last executing test programs: 15.995106853s ago: executing program 4 (id=1310): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x470, &(0x7f0000000100)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f00000005c0)=[{0x6, 0x0, 0x4, 0x8}, {0x8, 0x4, 0xb, 0xbdc}]}) r0 = getpid() creat(&(0x7f0000000600)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000700)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffd}}, {@nombcache}, {@nogrpid}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000000780)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000d00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x3c}}, 0x40c4) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000e80)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc/thread-self/fail-nth\x00', 0x40802, 0x0) r6 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) unshare(0x4c000680) 11.139413746s ago: executing program 4 (id=1324): socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f00000005c0)=[{0x6, 0x0, 0x4, 0x8}, {0x8, 0x4, 0xb, 0xbdc}]}) getpid() creat(&(0x7f0000000600)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000700)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffd}}, {@nombcache}, {@nogrpid}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000000780)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./proc\x00', &(0x7f0000000dc0)='proc\x00', 0x4000, 0x0) 9.870975129s ago: executing program 1 (id=1329): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000840), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000940)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000002980)={0xa690b000, &(0x7f0000002a00)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_disconnect(0xffffffffffffffff) read$FUSE(r4, &(0x7f0000002a40)={0x2020}, 0x2020) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004ac0)={&(0x7f0000004b00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) 7.917978818s ago: executing program 2 (id=1334): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x11, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7.499420609s ago: executing program 4 (id=1339): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000480)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x4}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') keyctl$update(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 6.804587437s ago: executing program 2 (id=1340): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, 0x0, 0x400c0c0) open(0x0, 0x80242, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) fsopen(&(0x7f0000000100)='proc\x00', 0x0) unshare(0x20000400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xd804, 0x100) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000240)) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) 6.722916309s ago: executing program 1 (id=1342): futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f00000007c0), &(0x7f0000000980)='./file0\x00', 0x10, &(0x7f00000009c0)=ANY=[], 0x19, 0x705, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001400)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000001440)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) close(0x3) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x11}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 5.729729124s ago: executing program 1 (id=1344): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000002540), 0xfffffe13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8110009, 0x0, 0x0, 0x41100, 0x43}, 0x94) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000580), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000740)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000840)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.236621482s ago: executing program 0 (id=1346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000020900020073797a30010000000900010073797a30000000002c0003800800014000000000180003801400010076657468305f766c616e000000000000080002400000000414000000110001"], 0x80}}, 0x20048000) close(r0) 4.115033685s ago: executing program 3 (id=1347): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="140002000000000000000000000000000000000114000100000000000000000000000000000000000800090002"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 4.027239458s ago: executing program 3 (id=1348): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd29, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0x2, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x85f}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfff, 0x1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f0000000580)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 3.9220703s ago: executing program 1 (id=1349): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x0, 0x8000}, 0x50) 3.92043107s ago: executing program 0 (id=1350): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x9e95752ad8da5319}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.803210823s ago: executing program 2 (id=1351): r0 = socket(0xa, 0x3, 0xff) recvmmsg(r0, &(0x7f0000000300), 0x400000000000233, 0x10022, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) 3.732468415s ago: executing program 0 (id=1352): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r4, 0x0, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000005c0)) syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4) r6 = syz_open_dev$loop(0x0, 0x81, 0x141200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) 3.702078715s ago: executing program 1 (id=1353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0xc5}, 0x400c010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="20e9af94", 0x4}], 0x1}, 0x0) 3.660897406s ago: executing program 3 (id=1354): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000140)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x7) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0x81, 0xb) 3.448457492s ago: executing program 3 (id=1355): futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f00000007c0), &(0x7f0000000980)='./file0\x00', 0x10, &(0x7f00000009c0)=ANY=[], 0x19, 0x705, &(0x7f0000000a80)="$eJzs3U1sHGf9B/Dv7K433lRy3f779kdItRoRQUMTOwskSJUSEEI5VBCJS68mcRormzSyXZREiLhA4QgnlEMPRcg99IQ4IBVxQJQTByQk7rlX6oFbxAGjnZ21d23H9sZxHMLnI83OMzvPy29+fubxepzIAf5nnXszY8spcu7YGze6x3dX2p27K+2r/XKSQ0lqSaO3S3EtKT5Jzqa35f+7b1bdFWXtLXz104/fP3rno3bvqFFtZbvaQPttrPZH2MJytWUqSb3aj6hxv/4ubNHf7ZG6Ltbi7ibsSD9xcNBWN1kepfku7lvgcXc7qY9t8f5kcjjJePU5INXqUHvE4T10I61yAAAA8Hiq71Th6Xu5lxuZeDThAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJOh6P3NwKLaav3yVIrq7/9/t6pWajQPNtwdfHmH8+9dekSBAAAAAAAAAMDDN7ZefPle7uVGJvrHq0X5O/9XyoPnyten8k4WM5eFHM+NzGYpS1nITDI2MdBn88bs0tLCzOaWv0q35erq6u2q5ckkk5tantwQY30frhsAAAAAAAAAnlw/zrlMHHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwqEjqvV25PdcvT6bWSDKepNmtt5z8MfnwtYOOd6/+dNABAAAAwP5rVfuJ4t+9wmpR/sz/Qvlz/3jeybUsZT5L6WQuF8tnAb0nALW/L7c7d1faV7vb5o6/8dlIcZQ9Jqnn3fuMPF3WeH6txbl8O9/LsUzlfBYynx9kNkuZy1Ra3YvIbIpMtnpPLya7MdaTDMdbr7o6OxTK+Y2xvbzh+KUyklYuZb6M7XguNPu91coaRV7qj3R3pf37ZrIhQ+9+ljSLM5Vd5ujiwNfrl9Vzmcrq07vsY39Mllc+tpaR6W7uq2w8M5CJLebKiPNk40gzqfWeRyV5bn2U7uHGkbo5T3HmzPdHyfnhat/N9c+Gc/6wNUervjETJ1OrZl/ywnDOr3/hzrNJjq03/tI//nz+cu3alcuXFo/t4yXtq7F+YWMm2gOZeHH72VdlotPNxPLuMzG28Y3xPVzHQ9SsstFb2Ha3Wn6rLM3mlYEp+HYuZi6nMp2ZnM50vp6TaQ/NsOeH8tpoXx3OSXmv1Tavb61tgj/yxYFKP9+h8qPVzcszA3kdXOkmy3PVO2d/kemBLD27/ezrr0ijfBdofK4qdMf4ydp3nMfBUCaqtbkfXf8b1H0y8evV7uti59qVhcuz13c53tFq371t3xtem3+z54vZk/690Chfy5y0+vOlO5f+by3a4Xw1q9+49NrVNp17fu3cZCYyn+/c905tVp/hNvfUO/filufa5bmXBs4NfcrJ2+mUn0I2mNr/jAIwksOvHm62Pm39rfVB66ety603xr956PShzzcz9pfGH+q/rX1Ye714NR/kR5k46EgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJsHjz1pXZTmduYR8LzQccK7Ud66w8tbsOM5lsP1ZRFZr7nY3HoPDP8W2z0co+jf67JN3CoWpCbKjT3PMQxf7N578eXr9p9tjh7SSdubHBJKzWR+insTl1g4VGFseHvoKvVyOVmV+rnMkrs51/rQ41b2XglgGecCeWrl4/sXjz1mvzV2ffmntr7trJ06dOn2p/beYrJy7Nd+ame68HHSWwHxZv3qofdAwAAAAAAAAAAADAaKp//b/0wP+ZobFDnebC4tYjv/yoLxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L3XuzYwtp8jM9PHp7vHdlXanu/XL6zUbSWpJih8mxSfJ2fS2TA50V2weYaLaf/z+0Tsftdf7avTr17ZuN4rlastUknq139mhLbrZ3N+Fgf6WHyi8Yu0Kuwk70k8cHLT/BAAA//8H6ujL") prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001400)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000001440)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) close(0x3) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000050000000400", @ANYRES32, @ANYBLOB="00000000000000000000f4000000000000f83f007a2ad91f7a39f9f27dc6144fd1c7bc3b1914db1ae73ad232a82d10ce87fd8095ff0592c68ce0f60782316e2250e21b4429f21cec7742ea39864122a289781099a8c6092c7b3f06a1bdf9ef7d964424e5b89addfd7c0ab83000a49cd291f3637f997ea58d6e8f7bb8582dec0c604fce4b31d53581241eefbff6d5641b57117d154a28478da8631342d6bbeab8aa6f5a9df1ae28a4b29a79ae6977ed68553a2d09840e9f4da712cfdefd56f947e875270e637e7bb869823c4fb2c89c590836ea1030a55798b2b947a77dd9095295fa306191cc76c70f4b0aae6d835e9324d0bb69ddd18abcba6eeb50770d9ac9c26f5f759cf652e6cea21d74e3b748ebf15fb1f830a8747f1bac0ed514aa28efdc98f656a8ec5e43959ad0b09e1d6455f2449daf9b7324efa45338c552ae5e560abbad1e8ba8ec", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x11}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 2.829786648s ago: executing program 0 (id=1356): futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f00000007c0), &(0x7f0000000980)='./file0\x00', 0x10, &(0x7f00000009c0)=ANY=[], 0x19, 0x705, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001440)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) 2.768650509s ago: executing program 2 (id=1357): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f00000007c0), &(0x7f0000000980)='./file0\x00', 0x10, &(0x7f00000009c0)=ANY=[], 0x19, 0x705, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f00000011c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000012c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001400)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000001440)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000001480)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) close(0x3) finit_module(0xffffffffffffffff, 0x0, 0x7) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000005000000040000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000f4000000000000f83f007a2ad91f7a39f9f27dc6144fd1c7bc3b1914db1ae73ad232a82d10ce87fd8095ff0592c68ce0f60782316e2250e21b4429f21cec7742ea39864122a289781099a8c6092c7b3f06a1bdf9ef7d964424e5b89addfd7c0ab83000a49cd291f3637f997ea58d6e8f7bb8582dec0c604fce4b31d53581241eefbff6d5641b57117d154a28478da8631342d6bbeab8aa6f5a9d", @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x11}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 1.300154737s ago: executing program 0 (id=1358): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x470, &(0x7f0000000100)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f00000005c0)=[{0x6, 0x0, 0x4, 0x8}, {0x8, 0x4, 0xb, 0xbdc}]}) r0 = getpid() creat(&(0x7f0000000600)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000700)={[{@min_batch_time={'min_batch_time', 0x3d, 0x7ffffffd}}, {@nombcache}, {@nogrpid}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000000780)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000d00)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x3c}}, 0x40c4) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000e80)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc/thread-self/fail-nth\x00', 0x40802, 0x0) r6 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) unshare(0x4c000680) 1.298227916s ago: executing program 2 (id=1359): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000002540), 0xfffffe13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8110009, 0x0, 0x0, 0x41100, 0x43}, 0x94) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000580), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000005c0)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1e, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000740)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000840)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.297163587s ago: executing program 3 (id=1360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d2500800014000000000140000001100"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000020900020073797a30010000000900010073797a30000000002c0003800800014000000000180003801400010076657468305f766c616e000000000000080002400000000414000000110001"], 0x80}}, 0x20048000) close(r0) 1.292095977s ago: executing program 4 (id=1361): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="140002000000000000000000000000000000000114000100000000000000000000000000000000000800090002"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 1.208573009s ago: executing program 1 (id=1362): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r1, 0x0, 0x400c0c0) open(0x0, 0x80242, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) fsopen(&(0x7f0000000100)='proc\x00', 0x0) unshare(0x20000400) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0xd804, 0x100) ioctl$SNDRV_PCM_IOCTL_STATUS32(r4, 0x806c4120, &(0x7f0000000240)) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) 1.186457599s ago: executing program 4 (id=1363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r1, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x9e95752ad8da5319}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.027267213s ago: executing program 4 (id=1364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newqdisc={0x80, 0x24, 0xd0f, 0x70bd29, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0x2, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x54, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x85f}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfff, 0x1}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r0, &(0x7f0000000580)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 1.007067654s ago: executing program 3 (id=1365): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x11, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 58.886048ms ago: executing program 0 (id=1366): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) 0s ago: executing program 2 (id=1367): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x10048, &(0x7f00000009c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x67, 0xc54, &(0x7f0000002500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r4, 0x0, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f00000005c0)) syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x4) r6 = syz_open_dev$loop(0x0, 0x81, 0x141200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.239987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.248583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.263859][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.324522][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.360837][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.391473][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.416333][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.428924][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.484914][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.492791][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.501569][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.513171][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.520301][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.529656][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.538748][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.547589][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.554760][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.563554][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.571834][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.580069][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.589347][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.598711][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.617325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.636050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.667203][ T4280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.689635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.703110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.715353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.724074][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.731189][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.740295][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.750380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.759262][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.766446][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.784973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.813695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.827979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.838288][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.847035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.858015][ T4280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.874930][ T4272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.888405][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.912701][ T4280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.936933][ T4280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.947125][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.956213][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.965924][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.974924][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.984049][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.991621][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.999443][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.026172][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.037775][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.046541][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.054956][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.064333][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.085739][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.110691][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.134190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.153777][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.182773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.191222][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.251548][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.273607][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.295937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.306752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.350899][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.375672][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.438442][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.471504][ T4277] device veth0_vlan entered promiscuous mode [ 70.484657][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.508938][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.539897][ T4277] device veth1_vlan entered promiscuous mode [ 70.578359][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.594405][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.608526][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.617401][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.626862][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.634860][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.642820][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.651370][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.660335][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.725142][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.746393][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.763185][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.783159][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.790292][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.804160][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.829247][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.843244][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.850381][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.858772][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.874783][ T4277] device veth0_macvtap entered promiscuous mode [ 70.912259][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.920871][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.937314][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.948031][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.956957][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.966916][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.976048][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.984825][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.993770][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.001190][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.009209][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.018180][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.038107][ T4277] device veth1_macvtap entered promiscuous mode [ 71.063220][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.070475][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.079696][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.088851][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.099571][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.108771][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.117395][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.125897][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.134952][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.143191][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.157619][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.170411][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.205551][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.217331][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.231815][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.245467][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.260876][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.273051][ T4274] Bluetooth: hci1: command 0x040f tx timeout [ 71.273035][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 71.273088][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 71.279088][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 71.285870][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 71.304595][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.311131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.317809][ T4272] device veth0_vlan entered promiscuous mode [ 71.339587][ T4270] device veth0_vlan entered promiscuous mode [ 71.355686][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.369932][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.379197][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.390070][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.398963][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.407160][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.418096][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.437593][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.446796][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.456416][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.465264][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.476894][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.486995][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.501312][ T4270] device veth1_vlan entered promiscuous mode [ 71.527776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.540074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.552096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.579770][ T4272] device veth1_vlan entered promiscuous mode [ 71.636779][ T4271] device veth0_vlan entered promiscuous mode [ 71.654475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.668564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.678729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.687345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.695896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.711233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.719632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.727711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.735372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.758730][ T4271] device veth1_vlan entered promiscuous mode [ 71.768759][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.777493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.807661][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.819252][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.844883][ T4270] device veth0_macvtap entered promiscuous mode [ 71.853331][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.861648][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.872087][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.897117][ T4272] device veth0_macvtap entered promiscuous mode [ 71.908005][ T4272] device veth1_macvtap entered promiscuous mode [ 71.920088][ T4270] device veth1_macvtap entered promiscuous mode [ 71.931406][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.946416][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.953980][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.958411][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.975789][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.985293][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.994235][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.003226][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.042063][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.054427][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.088176][ T4271] device veth0_macvtap entered promiscuous mode [ 72.100322][ T4271] device veth1_macvtap entered promiscuous mode [ 72.108781][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.120564][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.135833][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.145254][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.148363][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.154062][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.170820][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.182391][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.195322][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.207245][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.216924][ T4280] device veth0_vlan entered promiscuous mode [ 72.229733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.238386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.246796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.255405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.264597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.273638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.282711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.290533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.299507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.309217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.317422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.329667][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.340684][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.355014][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.364598][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.377732][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.389157][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.402000][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.417334][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.429351][ T4272] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.438178][ T4272] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.447569][ T4272] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456343][ T4272] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.471579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.480757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.492828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.501339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.513328][ T4270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.522096][ T4270] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.533803][ T4270] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.543080][ T4270] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.575223][ T4280] device veth1_vlan entered promiscuous mode [ 72.583269][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.597231][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.607433][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.617960][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.628269][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.641869][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.654509][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.707672][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.729034][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.739012][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.753301][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.764396][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.775902][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.786968][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.798568][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.808676][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.819603][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.831220][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.862828][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.880348][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.920747][ T4271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.929814][ T4271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.938867][ T4271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.948217][ T4271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.988370][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.999996][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.011289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.081131][ T4392] netlink: 'syz.3.7': attribute type 29 has an invalid length. [ 73.090406][ T4392] netlink: 'syz.3.7': attribute type 29 has an invalid length. [ 73.102073][ T4392] netlink: 'syz.3.7': attribute type 29 has an invalid length. [ 73.179139][ T4280] device veth0_macvtap entered promiscuous mode [ 73.199591][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.216429][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.235967][ T4280] device veth1_macvtap entered promiscuous mode [ 73.246093][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.256534][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.267661][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.281391][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.289708][ T4396] fuse: Unknown parameter 'user_id00000000000000000000' [ 73.290213][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.316755][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.342558][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.342807][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 73.353255][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 73.356106][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 73.361868][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 