last executing test programs: 1m4.296525522s ago: executing program 0 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) sigaltstack(0x0, &(0x7f0000000040)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) write(r0, &(0x7f0000000300)='1', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000400)=0x40, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0)=0x20a, 0x4) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="ea012351ddc58332fdb2081dbbbe1e347aaa8ec7d8c9738c1a2ab4412ce01f0daf2fcd367a783443fa96baaa893d0666dd21482a2485ef23bfb8a14c917b4ffb8f694566151da0ae7b401ece8598e6cd7b97a58991c0725cee218df6ea0c73adfc6de77514dc15c7c834daa97759b1e88ef28881bbac8495721a6745117b43feb4932a959acc49cf1b5175a73d2c94bfbd01e7f72c0b28", 0x97}], 0x1}}], 0x1, 0x4000001) r5 = dup(r4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x3, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x3ff}}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x3506, 0x0, 0x3, 0xd, 0x80000, 0x7, 0x3}}, 0xe4) close(0xffffffffffffffff) 1m3.079112376s ago: executing program 0 (id=845): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000800)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0x1, 0x269, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) syz_mount_image$vfat(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000d00)) creat(&(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001500)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000001540)=""/43, 0x2b) 1m1.618685036s ago: executing program 0 (id=850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0x8, 0xbc0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r2, 0x4}, 0x38) 1m0.637021138s ago: executing program 0 (id=855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @broadcast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x8, r4, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)='\'', 0x1}], 0x1}, 0x4005) 53.492265058s ago: executing program 0 (id=871): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000200)=ANY=[]) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000340)) 51.581996605s ago: executing program 0 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @broadcast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x8, r4, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)='\'', 0x1}], 0x1}, 0x4005) 36.103161295s ago: executing program 32 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @broadcast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000740)=@xdp={0x2c, 0x8, r4, 0x42}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)='\'', 0x1}], 0x1}, 0x4005) 15.666993958s ago: executing program 5 (id=933): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000640)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 13.695853163s ago: executing program 2 (id=993): r0 = syz_ublk_setup_io_uring(0x277c, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7, 0xb, 0xb, 0x0, 0x5a1295f3, 0xb, 0x8, 0x1, 0x1, 0x40, 0xda, 0x6, 0x0, 0x101, 0x12af, 0x8, 0x2, 0x7, 0x0, '\x00', 0x81, 0x100000000000000a}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) r1 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000940)='vers\x00', &(0x7f0000000980)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$eJzs3U1rG9caAOB3ZClfzr12IIR77+ISyKIpIXJs9yOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZT+gO67DP0D/RWBNhBKMO2iFFxGHjmKJfkrcqVGzwOTnKMZzTlHZ96jMzOSFcDQOpn+k4v4b0R8kUSMtazLR7by5Pp2q09vz6RLEmtrH/6axIVN+0qy/0ezzH8i4sfPIs7k2sutLa/MlyqV8mKWn6gv3JioLa+cvbZQmivPla9PTU+ff3166q033+hZW1+9/PvXHzx89/znp1a/+v7xsftJXIyj2bq0XT0o4k5r5mTpzyxViIubNpzsQWGDJOl3BdiTkSzOC5GOAWMxkkU98PL7NCLWgCGViH8YUs15QPPcvkfnwf8YT95ZPwFqb39+/dpIHGqcGx1ZTZ47M0rPd8d7UH5axg+/PLifLrH1dYjD2+QBduXO3Yg4l8+3j39JNv7t3bnGxeOtbS5j2N5/oJ8epvOf5E5EW/znNuY/0WH+M9ohdvfi2T7WpzPt8Z973INiukrnf293nP9uDF3jI1nuX405XyG5eq1SPhcR/46I01E4mOa3up9zfvXRWrd1rfO/dEnLb84Fs3o8zh98/jmzpXrpRdrc6sndiP91nP8mG/2fdOj/9PW4vMMyTpQf/L/buu3bv7/Wvot4pWP/P7ujlWx9f3KicTxMNI+Kdr/dO/FTt/L73f60/49s3f7xpPV+ba3rrrreOPr20B/lbuv2evwfSD5qpA9kj90q1euLkxEHkvfzo5sfn3r23Ga+uX3a/tOnOsf/Vsd/Olp93PWleN694/e6bjoI/T+7q/7ffeLRe5980638nfX/a43U6eyRnYx/O63gi7x2AAAAAAAAMGhyEXE0klxxI53LFYvrn+84HkdylWqtfuZqden6bDS+KzsehVzzTvdYy+chJrPPwzbzU5vy0xFxLCK+HDncyBdnqpXZfjceAAAAAAAAAAAAAAAAAAAABsRol+//p34e6XftgH3X+GGDg/2uBdAP2/7kfy9+6QkYSNvGP/DS2n38uzIALwvv/zC8xD8ML/EPw2un8V8Y2+eKAH877/8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5fSZW316e2ZND97c3lpvnrz7Gy5Nl9cWJopzlQXbxTnqtW5Srk4U13Ybn+VavXG5FQs3Zqol2v1idryypWF6tL1+pVrC6W58pVywR8bBgAAAAAAAAAAAAAAAAAAgDa15ZX5UqVSXpTomrgQA1GN/Wzguj09PT8orZDoaaLPAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPgrAAD//20CM10=") r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000780)={0xbc, 0x0, 0x3}) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000540)='./tracing\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./tracing/events/sched/filter\x00', 0x103801, 0x69) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000400)={0x3b, r6}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="8800000002"]) 13.482062446s ago: executing program 5 (id=933): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000640)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 