last executing test programs: 13m44.537119469s ago: executing program 2 (id=20): syz_emit_ethernet(0xe, &(0x7f0000000780)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca}}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, 0x0, 0x1e3401, 0x26) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) 13m44.344426813s ago: executing program 2 (id=23): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) setns(0xc9, 0x0) socket(0x14, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x30e1, 0x0, 0xfffffffe, 0xf4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13m43.108642102s ago: executing program 2 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000440)="2e9b5b00ace03dd65193dfb6c5619a3d86dd60670600001411120000", 0x1c}, {&(0x7f0000000740)="37bcb39800000000f66b8157b45046eb15ff314c846dbc0f31fa4cc9f829", 0x1e}], 0x2) 13m42.712934892s ago: executing program 2 (id=28): socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = syz_io_uring_setup(0xf07, &(0x7f00000004c0)={0x0, 0x595d, 0x0, 0x20002, 0x51}, 0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000780)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 13m42.496658917s ago: executing program 2 (id=29): syz_mount_image$affs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x14880, &(0x7f0000000280)={[{@verbose}, {@reserved={'reserved', 0x3d, 0x841b}}, {@setuid}, {@setuid}, {@setgid}, {@mode={'mode', 0x3d, 0x8}}, {@bs={'bs', 0x3d, 0x1200}}, {@reserved={'reserved', 0x3d, 0x800}}, {@root={'root', 0x3d, 0x3}}, {@reserved={'reserved', 0x3d, 0xc}}]}, 0x1, 0x9e27, &(0x7f0000000380)="$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") 13m42.253967193s ago: executing program 2 (id=30): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 13m26.271609312s ago: executing program 32 (id=30): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 13m14.431352668s ago: executing program 1 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x3, 0xac5) syz_clone3(&(0x7f0000000280)={0x23800000, &(0x7f0000000480), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, &(0x7f0000000180)) 13m11.142249937s ago: executing program 1 (id=95): syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000480)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0xc8b573f2c15a223a) getdents64(r0, 0x0, 0x0) 13m10.780191816s ago: executing program 1 (id=96): socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r0 = syz_io_uring_setup(0xf07, &(0x7f00000004c0)={0x0, 0x595d, 0x0, 0x20002, 0x51}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 13m10.369031056s ago: executing program 1 (id=97): syz_mount_image$exfat(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x200800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224, @ANYRES64, @ANYRES16, @ANYRES16], 0x9, 0x155d, &(0x7f0000000840)="$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") syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) pipe2$9p(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000002140)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000002180)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000021c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240), 0x4, &(0x7f0000002280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}, {@noextend}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000001e40)='./file0\x00', 0x109000, 0x93) 13m9.601135584s ago: executing program 1 (id=99): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x800000000000000) 13m3.369074335s ago: executing program 1 (id=108): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {&(0x7f00000002c0)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000840)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001940)={0x2, 0x0, {&(0x7f0000001bc0)=""/151, 0x97, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001a80)={0x2, 0x0, {&(0x7f0000001b00)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 13m1.93742412s ago: executing program 33 (id=108): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000240)={0x2, 0x0, {&(0x7f00000002c0)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000840)=""/4096, 0x1000, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001940)={0x2, 0x0, {&(0x7f0000001bc0)=""/151, 0x97, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001a80)={0x2, 0x0, {&(0x7f0000001b00)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 13.536086603s ago: executing program 0 (id=2290): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xb8}, 0x3400c8d4) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x49, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x80000005, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0xea4, 0x0, 0x1, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x8, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12d, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x8007e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 10.987960564s ago: executing program 0 (id=2290): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xb8}, 0x3400c8d4) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x49, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x80000005, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0xea4, 0x0, 0x1, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x8, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12d, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x8007e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 8.580299262s ago: executing program 0 (id=2290): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xb8}, 0x3400c8d4) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x49, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x80000005, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0xea4, 0x0, 0x1, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x8, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12d, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x8007e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 6.499831822s ago: executing program 4 (id=2494): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="1b", 0x1}], 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000280), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0xe) write(r2, 0x0, 0x0) 6.21429788s ago: executing program 0 (id=2290): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xb8}, 0x3400c8d4) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x49, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x80000005, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0xea4, 0x0, 0x1, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x8, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12d, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x8007e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 4.071964341s ago: executing program 4 (id=2500): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x7, @empty, 0xfc}}}, 0x118) 3.979166153s ago: executing program 5 (id=2502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x894e8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f00000000c0), 0x0, 0x489, &(0x7f0000000440)="$eJzs3M9vFFUcAPDvzG6LUqCIiMoPqaKx8UdrCyoHD2r05sFED55MmrYQZKGGlkQI0WoMHr14N56M0b/Ak16MejLxqndDQpSYgB50zezOlO3S3f7adov7+SRT3tt9y3vfnXkzb97b3QB61lD2J4nYERG/RMRgPbu4wFD9nxvXLk3+de3SZBLV6mu/J7Vy169dmiyKFq8byDPDaUT6YZJXstjshYunJyqV6XN5fnTuzNujsxcuPnnqzMTJ6ZPTZ8ePHz92dOzZZ8af7kicWVzX9787czApWvnDV+WI2HeonmuMY13SgYXkUBb4H9Wa5mKPdKSyrWNnQzopd7EhrEopIrLd1Vfr/4NRips7bzBe/qCrjQM2VHZt2tb66fkq8D+WRLdbAHRHcaHP7n+LbeWjh/n1Dj+67uoL9RugLO4b+VZ/phxpXqZvA+u/LyLemP/702yLfD/8s2OJgvcPbGArAIBe8k02/nliqfFfGvsayu3K11B2R8RdEbEnIu6OiL0RcU9Erey9+XhmZfob0qWF1K3jz/TKmoNbgWz891y+trV4/Fcf/VWr1X9LeW5nLf6+5MSpyvRT+XsyHH3bsvxYmzq+fennj5seGi8G3kMN479sy+ovxoJ5O66UmybopibmJjo1KL36fsT+8lLxJwsrAUk2/IyI/av7r3cViVOPfXGwVaHl42+jA+tM1c8iHq3v//loir+QtF+fHL0jKv0xWhwVt/rxp8uvtqp/XfF3QLb/ty8+/ptKDP6ZNK7Xzq6+jsu/ftTynnKtx39/8nptzbo4i7wzMTd3biyiP3mlll/0+PjN1xb5onwW//CRpfv/nvw1WfwHIiI7iA9FxAMRcThv+4MR8VBEHGkT//cvPvzW2uPfWFn8U0ue/xaO/92L9//qE6XT333dqv6V7f9jtdRw/kjt/LeM1s2JynR2Wl/z0QwAAAC3nzQidkSSjiyk03RkpP4Z/r2xPa3MzM49fmLm/Nmp+ncEdkdfWsx0Debzodnd9lhSfBagPj86ns8VF/OlR/N5409Kd9byI5Mzlakuxw69bqBF/8/8Vup264AN5/ta0Lua+3/apXYAm8/1H3pXy/5ffn5zGwJsunLTb/4AvaPh+v/l+csHaon3an8PLzyx5FpAm18OAW4P7v+hd+n/0Lv0f+hd+j/0pPV8r39rJ/q3RjNWn/i8b0s0Y7lEpO3KvBmb3rDYEm9LpxNJ2x+z2MBEt89MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfFfAAAA///Pe+92") r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "823d"}, @eol]}}}}}}}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000002c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0xfff) timer_settime(0x0, 0x0, &(0x7f0000000980)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(r4, &(0x7f0000000b80)={0x2, 0x4e20, @loopback}, 0x10) timer_settime(r3, 0x1, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000bc0), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000c00)={0x980912}) 3.955471584s ago: executing program 4 (id=2503): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000040)=0x51) 3.955328714s ago: executing program 3 (id=2504): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004f00)={0x6, 0x14, &(0x7f0000004fc0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000005080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000050c0)={{r0}, &(0x7f0000005100), &(0x7f0000005140)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}}}}}}, 0x0) 3.839131447s ago: executing program 3 (id=2505): openat2$dir(0xffffffffffffff9c, &(0x7f00000025c0)='./cgroup\x00', 0x0, 0x0) 3.749042289s ago: executing program 4 (id=2506): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000340)={0x0, 0x9d4, 0x1, 0x2, 0x31e, 0x0, r3}, 0x0, 0x4, &(0x7f0000001dc0)={0x2e, 0x2, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, r0, '\x00', {0x1, 0xf8c, 0x0, 0x0}}, 0x0) 3.69497586s ago: executing program 3 (id=2507): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.509088825s ago: executing program 5 (id=2508): openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000280)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x4020744f, 0x0) 3.377588348s ago: executing program 5 (id=2509): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000001c0)="29000000010001", 0x7) 3.331091019s ago: executing program 0 (id=2290): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xb8}, 0x3400c8d4) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x49, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x80000005, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0xea4, 0x0, 0x1, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x8, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12d, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x8007e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 913.477008ms ago: executing program 5 (id=2510): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x2, {{0xa, 0x1, 0x1, @local}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000000000000a004e24000019c3ff0100000000000000000000000000010100"/67], 0x90) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x794, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in6=@loopback, {0x4, 0x192, 0x6, 0xffff, 0x3, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES32], 0x138}, 0x1, 0x0, 0x0, 0x48805}, 0x4000004) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x20000080) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') 910.671318ms ago: executing program 4 (id=2511): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000300)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0xc2, 0x0, 0x0) close(0x3) 908.582318ms ago: executing program 3 (id=2512): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./trace\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/error_log\x00', 0x20000, 0x4) pread64(r0, &(0x7f0000000500)=""/145, 0x91, 0x7fffffff) 843.064689ms ago: executing program 5 (id=2513): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004f00)={0x6, 0x14, &(0x7f0000004fc0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000005080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000050c0)={{r0}, &(0x7f0000005100), &(0x7f0000005140)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000005180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}}}}}}, 0x0) 808.9629ms ago: executing program 4 (id=2514): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000780)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000740)=@any_dev={0x4, 0x9bb, 0x0, 0x0, 0x1000, 0x90000000, 0x0, 0x0, 0x144}}}, &(0x7f0000000800)=0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r2, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x2000, 0x1, 0xcd}}], 0x1, 0x0, 0x0) 681.152263ms ago: executing program 3 (id=2515): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000d00)={0x1, &(0x7f0000000d40)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 642.145054ms ago: executing program 5 (id=2516): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa8800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001400192340834b80043f679a10ff3d425f0600000000000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1) mknodat(0xffffffffffffffff, 0x0, 0x20, 0x3) r4 = open$dir(0x0, 0x2280, 0x2) mknodat$loop(r4, &(0x7f0000000500)='./dev\x00', 0x200, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)={0x408000, 0x50, 0x14}, 0x18) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0x0, &(0x7f0000000840)=0x0) capset(0x0, &(0x7f00000008c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_ublk_add_dev(r5, 0x0, 0x0, r6, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000037c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setxattr$security_capability(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f0000003780)=@v3={0x3000000, [{0x8, 0x2}, {0x8, 0xb}], r7}, 0x18, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 559.681936ms ago: executing program 3 (id=2517): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0/file1\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000840)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000940)='./file0/file1\x00', 0x200) 0s ago: executing program 0 (id=2290): syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0xb8}, 0x3400c8d4) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000040)=0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x49, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x7, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x3, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x80000005, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x4, 0xea4, 0x0, 0x1, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f3, 0x5, 0x8, 0x8, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12d, 0x4, 0x1, 0xa, 0x0, 0x7, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x8, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x8007e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) kernel console output (not intermixed with test programs): zkaller0: entered