73.374257][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 73.384215][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.403765][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.419168][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.430291][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.440781][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.451763][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.468240][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.479056][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.501665][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.517654][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.531931][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.544756][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.562118][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.574828][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.590878][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.603322][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.620148][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.637546][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.645460][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.654194][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.664455][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.683061][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.693559][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.710452][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.713645][ T4280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.728256][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.729731][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.741406][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.751613][ T4280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.760705][ T4280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.775130][ T4280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.809047][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.831324][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.865725][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.878259][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.931181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.015281][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.030018][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.108996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.121380][ T4405] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1'. [ 74.134590][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.182361][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.199165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.390861][ T4413] loop0: detected capacity change from 0 to 512 [ 74.433528][ T4413] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.506622][ T4413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.528731][ T4413] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 74.858786][ T4420] loop1: detected capacity change from 0 to 512 [ 74.875367][ T4420] ======================================================= [ 74.875367][ T4420] WARNING: The mand mount option has been deprecated and [ 74.875367][ T4420] and is ignored by this kernel. Remove the mand [ 74.875367][ T4420] option from the mount to silence this warning. [ 74.875367][ T4420] ======================================================= [ 75.108844][ T4426] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.688379][ T4420] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 75.953337][ T4436] fuse: Bad value for 'fd' [ 76.310451][ T4445] loop2: detected capacity change from 0 to 1024 [ 78.246067][ T4283] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.447897][ T4473] loop3: detected capacity change from 0 to 512 [ 78.462526][ T4287] Bluetooth: hci3: command 0x0405 tx timeout [ 78.469909][ T4475] fuse: Bad value for 'fd' [ 78.512837][ T4473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.542734][ T4473] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 78.560236][ T4479] loop2: detected capacity change from 0 to 512 [ 78.596388][ T4479] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.660111][ T4473] loop3: detected capacity change from 0 to 512 [ 78.662510][ T4479] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 78.769603][ T4473] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.26: iget: bad extended attribute block 6 [ 78.815364][ T4479] loop2: detected capacity change from 0 to 512 [ 78.910885][ T4473] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.26: couldn't read orphan inode 15 (err -117) [ 78.983430][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.987900][ T4479] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.29: iget: bad extended attribute block 6 [ 79.207804][ T4479] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.29: couldn't read orphan inode 15 (err -117) [ 79.375406][ T4493] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.679577][ T4479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.980122][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 80.149170][ T4498] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.843701][ T4498] EXT4-fs (loop2): unmounting filesystem. [ 81.371695][ T4515] loop4: detected capacity change from 0 to 512 [ 81.551369][ T4515] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 81.616540][ T4515] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.37: invalid indirect mapped block 256 (level 1) [ 81.664243][ T4515] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.37: invalid indirect mapped block 2683928664 (level 1) [ 81.713911][ T4515] EXT4-fs (loop4): 1 truncate cleaned up [ 81.750072][ T4515] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.224284][ T4532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37'. [ 82.233551][ T4532] netlink: 40 bytes leftover after parsing attributes in process `syz.4.37'. [ 82.244482][ T4532] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.37: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 82.288513][ T4540] netlink: 64 bytes leftover after parsing attributes in process `syz.3.42'. [ 82.512400][ T4482] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 82.602812][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 82.750837][ T4547] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.605486][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.49'. [ 83.630175][ T4552] loop1: detected capacity change from 0 to 512 [ 83.697698][ T4552] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 85.570722][ T4576] loop3: detected capacity change from 0 to 512 [ 85.633643][ T4576] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 86.055108][ T4580] ptrace attach of ""[4582] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4580] [ 86.282804][ T4576] EXT4-fs (loop3): 1 truncate cleaned up [ 86.289129][ T4576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.627657][ T22] cfg80211: failed to load regulatory.db [ 86.675719][ T4597] x86/PAT: syz.3.54:4597 freeing invalid memtype [mem 0xfe004000-0xfe005fff] [ 86.978427][ T4602] loop1: detected capacity change from 0 to 128 [ 87.151030][ T4602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.200464][ T4602] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.643172][ T4609] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.985964][ T4612] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.459155][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 88.844433][ T4638] fuse: Unknown parameter '0x0000000000000003' [ 89.051940][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 89.112759][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 89.150549][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 89.233730][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 89.914798][ T4658] loop3: detected capacity change from 0 to 128 [ 89.928955][ T4651] device syzkaller0 entered promiscuous mode [ 89.951983][ T4653] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.046358][ T4658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.055735][ T4658] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.197380][ T4665] loop1: detected capacity change from 0 to 512 [ 90.236153][ T4665] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 90.246507][ T4665] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.80: invalid indirect mapped block 256 (level 1) [ 90.260386][ T4665] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.80: invalid indirect mapped block 2683928664 (level 1) [ 90.289622][ T4665] EXT4-fs (loop1): 1 truncate cleaned up [ 90.302433][ T4665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.313950][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 90.618737][ T4673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'. [ 90.627863][ T4673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.80'. [ 90.643180][ T4673] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 13: comm syz.1.80: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 90.654601][ T4675] fuse: Unknown parameter '0x0000000000000003' [ 91.104915][ T4660] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 91.129392][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 91.868022][ T4692] loop3: detected capacity change from 0 to 512 [ 91.914613][ T4692] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 91.963046][ T4692] EXT4-fs (loop3): 1 truncate cleaned up [ 91.989229][ T4692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.798653][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 92.819770][ T4703] Zero length message leads to an empty skb [ 92.825374][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 93.206056][ T4704] ptrace attach of ""[4706] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4704] [ 93.460094][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 93.500436][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 93.618892][ T4712] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 93.634131][ T4712] netlink: 164 bytes leftover after parsing attributes in process `syz.1.97'. [ 93.726607][ T4716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.99'. [ 94.104069][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 94.356177][ T4734] loop4: detected capacity change from 0 to 1024 [ 94.368747][ T4734] hfsplus: invalid btree flag [ 94.377057][ T4734] hfsplus: failed to load catalog file [ 94.665230][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 95.833624][ T4759] loop4: detected capacity change from 0 to 1024 [ 95.927107][ T4763] loop3: detected capacity change from 0 to 1024 [ 95.978178][ T4763] hfsplus: invalid btree flag [ 96.003963][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 96.032479][ T4763] hfsplus: failed to load catalog file [ 97.171947][ T4778] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.124'. [ 97.373773][ T4786] loop1: detected capacity change from 0 to 512 [ 97.453432][ T4786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.482370][ T4786] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 97.933056][ T4801] rxe_eth0 speed is unknown, defaulting to 1000 [ 99.655311][ T4814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 100.087130][ T4824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 100.097889][ T4824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'. [ 100.434484][ T4836] loop3: detected capacity change from 0 to 512 [ 100.484791][ T4836] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 101.486887][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.152'. [ 101.885432][ T4859] loop3: detected capacity change from 0 to 512 [ 101.980175][ T4859] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 102.026014][ T4859] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.154: invalid indirect mapped block 256 (level 1) [ 102.061101][ T4859] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.154: invalid indirect mapped block 2683928664 (level 1) [ 102.112091][ T4859] EXT4-fs (loop3): 1 truncate cleaned up [ 102.118491][ T4859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.192340][ T4859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 102.201293][ T4859] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 102.211350][ T4859] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.154: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 102.291277][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 102.839288][ T4884] netlink: 'syz.3.165': attribute type 3 has an invalid length. [ 103.577429][ T4570] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.695183][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 103.772353][ T4570] usb 2-1: Using ep0 maxpacket: 32 [ 103.986579][ T4570] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.143001][ T4902] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.765645][ T4570] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.803095][ T4570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.851603][ T4570] usb 2-1: config 0 descriptor?? [ 104.898383][ T4570] hub 2-1:0.0: bad descriptor, ignoring hub [ 104.922313][ T4570] hub: probe of 2-1:0.0 failed with error -5 [ 104.935793][ T4570] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 105.278057][ T4919] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 105.304478][ T4919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 106.385606][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 106.726109][ T14] usb 2-1: USB disconnect, device number 2 [ 107.129701][ T4955] loop1: detected capacity change from 0 to 1024 [ 107.230633][ T4955] hfsplus: invalid btree flag [ 107.291696][ T4955] hfsplus: failed to load catalog file [ 108.009974][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 109.391580][ T5001] loop1: detected capacity change from 0 to 512 [ 109.436114][ T5001] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 109.502327][ T5001] EXT4-fs (loop1): 1 truncate cleaned up [ 109.535966][ T5001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.332996][ T4280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 110.366511][ T4280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 110.405750][ T4280] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 110.537117][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 110.624809][ T5020] loop3: detected capacity change from 0 to 1024 [ 110.662681][ T5020] hfsplus: invalid btree flag [ 110.667603][ T5020] hfsplus: failed to load catalog file [ 110.900457][ T4263] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.021968][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 112.160482][ T5041] loop4: detected capacity change from 0 to 512 [ 112.189541][ T5041] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.205777][ T5041] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 112.792842][ T5050] tap0: tun_chr_ioctl cmd 1074025677 [ 112.798560][ T5050] tap0: linktype set to 776 [ 113.331857][ T5059] loop3: detected capacity change from 0 to 512 [ 113.363913][ T5059] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 113.512409][ T5060] rxe_eth0 speed is unknown, defaulting to 1000 [ 114.230681][ T5059] EXT4-fs (loop3): 1 truncate cleaned up [ 114.284454][ T5059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.990310][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 115.158170][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 115.204007][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 115.331274][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 115.378420][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 115.909021][ T5090] loop3: detected capacity change from 0 to 512 [ 115.951483][ T5090] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 115.962107][ T5090] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.229: invalid indirect mapped block 256 (level 1) [ 115.989514][ T5090] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.229: invalid indirect mapped block 2683928664 (level 1) [ 116.004779][ T5090] EXT4-fs (loop3): 1 truncate cleaned up [ 116.010471][ T5090] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.073602][ T5094] loop4: detected capacity change from 0 to 512 [ 116.090245][ T5094] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.100756][ T5094] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 116.183373][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.229'. [ 116.194114][ T5090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.229'. [ 116.204741][ T5090] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.229: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 116.282914][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 116.942065][ T5099] rxe_eth0 speed is unknown, defaulting to 1000 [ 117.569359][ T5104] fuse: Bad value for 'fd' [ 118.056434][ T5126] loop3: detected capacity change from 0 to 512 [ 118.079740][ T5126] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 118.755034][ T5126] EXT4-fs (loop3): 1 truncate cleaned up [ 119.208207][ T5136] rxe_eth0 speed is unknown, defaulting to 1000 [ 119.273023][ T5126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.306950][ T5138] loop4: detected capacity change from 0 to 512 [ 119.460723][ T5138] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 119.552129][ T4263] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.782913][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 119.889380][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 120.159860][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 120.233119][ T5024] Set syz0 is full, maxelem 65536 reached [ 120.279516][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 120.569897][ T5162] fuse: Bad value for 'fd' [ 121.094594][ T5172] loop1: detected capacity change from 0 to 512 [ 121.121657][ T5172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.151833][ T5172] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 121.290429][ T5175] loop3: detected capacity change from 0 to 1024 [ 121.381995][ T5175] hfsplus: invalid btree flag [ 121.388614][ T5175] hfsplus: failed to load catalog file [ 122.066318][ T5179] rxe_eth0 speed is unknown, defaulting to 1000 [ 123.106075][ T5188] loop4: detected capacity change from 0 to 512 [ 123.141264][ T5188] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 124.100710][ T5211] fuse: Unknown parameter 'group_id00000000000000000000' [ 126.456666][ T5237] process 'syz.2.278' launched './file0' with NULL argv: empty string added [ 127.239467][ T5245] fuse: Unknown parameter 'group_id00000000000000000000' [ 127.397237][ T5249] loop3: detected capacity change from 0 to 1024 [ 127.436761][ T5249] hfsplus: invalid btree flag [ 127.441658][ T5249] hfsplus: failed to load catalog file [ 129.756318][ T5289] fuse: Unknown parameter 'group_id00000000000000000000' [ 132.705208][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711543][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.724685][ T5326] loop4: detected capacity change from 0 to 512 [ 132.757523][ T5326] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 133.148733][ T5336] fuse: Bad value for 'user_id' [ 135.581914][ T5378] fuse: Bad value for 'user_id' [ 136.193843][ T5389] loop3: detected capacity change from 0 to 512 [ 136.248045][ T5389] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 137.405298][ T5409] fuse: Bad value for 'user_id' [ 138.279001][ T5424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.336'. [ 138.288001][ T5424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.336'. [ 138.580758][ T5428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 138.589792][ T5428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.335'. [ 139.180638][ T5439] batman_adv: batadv0: Adding interface: syzkaller0 [ 139.198330][ T5439] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.233152][ T5439] batman_adv: batadv0: Interface activated: syzkaller0 [ 139.245636][ T5438] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 139.291464][ T5438] batman_adv: batadv0: Removing interface: syzkaller0 [ 139.442021][ T5445] fuse: Bad value for 'fd' [ 140.490281][ T5466] device syzkaller0 entered promiscuous mode [ 140.788414][ T5470] loop4: detected capacity change from 0 to 2048 [ 140.808892][ T5470] UDF-fs: bad mount option "" or missing value [ 141.007774][ T5477] fuse: Bad value for 'fd' [ 141.133683][ T5481] loop3: detected capacity change from 0 to 1024 [ 141.181708][ T5481] hfsplus: invalid btree flag [ 141.191902][ T5481] hfsplus: failed to load catalog file [ 142.873287][ T5512] fuse: Bad value for 'fd' [ 144.463326][ T5543] fuse: Bad value for 'fd' [ 144.527630][ T5541] loop4: detected capacity change from 0 to 2048 [ 144.588422][ T5541] UDF-fs: bad mount option "" or missing value [ 146.060566][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 146.449782][ T5573] ip_tables: iptables: counters copy to user failed while replacing table [ 146.584141][ T5579] loop4: detected capacity change from 0 to 512 [ 146.615167][ T5579] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 146.677812][ T5579] EXT4-fs (loop4): 1 truncate cleaned up [ 146.686784][ T5579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.958834][ T5583] loop3: detected capacity change from 0 to 2048 [ 147.241558][ T5583] UDF-fs: bad mount option "" or missing value [ 147.595416][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 148.232183][ C0] sched: RT throttling activated [ 148.442087][ T5608] loop3: detected capacity change from 0 to 512 [ 148.533348][ T5608] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 148.588298][ T5608] EXT4-fs (loop3): 1 truncate cleaned up [ 148.594911][ T5608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 149.450653][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 149.541123][ T5626] overlayfs: failed to clone upperpath [ 149.588499][ T5628] loop3: detected capacity change from 0 to 1024 [ 149.619264][ T5628] hfsplus: invalid btree flag [ 149.627640][ T5628] hfsplus: failed to load catalog file [ 150.134629][ T5641] overlayfs: failed to clone upperpath [ 150.836801][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.415'. [ 150.845865][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.415'. [ 150.946746][ T5658] loop3: detected capacity change from 0 to 512 [ 151.000333][ T5658] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 151.100720][ T5658] EXT4-fs (loop3): 1 truncate cleaned up [ 151.130199][ T5658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.277123][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 152.473309][ T5678] loop4: detected capacity change from 0 to 512 [ 152.523924][ T5678] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 152.579504][ T5678] EXT4-fs (loop4): 1 truncate cleaned up [ 152.612219][ T5678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 153.600629][ T4270] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 153.625903][ T4270] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 153.662364][ T4270] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 153.803230][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 153.810610][ T5698] loop3: detected capacity change from 0 to 512 [ 153.837619][ T5698] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 154.774148][ T5717] loop4: detected capacity change from 0 to 512 [ 154.822139][ T5717] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 156.157723][ T4343] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.386787][ T4343] usb 4-1: Using ep0 maxpacket: 32 [ 156.446325][ T4343] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.262474][ T4343] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.271570][ T4343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.300390][ T4343] usb 4-1: config 0 descriptor?? [ 157.479626][ T4343] hub 4-1:0.0: bad descriptor, ignoring hub [ 157.485718][ T4343] hub: probe of 4-1:0.0 failed with error -5 [ 157.494919][ T4343] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 157.817118][ T5760] loop4: detected capacity change from 0 to 512 [ 158.475138][ T5760] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 158.653980][ T5335] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.742792][ T14] usb 4-1: USB disconnect, device number 2 [ 158.760931][ T5764] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 158.843311][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.852739][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.271791][ T5796] loop4: detected capacity change from 0 to 512 [ 160.393593][ T5795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 160.412962][ T5796] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 160.520525][ T5795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.455'. [ 160.573954][ T5796] EXT4-fs (loop4): 1 truncate cleaned up [ 160.579686][ T5796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 161.464831][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 161.698562][ T5819] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 163.245425][ T5847] fuse: Unknown parameter 'use00000000000000000000' [ 163.337691][ T5850] loop4: detected capacity change from 0 to 512 [ 163.404609][ T5850] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 163.678866][ T5850] EXT4-fs (loop4): 1 truncate cleaned up [ 163.707606][ T5850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 164.586274][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 164.705318][ T5876] loop4: detected capacity change from 0 to 1024 [ 164.741567][ T5876] hfsplus: invalid btree flag [ 164.746584][ T5876] hfsplus: failed to load catalog file [ 164.759641][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 164.938245][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.676171][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.802004][ T5885] fuse: Unknown parameter 'use00000000000000000000' [ 166.182976][ T5905] FAULT_INJECTION: forcing a failure. [ 166.182976][ T5905] name failslab, interval 1, probability 0, space 0, times 1 [ 166.218183][ T5905] CPU: 1 PID: 5905 Comm: syz.3.502 Not tainted syzkaller #0 [ 166.225542][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.235664][ T5905] Call Trace: [ 166.238943][ T5905] [ 166.241870][ T5905] dump_stack_lvl+0x188/0x24e [ 166.246609][ T5905] ? show_regs_print_info+0x12/0x12 [ 166.251811][ T5905] ? load_image+0x410/0x410 [ 166.256399][ T5905] ? __lock_acquire+0x7ea0/0x7ea0 [ 166.261446][ T5905] should_fail_ex+0x390/0x4c0 [ 166.266153][ T5905] should_failslab+0x5/0x20 [ 166.270696][ T5905] slab_pre_alloc_hook+0x59/0x300 [ 166.275755][ T5905] ? sock_kmalloc+0x92/0xf0 [ 166.280305][ T5905] __kmem_cache_alloc_node+0x4f/0x270 [ 166.285689][ T5905] ? sock_kmalloc+0x92/0xf0 [ 166.290200][ T5905] __kmalloc+0xa3/0x240 [ 166.294383][ T5905] sock_kmalloc+0x92/0xf0 [ 166.298717][ T5905] __ipv6_sock_mc_join+0x44e/0x7e0 [ 166.303847][ T5905] ipv6_mcast_join_leave+0x19f/0x230 [ 166.309131][ T5905] ? compat_ipv6_mcast_join_leave+0x230/0x230 [ 166.315214][ T5905] ? __local_bh_enable_ip+0x136/0x1c0 [ 166.320597][ T5905] ? _local_bh_enable+0xa0/0xa0 [ 166.325472][ T5905] do_ipv6_setsockopt+0x8d9/0x3c30 [ 166.330609][ T5905] ? sk_dst_reset+0xa0/0xa0 [ 166.335122][ T5905] ? __schedule+0x1087/0x4030 [ 166.339823][ T5905] ? mark_lock+0x94/0x320 [ 166.344167][ T5905] ? __lock_acquire+0x1359/0x7ea0 [ 166.349213][ T5905] ? release_firmware_map_entry+0x187/0x187 [ 166.355138][ T5905] ? futex_wait_queue+0x23/0x1b0 [ 166.360088][ T5905] ? aa_label_sk_perm+0x501/0x6b0 [ 166.365115][ T5905] ? verify_lock_unused+0x140/0x140 [ 166.370329][ T5905] ? aa_sk_perm+0x950/0x950 [ 166.374849][ T5905] ? __might_sleep+0xd0/0xd0 [ 166.379461][ T5905] ? __fget_files+0x28/0x460 [ 166.384059][ T5905] ? aa_sk_perm+0x81f/0x950 [ 166.388562][ T5905] ? aa_af_perm+0x340/0x340 [ 166.393059][ T5905] ? __fget_files+0x3fc/0x460 [ 166.397740][ T5905] ? aa_sock_opt_perm+0x74/0x100 [ 166.402683][ T5905] ipv6_setsockopt+0x55/0x190 [ 166.407355][ T5905] ? sock_common_recvmsg+0x190/0x190 [ 166.412635][ T5905] __sys_setsockopt+0x2bf/0x3d0 [ 166.417482][ T5905] __x64_sys_setsockopt+0xb1/0xc0 [ 166.422503][ T5905] do_syscall_64+0x4c/0xa0 [ 166.426918][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 166.431589][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 166.436266][ T5905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.442179][ T5905] RIP: 0033:0x7f15d079f559 [ 166.446596][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.466236][ T5905] RSP: 002b:00007f15d1719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.474674][ T5905] RAX: ffffffffffffffda RBX: 00007f15d0a25fa0 RCX: 00007f15d079f559 [ 166.482654][ T5905] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000005 [ 166.490658][ T5905] RBP: 00007f15d0836b20 R08: 0000000000000088 R09: 0000000000000000 [ 166.498635][ T5905] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 166.506608][ T5905] R13: 00007f15d0a26038 R14: 00007f15d0a25fa0 R15: 00007ffc63887f78 [ 166.514593][ T5905] [ 166.935865][ T5914] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.625924][ T5923] fuse: Unknown parameter 'use00000000000000000000' [ 167.651880][ T5918] device bridge_slave_0 left promiscuous mode [ 167.658791][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.854721][ T5927] netlink: 'syz.1.509': attribute type 14 has an invalid length. [ 167.905802][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 168.026841][ T5913] loop3: detected capacity change from 0 to 1024 [ 168.495444][ T5913] hfsplus: invalid btree flag [ 168.549296][ T5913] hfsplus: failed to load catalog file [ 170.152638][ T5955] ptrace attach of ""[5957] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5955] [ 171.337773][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 171.423563][ T5979] loop3: detected capacity change from 0 to 512 [ 171.450640][ T5979] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 171.802703][ T5979] EXT4-fs (loop3): 1 truncate cleaned up [ 171.818299][ T5979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 172.102191][ C0] hrtimer: interrupt took 70098 ns [ 172.672341][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 174.174092][ T6021] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.454054][ T6026] loop3: detected capacity change from 0 to 512 [ 175.361818][ T6033] loop4: detected capacity change from 0 to 1024 [ 179.574790][ T6063] loop3: detected capacity change from 0 to 32768 [ 179.798271][ T6063] XFS (loop3): Mounting V5 Filesystem [ 180.263354][ T4287] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 180.272386][ T4287] Bluetooth: hci3: Injecting HCI hardware error event [ 180.281510][ T4281] Bluetooth: hci3: hardware error 0x00 [ 180.354366][ T6114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.560'. [ 180.363555][ T6114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.560'. [ 180.785841][ T6063] XFS (loop3): Internal error (!rhead->h_version || (be32_to_cpu(rhead->h_version) & (~XLOG_VERSION_OKBITS))) at line 2945 of file fs/xfs/xfs_log_recover.c. Caller xlog_valid_rec_header+0x195/0x370 [ 180.882233][ T6063] CPU: 1 PID: 6063 Comm: syz.3.549 Not tainted syzkaller #0 [ 180.889598][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.899696][ T6063] Call Trace: [ 180.902996][ T6063] [ 180.905950][ T6063] dump_stack_lvl+0x188/0x24e [ 180.910660][ T6063] ? show_regs_print_info+0x12/0x12 [ 180.915898][ T6063] ? kmem_cache_free+0xf7/0x2a0 [ 180.920783][ T6063] xfs_corruption_error+0x11e/0x170 [ 180.926015][ T6063] ? xlog_valid_rec_header+0x195/0x370 [ 180.931512][ T6063] xlog_valid_rec_header+0x1e9/0x370 [ 180.936841][ T6063] ? xlog_valid_rec_header+0x195/0x370 [ 180.942349][ T6063] xlog_do_recovery_pass+0x965/0xd00 [ 180.947744][ T6063] ? lock_chain_count+0x20/0x20 [ 180.952608][ T6063] ? xlog_do_io+0x350/0x350 [ 180.957145][ T6063] ? xlog_verify_head+0xf3/0x440 [ 180.962076][ T6063] ? __kmem_cache_free+0xb6/0x200 [ 180.967097][ T6063] xlog_verify_head+0x137/0x440 [ 180.971952][ T6063] xlog_find_tail+0x6c6/0xa60 [ 180.976634][ T6063] xlog_recover+0x48/0x410 [ 180.981055][ T6063] xfs_log_mount+0x2b2/0x460 [ 180.985651][ T6063] xfs_mountfs+0xc03/0x1cb0 [ 180.990180][ T6063] ? xfs_default_resblks+0x70/0x70 [ 180.995295][ T6063] ? rcu_is_watching+0x11/0xa0 [ 181.000059][ T6063] ? trace_xfs_inode_timestamp_range+0xa8/0x250 [ 181.006305][ T6063] xfs_fs_fill_super+0x10f0/0x1350 [ 181.011451][ T6063] get_tree_bdev+0x3e6/0x610 [ 181.016043][ T6063] ? xfs_mount_set_dax_mode+0x100/0x100 [ 181.021612][ T6063] vfs_get_tree+0x88/0x270 [ 181.026028][ T6063] do_new_mount+0x247/0xa40 [ 181.030540][ T6063] __se_sys_mount+0x2e3/0x3d0 [ 181.035220][ T6063] ? __x64_sys_mount+0xc0/0xc0 [ 181.039993][ T6063] ? lockdep_hardirqs_on+0x94/0x140 [ 181.045205][ T6063] ? __x64_sys_mount+0x1c/0xc0 [ 181.049965][ T6063] do_syscall_64+0x4c/0xa0 [ 181.054378][ T6063] ? clear_bhb_loop+0x60/0xb0 [ 181.059067][ T6063] ? clear_bhb_loop+0x60/0xb0 [ 181.063756][ T6063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.069646][ T6063] RIP: 0033:0x7f15d07a07ca [ 181.074055][ T6063] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.093683][ T6063] RSP: 002b:00007f15d1718e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.102109][ T6063] RAX: ffffffffffffffda RBX: 00007f15d1718ee0 RCX: 00007f15d07a07ca [ 181.110072][ T6063] RDX: 00002000000000c0 RSI: 0000200000000280 RDI: 00007f15d1718ea0 [ 181.118035][ T6063] RBP: 00002000000000c0 R08: 00007f15d1718ee0 R09: 0000000000008000 [ 181.126002][ T6063] R10: 0000000000008000 R11: 0000000000000246 R12: 0000200000000280 [ 181.133964][ T6063] R13: 00007f15d1718ea0 R14: 00000000000097a7 R15: 0000200000000180 [ 181.141942][ T6063] [ 181.172275][ T6063] XFS (loop3): Corruption detected. Unmount and run xfs_repair [ 181.526560][ T6063] XFS (loop3): xlog_valid_rec_header: unrecognised log version (0). [ 181.680550][ T6063] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 182.204369][ T6063] XFS (loop3): Starting recovery (logdev: internal) [ 182.255081][ T6129] loop4: detected capacity change from 0 to 1024 [ 182.351339][ T6063] XFS (loop3): Ending recovery (logdev: internal) [ 182.651026][ T6063] XFS (loop3): Quotacheck needed: Please wait. [ 182.740409][ T6063] XFS (loop3): Quotacheck: Done. [ 182.782501][ T4281] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 182.820477][ T4277] XFS (loop3): Unmounting Filesystem [ 184.289747][ T6153] loop4: detected capacity change from 0 to 512 [ 184.403780][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 184.688357][ T6153] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 184.952816][ T6153] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.573: invalid indirect mapped block 256 (level 1) [ 185.002760][ T6153] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.573: invalid indirect mapped block 2683928664 (level 1) [ 185.027749][ T6153] EXT4-fs (loop4): 1 truncate cleaned up [ 185.052302][ T6153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 185.437235][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.573'. [ 185.446298][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.573'. [ 185.460591][ T6163] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.573: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 185.935039][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 185.997799][ T6169] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.196857][ T6175] netlink: 52 bytes leftover after parsing attributes in process `syz.0.578'. [ 186.209638][ T6175] tipc: Invalid UDP bearer configuration [ 186.209688][ T6175] tipc: Enabling of bearer rejected, failed to enable media [ 186.259603][ T6177] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 188.991560][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 189.001569][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 189.437442][ T6202] loop4: detected capacity change from 0 to 512 [ 189.549732][ T6207] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 189.581186][ T6200] loop4: detected capacity change from 0 to 512 [ 189.638185][ T6200] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.584: iget: bad extended attribute block 6 [ 189.700317][ T6200] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.584: couldn't read orphan inode 15 (err -117) [ 189.741077][ T6200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.061872][ T6221] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 13: comm syz.4.584: lblock 0 mapped to illegal pblock 13 (length 1) [ 190.083516][ T6221] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 13: comm syz.4.584: lblock 0 mapped to illegal pblock 13 (length 1) [ 190.282497][ T4346] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 190.484035][ T4346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.511030][ T4346] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.550655][ T4346] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 190.588256][ T4346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 190.629335][ T4346] usb 4-1: Product: syz [ 190.640912][ T4346] usb 4-1: Manufacturer: syz [ 190.884289][ T22] usb 4-1: USB disconnect, device number 3 [ 191.102370][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 191.108500][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 191.116066][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 191.122832][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 191.643759][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 194.147388][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.155587][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.439868][ T6269] fuse: Bad value for 'fd' [ 194.500139][ T6265] rxe_eth0 speed is unknown, defaulting to 1000 [ 194.714830][ T6274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.597'. [ 194.714907][ T6274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.597'. [ 196.828083][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 196.828105][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.603'. [ 197.097199][ T6270] tty tty4: ldisc open failed (-12), clearing slot 3 [ 197.190607][ T6300] sctp: [Deprecated]: syz.0.605 (pid 6300) Use of int in max_burst socket option deprecated. [ 197.190607][ T6300] Use struct sctp_assoc_value instead [ 197.377472][ T6297] overlayfs: failed to clone upperpath [ 198.224820][ T22] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.515817][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 198.533832][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.838782][ T6321] fuse: Unknown parameter '0x0000000000000003' [ 198.847842][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.019696][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.094116][ T22] usb 5-1: config 0 descriptor?? [ 199.116604][ T22] hub 5-1:0.0: bad descriptor, ignoring hub [ 199.183554][ T22] hub: probe of 5-1:0.0 failed with error -5 [ 199.203427][ T22] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 199.815494][ T6337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'. [ 199.824598][ T6337] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'. [ 201.112228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 201.132211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 201.142206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 201.152203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 201.162207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 201.172211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 201.185977][ T4346] usb 5-1: USB disconnect, device number 2 [ 201.402207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 201.412213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 201.422199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 201.432197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 201.690504][ T6355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.617'. [ 201.700064][ T6355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.617'. [ 203.150962][ T6352] loop4: detected capacity change from 0 to 512 [ 204.129313][ T6365] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 204.139645][ T6365] FAT-fs (loop4): Filesystem has been set read-only [ 205.247651][ T6376] fuse: Unknown parameter '0x0000000000000003' [ 206.803868][ T6399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 206.813406][ T6399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.631'. [ 207.785273][ T6407] tipc: Enabling of bearer rejected, failed to enable media [ 209.761902][ T6415] overlayfs: failed to clone upperpath [ 209.879952][ T6416] overlayfs: missing 'lowerdir' [ 210.901205][ T6422] fuse: Unknown parameter '0x0000000000000003' [ 213.234864][ T6430] device syzkaller0 entered promiscuous mode [ 214.469934][ T26] audit: type=1800 audit(1792589782.185:2): pid=6450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.647" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 215.498559][ T6463] fuse: Unknown parameter '0x0000000000000003' [ 221.179026][ T6509] fuse: Unknown parameter '0x0000000000000003' [ 221.379000][ T6513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.663'. [ 221.410373][ T6513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.663'. [ 222.835018][ T6516] rxe_eth0 speed is unknown, defaulting to 1000 [ 223.120031][ T6525] capability: warning: `syz.1.669' uses deprecated v2 capabilities in a way that may be insecure [ 226.232496][ T6554] rxe_eth0 speed is unknown, defaulting to 1000 [ 226.403599][ T6568] loop4: detected capacity change from 0 to 1024 [ 226.450249][ T6568] hfsplus: invalid btree flag [ 226.475882][ T6568] hfsplus: failed to load catalog file [ 227.225882][ T6586] fuse: Unknown parameter 'fd0x0000000000000003' [ 230.193293][ T6625] loop3: detected capacity change from 0 to 512 [ 230.244588][ T6627] fuse: Unknown parameter 'fd0x0000000000000003' [ 230.291141][ T6625] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 230.449483][ T6625] EXT4-fs (loop3): 1 truncate cleaned up [ 230.466746][ T6625] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 231.211963][ T26] audit: type=1326 audit(1792589798.925:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6632 comm="syz.1.702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbacf9f559 code=0x0 [ 231.410538][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.696'. [ 231.449854][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 231.499852][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 231.565676][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 231.644319][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 232.454122][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 233.300163][ T6680] loop3: detected capacity change from 0 to 512 [ 233.317733][ T6680] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 233.344431][ T6680] EXT4-fs (loop3): 1 truncate cleaned up [ 233.351995][ T6680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.260048][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 234.310158][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 234.339836][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 234.510078][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 234.769015][ T6706] loop4: detected capacity change from 0 to 1024 [ 234.818511][ T6706] hfsplus: invalid btree flag [ 234.823471][ T6706] hfsplus: failed to load catalog file [ 235.031997][ T6712] loop3: detected capacity change from 0 to 1024 [ 236.245944][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.726'. [ 236.850998][ T6744] loop3: detected capacity change from 0 to 512 [ 236.867214][ T6744] EXT4-fs: Ignoring removed nobh option [ 237.179678][ T6744] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.731: invalid indirect mapped block 256 (level 2) [ 237.281007][ T6744] EXT4-fs (loop3): 2 truncates cleaned up [ 237.309239][ T6744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.948347][ T6743] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.731: bg 0: block 5: invalid block bitmap [ 239.147564][ T6743] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 239.160411][ T6743] EXT4-fs (loop3): This should not happen!! Data will be lost [ 239.160411][ T6743] [ 239.170131][ T6743] EXT4-fs (loop3): Total free blocks count 0 [ 239.176191][ T6743] EXT4-fs (loop3): Free/Dirty block details [ 239.182148][ T6743] EXT4-fs (loop3): free_blocks=0 [ 239.187193][ T6743] EXT4-fs (loop3): dirty_blocks=33 [ 239.192370][ T6743] EXT4-fs (loop3): Block reservation details [ 239.198368][ T6743] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 239.353812][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 239.826880][ T6768] rxe_eth0 speed is unknown, defaulting to 1000 [ 241.144223][ T6790] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 241.153567][ T6790] overlayfs: missing 'lowerdir' [ 241.844656][ T6800] loop3: detected capacity change from 0 to 512 [ 241.871543][ T6800] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 242.227502][ T6800] EXT4-fs (loop3): 1 truncate cleaned up [ 242.351436][ T6800] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 242.592432][ T6798] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6807] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6798] [ 243.439047][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 243.485685][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 243.543687][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 243.636688][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 244.366106][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 244.731957][ T6847] loop3: detected capacity change from 0 to 512 [ 245.423743][ T6849] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.185155][ T6864] loop3: detected capacity change from 0 to 164 [ 246.353300][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 246.758860][ T6872] loop4: detected capacity change from 0 to 512 [ 246.878367][ T6872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.938096][ T6872] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.217969][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 247.521383][ T6877] ptrace attach of ""[6878] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6877] [ 247.671296][ T6889] loop4: detected capacity change from 0 to 1024 [ 249.714940][ T6902] using random self ethernet address [ 250.252629][ T6902] using random host ethernet address [ 250.733498][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 251.862995][ T6941] netlink: 'syz.1.783': attribute type 1 has an invalid length. [ 252.768311][ T6941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.031579][ T6947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.038715][ T6947] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 253.050040][ T6947] bond1: (slave gre1): Error -95 calling set_mac_address [ 253.794303][ T6950] device gretap1 entered promiscuous mode [ 253.866298][ T6941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.875082][ T6941] bond1: (slave bond2): Enslaving as an active interface with a down link [ 254.726965][ T6953] bond1 (unregistering): (slave bond2): Releasing active interface [ 254.848945][ T6953] bond1 (unregistering): Released all slaves [ 255.583591][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.590044][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.161699][ T6987] loop3: detected capacity