10.756572635s ago: executing program 1 (id=1000): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="d80000001a0081024e81f782db4cb90402b30efdce77e74eed0800fe0055a11500150002f3102ae81dba4e3000142603600e12080009007a010401a8041600200002400452bf892f8d60cb7070f9a700027c035c0461c1d6ff6f94007134cf6efb8000a007a2904578ffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f87def322895911b97975d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xd8}], 0x1}, 0x0) 10.749041543s ago: executing program 2 (id=1001): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 10.744525299s ago: executing program 3 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') lseek(r3, 0x75, 0x0) 10.388766407s ago: executing program 1 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.639828066s ago: executing program 3 (id=1006): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x2, 0x2}}]}}]}, 0xfffffffffffffc6f}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x20010) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x1, {0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x6}}}, 0x80, 0x0}, 0x4004800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 9.63424352s ago: executing program 5 (id=933): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000640)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 9.501683536s ago: executing program 1 (id=1008): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.500564399s ago: executing program 1 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x8000) 7.495426719s ago: executing program 2 (id=1010): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006240)={&(0x7f00000006c0)={0x358, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30c, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xd0}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "1b9803b4ba9472c9688a3e688a4c896f1a9255b83d49e5a6a673c379236ef835d9a4b185c8324f040a4baeec1085c25e8de2f32f8341ecace9c15d50bbd71b8c52e48f923dd140c622f65cc21135b9d4ab"}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "e44a2faa443e5799023b60c8b667827c62b787acb28df252ab38e8ee384ed3d4e04fa0e6b3c67a9c46966a37bf355ca5bd77cf9aa29083c7b255aad6f380e012af0ce9f760e1fbab17aa77f56c963b83a447fe6826d5dcecce51b664"}, @NFTA_DATA_VALUE={0x3d, 0x1, "4ba12b5448c0fb337963407319ab9a7131cb4390586262258cbcba7c673d747ec8c7ff806fa4b1ddf1ccefb92efb59e8d33f47156e662941a1"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "3101764c962fd331dab2ee918a154a2ba2de833accbd44842597ce46243ad6710afcdad12d7e8b0cf82060bd5a01e371ceb00d0127c330e6f564e13768034984d9d02d9e04390e66ba22e0249673e629d10356f833eb1515660c283a139adb83bac24b3671a364c1433ebc4edd9e20536df77492d123f354cfdd89a037654de054de79e19871aecceb45b837bad228111ad3003b5d6ad44ba779e50e714710e9cb1d612a66"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x24040800}, 0x20040040) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 7.487575483s ago: executing program 3 (id=1011): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f00000003c0)={[{@oldalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@oldalloc, 0x2e}, {@lazytime}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@lazytime}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x4804497, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0, @ANYRES32], 0x68, 0xc54, &(0x7f0000000ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x1) r4 = syz_open_procfs(r1, &(0x7f0000000340)='net/wireless\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b716380327727385edb72ae6e0decfbb66d017fe95566dfbf1d76780228fbb57ff8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cde982d4b55b2d321f1c9d55f844f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb0252799c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf", 0x548, 0xffffffffffffffff) rmdir(&(0x7f0000000040)='./bus\x00') syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) 7.268327957s ago: executing program 5 (id=933): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000640)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 4.987147765s ago: executing program 1 (id=1013): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 4.983033634s ago: executing program 2 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f0000000100)="1d", 0x1, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 4.968493818s ago: executing program 3 (id=1015): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1e, 0xe, 0x0, &(0x7f0000001580)='syzkaller\x00', 0x800, 0x0, 0x0, 0xc1100, 0x2, '\x00', 0x0, @fallback=0x6}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001c00), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001cc0), 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001dc0), &(0x7f0000001e00)}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x448d0}, 0x4000054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000540)={0x8, r7}) 4.961590025s ago: executing program 4 (id=1016): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') lseek(r3, 0x75, 0x0) 4.823834082s ago: executing program 5 (id=933): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000640)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 