promiscuous mode [ 365.141269][ T9289] syzkaller0: entered allmulticast mode [ 365.433847][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.992856][ T9301] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 366.433262][ T9313] loop4: detected capacity change from 0 to 512 [ 366.495895][ T9313] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.802: couldn't read orphan inode 26 (err -116) [ 366.544710][ T9313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.557997][ T9313] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.569335][ T5871] IPVS: starting estimator thread 0... [ 366.615900][ T9323] loop5: detected capacity change from 0 to 512 [ 366.669961][ T9323] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 366.712672][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.723837][ T9324] IPVS: using max 18 ests per chain, 43200 per kthread [ 366.820332][ T9323] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.798: bg 0: block 255: padding at end of block bitmap is not set [ 366.839750][ T9323] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 366.865105][ T9323] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.798: invalid indirect mapped block 1 (level 1) [ 367.285012][ T9323] EXT4-fs (loop5): 1 truncate cleaned up [ 367.308074][ T9323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.459374][ T6120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.555666][ T6353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.718497][ T9358] loop5: detected capacity change from 0 to 512 [ 369.799192][ T9358] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.815: couldn't read orphan inode 26 (err -116) [ 369.834419][ T9358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.849157][ T9358] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.959479][ T9365] loop4: detected capacity change from 0 to 8192 [ 369.986411][ T9365] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 370.089353][ T9365] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 370.115406][ T9365] REISERFS (device loop4): using ordered data mode [ 370.122070][ T9365] reiserfs: using flush barriers [ 370.348072][ T9365] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 370.565262][ T9365] REISERFS (device loop4): checking transaction log (loop4) [ 370.792750][ T6353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.928929][ T9365] REISERFS (device loop4): Using tea hash to sort names [ 370.969844][ T9365] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 370.989931][ T9374] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 371.193658][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.469703][ T28] audit: type=1800 audit(1792120632.997:17): pid=9400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.826" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 372.526361][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.540694][ T9406] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 376.135279][ T9419] loop5: detected capacity change from 0 to 32768 [ 376.172695][ T9419] (syz.5.833,9419,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 376.215804][ T9419] (syz.5.833,9419,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 376.697654][ T9419] JBD2: Ignoring recovery information on journal [ 376.956285][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.085051][ T9419] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 377.320107][ T9425] loop4: detected capacity change from 0 to 32768 [ 378.047268][ T9425] (syz.4.835,9425,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 378.092835][ T9425] (syz.4.835,9425,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 378.150178][ T9425] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 378.187347][ T9425] JBD2: Ignoring recovery information on journal [ 378.223812][ T9425] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 378.418729][ T6353] ocfs2: Unmounting device (7,5) on (node local) [ 378.596105][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 378.880953][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.915727][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.926985][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.369760][ T9459] loop5: detected capacity change from 0 to 32768 [ 382.397680][ T9459] (syz.5.840,9459,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 382.505384][ T9459] (syz.5.840,9459,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 382.619527][ T9459] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 382.619949][ T9459] (syz.5.840,9459,1):ocfs2_initialize_super:2283 ERROR: status = -12 [ 382.698291][ T9459] (syz.5.840,9459,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 382.712705][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.143114][ T9490] loop4: detected capacity change from 0 to 4096 [ 383.192792][ T9440] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 383.216033][ T9487] loop0: detected capacity change from 0 to 32768 [ 383.396212][ T9487] (syz.0.849,9487,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 383.749120][ T9487] (syz.0.849,9487,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 383.979339][ T9487] JBD2: Ignoring recovery information on journal [ 384.318738][ T9487] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 384.633583][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.550940][ T9506] loop5: detected capacity change from 0 to 1024 [ 388.322359][ T28] audit: type=1800 audit(1792120648.717:18): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.855" name="syzkaller0" dev="sda1" ino=2046 res=0 errno=0 [ 388.482565][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.652967][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 388.673772][ T9522] loop4: detected capacity change from 0 to 1024 [ 390.291617][ T9530] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 390.583360][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.065465][ T9540] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.507910][ T9548] loop0: detected capacity change from 0 to 1024 [ 392.567883][ T9548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.072022][ T9558] loop4: detected capacity change from 0 to 32768 [ 394.111378][ T9558] (syz.4.868,9558,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 394.147000][ T9558] (syz.4.868,9558,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 394.204846][ T9558] JBD2: Ignoring recovery information on journal [ 394.236999][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.305405][ T9558] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 395.833265][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 395.879083][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.115985][ T9574] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 396.364939][ T9566] loop5: detected capacity change from 0 to 32768 [ 397.421570][ T9566] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 397.452628][ T4659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.171180][ T9566] XFS (loop5): Ending clean mount [ 398.209172][ T6353] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 398.495801][ T9603] loop0: detected capacity change from 0 to 1024 [ 400.062364][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.160230][ T9630] loop5: detected capacity change from 0 to 16 [ 402.197638][ T9630] erofs: (device loop5): mounted with root inode @ nid 36. [ 402.683251][ T9633] erofs: (device loop5): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 402.694349][ T9633] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 402.704581][ T9633] erofs: (device loop5): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 402.714730][ T9633] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 402.725094][ T9633] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 403.202197][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.998961][ T9644] loop4: detected capacity change from 0 to 512 [ 404.497323][ T9644] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.890: couldn't read orphan inode 26 (err -116) [ 404.550712][ T9644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.594561][ T9644] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.668951][ T9637] loop5: detected capacity change from 0 to 32768 [ 404.726220][ T9637] (syz.5.887,9637,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 404.929389][ T9637] (syz.5.887,9637,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 405.020510][ T9637] JBD2: Ignoring recovery information on journal [ 405.518600][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.026585][ T9637] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 406.168248][ T9648] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 406.359087][ T6120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.718049][ T9666] (syz.5.887,9666,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 406.755958][ T9666] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 406.776142][ T9666] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 406.786380][ T9666] OCFS2: Returning error to the calling process. [ 406.793071][ T9666] (syz.5.887,9666,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 406.802563][ T9666] (syz.5.887,9666,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 406.811001][ T9666] (syz.5.887,9666,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 406.820663][ T9666] (syz.5.887,9666,0):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 406.829156][ T9666] (syz.5.887,9666,0):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 407.201456][ T6353] ocfs2: Unmounting device (7,5) on (node local) [ 407.506635][ T9677] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.515149][ T9677] netlink: 6 bytes leftover after parsing attributes in process `syz.3.898'. [ 408.957904][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 409.234683][ T9673] loop4: detected capacity change from 0 to 32768 [ 409.260634][ T9673] (syz.4.897,9673,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 409.286612][ T9673] (syz.4.897,9673,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 409.307198][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 409.318566][ T5776] CPU: 0 PID: 5776 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 409.326370][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 409.336464][ T5776] Workqueue: hci0 hci_rx_work [ 409.341378][ T5776] Call Trace: [ 409.344889][ T5776] [ 409.348021][ T5776] dump_stack_lvl+0x18c/0x250 [ 409.350653][ T9673] JBD2: Ignoring recovery information on journal [ 409.352823][ T5776] ? show_regs_print_info+0x20/0x20 [ 409.352955][ T5776] ? load_image+0x420/0x420 [ 409.353009][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 409.353093][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 409.353139][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 409.353165][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 409.353197][ T5776] kobject_add_internal+0x617/0xc90 [ 409.353268][ T5776] kobject_add+0x164/0x240 [ 409.353297][ T5776] ? kobject_init+0x1d0/0x1d0 [ 409.403882][ T5776] ? get_device_parent+0x366/0x390 [ 409.409107][ T5776] device_add+0x3fa/0xc40 [ 409.413552][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 409.414051][ T9673] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 409.418632][ T5776] le_conn_complete_evt+0xe9a/0x1480 [ 409.432969][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 409.439275][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 409.445013][ T5776] ? mutex_unlock+0x10/0x10 [ 409.449568][ T5776] ? skb_pull_data+0xf0/0x1f0 [ 409.454397][ T5776] hci_le_enh_conn_complete_evt+0x189/0x460 [ 409.460368][ T5776] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 409.466932][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 409.473137][ T5776] hci_event_packet+0x7b4/0x1280 [ 409.478284][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 409.483449][ T5776] ? lock_chain_count+0x20/0x20 [ 409.488353][ T5776] ? bis_list+0x290/0x290 [ 409.492708][ T5776] ? kcov_remote_start+0x513/0x810 [ 409.497905][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 409.503135][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 409.508375][ T5776] hci_rx_work+0x43a/0xd60 [ 409.512839][ T5776] ? process_scheduled_works+0x975/0x1600 [ 409.518806][ T5776] process_scheduled_works+0xa60/0x1600 [ 409.524383][ T5776] ? worker_attach_to_pool+0x370/0x370 [ 409.529886][ T5776] ? assign_work+0x3cc/0x5d0 [ 409.534664][ T5776] worker_thread+0xa5e/0xfe0 [ 409.539362][ T5776] kthread+0x2fa/0x390 [ 409.543524][ T5776] ? pr_cont_work+0x550/0x550 [ 409.548222][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 409.552827][ T5776] ret_from_fork+0x48/0x80 [ 409.557305][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 409.562117][ T5776] ret_from_fork_asm+0x11/0x20 [ 409.567143][ T5776] [ 409.572896][ T5776] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 409.587214][ T5776] Bluetooth: hci0: failed to register connection device [ 410.531549][ T9695] overlayfs: upper fs does not support tmpfile. [ 410.545480][ T9695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 410.562674][ T9695] overlayfs: upper fs missing required features. [ 410.648229][ T9701] loop5: detected capacity change from 0 to 512 [ 410.847708][ T9701] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.901: couldn't read orphan inode 26 (err -116) [ 410.883598][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.917596][ T9701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.931186][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 410.952616][ T9701] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.274104][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 411.976086][ T6353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.951741][ T9717] loop5: detected capacity change from 0 to 32768 [ 414.007007][ T9717] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 414.132429][ T9717] XFS (loop5): Ending clean mount [ 414.263141][ T9741] IPv6: NLM_F_CREATE should be specified when creating new route [ 414.271571][ T9741] netlink: 6 bytes leftover after parsing attributes in process `syz.4.910'. [ 414.642690][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 414.735871][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.043907][ T6353] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 415.061777][ T8] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 415.089454][ T8] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 415.116372][ T8] usb 5-1: Product: syz [ 415.130919][ T8] usb 5-1: SerialNumber: syz [ 415.144010][ T8] usb 5-1: config 0 descriptor?? [ 416.646170][ T9759] loop5: detected capacity change from 0 to 4096 [ 416.737779][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.125652][ T8] usb 5-1: USB disconnect, device number 2 [ 417.420934][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 417.432714][ T5776] CPU: 1 PID: 5776 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 417.440318][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.450615][ T5776] Workqueue: hci1 hci_rx_work [ 417.455350][ T5776] Call Trace: [ 417.458644][ T5776] [ 417.461570][ T5776] dump_stack_lvl+0x18c/0x250 [ 417.466286][ T5776] ? show_regs_print_info+0x20/0x20 [ 417.471543][ T5776] ? load_image+0x420/0x420 [ 417.476103][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 417.481251][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 417.486321][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 417.491058][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 417.496396][ T5776] kobject_add_internal+0x617/0xc90 [ 417.501643][ T5776] kobject_add+0x164/0x240 [ 417.506110][ T5776] ? kobject_init+0x1d0/0x1d0 [ 417.510835][ T5776] ? get_device_parent+0x366/0x390 [ 417.515995][ T5776] device_add+0x3fa/0xc40 [ 417.520384][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 417.525371][ T5776] le_conn_complete_evt+0xe9a/0x1480 [ 417.530725][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 417.537027][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 417.542712][ T5776] ? mutex_unlock+0x10/0x10 [ 417.547344][ T5776] ? skb_pull_data+0xf0/0x1f0 [ 417.552162][ T5776] hci_le_enh_conn_complete_evt+0x189/0x460 [ 417.558112][ T5776] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 417.564588][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 417.570696][ T5776] hci_event_packet+0x7b4/0x1280 [ 417.576025][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 417.581096][ T5776] ? lock_chain_count+0x20/0x20 [ 417.585988][ T5776] ? bis_list+0x290/0x290 [ 417.590361][ T5776] ? kcov_remote_start+0x513/0x810 [ 417.595523][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 417.600855][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 417.606094][ T5776] hci_rx_work+0x43a/0xd60 [ 417.610560][ T5776] ? process_scheduled_works+0x975/0x1600 [ 417.616332][ T5776] process_scheduled_works+0xa60/0x1600 [ 417.622058][ T5776] ? worker_attach_to_pool+0x370/0x370 [ 417.627574][ T5776] ? assign_work+0x3cc/0x5d0 [ 417.632390][ T5776] worker_thread+0xa5e/0xfe0 [ 417.637079][ T5776] kthread+0x2fa/0x390 [ 417.641193][ T5776] ? pr_cont_work+0x550/0x550 [ 417.645940][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 417.650580][ T5776] ret_from_fork+0x48/0x80 [ 417.655047][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 417.659676][ T5776] ret_from_fork_asm+0x11/0x20 [ 417.664499][ T5776] [ 417.669883][ T5776] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 417.684278][ T5776] Bluetooth: hci1: failed to register connection device [ 419.432584][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 419.780177][ T9785] loop4: detected capacity change from 0 to 512 [ 419.998651][ T9785] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.921: couldn't read orphan inode 26 (err -116) [ 420.735008][ T4659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.797132][ T9785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.830143][ T9785] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.218054][ T9804] netlink: 6 bytes leftover after parsing attributes in process `syz.3.924'. [ 421.895239][ T9788] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 422.300889][ T9812] loop0: detected capacity change from 0 to 2048 [ 422.361301][ T9812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 422.394461][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.038774][ T9814] loop5: detected capacity change from 0 to 32768 [ 423.054415][ T9814] (syz.5.929,9814,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 423.080494][ T6120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.091296][ T9814] (syz.5.929,9814,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 423.166237][ T9814] JBD2: Ignoring recovery information on journal [ 423.287330][ T9814] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 424.195709][ T6353] ocfs2: Unmounting device (7,5) on (node local) [ 425.117990][ T9812] syz.0.928: attempt to access beyond end of device [ 425.117990][ T9812] loop0: rw=0, sector=2048, nr_sectors = 1 limit=2048 [ 425.139831][ T9812] Buffer I/O error on dev loop0, logical block 2048, async page read [ 425.193572][ T9812] syz.0.928: attempt to access beyond end of device [ 425.193572][ T9812] loop0: rw=0, sector=2048, nr_sectors = 1 limit=2048 [ 425.218878][ T9812] Buffer I/O error on dev loop0, logical block 2048, async page read [ 425.237835][ T9812] syz.0.928: attempt to access beyond end of device [ 425.237835][ T9812] loop0: rw=0, sector=2048, nr_sectors = 1 limit=2048 [ 425.266697][ T9812] Buffer I/O error on dev loop0, logical block 2048, async page read [ 425.295399][ T9812] syz.0.928: attempt to access beyond end of device [ 425.295399][ T9812] loop0: rw=0, sector=2048, nr_sectors = 1 limit=2048 [ 425.323927][ T9818] loop4: detected capacity change from 0 to 32768 [ 425.349289][ T9818] (syz.4.930,9818,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 425.357089][ T9812] Buffer I/O error on dev loop0, logical block 2048, async page read [ 425.382351][ T9818] (syz.4.930,9818,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 425.429009][ T9818] JBD2: Ignoring recovery information on journal [ 425.445930][ T9812] UDF-fs: error (device loop0): udf_truncate_tail_extent: Extent after EOF in inode 1367 [ 425.501254][ T9818] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 425.584978][ T4659] kworker/u4:9: attempt to access beyond end of device [ 425.584978][ T4659] loop0: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 425.607704][ T4659] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 425.657338][ T4659] kworker/u4:9: attempt to access beyond end of device [ 425.657338][ T4659] loop0: rw=1, sector=2048, nr_sectors = 1 limit=2048 [ 425.702341][ T4659] Buffer I/O error on dev loop0, logical block 2048, lost async page write [ 425.814064][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 426.241189][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 426.363792][ T9841] loop0: detected capacity change from 0 to 512 [ 426.709248][ T9841] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.938: couldn't read orphan inode 26 (err -116) [ 426.771567][ T9841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.838051][ T9841] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.209698][ T9860] netlink: 6 bytes leftover after parsing attributes in process `syz.3.940'. [ 428.800017][ T9848] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 429.459634][ T9868] netlink: 168 bytes leftover after parsing attributes in process `syz.4.942'. [ 429.722841][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.927934][ T9872] loop4: detected capacity change from 0 to 32768 [ 430.086149][ T9872] (syz.4.944,9872,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 430.143390][ T9872] (syz.4.944,9872,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 430.184888][ T9872] JBD2: Ignoring recovery information on journal [ 430.868234][ T9872] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 431.355930][ T9890] loop5: detected capacity change from 0 to 1024 [ 432.114694][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.126141][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 432.544952][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 432.650910][ T9898] loop0: detected capacity change from 0 to 512 [ 432.792465][ T9898] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.953: couldn't read orphan inode 26 (err -116) [ 432.848323][ T9898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.902389][ T9898] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.403720][ T9914] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.412468][ T9914] netlink: 6 bytes leftover after parsing attributes in process `syz.5.957'. [ 433.702708][ T5761] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 433.954926][ T5761] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 434.070183][ T5761] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 434.123285][ T5761] usb 6-1: Product: syz [ 434.134172][ T5761] usb 6-1: SerialNumber: syz [ 434.144508][ T5761] usb 6-1: config 0 descriptor?? [ 434.691157][ T9922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 434.849349][ T9918] loop4: detected capacity change from 0 to 32768 [ 434.868658][ T9918] (syz.4.958,9918,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.895864][ T9918] (syz.4.958,9918,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 434.954802][ T9918] JBD2: Ignoring recovery information on journal [ 435.018163][ T9918] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 435.146323][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.194701][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 435.299924][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 436.291729][ T8] usb 6-1: USB disconnect, device number 2 [ 437.576690][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.865154][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.976080][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 437.986390][ T5776] CPU: 1 PID: 5776 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 437.993986][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 438.004079][ T5776] Workqueue: hci4 hci_rx_work [ 438.008814][ T5776] Call Trace: [ 438.012122][ T5776] [ 438.015075][ T5776] dump_stack_lvl+0x18c/0x250 [ 438.019792][ T5776] ? show_regs_print_info+0x20/0x20 [ 438.025024][ T5776] ? load_image+0x420/0x420 [ 438.029755][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 438.035022][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 438.040092][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 438.044811][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 438.050119][ T5776] kobject_add_internal+0x617/0xc90 [ 438.055330][ T5776] kobject_add+0x164/0x240 [ 438.059756][ T5776] ? kobject_init+0x1d0/0x1d0 [ 438.064437][ T5776] ? get_device_parent+0x366/0x390 [ 438.069562][ T5776] device_add+0x3fa/0xc40 [ 438.073924][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 438.078920][ T5776] le_conn_complete_evt+0xe9a/0x1480 [ 438.084262][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 438.090533][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 438.096212][ T5776] ? mutex_unlock+0x10/0x10 [ 438.100733][ T5776] ? skb_pull_data+0xf0/0x1f0 [ 438.105427][ T5776] hci_le_enh_conn_complete_evt+0x189/0x460 [ 438.111334][ T5776] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 438.117762][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 438.123860][ T5776] hci_event_packet+0x7b4/0x1280 [ 438.128807][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 438.133838][ T5776] ? lock_chain_count+0x20/0x20 [ 438.138780][ T5776] ? bis_list+0x290/0x290 [ 438.143144][ T5776] ? kcov_remote_start+0x513/0x810 [ 438.148295][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 438.153531][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 438.158769][ T5776] hci_rx_work+0x43a/0xd60 [ 438.163266][ T5776] ? process_scheduled_works+0x975/0x1600 [ 438.169031][ T5776] process_scheduled_works+0xa60/0x1600 [ 438.174640][ T5776] ? worker_attach_to_pool+0x370/0x370 [ 438.180200][ T5776] ? assign_work+0x3cc/0x5d0 [ 438.184889][ T5776] worker_thread+0xa5e/0xfe0 [ 438.189509][ T5776] kthread+0x2fa/0x390 [ 438.193598][ T5776] ? pr_cont_work+0x550/0x550 [ 438.198306][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 438.202939][ T5776] ret_from_fork+0x48/0x80 [ 438.207366][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 438.211971][ T5776] ret_from_fork_asm+0x11/0x20 [ 438.216758][ T5776] [ 438.223284][ T5776] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 438.237526][ T5776] Bluetooth: hci4: failed to register connection device [ 438.268239][ T9945] netlink: 168 bytes leftover after parsing attributes in process `syz.5.968'. [ 438.421892][ T9949] loop5: detected capacity change from 0 to 512 [ 438.525361][ T9949] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.970: couldn't read orphan inode 26 (err -116) [ 438.552936][ T9949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.592430][ T9949] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.871930][ T9943] loop0: detected capacity change from 0 to 32768 [ 438.930943][ T9943] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 439.082811][ T9943] XFS (loop0): Ending clean mount [ 439.833101][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 439.964005][ T9973] netlink: 6 bytes leftover after parsing attributes in process `syz.3.973'. [ 440.328481][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.335632][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.797903][ T9954] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 441.423470][ T6353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.677071][ T9989] netlink: 168 bytes leftover after parsing attributes in process `syz.0.979'. [ 441.790217][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 442.098366][ T9987] loop5: detected capacity change from 0 to 32768 [ 442.109754][ T9987] (syz.5.978,9987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 442.133739][ T9987] (syz.5.978,9987,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 442.198554][ T9987] JBD2: Ignoring recovery information on journal [ 442.389683][ T9987] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 443.477423][ T9994] loop4: detected capacity change from 0 to 32768 [ 443.478559][ T6353] ocfs2: Unmounting device (7,5) on (node local) [ 443.486673][T10011] loop0: detected capacity change from 0 to 512 [ 443.500327][ T9994] (syz.4.981,9994,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 443.528539][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.539716][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.551227][ T9994] (syz.4.981,9994,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 443.579910][ T9994] JBD2: Ignoring recovery information on journal [ 443.681716][T10011] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.984: couldn't read orphan inode 26 (err -116) [ 443.710059][ T9994] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 443.733264][T10011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.766454][T10011] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.018245][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 444.132574][T10023] netlink: 168 bytes leftover after parsing attributes in process `syz.5.988'. [ 444.205127][T10013] fuse: Bad value for 'fd' [ 444.544705][T10033] netlink: 6 bytes leftover after parsing attributes in process `syz.4.990'. [ 444.862496][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 445.212211][ T8] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 445.262306][ T8] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 445.282722][ T8] usb 5-1: Product: syz [ 445.286959][ T8] usb 5-1: SerialNumber: syz [ 445.386022][ T8] usb 5-1: config 0 descriptor?? [ 446.846441][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.452704][ T8] usb 5-1: USB disconnect, device number 3 [ 448.372406][T10068] netlink: 168 bytes leftover after parsing attributes in process `syz.0.997'. [ 448.439094][T10064] loop4: detected capacity change from 0 to 32768 [ 448.483725][T10064] (syz.4.995,10064,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 448.523445][T10064] (syz.4.995,10064,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 448.590898][T10064] JBD2: Ignoring recovery information on journal [ 448.751317][T10064] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 449.027947][T10078] loop5: detected capacity change from 0 to 512 [ 449.388242][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.433628][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.570789][T10078] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1001: couldn't read orphan inode 26 (err -116) [ 449.608990][T10078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.638004][T10078] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.707735][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 450.098033][T10089] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.106400][T10089] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1003'. [ 450.942089][ T5847] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 451.402302][ T5847] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 451.411519][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 451.420761][ T5847] usb 1-1: Product: syz [ 451.425306][ T5847] usb 1-1: SerialNumber: syz [ 451.443281][ T5847] usb 1-1: config 0 descriptor?? [ 452.281763][ T6353] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.006107][ T5844] usb 1-1: USB disconnect, device number 2 [ 454.787931][T10125] loop4: detected capacity change from 0 to 128 [ 455.033168][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.065488][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.207199][T10127] loop4: detected capacity change from 0 to 512 [ 455.255775][T10113] loop0: detected capacity change from 0 to 32768 [ 455.314485][T10127] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1015: couldn't read orphan inode 26 (err -116) [ 455.340731][T10113] (syz.0.1010,10113,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 455.367803][T10127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.382325][T10113] (syz.0.1010,10113,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 455.406980][T10127] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.429525][T10113] JBD2: Ignoring recovery information on journal [ 455.580837][T10113] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 456.326787][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 457.093138][T10149] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1018'. [ 457.424798][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 457.543594][T10130] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 457.733227][ T8] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 457.797581][ T5786] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 457.805808][ T8] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 457.817321][ T8] usb 1-1: Product: syz [ 457.821964][ T8] usb 1-1: SerialNumber: syz [ 457.831773][ T8] usb 1-1: config 0 descriptor?? [ 458.114948][ T6120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.334783][T10159] loop5: detected capacity change from 0 to 32768 [ 459.409463][T10159] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 460.180993][ T8] usb 1-1: USB disconnect, device number 3 [ 460.355231][ T6353] ocfs2: Unmounting device (7,5) on (node local) [ 460.803491][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.803671][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 461.075510][T10177] loop5: detected capacity change from 0 to 32768 [ 461.145088][T10177] (syz.5.1028,10177,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.213877][T10177] (syz.5.1028,10177,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.629943][T10177] JBD2: Ignoring recovery information on journal [ 462.229237][T10177] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 464.057528][ T6353] ocfs2: Unmounting device (7,5) on (node local) [ 464.304403][ T5871] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 464.607893][T10206] loop0: detected capacity change from 0 to 32768 [ 464.638089][ T5871] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 464.650216][T10206] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 464.656314][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 464.678278][ T5871] usb 5-1: Product: syz [ 464.683299][ T5871] usb 5-1: SerialNumber: syz [ 464.699090][ T5871] usb 5-1: config 0 descriptor?? [ 464.774821][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 466.115884][T10222] loop0: detected capacity change from 0 to 32768 [ 466.125463][T10222] (syz.0.1040,10222,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 466.130610][T10224] loop5: detected capacity change from 0 to 32768 [ 466.145441][T10222] (syz.0.1040,10222,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 466.263237][ T5871] usb 5-1: USB disconnect, device number 4 [ 466.280763][T10224] (syz.5.1041,10224,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 466.324400][T10222] JBD2: Ignoring recovery information on journal [ 466.349603][T10224] (syz.5.1041,10224,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 466.437193][T10224] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 466.454061][T10222] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 466.459314][T10224] JBD2: Ignoring recovery information on journal [ 466.552880][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.565879][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.385905][T10224] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 468.169217][ T6353] ocfs2: Unmounting device (7,5) on (node local) [ 468.377705][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 469.736912][T10255] fuse: Bad value for 'fd' [ 470.051014][T10258] loop0: detected capacity change from 0 to 32768 [ 470.102496][T10258] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 470.341761][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 470.443810][T10274] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1054'. [ 471.364047][T10291] loop4: detected capacity change from 0 to 512 [ 471.434025][T10286] loop0: detected capacity change from 0 to 164 [ 471.440494][T10291] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1060: couldn't read orphan inode 26 (err -116) [ 471.614262][T10291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.677184][T10291] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.493018][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.100660][ T6120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.074404][T10319] loop4: detected capacity change from 0 to 2048 [ 474.125144][T10319] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 475.349588][T10333] loop0: detected capacity change from 0 to 512 [ 475.554403][T10333] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1075: couldn't read orphan inode 26 (err -116) [ 475.632860][T10333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.697633][T10333] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.137293][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.566259][T10344] loop0: detected capacity change from 0 to 32768 [ 477.645365][T10344] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 477.914220][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 478.028573][T10365] loop0: detected capacity change from 0 to 512 [ 478.073854][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.132741][T10365] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1085: couldn't read orphan inode 26 (err -116) [ 478.202708][T10365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.282607][T10365] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.891268][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.341680][T10390] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1092'. [ 479.535287][T10397] loop0: detected capacity change from 0 to 512 [ 479.605128][T10397] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1095: couldn't read orphan inode 26 (err -116) [ 479.675061][T10397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.714295][T10397] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.462125][T10394] loop4: detected capacity change from 0 to 32768 [ 480.464450][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.625163][T10394] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 481.703104][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 483.006841][T10431] loop0: detected capacity change from 0 to 512 [ 483.065362][T10431] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1104: couldn't read orphan inode 26 (err -116) [ 483.139481][T10431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.172410][T10431] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.543695][T10427] loop4: detected capacity change from 0 to 32768 [ 483.659940][T10427] (syz.4.1099,10427,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 483.736323][T10427] (syz.4.1099,10427,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 483.832857][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 483.948517][T10427] JBD2: Ignoring recovery information on journal [ 484.073831][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.147557][T10427] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 484.314965][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 484.483228][ T5847] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 484.684406][ T5847] usb 1-1: unable to get BOS descriptor or descriptor too short [ 484.701938][ T5847] usb 1-1: not running at top speed; connect to a high speed hub [ 484.712023][ T5847] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 484.731134][ T5847] usb 1-1: config 0 has no interface number 0 [ 484.761537][ T5847] usb 1-1: config 0 interface 15 has no altsetting 0 [ 484.783701][ T5847] usb 1-1: string descriptor 0 read error: -22 [ 484.792568][ T5847] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 484.812684][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.842618][ T5847] usb 1-1: config 0 descriptor?? [ 485.991295][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.913982][T10475] loop4: detected capacity change from 0 to 32768 [ 487.956652][T10475] (syz.4.1116,10475,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 488.001452][T10475] (syz.4.1116,10475,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 488.057248][T10475] JBD2: Ignoring recovery information on journal [ 488.193744][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 488.204234][ T5786] CPU: 1 PID: 5786 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 488.211920][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 488.222017][ T5786] Workqueue: hci3 hci_rx_work [ 488.226815][ T5786] Call Trace: [ 488.230271][ T5786] [ 488.233230][ T5786] dump_stack_lvl+0x18c/0x250 [ 488.237917][ T5786] ? show_regs_print_info+0x20/0x20 [ 488.243116][ T5786] ? load_image+0x420/0x420 [ 488.247662][ T5786] sysfs_create_dir_ns+0x26e/0x2a0 [ 488.252879][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 488.258347][ T5786] ? sysfs_warn_dup+0xa0/0xa0 [ 488.263117][ T5786] ? do_raw_spin_unlock+0x121/0x230 [ 488.268357][ T5786] kobject_add_internal+0x617/0xc90 [ 488.273577][ T5786] kobject_add+0x164/0x240 [ 488.278028][ T5786] ? kobject_init+0x1d0/0x1d0 [ 488.282714][ T5786] ? get_device_parent+0x366/0x390 [ 488.287926][ T5786] device_add+0x3fa/0xc40 [ 488.292266][ T5786] hci_conn_add_sysfs+0xd5/0x1e0 [ 488.297214][ T5786] le_conn_complete_evt+0xe9a/0x1480 [ 488.302528][ T5786] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 488.308784][ T5786] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 488.314522][ T5786] ? mutex_unlock+0x10/0x10 [ 488.319136][ T5786] ? skb_pull_data+0xf0/0x1f0 [ 488.323841][ T5786] hci_le_enh_conn_complete_evt+0x189/0x460 [ 488.329866][ T5786] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 488.336390][ T5786] ? hci_remote_host_features_evt+0x150/0x150 [ 488.342468][ T5786] hci_event_packet+0x7b4/0x1280 [ 488.347414][ T5786] ? __lock_acquire+0x7eb0/0x7eb0 [ 488.352531][ T5786] ? lock_chain_count+0x20/0x20 [ 488.357386][ T5786] ? bis_list+0x290/0x290 [ 488.361815][ T5786] ? kcov_remote_start+0x513/0x810 [ 488.367040][ T5786] ? lockdep_hardirqs_on+0x98/0x150 [ 488.372271][ T5786] ? hci_send_to_monitor+0xd7/0x4f0 [ 488.377489][ T5786] hci_rx_work+0x43a/0xd60 [ 488.382019][ T5786] ? process_scheduled_works+0x975/0x1600 [ 488.387836][ T5786] process_scheduled_works+0xa60/0x1600 [ 488.393410][ T5786] ? worker_attach_to_pool+0x370/0x370 [ 488.398881][ T5786] ? assign_work+0x3cc/0x5d0 [ 488.403486][ T5786] worker_thread+0xa5e/0xfe0 [ 488.408097][ T5786] ? _raw_spin_unlock+0x40/0x40 [ 488.413034][ T5786] ? __kthread_parkme+0x71/0x1c0 [ 488.418015][ T5786] kthread+0x2fa/0x390 [ 488.422351][ T5786] ? pr_cont_work+0x550/0x550 [ 488.427042][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 488.432245][ T5786] ret_from_fork+0x48/0x80 [ 488.436671][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 488.441275][ T5786] ret_from_fork_asm+0x11/0x20 [ 488.446083][ T5786] [ 488.533371][ T5786] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 488.547654][ T5786] Bluetooth: hci3: failed to register connection device [ 488.547855][T10475] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 488.792766][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 489.548344][T10501] loop4: detected capacity change from 0 to 512 [ 489.554283][ T8] usb 1-1: USB disconnect, device number 4 [ 489.595456][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.648109][T10501] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1125: couldn't read orphan inode 26 (err -116) [ 489.677204][T10501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.695117][T10501] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.089294][T10488] loop0: detected capacity change from 0 to 32768 [ 490.335172][T10488] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 490.484984][ T6120] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.852716][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 491.513176][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.518053][T10520] loop4: detected capacity change from 0 to 32768 [ 491.533178][ T5776] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 491.586956][T10520] (syz.4.1129,10520,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 491.618189][T10520] (syz.4.1129,10520,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 491.734496][T10520] JBD2: Ignoring recovery information on journal [ 491.845639][T10520] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 