change from 0 to 1024 [ 256.213431][ T6987] hfsplus: invalid btree flag [ 256.218346][ T6987] hfsplus: failed to load catalog file [ 256.367972][ T6988] ptrace attach of ""[6991] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[6988] [ 256.427084][ T6995] netlink: 48 bytes leftover after parsing attributes in process `syz.2.797'. [ 260.571286][ T7035] loop3: detected capacity change from 0 to 512 [ 260.622706][ T7035] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.810: bg 0: block 5: invalid block bitmap [ 260.652236][ T7035] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 260.661492][ T7035] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.810: invalid indirect mapped block 3 (level 2) [ 260.676924][ T7035] EXT4-fs (loop3): 1 orphan inode deleted [ 260.682776][ T7035] EXT4-fs (loop3): 1 truncate cleaned up [ 260.688575][ T7035] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 260.861210][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 261.005093][ T7044] loop3: detected capacity change from 0 to 512 [ 261.393113][ T4343] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 261.621860][ T4343] usb 5-1: Using ep0 maxpacket: 8 [ 261.730063][ T4343] usb 5-1: config 0 has no interfaces? [ 261.914729][ T4343] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 261.924178][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.932460][ T4343] usb 5-1: Product: syz [ 261.937806][ T4343] usb 5-1: Manufacturer: syz [ 261.943257][ T4343] usb 5-1: SerialNumber: syz [ 261.949592][ T4343] usb 5-1: config 0 descriptor?? [ 262.179902][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 262.254997][ T33] usb 5-1: USB disconnect, device number 3 [ 262.307402][ T7061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.816'. [ 262.912473][ T7064] loop3: detected capacity change from 0 to 512 [ 263.051122][ T7064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.111785][ T7064] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.030413][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 264.556554][ T7103] loop3: detected capacity change from 0 to 1024 [ 264.627359][ T7103] hfsplus: invalid btree flag [ 264.643966][ T7103] hfsplus: failed to load catalog file [ 265.684375][ T7117] syz.3.835 uses obsolete (PF_INET,SOCK_PACKET) [ 267.025282][ T7124] loop4: detected capacity change from 0 to 256 [ 267.112442][ T7124] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 267.788698][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 268.296730][ T7149] loop3: detected capacity change from 0 to 1024 [ 268.384490][ T7149] hfsplus: invalid btree flag [ 268.428438][ T7149] hfsplus: failed to load catalog file [ 268.450910][ T7159] loop4: detected capacity change from 0 to 512 [ 269.254345][ T7159] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 269.324743][ T7159] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.849: invalid indirect mapped block 256 (level 1) [ 269.431720][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 269.459710][ T7159] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.849: invalid indirect mapped block 2683928664 (level 1) [ 269.501823][ T7159] EXT4-fs (loop4): 1 truncate cleaned up [ 269.507647][ T7159] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 269.916762][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.849'. [ 269.925744][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.849'. [ 269.936113][ T7181] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.849: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 270.227378][ T7187] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 270.234408][ T7187] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 271.088637][ T7187] device hsr_slave_0 left promiscuous mode [ 271.108432][ T7187] device hsr_slave_1 left promiscuous mode [ 271.444967][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 271.866729][ T7202] ptrace attach of ""[7204] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7202] [ 272.258736][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 273.241314][ T7165] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 274.353078][ T7232] rxe_eth0 speed is unknown, defaulting to 1000 [ 274.403703][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 275.324768][ T7240] loop3: detected capacity change from 0 to 1024 [ 275.432204][ T7240] hfsplus: invalid btree flag [ 275.437116][ T7240] hfsplus: failed to load catalog file [ 275.483706][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 275.967336][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 275.977306][ T7251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 276.180324][ T7259] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 277.454297][ T7271] ptrace attach of ""[7273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7271] [ 279.884430][ T7297] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 280.158261][ T7307] loop3: detected capacity change from 0 to 512 [ 280.186404][ T7307] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 280.697781][ T7313] ptrace attach of ""[7315] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7313] [ 280.997721][ T7312] loop4: detected capacity change from 0 to 1024 [ 281.043142][ T7312] hfsplus: invalid btree flag [ 281.048050][ T7312] hfsplus: failed to load catalog file [ 281.062669][ T7307] EXT4-fs (loop3): 1 truncate cleaned up [ 281.068491][ T7307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 281.816883][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 281.999857][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 282.031181][ T4277] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 282.125626][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 282.180410][ T7331] rxe_eth0 speed is unknown, defaulting to 1000 [ 282.447482][ T7339] loop4: detected capacity change from 0 to 1024 [ 282.667069][ T7339] hfsplus: invalid btree flag [ 282.785192][ T7339] hfsplus: failed to load catalog file [ 283.295657][ T7345] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 285.455863][ T7370] loop4: detected capacity change from 0 to 1024 [ 285.490189][ T7370] hfsplus: invalid btree flag [ 285.505931][ T7370] hfsplus: failed to load catalog file [ 286.623209][ T7388] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 287.606473][ T7397] ptrace attach of ""[7399] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7397] [ 288.110617][ T7405] loop3: detected capacity change from 0 to 512 [ 288.137559][ T7405] ext4: Unknown parameter 'uid' [ 288.689354][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.925'. [ 288.698389][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.925'. [ 289.647739][ T7423] loop4: detected capacity change from 0 to 4096 [ 289.747527][ T7423] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 289.993091][ T4270] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 290.261768][ T7431] loop4: detected capacity change from 0 to 512 [ 290.278500][ T7433] loop3: detected capacity change from 0 to 512 [ 290.358949][ T7433] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.934: iget: bad extended attribute block 6 [ 290.431236][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 290.457812][ T7433] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.934: couldn't read orphan inode 15 (err -117) [ 290.524936][ T7433] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 290.732690][ T7441] loop4: detected capacity change from 0 to 164 [ 290.910024][ T7443] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 13: comm syz.3.934: lblock 0 mapped to illegal pblock 13 (length 1) [ 291.382336][ T7444] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 13: comm syz.3.934: lblock 0 mapped to illegal pblock 13 (length 1) [ 291.515716][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 291.637619][ T7451] loop3: detected capacity change from 0 to 1024 [ 291.675559][ T7451] hfsplus: invalid btree flag [ 291.686401][ T7451] hfsplus: failed to load catalog file [ 292.076808][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 292.085833][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 292.208321][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 295.949210][ T7502] ptrace attach of ""[7504] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7502] [ 298.097042][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 299.038492][ T7534] loop4: detected capacity change from 0 to 1024 [ 299.076537][ T7534] hfsplus: invalid btree flag [ 299.099865][ T7534] hfsplus: failed to load catalog file [ 299.280736][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.957'. [ 299.289698][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.957'. [ 299.897258][ T7539] loop3: detected capacity change from 0 to 1024 [ 300.083181][ T7539] hfsplus: invalid btree flag [ 300.170403][ T7539] hfsplus: failed to load catalog file [ 301.449692][ T7563] loop3: detected capacity change from 0 to 1024 [ 301.493304][ T7563] hfsplus: invalid btree flag [ 301.498203][ T7563] hfsplus: failed to load catalog file [ 301.919622][ T33] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 302.139509][ T33] usb 5-1: Using ep0 maxpacket: 32 [ 302.172052][ T33] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.235995][ T33] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.259455][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.292842][ T33] usb 5-1: config 0 descriptor?? [ 302.316416][ T33] hub 5-1:0.0: bad descriptor, ignoring hub [ 302.332260][ T33] hub: probe of 5-1:0.0 failed with error -5 [ 302.360449][ T33] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 303.304118][ T7581] ptrace attach of ""[7583] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7581] [ 304.169718][ T22] usb 5-1: USB disconnect, device number 4 [ 305.222559][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 305.485480][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 305.494597][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 306.517687][ T26] audit: type=1326 audit(2000000055.043:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.0.974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dd0d9f559 code=0x0 [ 306.623688][ T7611] loop4: detected capacity change from 0 to 512 [ 307.603247][ T7623] loop4: detected capacity change from 0 to 164 [ 307.691808][ T7625] loop3: detected capacity change from 0 to 1024 [ 307.822747][ T7547] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 307.847178][ T7625] hfsplus: invalid btree flag [ 307.864009][ T7625] hfsplus: failed to load catalog file [ 308.044678][ T7629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.979'. [ 308.053744][ T7629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.979'. [ 309.323251][ T7643] loop3: detected capacity change from 0 to 512 [ 309.330061][ T7644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 309.389690][ T7643] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 309.398377][ T7643] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.984: invalid indirect mapped block 256 (level 1) [ 309.412434][ T7643] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.984: invalid indirect mapped block 2683928664 (level 1) [ 309.429785][ T7643] EXT4-fs (loop3): 1 truncate cleaned up [ 309.446673][ T7643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 309.817789][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.984'. [ 309.827404][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.984'. [ 309.837719][ T7649] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.984: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 310.298682][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 310.758015][ T7659] ptrace attach of ""[7661] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7659] [ 311.656488][ T7668] ptrace attach of ""[7670] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7668] [ 312.371249][ T7675] loop4: detected capacity change from 0 to 1024 [ 312.457828][ T7675] hfsplus: invalid btree flag [ 312.469954][ T7675] hfsplus: failed to load catalog file [ 312.528826][ T4570] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 312.768809][ T4570] usb 4-1: Using ep0 maxpacket: 32 [ 312.775959][ T4570] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.814571][ T4570] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.842683][ T4570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.870814][ T4570] usb 4-1: config 0 descriptor?? [ 312.887155][ T4570] hub 4-1:0.0: bad descriptor, ignoring hub [ 312.899784][ T4570] hub: probe of 4-1:0.0 failed with error -5 [ 312.927712][ T4570] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 313.229988][ T7683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 313.239606][ T7683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.992'. [ 314.453832][ T4336] usb 4-1: USB disconnect, device number 4 [ 314.872984][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 315.207394][ T7709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.998'. [ 315.216762][ T7709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.998'. [ 315.601051][ T26] audit: type=1326 audit(2000000064.133:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7711 comm="syz.4.999" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff93c39f559 code=0x0 [ 315.756427][ T7713] loop4: detected capacity change from 0 to 512 [ 316.130648][ T7722] loop3: detected capacity change from 0 to 1024 [ 316.152094][ T7722] hfsplus: invalid btree flag [ 316.158467][ T7722] hfsplus: failed to load catalog file [ 316.325737][ T7713] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.999: iget: bad extended attribute block 6 [ 316.495776][ T7724] ptrace attach of ""[7725] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7724] [ 316.759240][ T7713] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.999: couldn't read orphan inode 15 (err -117) [ 316.808948][ T7713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 317.039113][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.162654][ T7732] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 13: comm syz.4.999: lblock 0 mapped to illegal pblock 13 (length 1) [ 317.563197][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.673871][ T7733] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 13: comm syz.4.999: lblock 0 mapped to illegal pblock 13 (length 1) [ 317.798094][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 317.883735][ T7740] loop3: detected capacity change from 0 to 512 [ 318.263453][ T7741] ptrace attach of ""[7743] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7741] [ 318.315475][ T7740] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 318.520959][ T7740] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1006: invalid indirect mapped block 256 (level 1) [ 318.601559][ T7740] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1006: invalid indirect mapped block 2683928664 (level 1) [ 318.673500][ T7740] EXT4-fs (loop3): 1 truncate cleaned up [ 318.709888][ T7740] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 319.018157][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 319.484026][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1006'. [ 319.493134][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1006'. [ 319.503755][ T7740] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1006: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 319.567733][ T7759] loop4: detected capacity change from 0 to 512 [ 319.690037][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 319.720981][ T7759] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 319.764140][ T7759] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1010: invalid indirect mapped block 256 (level 1) [ 319.808893][ T7759] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1010: invalid