3.188565809s ago: executing program 1 (id=1017): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000200)="9933", &(0x7f0000000240)=""/93}, 0x20) 3.176334998s ago: executing program 33 (id=1017): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000200)="9933", &(0x7f0000000240)=""/93}, 0x20) 3.159195761s ago: executing program 4 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101}) 2.967146114s ago: executing program 4 (id=1020): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.751476066s ago: executing program 5 (id=933): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./cifs\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000340)='cifs\x00', 0x0, &(0x7f0000000640)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=3.0,nodfs\x00') 1.976840216s ago: executing program 6 (id=1019): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b4000000000700df4f110800000000004600feff000000009548000000000000c15fb296e12bca43740aacaf2ad6413304aa2f4303051be323eb2e001067268e343a89220ec64e2bed4c20400c2ba40b9fbe275e9c0b284ba2402c00a7d9"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) 1.97444582s ago: executing program 4 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000d40)='./file1\x00', &(0x7f0000000d80)='tmpfs\x00', 0x2, &(0x7f0000000dc0)='usrquota') chdir(&(0x7f0000000e00)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, 0x0, 0x0) 1.229119975s ago: executing program 2 (id=1022): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.223242271s ago: executing program 3 (id=1023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) 1.222762056s ago: executing program 4 (id=1024): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000006240)={&(0x7f00000006c0)={0x358, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30c, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xd0}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "1b9803b4ba9472c9688a3e688a4c896f1a9255b83d49e5a6a673c379236ef835d9a4b185c8324f040a4baeec1085c25e8de2f32f8341ecace9c15d50bbd71b8c52e48f923dd140c622f65cc21135b9d4ab"}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "e44a2faa443e5799023b60c8b667827c62b787acb28df252ab38e8ee384ed3d4e04fa0e6b3c67a9c46966a37bf355ca5bd77cf9aa29083c7b255aad6f380e012af0ce9f760e1fbab17aa77f56c963b83a447fe6826d5dcecce51b664"}, @NFTA_DATA_VALUE={0x3d, 0x1, "4ba12b5448c0fb337963407319ab9a7131cb4390586262258cbcba7c673d747ec8c7ff806fa4b1ddf1ccefb92efb59e8d33f47156e662941a1"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "3101764c962fd331dab2ee918a154a2ba2de833accbd44842597ce46243ad6710afcdad12d7e8b0cf82060bd5a01e371ceb00d0127c330e6f564e13768034984d9d02d9e04390e66ba22e0249673e629d10356f833eb1515660c283a139adb83bac24b3671a364c1433ebc4edd9e20536df77492d123f354cfdd89a037654de054de79e19871aecceb45b837bad228111ad3003b5d6ad44ba779e50e714710e9cb1d612a66"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x24040800}, 0x20040040) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 934.957724ms ago: executing program 2 (id=1025): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0x1, 0x400, 0x1, 0xc8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x668a, 0x40, 0x10fffff, 0x1a, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x40000, 0x2, 0x145, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4, 0xfffffffb, 0x34a, 0x0, r6}}], 0x1, &(0x7f0000001000)={0x2e, 0x6d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffd, 0x3, 0x0, 0x0}}, 0x0) 236.827896ms ago: executing program 4 (id=1026): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc41a, &(0x7f00000003c0)={[{@oldalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@oldalloc, 0x2e}, {@lazytime}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@lazytime}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000300)='./file0\x00', 0x4804497, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESHEX, @ANYRES32=r0, @ANYRES32], 0x68, 0xc54, &(0x7f0000000ec0)="$eJzs3V9oXOl9N/DfMyOtRtq8G2028SZvs9uBlMQotfG/2AouQY4VtQHHGyIrdK+ikSU7w8ojI8mNN22D2pIWehO6N6U3RTRZWshFr7q9jNJsIaEUSshFclEQNFn2ohe6CJS2bFTOmWekkSzbs+uVJXs/HzP+njnzO6PnOc/ozBnQMycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjPfu7CiZPpoFsBADxMlye/dOK0938AeE+54vM/AAAAAAAAAAAAAAAcdimqcSRSDL22kabL+221S83WrdtT4xN7bzaYIkUlqmV9caudPHX6zKfOnhvt5L23f7d9JF6YvHKhfvFnx28uzi0tzc3Wp1rNqwuzcz0/Q3v7hRvvdPvdRsodUL/x0q3Za9eW6qeOn97x8O3hNwaePDJ8/tyxs6Od2qnxiYnJrpq+/nf80+9wtxkeT0Q1GpHireE3UyMiKvHg++I+r539Nlh2YqTsxNT4RNmR+WajtVw8mCq5qhJR79porLOPHsJYPJCxiJWi+UWDR4ruTd5sLDZm5ufqX2wsLjeXmwutVGm3tuhPPSoxmiJWI2J94M6n649qPB8pXjmxkWYiotrZD58sJwbfvz2VfehjD4p21vsjViuPwJgdYgNRjcuR4pevH42rxT7Lt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQX1fjXSLGQNtJseTzoHFcufbn++da1ha7a8rjS9xi8PzxMh/zYVItqzJRH/I30zk92AAAAAAAAAAAAAAAAAHi3DUY1vh0p/uS53yvnFUc5L/3950ff9+Jvd88Zf/Y+z1PUHo+IlUpvc3L789ThVCn+7UPH6EktqvGNPP/vjw66MQAAAAAAAAAAAAAAAAAAAO9p1XgxUnzl2NG0Gt3XFG+2rtevNGbm21eF7VxTvHPN9M3Nzc16audYzumcKzlXc67lXM8Zlbx9zrGc0zlXcq7mXMu5njOqefucYzmnc67kXM25lnM9Z/Tl7XOO5ZzOuZJzNedazvWccUiu3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DipRDV+FSm+9bWNFCkixiKmo51rAwfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgUEvVOB4p1l6slfdXKxFXIuJXm5ub5e2/Nzc3IzaK5Qd10H0FAAAAAAAAAAAAAAAAAACAQytV42OR4pn/2Uj1iLg9/MbAk0eGz587dna0GtVIRUl3/QuTVy7ULy7cuLk4t7Q0N1ufuvidt/PjapearVu3p8Yn3vWO9GTwzva3mlcXZud6fYL7tH+wdnHh5suLzetfXd7z8aHahZml5cXG1b0fjsGoREx3rxkpGzw1PlE2er7ZaJWbpspdGliJGOu1MwAAAAAAAAAAAAAAAAAAABwaQ6kan4sUP//3M6kzb7yvPef//7XvVbdqX/2D7e8CmN+VHd3fH9DLcuq1oSPlxPv61PjExGTX6r7+O0uLNqVUjWcjxSde+XA5Hz7F0J5z44u6p4q6G2dy3fCvFXUrO6pqI1PjE/XLC61jF+bnF642lhsz83eZgP9Urx0CAAAAAAAAAAAAAAAAAACAbUOpGj+JFP/5d/+WOtedz/P/+9r3uub//1Y5hb5USztzSzm3/6lybn97+f3nR4eef+5u6/dj/n/RppSq8c3tryvYmv8/vau2qPuzSPHmcx8tH0tReaKoa3S6037Ga835uRNF7V9Hil9/q1MbZe31XPvMdu3JonYwUvzlxs7ar+baD27Xnipqj0aKH/zH3rUf2q49XdT+PFL849/WO7VDRe3v59oj27XHry7Mz95vtxbj/91I8Z3Lv5M6fb7r+Hd9/8PKrtxyx5jfe7n38e+0Y+/xH+5at5LH9U8jxemffLgcy3uN/9lI8d3aR3Nde9/P5MefLv/fHv9PRIqf/cvO2mu59gPbtSd77dZBK8b/25Hi+3/1060+5/HPe3Z7hLrH///37cytV8m+jf+9f/+f7lo3nNt19W3ui/eipZe//lJjfn5u8YEXas9HvBvP0+tC8TLd95+VvwMnHmK/LFg4DAv3O3J8b3D/j07st+L9/88jxf8eqabOeUx+/39f+972+d9/fWP7/f/8rtxyQO//H+hadz6ftfT3RdSWb9zsfzaitvTy1481bzSuz12fa506eeLTnz578sTJs/1PdE7utpd63nePg2L8fxQpfvz3P976HLPz/G/v8/+hXbnlgMb/me4+7Tiv6XlXvCcV4/83keLpz/506/Pmvc7/O5//j35sZ279/h3Q+H+wa91wblfzbe4LAAAAAAAAAACAR8lQqsZfRIrf/ePfTJ05RL38/d/srtxyQH//daRr3Wxv8xoiPeCfSfe8kwEADpHi/O9DkeJ7mz/cmsu98/wvfqNT233+dzeH4fr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwqEtRjT+MFEOvbaS1geJ+W+1Ss3Xr9tT4xN6bDaZIUYlqWV/caidPnT7zqbPnRjt5aeBhduMj8cLklQv1iws3bi7OLS3NzdanWs2rC7NzPT/Dg26/20i5A+s3Xro1e+3aUv3U8dM7Hr49/MbAk0eGz587dna0Uzs1PjEx2VXT1/+Of/od0l3WPxHV+GGkeGv4zfT9gYhKPPi+uM9rZ78Nlp0YKTsxNT5RdmS+2WgtFw+mSq6qRNS7Nhrr7KOHMBYPZCxipWh+0eCRonuTNxuLjZn5ufoXG4vLzeXmQitV2q0t+lOPSoymiNWIWN/jV7I/qvHNSPHKiY30TwMR1c5++OTlyS+dOH3/9lT2oY89KNpZ749YrTwCY3aIDUQ1/iFS/PL1o/GDgYi+aN/i4xFfKPK1iFeL/ExEKl4YZyJ+8VAP7eynvqjGmUixkDbS6wPF8aBzXLn05frnW9cWumo7x5VH/v3hYTrkx6ZaVONH5RF/I/3z7t/roQNqFAAAAAAAAAAAAAAAAADlTNrVSPGVY0dTOT94a05xs3W9fqUxM9+e1teZ+9eZM725ublZT+0cyzmdcyXnas61nOs5o5K3zzmWczrnSs7VnGs513NGNW+fcyzndM6VnKtlDmy1eD2vj768fc6xnNM5V3Ku5lzLuZ4zDsncPQAAAAAAAAAAAAAAAAAA4PFSiWp5FfdvfW0jlVOlxyKmo51rrvP72Pu/AAAA//8L9F/b") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x1) r4 = syz_open_procfs(r1, &(0x7f0000000340)='net/wireless\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) bind$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b716380327727385edb72ae6e0decfbb66d017fe95566dfbf1d76780228fbb57ff8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cde982d4b55b2d321f1c9d55f844f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb0252799c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf", 0x548, 0xffffffffffffffff) rmdir(&(0x7f0000000040)='./bus\x00') syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x141200) 145.75659ms ago: executing program 3 (id=1027): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40400, 0x0) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) 0s ago: executing program 6 (id=1019): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b4000000000700df4f110800000000004600feff000000009548000000000000c15fb296e12bca43740aacaf2ad6413304aa2f4303051be323eb2e001067268e343a89220ec64e2bed4c20400c2ba40b9fbe275e9c0b284ba2402c00a7d9"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) kernel console output (not intermixed with test programs): : detected capacity change from 0 to 1024 [ 163.648465][ T6621] udevd[6621]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 163.839180][ T5817] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.991525][ T5817] usb 3-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 164.008478][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.035532][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.035553][ T5817] usb 3-1: Product: syz [ 164.035561][ T5817] usb 3-1: Manufacturer: syz [ 164.035569][ T5817] usb 3-1: SerialNumber: syz [ 164.083917][ T5817] usb 3-1: config 0 descriptor?? [ 164.385896][ T5817] usb 3-1: USB disconnect, device number 5 [ 164.459614][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 164.482643][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 164.540827][ T6632] loop4: detected capacity change from 0 to 1024 [ 164.556777][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 164.755549][ T6632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.795084][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.240'. [ 167.318362][ T6658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.603311][ T5607] EXT4-fs error (device loop4): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 167.640099][ T5607] EXT4-fs (loop4): Remounting filesystem read-only [ 167.700682][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.785809][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 167.809196][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 169.009903][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 169.510410][ T6673] loop2: detected capacity change from 0 to 64 [ 169.551963][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 170.132206][ T5615] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 170.650023][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 170.695191][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 