181546][ T6364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.195000][ T6355] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.191: corrupted in-inode xattr: invalid ea_ino [ 99.209741][ T6364] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.222327][ T6355] EXT4-fs (loop3): Remounting filesystem read-only [ 99.230569][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.258788][ T6369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.282535][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.295735][ T6369] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.404009][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.418971][ T6376] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 99.429904][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.442382][ T6376] netlink: 224 bytes leftover after parsing attributes in process `syz.1.198'. [ 99.762674][ T6391] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.858785][ T6394] loop0: detected capacity change from 0 to 128 [ 99.894603][ T6394] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.923457][ T6394] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.025027][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.122223][ T6403] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 100.268701][ T6409] IPv6: Can't replace route, no match found [ 100.328227][ T6413] netlink: 104 bytes leftover after parsing attributes in process `syz.3.213'. [ 101.021897][ T6434] IPv6: Can't replace route, no match found [ 101.122271][ T6437] Driver unsupported XDP return value 0 on prog (id 135) dev N/A, expect packet loss! [ 101.665246][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'. [ 101.683241][ T6450] netlink: 108 bytes leftover after parsing attributes in process `syz.0.230'. [ 101.694080][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.230'. [ 101.708781][ T6450] netlink: 108 bytes leftover after parsing attributes in process `syz.0.230'. [ 101.719483][ T6450] netlink: 84 bytes leftover after parsing attributes in process `syz.0.230'. [ 101.877474][ T6456] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.917913][ T6458] IPv6: Can't replace route, no match found [ 102.619177][ T6481] IPv6: Can't replace route, no match found [ 102.691000][ T6483] netlink: 76 bytes leftover after parsing attributes in process `syz.2.246'. [ 102.830699][ T6483] netlink: 76 bytes leftover after parsing attributes in process `syz.2.246'. [ 102.913249][ T6488] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 102.935695][ T6488] team0: Port device dummy0 added [ 102.959011][ T6488] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 102.984099][ T6488] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.039290][ T6488] team0: Failed to send options change via netlink (err -105) [ 103.054987][ T6483] netlink: 76 bytes leftover after parsing attributes in process `syz.2.246'. [ 103.067689][ T6488] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 103.101878][ T6488] team0: Port device dummy0 removed [ 103.121389][ T27] kauditd_printk_skb: 179 callbacks suppressed [ 103.121406][ T27] audit: type=1326 audit(1764533824.620:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 103.157233][ T27] audit: type=1326 audit(1764533824.650:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6487 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e5ad8f749 code=0x7ffc0000 [ 103.196634][ T6488] syz.1.248 (6488) used greatest stack depth: 20840 bytes left [ 103.501500][ T27] audit: type=1326 audit(1764533825.000:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 103.571767][ T27] audit: type=1326 audit(1764533825.030:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 103.637339][ T27] audit: type=1326 audit(1764533825.030:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 103.679534][ T27] audit: type=1326 audit(1764533825.030:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 103.702887][ T27] audit: type=1326 audit(1764533825.030:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 103.757373][ T6507] IPv6: Can't replace route, no match found [ 103.775200][ T27] audit: type=1326 audit(1764533825.040:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 103.801591][ T27] audit: type=1326 audit(1764533825.040:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 103.873230][ T27] audit: type=1326 audit(1764533825.040:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6504 comm="syz.2.