indirect mapped block 2683928664 (level 1) [ 319.873946][ T7759] EXT4-fs (loop4): 1 truncate cleaned up [ 319.886566][ T7759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 320.247781][ T7769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1010'. [ 320.257024][ T7769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1010'. [ 320.268113][ T7769] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.1010: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 320.612628][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 322.385117][ T7790] loop3: detected capacity change from 0 to 1024 [ 322.445986][ T7790] hfsplus: invalid btree flag [ 322.470240][ T7790] hfsplus: failed to load catalog file [ 322.488335][ T4383] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 323.188380][ T4383] usb 5-1: Using ep0 maxpacket: 32 [ 323.195588][ T4383] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.303028][ T4383] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 323.314088][ T4383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.354717][ T4383] usb 5-1: config 0 descriptor?? [ 323.365085][ T4383] hub 5-1:0.0: bad descriptor, ignoring hub [ 323.371505][ T4383] hub: probe of 5-1:0.0 failed with error -5 [ 323.379348][ T4383] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 323.929090][ T7808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1021'. [ 323.938227][ T7808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1021'. [ 324.143871][ T26] audit: type=1326 audit(2000000072.674:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7809 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dd0d9f559 code=0x0 [ 324.730801][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 326.018082][ T4383] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 326.231470][ T4570] usb 5-1: USB disconnect, device number 5 [ 326.378934][ T4383] usb 4-1: Using ep0 maxpacket: 32 [ 326.848691][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1027'. [ 326.857814][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1027'. [ 326.936757][ T4383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.986707][ T4383] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.014552][ T4383] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.118522][ T4383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.148045][ T4383] usb 4-1: config 0 descriptor?? [ 327.162628][ T4383] hub 4-1:0.0: USB hub found [ 327.454956][ T4383] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 327.801791][ T4383] usbhid 4-1:0.0: can't add hid device: -71 [ 327.811946][ T4383] usbhid: probe of 4-1:0.0 failed with error -71 [ 327.868763][ T4383] usb 4-1: USB disconnect, device number 5 [ 329.411836][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1036'. [ 330.495652][ T7884] loop3: detected capacity change from 0 to 512 [ 331.558422][ T7888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1038'. [ 331.567417][ T7888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1038'. [ 333.644180][ T7904] loop4: detected capacity change from 0 to 512 [ 333.704104][ T7904] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 333.742539][ T7904] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1042: invalid indirect mapped block 256 (level 1) [ 333.793677][ T7904] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1042: invalid indirect mapped block 2683928664 (level 1) [ 333.823123][ T7904] EXT4-fs (loop4): 1 truncate cleaned up [ 333.911250][ T7904] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 334.318632][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1042'. [ 334.327715][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1042'. [ 334.337897][ T7898] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.1042: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 334.646830][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 338.393866][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 338.573820][ T7944] loop4: detected capacity change from 0 to 512 [ 338.821918][ T7944] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 338.841257][ T7944] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1052: invalid indirect mapped block 256 (level 1) [ 338.947881][ T7944] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1052: invalid indirect mapped block 2683928664 (level 1) [ 339.068131][ T7944] EXT4-fs (loop4): 1 truncate cleaned up [ 339.114622][ T7944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 340.535749][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1052'. [ 340.545454][ T7965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1052'. [ 340.555571][ T7965] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.1052: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 340.586152][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1057'. [ 340.595229][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1057'. [ 340.825117][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 342.569851][ T7990] ptrace attach of ""[7992] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7990] [ 342.857475][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 343.067223][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 343.074602][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.117583][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.199734][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.229786][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.353972][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1063'. [ 343.581784][ T22] usb 5-1: config 0 descriptor?? [ 343.809957][ T22] hub 5-1:0.0: USB hub found [ 344.042384][ T8003] loop3: detected capacity change from 0 to 512 [ 344.396523][ T8007] loop3: detected capacity change from 0 to 164 [ 345.022668][ T22] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 345.106138][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 345.135253][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 345.159135][ T8014] loop3: detected capacity change from 0 to 512 [ 345.207946][ T22] usb 5-1: USB disconnect, device number 6 [ 345.312970][ T8014] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1066: iget: bad extended attribute block 6 [ 345.326736][ T8014] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1066: couldn't read orphan inode 15 (err -117) [ 345.347041][ T8014] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 346.215783][ T8028] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 13: comm syz.3.1066: lblock 0 mapped to illegal pblock 13 (length 1) [ 346.318157][ T8029] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 13: comm syz.3.1066: lblock 0 mapped to illegal pblock 13 (length 1) [ 347.437362][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 347.563222][ T8036] loop4: detected capacity change from 0 to 512 [ 347.694258][ T8036] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 347.735021][ T8036] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1072: invalid indirect mapped block 256 (level 1) [ 347.792761][ T8036] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1072: invalid indirect mapped block 2683928664 (level 1) [ 347.812264][ T8042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1070'. [ 347.821461][ T8042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1070'. [ 347.884844][ T8036] EXT4-fs (loop4): 1 truncate cleaned up [ 347.930188][ T8036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 348.954289][ T8047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1072'. [ 348.963458][ T8047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1072'. [ 348.977077][ T8047] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.1072: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 349.057755][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 349.499483][ T8019] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 349.582485][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 349.774228][ T8059] loop3: detected capacity change from 0 to 512 [ 349.892150][ T8061] loop4: detected capacity change from 0 to 1024 [ 349.953064][ T8061] hfsplus: invalid btree flag [ 350.005643][ T8061] hfsplus: failed to load catalog file [ 352.975928][ T8091] ptrace attach of ""[8093] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8091] [ 353.254744][ T8099] loop3: detected capacity change from 0 to 1024 [ 353.296878][ T8099] hfsplus: invalid btree flag [ 353.303128][ T8099] hfsplus: failed to load catalog file [ 353.530052][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1086'. [ 353.539320][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1086'. [ 353.552053][ T8100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1084'. [ 353.561153][ T8100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1084'. [ 354.851374][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 355.729376][ T8128] loop3: detected capacity change from 0 to 512 [ 355.794271][ T8123] rxe_eth0 speed is unknown, defaulting to 1000 [ 355.831134][ T8013] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 356.069841][ T8129] loop3: detected capacity change from 0 to 164 [ 356.474232][ T8133] loop4: detected capacity change from 0 to 512 [ 356.525373][ T8133] ext4: Unknown parameter 'uid' [ 356.875401][ T8136] loop3: detected capacity change from 0 to 512 [ 356.943898][ T8136] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1094: iget: bad extended attribute block 6 [ 356.972998][ T8136] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1094: couldn't read orphan inode 15 (err -117) [ 356.987712][ T8136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 357.177052][ T8146] loop4: detected capacity change from 0 to 512 [ 357.385431][ T8150] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 13: comm syz.3.1094: lblock 0 mapped to illegal pblock 13 (length 1) [ 357.508584][ T8152] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 13: comm syz.3.1094: lblock 0 mapped to illegal pblock 13 (length 1) [ 358.280584][ T8153] ptrace attach of ""[8155] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8153] [ 358.350715][ T8146] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 358.447077][ T8146] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1098: invalid indirect mapped block 256 (level 1) [ 358.486606][ T8146] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1098: invalid indirect mapped block 2683928664 (level 1) [ 358.532860][ T8146] EXT4-fs (loop4): 1 truncate cleaned up [ 358.546271][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 358.583874][ T8146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 358.823186][ T8158] loop3: detected capacity change from 0 to 1024 [ 358.893200][ T8158] hfsplus: invalid btree flag [ 358.902151][ T8158] hfsplus: failed to load catalog file [ 358.943091][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1098'. [ 358.952199][ T8159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1098'. [ 358.962366][ T8159] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.1098: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 359.203702][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 360.191724][ T8178] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 360.473665][ T8186] loop3: detected capacity change from 0 to 512 [ 360.494701][ T8186] ext4: Unknown parameter 'uid' [ 360.882849][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 361.470608][ T8204] ptrace attach of ""[8206] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8204] [ 362.003334][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1114'. [ 362.012423][ T8212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1114'. [ 363.682883][ T8236] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 363.791376][ T8240] loop4: detected capacity change from 0 to 1024 [ 364.381694][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1126'. [ 364.391059][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1126'. [ 364.695350][ T8253] loop4: detected capacity change from 0 to 512 [ 365.049021][ T8253] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 365.070436][ T8253] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1127: invalid indirect mapped block 256 (level 1) [ 365.114952][ T8253] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1127: invalid indirect mapped block 2683928664 (level 1) [ 365.132827][ T8253] EXT4-fs (loop4): 1 truncate cleaned up [ 365.139144][ T8253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 365.462935][ T8270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1127'. [ 365.472030][ T8270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1127'. [ 365.486419][ T8270] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.1127: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 365.982732][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 366.100058][ T8279] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 366.822118][ T8298] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1139'. [ 367.331659][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1140'. [ 367.343197][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1140'. [ 368.088535][ T8313] loop4: detected capacity change from 0 to 1024 [ 368.177643][ T8313] hfsplus: invalid btree flag [ 368.193137][ T8313] hfsplus: failed to load catalog file [ 368.539055][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1143'. [ 368.548270][ T8317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1143'. [ 369.384234][ T8335] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1150'. [ 370.016619][ T8347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1152'. [ 370.025764][ T8347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1152'. [ 371.545488][ T8365] ptrace attach of ""[8367] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8365] [ 371.836425][ T4343] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 372.056888][ T4343] usb 5-1: Using ep0 maxpacket: 32 [ 372.073214][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.131388][ T4343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.170115][ T4343] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 372.215961][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.261509][ T4343] usb 5-1: config 0 descriptor?? [ 372.306760][ T8371] rxe_eth0 speed is unknown, defaulting to 1000 [ 372.379135][ T4343] hub 5-1:0.0: USB hub found [ 372.800218][ T8354] ptrace attach of ""[8373] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8354] [ 373.165616][ T4570] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 373.375424][ T4570] usb 4-1: Using ep0 maxpacket: 32 [ 373.382524][ T4570] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.477187][ T4570] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.523687][ T4570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.552891][ T4570] usb 4-1: config 0 descriptor?? [ 373.581335][ T4570] hub 4-1:0.0: bad descriptor, ignoring hub [ 373.611934][ T4570] hub: probe of 4-1:0.0 failed with error -5 [ 373.664450][ T4570] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 373.854369][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1159'. [ 373.863557][ T8379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1159'. [ 374.475404][ T4343] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 374.489423][ T4343] usbhid 5-1:0.0: can't add hid device: -71 [ 374.505518][ T4343] usbhid: probe of 5-1:0.0 failed with error -71 [ 374.549253][ T4343] usb 5-1: USB disconnect, device number 7 [ 374.925701][ T4389] usb 4-1: USB disconnect, device number 6 [ 375.410823][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1168'. [ 375.419999][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1168'. [ 375.689315][ T8408] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 376.194339][ T8418] loop3: detected