171.525232][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.253'. [ 172.181017][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 172.365988][ T10] usb 1-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 172.380140][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.380176][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.380213][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.436618][ T10] usb 1-1: config 0 descriptor?? [ 173.128970][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 173.129016][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 173.129040][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 173.129062][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 173.129084][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 173.156306][ T10] playstation 0003:054C:0DF2.0002: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 173.565861][ T6710] udevd[6710]: open /dev/null failed: No such file or directory [ 173.908503][ T6713] loop4: detected capacity change from 0 to 512 [ 173.909878][ T6713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.909941][ T6713] ext4: Unknown parameter 'fsname' [ 174.143584][ T10] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (3), disabling calibration. [ 174.143615][ T10] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (4), disabling calibration. [ 174.143632][ T10] playstation 0003:054C:0DF2.0002: Invalid gyro calibration data for axis (5), disabling calibration. [ 174.143649][ T10] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 174.143666][ T10] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 174.143683][ T10] playstation 0003:054C:0DF2.0002: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 174.155035][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 174.170914][ T10] input: HID 054c:0df2 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0002/input/input6 [ 174.185569][ T10] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0002/input/input7 [ 174.893853][ T10] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0002/input/input8 [ 174.913389][ T10] input: HID 054c:0df2 Headset Jack as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:0DF2.0002/input/input9 [ 174.962946][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 175.000772][ T6625] udevd[6625]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 175.095821][ T6726] loop4: detected capacity change from 0 to 64 [ 175.100237][ T6724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.203289][ T6721] udevd[6721]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 175.310049][ T10] playstation 0003:054C:0DF2.0002: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 175.356634][ T10] usb 1-1: USB disconnect, device number 3 [ 175.716995][ T6719] udevd[6719]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 175.754930][ T6733] udevd[6733]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 176.287543][ T5615] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 176.483548][ T6748] loop3: detected capacity change from 0 to 32768 [ 176.517474][ T6748] (syz.3.270,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.518749][ T6748] (syz.3.270,6748,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.634456][ T6748] JBD2: Ignoring recovery information on journal [ 176.681425][ T6730] udevd[6730]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 176.710732][ T6748] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 176.987339][ T5609] ocfs2: Unmounting device (7,3) on (node local) [ 177.138425][ T6730] udevd[6730]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 177.172518][ T6730] udevd[6730]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 179.085285][ T6778] 9pnet_fd: Insufficient options for proto=fd [ 180.255705][ T6787] fuse: Bad value for 'user_id' [ 180.255727][ T6787] fuse: Bad value for 'user_id' [ 180.434585][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028d43c00: rx timeout, send abort [ 180.761180][ T6799] rxe_eth0 speed is unknown, defaulting to 1000 [ 180.858431][ T6806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.934642][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028d43c00: abort rx timeout. Force session deactivation [ 180.934847][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028d40800: rx timeout, send abort [ 181.434902][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028d40800: abort rx timeout. Force session deactivation [ 182.128314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 182.228507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 182.736105][ T5615] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 186.241138][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d3e400: rx timeout, send abort [ 186.410415][ T6863] loop4: detected capacity change from 0 to 164 [ 186.423822][ T6863] ISOFS: Unable to identify CD-ROM format. [ 186.741198][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d3e400: abort rx timeout. Force session deactivation [ 186.741682][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d3c400: rx timeout, send abort [ 187.112903][ T6807] udevd[6807]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.148825][ T6807] udevd[6807]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.164684][ T6807] udevd[6807]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 187.241726][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032d3c400: abort rx timeout. Force session deactivation [ 187.461459][ T6870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.502307][ T6874] loop2: detected capacity change from 0 to 1024 [ 188.515969][ T6807] udevd[6807]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 188.923888][ T6807] udevd[6807]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 189.186907][ T6807] udevd[6807]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 190.127666][ T5615] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 191.138481][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880354e3800: rx timeout, send abort [ 191.637508][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880354e3000: rx timeout, send abort [ 191.638538][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880354e3800: abort rx timeout. Force session deactivation [ 192.137573][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880354e3000: abort rx timeout. Force session deactivation [ 192.346839][ T6915] loop0: detected capacity change from 0 to 1024 [ 192.403602][ T6916] udevd[6916]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 194.090461][ T6924] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 194.295639][ T6916] udevd[6916]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 194.336159][ T6916] udevd[6916]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 194.669460][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.669525][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.527512][ T6969] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 198.421282][ T6976] loop0: detected capacity change from 0 to 1024 [ 198.460218][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 198.679051][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 198.694072][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 198.905584][ T6960] loop2: detected capacity change from 0 to 32768 [ 198.930348][ T6960] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.332 (6960) [ 198.934259][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 199.000309][ T6960] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 199.000347][ T6960] BTRFS info (device loop2): using blake2b checksum algorithm [ 199.152791][ T6960] BTRFS info (device loop2): enabling ssd optimizations [ 199.152821][ T6960] BTRFS info (device loop2): turning on async discard [ 199.152835][ T6960] BTRFS info (device loop2): enabling free space tree [ 199.190610][ T7002] netlink: 'syz.3.339': attribute type 4 has an invalid length. [ 199.190638][ T7002] netlink: 17 bytes leftover after parsing attributes in process `syz.3.339'. [ 199.192086][ T6981] loop4: detected capacity change from 0 to 32768 [ 199.198539][ T6981] (syz.4.337,6981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 199.198855][ T6981] (syz.4.337,6981,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 199.214892][ T6981] JBD2: Ignoring recovery information on journal [ 199.269089][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 199.274427][ T6981] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 199.423829][ T5605] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 199.568969][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 199.608404][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 200.590778][ T7025] random: crng reseeded on system resumption [ 201.462538][ T5607] ocfs2: Unmounting device (7,4) on (node local) [ 201.490580][ T7029] loop3: detected capacity change from 0 to 1024 [ 201.491362][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 201.526467][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 201.537212][ T7031] udevd[7031]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 201.895384][ T7040] netlink: 48 bytes leftover after parsing attributes in process `syz.1.352'. [ 202.054140][ T7011] loop0: detected capacity change from 0 to 40427 [ 202.076058][ T7011] F2FS-fs (loop0): invalid crc value [ 202.210150][ T7011] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 202.228397][ T7011] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 202.228427][ T7011] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 202.228453][ T7011] F2FS-fs (loop0): Start checkpoint disabled! [ 202.264046][ T7011] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 202.309995][ T7011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 203.630990][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 203.688887][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 204.974695][ T7069] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 205.474280][ T7057] loop1: detected capacity change from 0 to 32768 [ 205.482829][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 205.507308][ T7057] (syz.1.357,7057,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.512270][ T7057] (syz.1.357,7057,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.555148][ T7057] JBD2: Ignoring