492.189126][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 495.252530][T10548] loop0: detected capacity change from 0 to 32768 [ 495.364208][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.444364][T10548] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 495.551666][ T5786] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 495.698898][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 496.008766][T10555] loop4: detected capacity change from 0 to 32768 [ 496.031477][T10555] (syz.4.1140,10555,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 496.060696][T10555] (syz.4.1140,10555,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 496.131882][T10555] JBD2: Ignoring recovery information on journal [ 496.317516][T10555] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 496.634425][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.027663][ T6120] ocfs2: Unmounting device (7,4) on (node local) [ 499.703974][ T5786] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 499.793343][ T5860] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 500.634608][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 500.644979][ T5860] usb 5-1: not running at top speed; connect to a high speed hub [ 500.711102][ T5860] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 500.742232][ T5860] usb 5-1: config 0 has no interface number 0 [ 500.748405][ T5860] usb 5-1: config 0 interface 15 has no altsetting 0 [ 501.018463][ T5860] usb 5-1: string descriptor 0 read error: -22 [ 501.027726][ T5860] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=5e.1b [ 501.037921][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.048740][ T5860] usb 5-1: config 0 descriptor?? [ 501.122215][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.762325][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.768698][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.402704][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.969922][T10627] loop0: detected capacity change from 0 to 4096 [ 505.042251][T10632] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 505.089254][ T5871] usb 5-1: USB disconnect, device number 5 [ 506.873694][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.606995][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.911727][T10666] tipc: Started in network mode [ 508.917084][T10666] tipc: Node identity 4, cluster identity 4711 [ 508.923422][T10666] tipc: Node number set to 4 [ 509.512229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 510.013145][T10675] loop0: detected capacity change from 0 to 512 [ 510.107562][T10675] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1174: couldn't read orphan inode 26 (err -116) [ 510.167137][T10675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.179904][T10675] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.244111][ T5786] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 510.918580][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.910890][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.019404][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 515.207379][T10727] loop0: detected capacity change from 0 to 512 [ 515.312811][T10727] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1185: couldn't read orphan inode 26 (err -116) [ 515.367701][T10727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.411239][T10727] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.352560][T10730] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 516.588324][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.627892][T10754] tipc: Started in network mode [ 518.632933][T10754] tipc: Node identity 4, cluster identity 4711 [ 518.639152][T10754] tipc: Node number set to 4 [ 518.800983][T10741] loop0: detected capacity change from 0 to 32768 [ 519.342451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 519.743503][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.782091][T10741] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 519.855700][T10741] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop0": -EINTR [ 519.867475][T10741] XFS (loop0): log mount failed [ 520.950330][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.129469][T10771] loop0: detected capacity change from 0 to 2048 [ 521.231332][T10771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 525.268868][T10799] tipc: Started in network mode [ 525.273871][T10799] tipc: Node identity 4, cluster identity 4711 [ 525.280036][T10799] tipc: Node number set to 4 [ 525.433815][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.022439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 527.224707][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 528.724511][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1208'. [ 531.391222][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.142459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 533.116539][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 534.340692][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 535.554381][T10880] tipc: Started in network mode [ 535.559351][T10880] tipc: Node identity 4, cluster identity 4711 [ 535.565684][T10880] tipc: Node number set to 4 [ 536.097498][T10683] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 536.478407][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.672185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 538.872983][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.254583][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 544.792791][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.349805][T10960] loop0: detected capacity change from 0 to 32768 [ 546.403249][T10960] (syz.0.1242,10960,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.455935][T10960] (syz.0.1242,10960,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.530300][T10960] JBD2: Ignoring recovery information on journal [ 546.604649][T10960] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 547.613638][T10990] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 547.633280][T10990] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 547.643313][T10990] OCFS2: Returning error to the calling process. [ 547.649750][T10990] (syz.0.1242,10990,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 547.659142][T10990] (syz.0.1242,10990,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 547.667717][T10990] (syz.0.1242,10990,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 547.677258][T10990] (syz.0.1242,10990,1):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 547.685438][T10990] (syz.0.1242,10990,1):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 547.712733][T10989] (syz.0.1242,10989,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 548.741460][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.861641][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 549.422687][T11002] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1255'. [ 551.515888][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.502703][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.292834][T11051] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1269'. [ 557.190427][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.521427][T11043] loop0: detected capacity change from 0 to 32768 [ 560.896052][T11074] loop0: detected capacity change from 0 to 32768 [ 561.225235][T11074] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 561.276232][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.284936][T11074] XFS (loop0): Ending clean mount [ 561.490466][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 562.630120][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.601260][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.607964][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.404968][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.956068][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.606481][T11139] loop0: detected capacity change from 0 to 32768 [ 569.830150][T11139] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 570.602010][T11139] XFS (loop0): Ending clean mount [ 570.669684][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 572.803867][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.035035][T11193] loop0: detected capacity change from 0 to 32768 [ 574.099348][T11193] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 574.617160][T11193] XFS (loop0): Ending clean mount [ 574.724542][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.985158][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 577.310641][T11222] loop0: detected capacity change from 0 to 32768 [ 577.346240][T11222] (syz.0.1309,11222,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 577.380756][T11222] (syz.0.1309,11222,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 577.451974][T11222] JBD2: Ignoring recovery information on journal [ 577.617578][T11222] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 578.286762][T11246] (syz.0.1309,11246,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 578.303253][T11246] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 578.322896][T11246] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 578.333157][T11246] OCFS2: Returning error to the calling process. [ 578.339542][T11246] (syz.0.1309,11246,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 578.349114][T11246] (syz.0.1309,11246,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 578.366033][T11246] (syz.0.1309,11246,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 578.375741][T11246] (syz.0.1309,11246,0):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 578.383995][T11246] (syz.0.1309,11246,0):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 578.563678][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.864592][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 580.480750][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.227794][T11271] loop0: detected capacity change from 0 to 32768 [ 583.238168][T11271] (syz.0.1323,11271,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 583.261995][T11271] (syz.0.1323,11271,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 583.324777][T11271] JBD2: Ignoring recovery information on journal [ 583.599742][T11271] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 584.037001][ T5770] ocfs2: Unmounting device (7,0) on (node local) [ 584.312707][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 585.582723][T11313] capability: warning: `syz.5.1335' uses deprecated v2 capabilities in a way that may be insecure [ 587.391901][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.768921][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.580832][T11351] CIFS: Attempting to mount //127.0.0.1/share [ 591.696497][T11351] CIFS: VFS: Error connecting to socket. Aborting operation. [ 592.022519][T11351] CIFS: VFS: cifs_mount failed w/return code = -4 [ 592.633477][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.343628][T11383] atomic_op ffff88805c078998 conn xmit_atomic 0000000000000000 [ 595.193164][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 597.753043][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 599.217770][T11434] delete_channel: no stack [ 600.317324][ T5776] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 600.965515][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.513581][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 603.932367][ T5776] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 607.698206][ T5776] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 609.290694][ T3536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.560453][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.085081][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.991192][T11580] overlayfs: failed to clone upperpath [ 616.316983][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.015700][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.082781][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.153187][ T788] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 624.523083][ T5844] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 624.547396][T11679] CIFS: Attempting to mount //127.0.0.1/share [ 624.601802][T11680] CIFS: VFS: Received Request not response [ 624.612467][T11680] CIFS: VFS: Bad SMB detected. The Mid=0 [ 624.618830][T11679] CIFS: VFS: cifs_mount failed w/return code = -5 [ 624.639388][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.645881][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.993714][T11674] ceph: No mds server is up or the cluster is laggy [ 627.373969][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.842180][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.972090][ T5776] Bluetooth: hci0: hcon ffff88803214a000 sent 1 < count 15 [ 630.935221][T11735] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1460'. [ 632.857903][T11761] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1469'. [ 632.958568][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.117897][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.192580][T11785] (null): rxe_set_mtu: Set mtu to 4096 [ 634.198540][T11785] lo speed is unknown, defaulting to 1000 [ 634.224041][T11785] lo speed is unknown, defaulting to 1000 [ 634.277273][T11785] lo speed is unknown, defaulting to 1000 [ 634.689672][T11785] infiniband sz1: set active [ 634.694587][ T5845] lo speed is unknown, defaulting to 1000 [ 634.712638][T11785] infiniband sz1: added lo [ 634.834611][T11798] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1481'. [ 635.535171][T11785] RDS/IB: sz1: added [ 635.552339][T11785] smc: adding ib device sz1 with port count 1 [ 635.558603][T11785] smc: ib device sz1 port 1 has pnetid [ 635.569922][T11785] lo speed is unknown, defaulting to 1000 [ 635.576570][ T8] lo speed is unknown, defaulting to 1000 [ 635.868931][T11785] lo speed is unknown, defaulting to 1000 [ 636.145483][T11785] lo speed is unknown, defaulting to 1000 [ 636.390998][T11785] lo speed is unknown, defaulting to 1000 [ 636.508655][T11809] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11809] [ 637.258346][T11816] futex_wake_op: syz.4.1487 tries to shift op by 144; fix this program [ 638.717922][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.729850][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.156067][T11863] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1501'. [ 643.208214][T11893] ip_tables: iptables: counters copy to user failed while replacing table [ 644.622587][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.623210][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.296060][T11915] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1521'. [ 648.014272][T11916] : renamed from bond_slave_0 (while UP) [ 651.076452][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 