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a78f749 code=0x7ffc0000 [ 104.612804][ T6536] __nla_validate_parse: 5 callbacks suppressed [ 104.612822][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 104.667318][ T6539] IPv6: Can't replace route, no match found [ 104.965831][ T6549] loop0: detected capacity change from 0 to 128 [ 104.994766][ T6549] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 105.020462][ T6549] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.159353][ T6554] [ 105.161746][ T6554] ====================================================== [ 105.168787][ T6554] WARNING: possible circular locking dependency detected [ 105.175910][ T6554] syzkaller #0 Not tainted [ 105.180523][ T6554] ------------------------------------------------------ [ 105.187560][ T6554] syz.0.270/6554 is trying to acquire lock: [ 105.193473][ T6554] ffff88807efe0608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b9/0xea0 [ 105.202507][ T6554] [ 105.202507][ T6554] but task is already holding lock: [ 105.209931][ T6554] ffff88807efe2bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2f1/0xff0 [ 105.220087][ T6554] [ 105.220087][ T6554] which lock already depends on the new lock. [ 105.220087][ T6554] [ 105.230605][ T6554] [ 105.230605][ T6554] the existing dependency chain (in reverse order) is: [ 105.239665][ T6554] [ 105.239665][ T6554] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 105.248137][ T6554] percpu_down_read+0x44/0x1a0 [ 105.253458][ T6554] ext4_writepages+0x170/0x2f0 [ 105.258778][ T6554] do_writepages+0x3a2/0x600 [ 105.263926][ T6554] __writeback_single_inode+0x153/0xee0 [ 105.270031][ T6554] writeback_single_inode+0x211/0x720 [ 105.275958][ T6554] write_inode_now+0x161/0x1e0 [ 105.281272][ T6554] iput+0x5b2/0x920 [ 105.285649][ T6554] ext4_xattr_block_set+0x273a/0x32a0 [ 105.291578][ T6554] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 105.298030][ T6554] __ext4_expand_extra_isize+0x306/0x400 [ 105.304218][ T6554] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 105.310229][ T6554] ext4_evict_inode+0x7ed/0xea0 [ 105.315641][ T6554] evict+0x486/0x870 [ 105.320155][ T6554] ext4_orphan_cleanup+0xbd4/0x1400 [ 105.325917][ T6554] ext4_fill_super+0x5de4/0x66c0 [ 105.331400][ T6554] get_tree_bdev+0x3e4/0x510 [ 105.336535][ T6554] vfs_get_tree+0x8c/0x280 [ 105.341495][ T6554] do_new_mount+0x24b/0xa40 [ 105.346544][ T6554] __se_sys_mount+0x2da/0x3c0 [ 105.351766][ T6554] do_syscall_64+0x55/0xb0 [ 105.356745][ T6554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.363195][ T6554] [ 105.363195][ T6554] -> #0 (sb_internal){.+.+}-{0:0}: [ 105.370539][ T6554] __lock_acquire+0x2ddb/0x7c80 [ 105.375941][ T6554] lock_acquire+0x197/0x410 [ 105.380987][ T6554] percpu_down_read+0x44/0x1a0 [ 105.386306][ T6554] ext4_evict_inode+0x2b9/0xea0 [ 105.391705][ T6554] evict+0x486/0x870 [ 105.396145][ T6554] ext4_ext_migrate+0xcfb/0xff0 [ 105.401539][ T6554] ext4_ioctl+0x1c4b/0x3820 [ 105.406601][ T6554] __se_sys_ioctl+0xfd/0x170 [ 105.411745][ T6554] do_syscall_64+0x55/0xb0 [ 105.416720][ T6554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.423424][ T6554] [ 105.423424][ T6554] other info that might help us debug this: [ 105.423424][ T6554] [ 105.433674][ T6554] Possible unsafe locking scenario: [ 105.433674][ T6554] [ 105.441142][ T6554] CPU0 CPU1 [ 105.446526][ T6554] ---- ---- [ 105.451915][ T6554] lock(&sbi->s_writepages_rwsem); [ 105.457156][ T6554] lock(sb_internal); [ 105.463798][ T6554] lock(&sbi->s_writepages_rwsem); [ 105.471624][ T6554] rlock(sb_internal); [ 105.475834][ T6554] [ 105.475834][ T6554] *** DEADLOCK *** [ 105.475834][ T6554] [ 105.484004][ T6554] 3 locks held by syz.0.270/6554: [ 105.489049][ T6554] #0: ffff88807efe0418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 [ 105.498783][ T6554] #1: ffff888076d5de10 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_ioctl+0x1c43/0x3820 [ 105.509208][ T6554] #2: ffff88807efe2bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x2f1/0xff0 [ 105.519800][ T6554] [ 105.519800][ T6554] stack backtrace: [ 105.525714][ T6554] CPU: 1 PID: 6554 Comm: syz.0.270 Not tainted syzkaller #0 [ 105.533026][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.543111][ T6554] Call Trace: [ 105.546419][ T6554] [ 105.549460][ T6554] dump_stack_lvl+0x16c/0x230 [ 105.554179][ T6554] ? load_image+0x3b0/0x3b0 [ 105.558725][ T6554] ? show_regs_print_info+0x20/0x20 [ 105.564062][ T6554] ? print_circular_bug+0x12b/0x1a0 [ 105.569304][ T6554] check_noncircular+0x2bd/0x3c0 [ 105.574305][ T6554] ? print_deadlock_bug+0x5d0/0x5d0 [ 105.579550][ T6554] ? lockdep_lock+0xe0/0x220 [ 105.584173][ T6554] ? __lock_acquire+0x1260/0x7c80 [ 105.589237][ T6554] ? _find_first_zero_bit+0xd3/0x100 [ 105.594563][ T6554] __lock_acquire+0x2ddb/0x7c80 [ 105.599458][ T6554] ? __lock_acquire+0x1334/0x7c80 [ 105.604512][ T6554] ? verify_lock_unused+0x140/0x140 [ 105.609743][ T6554] ? verify_lock_unused+0x140/0x140 [ 105.615417][ T6554] ? truncate_inode_pages_range+0x3a9/0xf00 [ 105.621364][ T6554] ? mapping_evict_folio+0x510/0x510 [ 105.626689][ T6554] lock_acquire+0x197/0x410 [ 105.631224][ T6554] ? ext4_evict_inode+0x2b9/0xea0 [ 105.636283][ T6554] ? __might_sleep+0xe0/0xe0 [ 105.640904][ T6554] ? read_lock_is_recursive+0x20/0x20 [ 105.646303][ T6554] ? dquot_initialize+0x20/0x20 [ 105.651196][ T6554] ? do_raw_spin_lock+0x121/0x2c0 [ 105.656260][ T6554] percpu_down_read+0x44/0x1a0 [ 105.661148][ T6554] ? ext4_evict_inode+0x2b9/0xea0 [ 105.666203][ T6554] ext4_evict_inode+0x2b9/0xea0 [ 105.671089][ T6554] ? _raw_spin_unlock+0x28/0x40 [ 105.675976][ T6554] ? inode_wait_for_writeback+0x1b4/0x200 [ 105.681727][ T6554] ? evict+0x451/0x870 [ 105.685824][ T6554] ? sb_clear_inode_writeback+0x360/0x360 [ 105.691584][ T6554] ? do_raw_spin_lock+0x121/0x2c0 [ 105.696644][ T6554] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 105.702557][ T6554] ? do_raw_spin_unlock+0x121/0x230 [ 105.707766][ T6554] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 105.713756][ T6554] evict+0x486/0x870 [ 105.717731][ T6554] ? __lock_acquire+0x7c80/0x7c80 [ 105.722784][ T6554] ? proc_nr_inodes+0x230/0x230 [ 105.727815][ T6554] ? do_raw_spin_unlock+0x121/0x230 [ 105.733044][ T6554] ? _raw_spin_unlock+0x28/0x40 [ 105.737900][ T6554] ? iput+0x70a/0x920 [ 105.741887][ T6554] ext4_ext_migrate+0xcfb/0xff0 [ 105.746748][ T6554] ? mb_regenerate_buddy+0x510/0x510 [ 105.752038][ T6554] ? down_read_killable+0x340/0x340 [ 105.757239][ T6554] ? sb_start_write+0x110/0x1c0 [ 105.762104][ T6554] ? mnt_want_write_file+0x16a/0x200 [ 105.767398][ T6554] ext4_ioctl+0x1c4b/0x3820 [ 105.771921][ T6554] ? ext4_fileattr_set+0x1630/0x1630 [ 105.777220][ T6554] ? mark_lock+0x94/0x320 [ 105.781565][ T6554] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 105.787551][ T6554] ? do_vfs_ioctl+0x1567/0x1bb0 [ 105.792413][ T6554] ? __ia32_compat_sys_ioctl+0x7f0/0x7f0 [ 105.798061][ T6554] ? tomoyo_path_number_perm+0x1ba/0x590 [ 105.803705][ T6554] ? __lock_acquire+0x7c80/0x7c80 [ 105.808821][ T6554] ? slab_free_freelist_hook+0x130/0x1b0 [ 105.814466][ T6554] ? tomoyo_path_number_perm+0x477/0x590 [ 105.820105][ T6554] ? __kmem_cache_free+0xba/0x1f0 [ 105.825142][ T6554] ? tomoyo_path_number_perm+0x4dc/0x590 [ 105.830782][ T6554] ? tomoyo_path_number_perm+0x1ba/0x590 [ 105.836427][ T6554] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 105.842083][ T6554] ? __fget_files+0x28/0x4d0 [ 105.846682][ T6554] ? bpf_lsm_file_ioctl+0x9/0x10 [ 105.851626][ T6554] ? security_file_ioctl+0x80/0xa0 [ 105.856751][ T6554] ? ext4_fileattr_set+0x1630/0x1630 [ 105.862062][ T6554] __se_sys_ioctl+0xfd/0x170 [ 105.866675][ T6554] do_syscall_64+0x55/0xb0 [ 105.871118][ T6554] ? clear_bhb_loop+0x40/0x90 [ 105.875805][ T6554] ? clear_bhb_loop+0x40/0x90 [ 105.880493][ T6554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.886478][ T6554] RIP: 0033:0x7f95b158f749 [ 105.890893][ T6554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.910589][ T6554] RSP: 002b:00007f95b2451038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.919015][ T6554] RAX: ffffffffffffffda RBX: 00007f95b17e6090 RCX: 00007f95b158f749 [ 105.926995][ T6554] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005 [ 105.934975][ T6554] RBP: 00007f95b1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.942949][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.950921][ T6554] R13: 00007f95b17e6128 R14: 00007f95b17e6090 R15: 00007ffc54a78108 [ 105.958900][ T6554] [ 106.027953][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.