capacity change from 0 to 512 [ 376.245568][ T8419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1172'. [ 376.332090][ T8418] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 376.345810][ T8418] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1174: invalid indirect mapped block 256 (level 1) [ 376.546393][ T8418] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1174: invalid indirect mapped block 2683928664 (level 1) [ 376.711964][ T8427] ptrace attach of ""[8429] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8427] [ 376.887853][ T8418] EXT4-fs (loop3): 1 truncate cleaned up [ 376.953501][ T8418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 377.028800][ T8431] loop4: detected capacity change from 0 to 512 [ 377.039237][ T8431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 377.049423][ T8431] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 377.441668][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1174'. [ 377.450810][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1174'. [ 377.461035][ T8437] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1174: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 377.887797][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 378.180090][ T8445] rxe_eth0 speed is unknown, defaulting to 1000 [ 378.310975][ T8449] loop3: detected capacity change from 0 to 512 [ 378.387473][ T8449] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 378.406064][ T8449] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1182: invalid indirect mapped block 256 (level 1) [ 378.458671][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.465021][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.479630][ T8449] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1182: invalid indirect mapped block 2683928664 (level 1) [ 378.572540][ T8449] EXT4-fs (loop3): 1 truncate cleaned up [ 378.595120][ T8449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 379.005703][ T8452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1182'. [ 379.014822][ T8452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1182'. [ 379.029898][ T8452] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1182: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 379.453116][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 379.588972][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'. [ 379.893017][ T8456] ptrace attach of ""[8463] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8456] [ 381.450615][ T8488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1191'. [ 381.459681][ T8488] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1191'. [ 382.543536][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1197'. [ 382.857427][ T8502] rxe_eth0 speed is unknown, defaulting to 1000 [ 383.274036][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1195'. [ 383.283059][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1195'. [ 385.131704][ T8533] loop3: detected capacity change from 0 to 512 [ 385.826903][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1206'. [ 385.835970][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1206'. [ 386.078882][ T8013] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 386.372299][ T8548] loop3: detected capacity change from 0 to 164 [ 386.842740][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1210'. [ 386.851846][ T8550] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1210'. [ 387.598140][ T8560] rxe_eth0 speed is unknown, defaulting to 1000 [ 389.373429][ T8581] loop3: detected capacity change from 0 to 1024 [ 389.440588][ T8581] hfsplus: invalid btree flag [ 389.473229][ T8581] hfsplus: failed to load catalog file [ 390.437433][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1220'. [ 390.446532][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1220'. [ 390.886274][ T8593] loop3: detected capacity change from 0 to 512 [ 391.166042][ T8593] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 391.405256][ T8593] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1224: invalid indirect mapped block 256 (level 1) [ 391.678861][ T8593] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1224: invalid indirect mapped block 2683928664 (level 1) [ 392.023807][ T8593] EXT4-fs (loop3): 1 truncate cleaned up [ 392.033023][ T8593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 392.091171][ T8607] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.747980][ T8619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1224'. [ 392.757074][ T8619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1224'. [ 392.770904][ T8619] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #2: block 13: comm syz.3.1224: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 393.413340][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 393.791645][ T8634] ptrace attach of ""[8636] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8634] [ 395.162382][ T8651] ptrace attach of ""[8653] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8651] [ 397.384894][ T8677] loop3: detected capacity change from 0 to 1024 [ 397.512077][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1247'. [ 397.521502][ T8681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1247'. [ 398.095915][ T8675] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.908327][ T8703] loop3: detected capacity change from 0 to 1024 [ 398.981301][ T8703] hfsplus: invalid btree flag [ 399.025524][ T8703] hfsplus: failed to load catalog file [ 400.811146][ T8719] ptrace attach of ""[8721] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8719] [ 401.123877][ T4383] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 401.333950][ T4383] usb 4-1: Using ep0 maxpacket: 32 [ 401.343730][ T4383] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 401.433884][ T4383] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 401.499600][ T4383] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.513222][ T8728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1262'. [ 401.522311][ T8728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1262'. [ 401.763371][ T4383] usb 4-1: config 0 descriptor?? [ 401.964723][ T4383] hub 4-1:0.0: bad descriptor, ignoring hub [ 401.993328][ T4383] hub: probe of 4-1:0.0 failed with error -5 [ 402.005581][ T4383] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 403.563935][ T4346] usb 4-1: USB disconnect, device number 7 [ 403.625305][ T8758] loop3: detected capacity change from 0 to 512 [ 403.667039][ T8758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 403.720054][ T8758] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 403.784675][ T8758] loop3: detected capacity change from 0 to 512 [ 403.857571][ T8758] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.1273: iget: bad extended attribute block 6 [ 403.881359][ T8758] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1273: couldn't read orphan inode 15 (err -117) [ 403.915011][ T8758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 405.239177][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'. [ 405.248241][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1276'. [ 405.740890][ T8766] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 406.155622][ T8790] rxe_eth0 speed is unknown, defaulting to 1000 [ 407.524365][ T8790] EXT4-fs (loop3): unmounting filesystem. [ 409.376741][ T8843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1291'. [ 409.391458][ T8843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1291'. [ 410.707992][ T8860] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1301'. [ 411.468174][ T8868] ptrace attach of ""[8870] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8868] [ 413.052901][ T8891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1308'. [ 413.062069][ T8891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1308'. [ 417.275779][ T8933] ptrace attach of ""[8935] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8933] [ 418.729124][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1328'. [ 419.459574][ T8968] ptrace attach of ""[8971] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8968] [ 420.970429][ T8993] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 421.542574][ T8997] ptrace attach of ""[8999] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8997] [ 422.475014][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1341'. [ 424.807028][ T9045] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 425.203064][ T9058] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 427.867521][ T9096] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.604425][ T9100] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 428.612452][ T4278] [ 428.614792][ T4278] ====================================================== [ 428.621789][ T4278] WARNING: possible circular locking dependency detected [ 428.628816][ T4278] syzkaller #0 Not tainted [ 428.633239][ T4278] ------------------------------------------------------ [ 428.640264][ T4278] kworker/u5:2/4278 is trying to acquire lock: [ 428.646424][ T4278] ffffffff8ecd7e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 428.655831][ T4278] [ 428.655831][ T4278] but task is already holding lock: [ 428.663204][ T4278] ffffffff8ecb5728 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x393/0x810 [ 428.673753][ T4278] [ 428.673753][ T4278] which lock already depends on the new lock. [ 428.673753][ T4278] [ 428.684177][ T4278] [ 428.684177][ T4278] the existing dependency chain (in reverse order) is: [ 428.693203][ T4278] [ 428.693203][ T4278] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 428.700959][ T4278] __mutex_lock+0x12d/0xae0 [ 428.706133][ T4278] hci_remote_features_evt+0x464/0xa10 [ 428.712168][ T4278] hci_event_packet+0x806/0x1290 [ 428.717650][ T4278] hci_rx_work+0x3eb/0xd40 [ 428.722607][ T4278] process_one_work+0x8ab/0x1160 [ 428.728185][ T4278] worker_thread+0xaf5/0x12a0 [ 428.733400][ T4278] kthread+0x29d/0x330 [ 428.737999][ T4278] ret_from_fork+0x1f/0x30 [ 428.742985][ T4278] [ 428.742985][ T4278] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 428.750300][ T4278] __mutex_lock+0x12d/0xae0 [ 428.755346][ T4278] l2cap_chan_connect+0xfb/0xe20 [ 428.760906][ T4278] l2cap_sock_connect+0x576/0x750 [ 428.766482][ T4278] kernel_connect+0x13e/0x1c0 [ 428.771775][ T4278] rfcomm_dlc_open+0x600/0x10c0 [ 428.777168][ T4278] rfcomm_sock_connect+0x2e9/0x600 [ 428.782817][ T4278] __sys_connect+0x3cb/0x450 [ 428.787940][ T4278] __x64_sys_connect+0x76/0x80 [ 428.793257][ T4278] do_syscall_64+0x4c/0xa0 [ 428.798244][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.804676][ T4278] [ 428.804676][ T4278] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 428.812071][ T4278] __lock_acquire+0x3a03/0x7ea0 [ 428.817511][ T4278] lock_acquire+0x1bc/0x4a0 [ 428.822528][ T4278] __mutex_lock+0x12d/0xae0 [ 428.827645][ T4278] rfcomm_security_cfm+0x95/0x780 [ 428.833180][ T4278] hci_key_refresh_complete_evt+0x404/0x810 [ 428.839583][ T4278] hci_event_packet+0x806/0x1290 [ 428.845030][ T4278] hci_rx_work+0x3eb/0xd40 [ 428.849974][ T4278] process_one_work+0x8ab/0x1160 [ 428.855422][ T4278] worker_thread+0xaf5/0x12a0 [ 428.860611][ T4278] kthread+0x29d/0x330 [ 428.865182][ T4278] ret_from_fork+0x1f/0x30 [ 428.870118][ T4278] [ 428.870118][ T4278] other info that might help us debug this: [ 428.870118][ T4278] [ 428.880333][ T4278] Chain exists of: [ 428.880333][ T4278] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 428.880333][ T4278] [ 428.892832][ T4278] Possible unsafe locking scenario: [ 428.892832][ T4278] [ 428.900270][ T4278] CPU0 CPU1 [ 428.905622][ T4278] ---- ---- [ 428.910976][ T4278] lock(hci_cb_list_lock); [ 428.915464][ T4278] lock(&hdev->lock); [ 428.922057][ T4278] lock(hci_cb_list_lock); [ 428.929101][ T4278] lock(rfcomm_mutex); [ 428.933260][ T4278] [ 428.933260][ T4278] *** DEADLOCK *** [ 428.933260][ T4278] [ 428.941387][ T4278] 4 locks held by kworker/u5:2/4278: [ 428.946652][ T4278] #0: ffff888030203938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 428.956991][ T4278] #1: ffffc90003f57d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 428.968384][ T4278] #2: ffff88807dbb4428 (&hdev->lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x3e/0x810 [ 428.978725][ T4278] #3: ffffffff8ecb5728 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_key_refresh_complete_evt+0x393/0x810 [ 428.989588][ T4278] [ 428.989588][ T4278] stack backtrace: [ 428.995465][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 429.003009][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 429.013078][ T4278] Workqueue: hci2 hci_rx_work [ 429.017748][ T4278] Call Trace: [ 429.021020][ T4278] [ 429.023948][ T4278] dump_stack_lvl+0x188/0x24e [ 429.028634][ T4278] ? load_image+0x410/0x410 [ 429.033179][ T4278] ? show_regs_print_info+0x12/0x12 [ 429.038381][ T4278] ? print_circular_bug+0x12b/0x1a0 [ 429.043583][ T4278] check_noncircular+0x2f8/0x400 [ 429.048512][ T4278] ? print_deadlock_bug+0x5d0/0x5d0 [ 429.053697][ T4278] ? lockdep_lock+0xf1/0x1f0 [ 429.058276][ T4278] ? _find_first_zero_bit+0xd2/0x100 [ 429.063571][ T4278] __lock_acquire+0x3a03/0x7ea0 [ 429.068414][ T4278] ? verify_lock_unused+0x140/0x140 [ 429.073865][ T4278] lock_acquire+0x1bc/0x4a0 [ 429.078357][ T4278] ? rfcomm_security_cfm+0x95/0x780 [ 429.083540][ T4278] ? trace_contention_end+0x5f/0x170 [ 429.088818][ T4278] ? __mutex_lock+0x1ab/0xae0 [ 429.093495][ T4278] ? __might_sleep+0xd0/0xd0 [ 429.098146][ T4278] ? read_lock_is_recursive+0x10/0x10 [ 429.103515][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 429.109143][ T4278] ? mutex_unlock+0x10/0x10 [ 429.113653][ T4278] __mutex_lock+0x12d/0xae0 [ 429.118175][ T4278] ? rfcomm_security_cfm+0x95/0x780 [ 429.123395][ T4278] ? l2cap_disconn_cfm+0xc0/0xc0 [ 429.128356][ T4278] ? rfcomm_security_cfm+0x95/0x780 [ 429.133565][ T4278] ? mutex_lock_nested+0x10/0x10 [ 429.138500][ T4278] ? trace_contention_end+0x5f/0x170 [ 429.143778][ T4278] ? __mutex_lock+0x1ab/0xae0 [ 429.148453][ T4278] ? l2cap_disconn_cfm+0xc0/0xc0 [ 429.153380][ T4278] rfcomm_security_cfm+0x95/0x780 [ 429.158391][ T4278] ? mutex_lock_nested+0x10/0x10 [ 429.163317][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 429.168938][ T4278] ? rfcomm_send_msc+0x350/0x350 [ 429.173875][ T4278] ? hci_conn_hash_lookup_handle+0x20/0x240 [ 429.179778][ T4278] ? hci_conn_hash_lookup_handle+0x22e/0x240 [ 429.185741][ T4278] ? rfcomm_send_msc+0x350/0x350 [ 429.190683][ T4278] hci_key_refresh_complete_evt+0x404/0x810 [ 429.196741][ T4278] ? hci_extended_inquiry_result_evt+0x790/0x790 [ 429.203057][ T4278] hci_event_packet+0x806/0x1290 [ 429.207986][ T4278] ? lock_chain_count+0x20/0x20 [ 429.212918][ T4278] ? bis_list+0x280/0x280 [ 429.217271][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 429.223163][ T4278] ? kcov_remote_start+0x50f/0x810 [ 429.228314][ T4278] ? lockdep_hardirqs_on+0x94/0x140 [ 429.233564][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 429.238755][ T4278] hci_rx_work+0x3eb/0xd40 [ 429.243157][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 429.247990][ T4278] ? process_one_work+0x7b4/0x1160 [ 429.253101][ T4278] process_one_work+0x8ab/0x1160 [ 429.258033][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 429.263647][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 429.268678][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 429.274218][ T4278] ? wq_worker_running+0x97/0x190 [ 429.279267][ T4278] worker_thread+0xaf5/0x12a0 [ 429.283949][ T4278] kthread+0x29d/0x330 [ 429.288006][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 429.293015][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 429.297601][ T4278] ret_from_fork+0x1f/0x30 [ 429.302006][ T4278] [ 435.412027][ T4278] Bluetooth: hci2: command 0x0406 tx timeout