651.087838][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 652.393528][T11957] mmap: syz.0.1533 (11957) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 652.423473][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 652.724444][T11967] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1536'. [ 657.621643][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.114171][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.419959][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 660.099768][T12002] rxe_eth0 speed is unknown, defaulting to 1000 [ 660.301358][T12013] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1551'. [ 661.199778][T12002] lo speed is unknown, defaulting to 1000 [ 661.730395][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 663.327148][T12047] netlink: 328 bytes leftover after parsing attributes in process `syz.5.1563'. [ 663.414179][T12048] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12048] [ 663.679331][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.373860][ T5776] Bluetooth: hci3: hcon ffff88807a058000 sent 1 < count 15 [ 664.456719][T12065] process 'syz.4.1570' launched './file1' with NULL argv: empty string added [ 664.543243][T12067] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12067] [ 665.027533][T12071] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1571'. [ 665.598822][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.833343][T12073] netlink: 328 bytes leftover after parsing attributes in process `syz.0.1572'. [ 666.533585][T12084] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6353] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12084] [ 667.887186][T12100] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12100] [ 668.427948][ T28] audit: type=1326 audit(668.283:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12092 comm="syz.5.1579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f627e79e559 code=0x0 [ 669.198041][T12120] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12120] [ 669.436677][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 671.168616][T12134] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1590'. [ 671.358100][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.212757][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 675.759245][T12182] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12182] [ 676.523520][T12194] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1607'. [ 677.119989][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.070077][T12218] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12218] [ 679.925585][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 679.939277][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 679.980266][T12226] ceph: No mds server is up or the cluster is laggy [ 680.957184][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.089042][T12248] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12248] [ 681.843040][T12250] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1627'. [ 682.080923][T12252] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1628'. [ 682.824347][ T28] audit: type=1326 audit(682.043:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12249 comm="syz.5.1627" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f627e79e559 code=0x0 [ 682.976491][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 686.078796][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.085461][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.887745][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.123622][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.482647][T12326] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12326] [ 689.607387][T12345] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6353] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12345] [ 692.472705][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 692.898373][T12380] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12380] [ 693.757116][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 695.324175][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 696.895595][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 696.906575][ T5776] CPU: 0 PID: 5776 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 696.914174][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 696.924270][ T5776] Workqueue: hci4 hci_rx_work [ 696.928997][ T5776] Call Trace: [ 696.932296][ T5776] [ 696.935254][ T5776] dump_stack_lvl+0x18c/0x250 [ 696.939987][ T5776] ? show_regs_print_info+0x20/0x20 [ 696.945225][ T5776] ? load_image+0x420/0x420 [ 696.949774][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 696.954922][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 696.959987][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 696.964707][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 696.970040][ T5776] kobject_add_internal+0x617/0xc90 [ 696.975288][ T5776] kobject_add+0x164/0x240 [ 696.979766][ T5776] ? kobject_init+0x1d0/0x1d0 [ 696.984496][ T5776] ? get_device_parent+0x366/0x390 [ 696.989651][ T5776] device_add+0x3fa/0xc40 [ 696.994026][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 696.999003][ T5776] le_conn_complete_evt+0xe9a/0x1480 [ 697.004341][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 697.010643][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 697.016326][ T5776] ? mutex_unlock+0x10/0x10 [ 697.020923][ T5776] ? skb_pull_data+0xf0/0x1f0 [ 697.025653][ T5776] hci_le_enh_conn_complete_evt+0x189/0x460 [ 697.031603][ T5776] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 697.038252][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 697.044365][ T5776] hci_event_packet+0x7b4/0x1280 [ 697.049487][ T5776] ? __lock_acquire+0x7eb0/0x7eb0 [ 697.054554][ T5776] ? lock_chain_count+0x20/0x20 [ 697.059449][ T5776] ? bis_list+0x290/0x290 [ 697.063817][ T5776] ? kcov_remote_start+0x513/0x810 [ 697.068981][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 697.074224][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 697.079461][ T5776] hci_rx_work+0x43a/0xd60 [ 697.083934][ T5776] ? process_scheduled_works+0x975/0x1600 [ 697.089702][ T5776] process_scheduled_works+0xa60/0x1600 [ 697.095491][ T5776] ? worker_attach_to_pool+0x370/0x370 [ 697.101005][ T5776] ? assign_work+0x3cc/0x5d0 [ 697.105681][ T5776] worker_thread+0xa5e/0xfe0 [ 697.110350][ T5776] kthread+0x2fa/0x390 [ 697.114451][ T5776] ? pr_cont_work+0x550/0x550 [ 697.119166][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 697.123782][ T5776] ret_from_fork+0x48/0x80 [ 697.128230][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 697.132848][ T5776] ret_from_fork_asm+0x11/0x20 [ 697.137665][ T5776] [ 697.222200][ T5776] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 697.242850][ T5776] Bluetooth: hci4: failed to register connection device [ 697.596090][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.154511][T12455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1695'. [ 699.269922][T12459] netlink: 'syz.4.1697': attribute type 4 has an invalid length. [ 699.272989][T10683] Bluetooth: hci4: command 0x0406 tx timeout [ 699.305126][T12459] sz1: rxe_set_mtu: Set mtu to 256 [ 699.330798][T12459] infiniband sz1: set down [ 699.344156][ T8] lo speed is unknown, defaulting to 1000 [ 699.364622][ T8] lo speed is unknown, defaulting to 1000 [ 699.576358][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.624296][T12489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1705'. [ 703.010761][T12505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1709'. [ 703.605898][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.410842][T12518] 8021q: VLANs not supported on gre0 [ 705.272934][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.353816][T12522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1717'. [ 707.998599][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1726'. [ 709.460476][T12574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1735'. [ 710.436425][T12583] netlink: 'syz.0.1738': attribute type 29 has an invalid length. [ 710.447313][T12583] netlink: 'syz.0.1738': attribute type 29 has an invalid length. [ 710.461146][T12583] netlink: 'syz.0.1738': attribute type 29 has an invalid length. [ 710.471501][T12583] netlink: 'syz.0.1738': attribute type 29 has an invalid length. [ 710.489057][T12583] netlink: 'syz.0.1738': attribute type 29 has an invalid length. [ 711.045153][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.360562][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1744'. [ 713.244107][T12607] syz.0.1747 (12607) used greatest stack depth: 17896 bytes left [ 716.281943][T12645] rxe_eth0 speed is unknown, defaulting to 1000 [ 716.796651][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.399029][T12645] lo speed is unknown, defaulting to 1000 [ 722.576431][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.315213][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.337584][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.275974][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.618153][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.340413][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 735.578963][T12852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.658153][T12854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.708463][T12870] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6353] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12870] [ 739.369518][T12896] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1839'. [ 739.380447][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 739.389908][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 739.878043][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 741.132053][ T8243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 745.635384][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.873246][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 747.518795][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.525369][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.563541][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 752.583061][T13020] ip_tables: iptables: counters copy to user failed while replacing table [ 752.635825][ T8927] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.926883][T13051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 757.125379][T13084] netlink: 65173 bytes leftover after parsing attributes in process `syz.4.1901'. [ 757.553546][T13090] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 757.752683][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 757.772611][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.592937][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 763.616330][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.872526][T13170] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13170] [ 767.345478][T13207] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13207] [ 768.856389][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 768.868327][ T3536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 770.693374][T13277] capability: warning: `syz.3.1950' uses 32-bit capabilities (legacy support in use) [ 772.188929][T13292] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13292] [ 772.815423][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1959'. [ 773.638487][T13304] netlink: 'syz.4.1960': attribute type 4 has an invalid length. [ 773.709712][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'. [ 773.791722][T13314] bridge1: port 1(veth0_to_bond) entered blocking state [ 773.819282][T13314] bridge1: port 1(veth0_to_bond) entered disabled state [ 773.831871][T13314] veth0_to_bond: entered allmulticast mode [ 773.883050][T13314] veth0_to_bond: entered promiscuous mode [ 774.422753][T13259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 774.434713][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 774.449006][T13324] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13324] [ 775.647876][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 777.072632][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1977'. [ 780.162607][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.175431][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 785.679986][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.046127][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.146511][T13476] futex_wake_op: syz.5.2014 tries to shift op by 144; fix this program [ 788.300777][T13489] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13489] [ 789.337096][T13497] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 789.663781][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2026'. [ 791.036720][ T990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 791.491875][T13536] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13536] [ 791.744285][ T2972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 791.895378][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 792.128781][T13547] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 792.227756][T13547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.260706][T13547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.302953][T13547] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 792.328473][T13547] bond0 (unregistering): Released all slaves [ 792.814018][T13558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2041'. [ 795.581553][T13609] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13609] [ 796.747788][T13257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 796.881638][T13620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2052'. [ 797.541606][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.680290][T13629] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13629] [ 798.141527][T13639] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2055'. [ 798.150745][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 798.159855][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 800.293888][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2062'. [ 800.710022][T13663] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13663] [ 800.797228][T13665] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13665] [ 802.553549][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 802.643730][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.630667][T13682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.642756][T13682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.655907][T13682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.667066][T13682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.179752][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2073'. [ 805.905467][T13709] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[13709] [ 808.432201][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 808.435790][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 808.971642][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.978189][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.540103][T13794] overlayfs: failed to clone lowerpath [ 812.917550][T13804] rxe_eth0 speed is unknown, defaulting to 1000 [ 813.509346][T13804] lo speed is unknown, defaulting to 1000 [ 813.684275][ T42] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 814.092249][ T3536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.192840][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.842688][T13257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 824.966482][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.592870][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.911449][T13947] fuse: Bad value for 'group_id' [ 825.992801][T13951] overlayfs: failed to clone upperpath [ 828.202729][T13980] overlayfs: failed to clone upperpath [ 830.072608][T14017] ªªªªªª: renamed from vlan0 (while UP) [ 830.713309][ T4011] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 832.234832][T14055] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2207'. [ 832.424661][T14061] overlayfs: failed to clone upperpath [ 832.655124][T14067] X.509: signatureAlgorithm (15) differs from tbsCertificate.signature (16) [ 834.556582][T14097] overlayfs: failed to clone upperpath [ 835.193891][T13259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.834136][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 835.845379][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 835.854036][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 835.864376][T14112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 835.880938][T14112] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 835.888436][T14112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 836.066296][T14110] rxe_eth0 speed is unknown, defaulting to 1000 [ 836.151571][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.323681][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.359027][T14110] lo speed is unknown, defaulting to 1000 [ 836.514824][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.689321][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.134020][ T59] tipc: Left network mode [ 837.136440][T14110] chnl_net:caif_netlink_parms(): no params data found [ 837.880254][T14110] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.909423][T14110] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.931956][T14110] bridge_slave_0: entered allmulticast mode [ 837.961960][T14110] bridge_slave_0: entered promiscuous mode [ 837.991875][T10683] Bluetooth: hci2: command tx timeout [ 838.061162][T14110] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.081069][T14110] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.102171][T14110] bridge_slave_1: entered allmulticast mode [ 838.109545][T14110] bridge_slave_1: entered promiscuous mode [ 838.389474][T14110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.423545][T14110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.667730][T14110] team0: Port device team_slave_0 added [ 838.706512][T14110] team0: Port device team_slave_1 added [ 838.970840][T14110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.993171][T14110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.035548][T14110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.100111][T14110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.117435][T14110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.149953][T14110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.481002][T14110] hsr_slave_0: entered promiscuous mode [ 839.523919][T14110] hsr_slave_1: entered promiscuous mode [ 840.281468][T10683] Bluetooth: hci2: command tx timeout [ 840.953747][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 840.969578][ T59] hsr_slave_0: left promiscuous mode [ 840.987422][ T59] hsr_slave_1: left promiscuous mode [ 840.995578][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.010926][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.026266][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.044038][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.052701][ T59] bridge_slave_1: left allmulticast mode [ 841.058474][ T59] bridge_slave_1: left promiscuous mode [ 841.068633][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.081452][ T59] bridge_slave_0: left allmulticast mode [ 841.088188][ T59] bridge_slave_0: left promiscuous mode [ 841.094655][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.151247][ T59] veth1_macvtap: left promiscuous mode [ 841.166618][ T59] veth0_macvtap: left promiscuous mode [ 841.180251][ T59] veth1_vlan: left promiscuous mode [ 841.201576][ T59] veth0_vlan: left promiscuous mode [ 842.331862][T10683] Bluetooth: hci2: command tx timeout [ 843.063834][ T59] team0 (unregistering): Port device team_slave_1 removed [ 843.136363][T14226] ip_tables: iptables: counters copy to user failed while replacing table [ 843.195451][ T59] team0 (unregistering): Port device team_slave_0 removed [ 843.313617][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.429969][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.408040][T10683] Bluetooth: hci2: command tx timeout [ 844.508497][ T59] bond0 (unregistering): Released all slaves [ 845.371767][ T59] IPVS: stop unused estimator thread 0... [ 845.625202][T14110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 845.648226][T14110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 845.702425][T14110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 845.726475][T14110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 845.983040][T14110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.025527][T14110] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.063640][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.070867][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.122065][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.129269][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.714875][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 846.920350][T14110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.207704][T14110] veth0_vlan: entered promiscuous mode [ 847.255088][T14110] veth1_vlan: entered promiscuous mode [ 847.363401][T14110] veth0_macvtap: entered promiscuous mode [ 847.412964][T14110] veth1_macvtap: entered promiscuous mode [ 847.502580][T14110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.526286][T14110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.555187][T14110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.576432][T14110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.611713][T14110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.641736][T14110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.673592][T14110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.727654][T14110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.761745][T14110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.801372][T14110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.822003][T14110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.856821][T14110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 847.897741][T14110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.930338][T14110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 847.980435][T14110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.012008][T14110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.021205][T14110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.042709][T14110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.293155][T13259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.301038][T13259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.377471][T13272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.402895][T13272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.923453][ T3536] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 850.848860][T14112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 850.916956][T14112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 850.925898][T14112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 850.942455][T14112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 850.950209][T14112] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 850.959024][T14112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 851.248008][ T3536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.307970][T14348] rxe_eth0 speed is unknown, defaulting to 1000 [ 851.563976][ T3536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.182260][ T3536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.342905][T14348] lo speed is unknown, defaulting to 1000 [ 852.425331][ T3536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.847822][ T3536] tipc: Left network mode [ 853.033746][T10683] Bluetooth: hci3: command tx timeout [ 853.748828][T14376] loop3: detected capacity change from 0 to 32768 [ 853.789625][T14376] (syz.3.2302,14376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 853.841757][T14376] (syz.3.2302,14376,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 854.077951][T14376] JBD2: Ignoring recovery information on journal [ 854.660110][T14376] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 855.112253][T10683] Bluetooth: hci3: command tx timeout [ 855.151062][T14376] (syz.3.2302,14376,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 855.185691][T14376] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 855.205178][T14376] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 855.217104][T14376] OCFS2: Returning error to the calling process. [ 855.223620][T14376] (syz.3.2302,14376,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 855.233044][T14376] (syz.3.2302,14376,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 855.241318][T14376] (syz.3.2302,14376,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 855.250808][T14376] (syz.3.2302,14376,1):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 855.258966][T14376] (syz.3.2302,14376,1):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 855.289417][T14348] chnl_net:caif_netlink_parms(): no params data found [ 855.512659][T14110] ocfs2: Unmounting device (7,3) on (node local) [ 855.601965][T14348] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.636664][T14348] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.652430][T14348] bridge_slave_0: entered allmulticast mode [ 855.669919][T14348] bridge_slave_0: entered promiscuous mode [ 855.759321][T14348] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.780177][T14348] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.810759][T14348] bridge_slave_1: entered allmulticast mode [ 855.834400][T14348] bridge_slave_1: entered promiscuous mode [ 856.080057][T14348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.135713][T14348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.041470][T14348] team0: Port device team_slave_0 added [ 857.077907][T14348] team0: Port device team_slave_1 added [ 857.201947][T10683] Bluetooth: hci3: command tx timeout [ 857.245210][T14348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.271778][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.344727][T14348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.408751][T14348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.427385][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 857.503501][T14348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.940091][T14348] hsr_slave_0: entered promiscuous mode [ 858.016372][T14348] hsr_slave_1: entered promiscuous mode [ 858.071286][T14348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.113664][T14348] Cannot create hsr debugfs directory [ 858.119723][ T3536] veth0_to_bond: left allmulticast mode [ 858.142974][ T3536] veth0_to_bond: left promiscuous mode [ 858.148684][ T3536] bridge1: port 1(veth0_to_bond) entered disabled state [ 858.212311][ T3536] hsr_slave_0: left promiscuous mode [ 858.242070][ T3536] hsr_slave_1: left promiscuous mode [ 858.254105][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.281779][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.308215][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.351940][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.381087][ T3536] bridge_slave_1: left allmulticast mode [ 858.409720][ T3536] bridge_slave_1: left promiscuous mode [ 858.430170][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.453574][ T3536] bridge_slave_0: left allmulticast mode [ 858.459865][ T3536] bridge_slave_0: left promiscuous mode [ 858.490613][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.572201][ T3536] veth1_macvtap: left promiscuous mode [ 858.577800][ T3536] veth0_macvtap: left promiscuous mode [ 858.602057][ T3536] veth1_vlan: left promiscuous mode [ 858.612181][ T3536] veth0_vlan: left promiscuous mode [ 859.271748][T10683] Bluetooth: hci3: command tx timeout [ 861.569875][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 861.713542][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 864.576710][ T3536] IPVS: stop unused estimator thread 0... [ 865.215569][T14348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.312875][T14348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 865.362325][T14348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 865.423273][T14348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 865.708220][T14348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.866184][T14348] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.944662][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.951909][ T8927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.011098][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.018321][T13257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.653408][T14348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.776509][T14348] veth0_vlan: entered promiscuous mode [ 866.846320][T14348] veth1_vlan: entered promiscuous mode [ 866.872506][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2357'. [ 866.956050][T14348] veth0_macvtap: entered promiscuous mode [ 866.989476][T14348] veth1_macvtap: entered promiscuous mode [ 867.057653][T14348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.086113][T14348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.106520][T14348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.142281][T14348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.164837][T14348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.178639][T14348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.197833][T14348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.219844][T14348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.252922][T14348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.281814][T14348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.311788][T14348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.327542][T14348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.340263][T14348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.367979][T14348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.419030][T14348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.441804][T14348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.450563][T14348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.482430][T14348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.863031][T14614] overlayfs: failed to clone upperpath [ 868.237746][T14629] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 869.076568][T14654] tipc: Started in network mode [ 869.081587][T14654] tipc: Node identity 4246, cluster identity 4711 [ 869.101742][T14654] tipc: Node number set to 16966 [ 869.515697][T14660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2374'. [ 869.737199][T10683] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 870.068417][T13257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.399035][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.405699][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.544887][T13257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.572048][T10913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 872.705475][T13257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.783779][T10913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.806052][T10913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 872.831806][T10913] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 872.846795][T10913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.868117][T10913] usb 4-1: config 0 descriptor?? [ 872.952881][T10683] Bluetooth: hci2: command 0x0405 tx timeout [ 872.954854][T13257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.496457][T14717] rxe_eth0 speed is unknown, defaulting to 1000 [ 873.656004][T14726] overlayfs: failed to clone upperpath [ 875.404172][T14717] lo speed is unknown, defaulting to 1000 [ 875.981963][ T8] usb 4-1: USB disconnect, device number 3 [ 877.039216][T13257] hsr_slave_0: left promiscuous mode [ 877.061368][T13257] hsr_slave_1: left promiscuous mode [ 877.120153][T13257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.159641][T13257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.193087][T13257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.200592][T13257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.230496][T13257] bridge_slave_1: left allmulticast mode [ 877.241698][T13257] bridge_slave_1: left promiscuous mode [ 877.247556][T13257] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.273891][T13257] bridge_slave_0: left allmulticast mode [ 877.279676][T13257] bridge_slave_0: left promiscuous mode [ 877.293220][T13257] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.355519][T13257] veth1_macvtap: left promiscuous mode [ 877.366454][T13257] veth0_macvtap: left promiscuous mode [ 877.382263][T13257] veth1_vlan: left promiscuous mode [ 877.398255][T13257] veth0_vlan: left promiscuous mode [ 878.281804][T14469] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 878.521724][T14469] usb 4-1: Using ep0 maxpacket: 32 [ 878.533488][T14469] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 878.551327][T14469] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 878.565498][T14469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.583234][T14469] usb 4-1: Product: syz [ 878.597743][T14469] usb 4-1: Manufacturer: syz [ 878.602849][T14469] usb 4-1: SerialNumber: syz [ 878.621346][T14469] usb 4-1: config 0 descriptor?? [ 878.644841][T14469] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 878.672736][T14469] dvb-usb: bulk message failed: -22 (2/0) [ 878.776411][T14469] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 878.830963][T14469] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 878.863189][T14788] dvb-usb: bulk message failed: -22 (4/0) [ 878.871024][T14469] usb 4-1: media controller created [ 878.878665][T14788] cxusb: i2c read failed [ 878.946319][T14469] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 878.990423][T14469] usb 4-1: selecting invalid altsetting 7 [ 878.996741][T14469] cxusb: set interface failed [ 879.001470][T14469] dvb-usb: bulk message failed: -22 (1/0) [ 879.079085][T14469] DVB: Unable to find symbol lgdt330x_attach() [ 879.085712][T14469] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 879.213416][T14469] rc_core: IR keymap rc-dvico-portable not found [ 879.219839][T14469] Registered IR keymap rc-empty [ 879.250885][T14469] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 879.268047][T13257] team0 (unregistering): Port device team_slave_1 removed [ 879.279092][T14469] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input12 [ 879.333955][T14469] dvb-usb: schedule remote query interval to 100 msecs. [ 879.341108][T14469] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 879.359385][T14469] usb 4-1: USB disconnect, device number 4 [ 879.363274][T13257] team0 (unregistering): Port device team_slave_0 removed [ 879.488257][T13257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.541585][T14469] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 879.594546][T13257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.289748][T14801] loop3: detected capacity change from 0 to 32768 [ 880.336135][T14713] udevd[14713]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 880.360388][T14801] (syz.3.2405,14801,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 880.399706][T14713] udevd[14713]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 880.409235][T14801] (syz.3.2405,14801,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 880.441398][T14801] JBD2: Ignoring recovery information on journal [ 880.488354][T14801] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 880.527458][T13257] bond0 (unregistering): Released all slaves [ 880.737509][T14110] ocfs2: Unmounting device (7,3) on (node local) [ 880.783823][T14713] udevd[14713]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 880.806960][T14713] udevd[14713]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 881.439795][T14826] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2408'. [ 889.271892][T14977] 9pnet_fd: p9_fd_create_unix (14977): problem connecting socket: ./proc/thread-self/fail-nth: -2 [ 891.599495][T15016] FAULT_INJECTION: forcing a failure. [ 891.599495][T15016] name fail_futex, interval 1, probability 0, space 0, times 1 [ 891.652235][T15016] CPU: 0 PID: 15016 Comm: syz.3.2443 Not tainted syzkaller #0 [ 891.659769][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 891.669947][T15016] Call Trace: [ 891.673258][T15016] [ 891.676208][T15016] dump_stack_lvl+0x18c/0x250 [ 891.680974][T15016] ? show_regs_print_info+0x20/0x20 [ 891.686212][T15016] ? load_image+0x420/0x420 [ 891.690925][T15016] should_fail_ex+0x394/0x4c0 [ 891.695727][T15016] get_futex_key+0x136/0x1030 [ 891.700438][T15016] ? verify_lock_unused+0x140/0x140 [ 891.705684][T15016] ? futex_setup_timer+0xc0/0xc0 [ 891.710676][T15016] futex_wake+0x127/0x4f0 [ 891.715041][T15016] ? __se_sys_fsmount+0x82d/0x9b0 [ 891.720133][T15016] ? futex_wake_mark+0x150/0x150 [ 891.725110][T15016] ? __lock_acquire+0x7eb0/0x7eb0 [ 891.730174][T15016] do_futex+0x35d/0x3e0 [ 891.734359][T15016] ? mutex_unlock+0x10/0x10 [ 891.738892][T15016] ? __ia32_sys_get_robust_list+0x110/0x110 [ 891.744826][T15016] __se_sys_futex+0x3a9/0x440 [ 891.749537][T15016] ? __x64_sys_futex+0xf0/0xf0 [ 891.754337][T15016] ? __x64_sys_futex+0x21/0xf0 [ 891.759110][T15016] do_syscall_64+0x55/0xb0 [ 891.763527][T15016] ? clear_bhb_loop+0x40/0x90 [ 891.768317][T15016] ? clear_bhb_loop+0x40/0x90 [ 891.773003][T15016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.778968][T15016] RIP: 0033:0x7f7d4759e559 [ 891.783387][T15016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.803154][T15016] RSP: 002b:00007f7d484550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 891.811898][T15016] RAX: ffffffffffffffda RBX: 00007f7d47825fa8 RCX: 00007f7d4759e559 [ 891.819875][T15016] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7d47825fac [ 891.827877][T15016] RBP: 00007f7d47825fa0 R08: 0000000000745afb R09: 0000000000000000 [ 891.835854][T15016] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 891.843912][T15016] R13: 00007f7d47826038 R14: 00007ffe49ae1410 R15: 00007ffe49ae14f8 [ 891.852166][T15016] [ 893.650642][ T28] audit: type=1326 audit(1149.589:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15035 comm="syz.3.2445" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4759e559 code=0x0 [ 893.946351][T15046] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2447'. [ 893.955673][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 893.964703][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2447'. [ 897.968615][T15102] overlayfs: failed to clone upperpath [ 898.024103][T15085] loop3: detected capacity change from 0 to 32768 [ 898.044373][T15050] udevd[15050]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 898.061953][T15085] (syz.3.2453,15085,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 898.107555][T15085] (syz.3.2453,15085,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 898.162143][T15085] JBD2: Ignoring recovery information on journal [ 898.261997][T15085] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 899.282463][T14110] ocfs2: Unmounting device (7,3) on (node local) [ 899.321152][T15050] udevd[15050]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 899.350006][T15050] udevd[15050]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 901.307429][T10683] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 906.232858][T10683] Bluetooth: hci2: command 0x0405 tx timeout [ 906.918826][T15280] loop3: detected capacity change from 0 to 32768 [ 906.935280][T15280] (syz.3.2484,15280,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 906.953202][T15280] (syz.3.2484,15280,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 906.966150][T15285] udevd[15285]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 906.990858][T15280] JBD2: Ignoring recovery information on journal [ 907.063109][T15280] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 907.488384][T15291] (syz.3.2484,15291,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 907.499824][T15291] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #16 has bitmap size 448 but physical max of 256 [ 907.520032][T15291] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 907.530030][T15291] OCFS2: Returning error to the calling process. [ 907.536422][T15291] (syz.3.2484,15291,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 16 failed -5 [ 907.546450][T15291] (syz.3.2484,15291,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -5 [ 907.554887][T15291] (syz.3.2484,15291,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -5 [ 907.564387][T15291] (syz.3.2484,15291,1):ocfs2_test_inode_bit:2896 ERROR: status = -5 [ 907.572533][T15291] (syz.3.2484,15291,1):ocfs2_get_parent:166 ERROR: test inode bit failed -5 [ 908.279930][T14110] ocfs2: Unmounting device (7,3) on (node local) [ 908.315708][T15285] udevd[15285]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 908.346940][T15285] udevd[15285]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory SYZFAIL: open(/dev/rfkill) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: open /dev/vhci failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=2290 state=3 status=67 (errno 9: Bad file descriptor) [ 918.921906][ T4011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.085826][ T4011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.174096][ T4011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.233138][ T4011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.376072][ T4011] tipc: Left network mode [ 920.577844][ T4011] hsr_slave_0: left promiscuous mode [ 920.585426][ T4011] hsr_slave_1: left promiscuous mode [ 920.593287][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.600715][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.608765][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.616809][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.625210][ T4011] bridge_slave_1: left allmulticast mode [ 920.630883][ T4011] bridge_slave_1: left promiscuous mode [ 920.636706][ T4011] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.649471][ T4011] bridge_slave_0: left allmulticast mode [ 920.655241][ T4011] bridge_slave_0: left promiscuous mode [ 920.660936][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.684682][ T4011] veth1_macvtap: left promiscuous mode [ 920.690316][ T4011] veth0_macvtap: left promiscuous mode [ 920.696080][ T4011] veth1_vlan: left promiscuous mode [ 920.701388][ T4011] veth0_vlan: left promiscuous mode [ 921.307322][ T4011] team0 (unregistering): Port device team_slave_1 removed [ 921.359561][ T4011] team0 (unregistering): Port device team_slave_0 removed [ 921.411123][ T4011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 921.463927][ T4011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.850774][ T4011] bond0 (unregistering): Released all slaves [ 921.917052][T13259] smc: removing ib device sz1 [ 922.648936][ T4011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.750661][ T4011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.809025][ T4011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.897580][ T4011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.072447][ T4011] tipc: Left network mode [ 924.136958][ T4011] hsr_slave_0: left promiscuous mode [ 924.183662][ T4011] hsr_slave_1: left promiscuous mode [ 924.190015][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.197573][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.209269][ T4011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.216989][ T4011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.226787][ T4011] bridge_slave_1: left allmulticast mode [ 924.233586][ T4011] bridge_slave_1: left promiscuous mode [ 924.239352][ T4011] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.249078][ T4011] bridge_slave_0: left allmulticast mode [ 924.255532][ T4011] bridge_slave_0: left promiscuous mode [ 924.261214][ T4011] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.285936][ T4011] veth1_macvtap: left promiscuous mode [ 924.291457][ T4011] veth0_macvtap: left promiscuous mode [ 924.298292][ T4011] veth1_vlan: left promiscuous mode [ 924.303975][ T4011] veth0_vlan: left promiscuous mode [ 924.901293][ T4011] team0 (unregistering): Port device team_slave_1 removed [ 924.949978][ T4011] team0 (unregistering): Port device team_slave_0 removed [ 924.998251][ T4011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.046090][ T4011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.404392][ T4011] bond0 (unregistering): Released all slaves