recovery information on journal [ 205.711012][ T7057] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 206.285261][ T7085] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 206.285291][ T7085] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 206.285689][ T7085] vhci_hcd vhci_hcd.0: Device attached [ 206.404486][ T5608] ocfs2: Unmounting device (7,1) on (node local) [ 206.451956][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 206.476801][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 206.585567][ T7093] loop0: detected capacity change from 0 to 128 [ 206.642235][ T7094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.802463][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 206.900203][ T5817] usb 40-1: SetAddress Request (2) to port 0 [ 206.900303][ T5817] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 206.980025][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 207.023365][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 207.087418][ T7088] vhci_hcd: connection reset by peer [ 207.117782][ T40] vhci_hcd vhci_hcd.3: stop threads [ 207.118636][ T40] vhci_hcd vhci_hcd.3: release socket [ 207.120281][ T40] vhci_hcd vhci_hcd.3: disconnect device [ 208.428629][ T7113] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 208.677921][ T32] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 209.327588][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 209.467879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 209.823985][ T32] usb 5-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 209.868808][ T32] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.868841][ T32] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.264104][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.264158][ T32] usb 5-1: Product: syz [ 210.264175][ T32] usb 5-1: Manufacturer: syz [ 210.264188][ T32] usb 5-1: SerialNumber: syz [ 210.679769][ T32] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 210.709373][ T5753] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 210.713927][ T32] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 210.713927][ T32] Please send a copy of this message to and [ 210.853879][ T32] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 210.859709][ T27] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 210.866851][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.866903][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 210.866924][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 210.866962][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.883173][ T32] usb 5-1: USB disconnect, device number 6 [ 210.929271][ T5753] usb 4-1: not running at top speed; connect to a high speed hub [ 210.929311][ T5753] usb 4-1: New USB device found: idVendor=2b53, idProduct=0023, bcdDevice=0.40 [ 210.930936][ T5753] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.930960][ T5753] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.930979][ T5753] usb 4-1: config 1 has no interface number 0 [ 210.933767][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.933793][ T5753] usb 4-1: Product: syz [ 210.933806][ T5753] usb 4-1: Manufacturer: syz [ 210.933819][ T5753] usb 4-1: SerialNumber: syz [ 211.028246][ T7129] loop4: detected capacity change from 0 to 512 [ 211.029715][ T7129] EXT4-fs: quotafile must be on filesystem root [ 211.046094][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 211.068834][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 211.076656][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 211.133894][ T27] cxacru 2-1:1.0: invalid response length to cm 0x90: 0 [ 211.199896][ T7132] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 211.379849][ T5753] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 211.504860][ T27] usb 2-1: USB disconnect, device number 2 [ 211.636544][ T5753] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 211.650636][ T5753] usb 4-1: USB disconnect, device number 6 [ 211.842012][ T7095] udevd[7095]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.947872][ T5817] usb 40-1: device descriptor read/8, error -110 [ 212.078457][ T7144] loop3: detected capacity change from 0 to 164 [ 212.087754][ T7144] ISOFS: Unable to identify CD-ROM format. [ 212.115962][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 212.149243][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 212.173642][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 212.395501][ T5817] usb usb40-port1: attempt power cycle [ 213.470658][ T5817] usb usb40-port1: unable to enumerate USB device [ 213.833093][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 214.797848][ T5753] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.948574][ T5753] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 214.949832][ T5753] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.949883][ T5753] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 214.949907][ T5753] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 214.949945][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.311573][ T5753] cxacru 5-1:1.0: invalid response length to cm 0x90: 0 [ 215.316221][ T7197] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 215.587225][ T5773] usb 5-1: USB disconnect, device number 7 [ 215.698867][ T7213] 9pnet_fd: Insufficient options for proto=fd [ 215.870992][ T5753] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.688465][ T5753] usb 3-1: New USB device found: idVendor=041e, idProduct=3000, bcdDevice=0.40 [ 216.693291][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.693319][ T5753] usb 3-1: Product: syz [ 216.693332][ T5753] usb 3-1: Manufacturer: syz [ 216.693346][ T5753] usb 3-1: SerialNumber: syz [ 217.284841][ T7206] loop2: detected capacity change from 0 to 512 [ 217.700366][ T7138] udevd[7138]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 217.816143][ T5753] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 217.981812][ T5753] usb 3-1: USB disconnect, device number 6 [ 217.986705][ T7236] loop3: detected capacity change from 0 to 164 [ 217.988022][ T7236] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 218.012806][ T7138] udevd[7138]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 218.194810][ T7138] udevd[7138]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 219.042658][ T7031] udevd[7031]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 219.098950][ T6979] udevd[6979]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 219.101968][ T7138] udevd[7138]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.143288][ T7138] udevd[7138]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 220.204898][ T7256] 9pnet_fd: Insufficient options for proto=fd [ 221.078257][ T5773] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 221.259829][ T5773] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 221.308720][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.310332][ T5773] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 221.348425][ T5773] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 221.348789][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.002905][ T5773] cxacru 2-1:1.0: invalid response length to cm 0x90: 0 [ 222.087306][ T7263] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 222.279725][ T5753] usb 2-1: USB disconnect, device number 3 [ 222.747593][ T7275] loop0: detected capacity change from 0 to 40427 [ 222.756347][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 222.767979][ T7275] F2FS-fs (loop0): invalid crc value [ 222.854834][ T7275] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 222.860379][ T7275] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 222.860406][ T7275] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 222.860429][ T7275] F2FS-fs (loop0): Start checkpoint disabled! [ 222.869967][ T7275] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 222.888336][ T7275] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 223.132777][ T7287] CIFS: Attempting to mount //127.0.0.1/share [ 223.327450][ T7289] syz.0.429: attempt to access beyond end of device [ 223.327450][ T7289] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.339977][ T7289] syz.0.429: attempt to access beyond end of device [ 223.339977][ T7289] loop0: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 223.831443][ T7287] CIFS: VFS: Error connecting to socket. Aborting operation. [ 223.831499][ T7287] CIFS: VFS: cifs_mount failed w/return code = -4 [ 224.170164][ T7293] loop2: detected capacity change from 0 to 164 [ 224.173591][ T7293] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 224.193332][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 224.223703][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 224.239420][ T6329] kworker/u8:14: attempt to access beyond end of device [ 224.239420][ T6329] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 224.247368][ T6329] CPU: 1 UID: 0 PID: 6329 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 224.247415][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 224.247428][ T6329] Workqueue: writeback wb_workfn (flush-7:0) [ 224.247469][ T6329] Call Trace: [ 224.247477][ T6329] [ 224.247484][ T6329] dump_stack_lvl+0xe8/0x150 [ 224.247513][ T6329] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 224.247546][ T6329] f2fs_write_end_bio+0x118e/0x15d0 [ 224.247585][ T6329] __submit_merged_bio+0x258/0x6a0 [ 224.247611][ T6329] ? rcu_is_watching+0x16/0xb0 [ 224.247641][ T6329] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 224.247669][ T6329] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 224.247719][ T6329] f2fs_write_data_pages+0x2a13/0x36e0 [ 224.247776][ T6329] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.247811][ T6329] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 224.247865][ T6329] ? __lock_acquire+0x747/0x2de0 [ 224.247903][ T6329] ? lock_acquire+0x115/0x350 [ 224.247944][ T6329] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 224.247965][ T6329] do_writepages+0x338/0x560 [ 224.247998][ T6329] ? reacquire_held_locks+0x117/0x1a0 [ 224.248019][ T6329] ? writeback_sb_inodes+0x450/0x1af0 [ 224.248050][ T6329] __writeback_single_inode+0x136/0x1220 [ 224.248086][ T6329] ? do_raw_spin_unlock+0xf5/0x200 [ 224.248115][ T6329] writeback_sb_inodes+0x9de/0x1af0 [ 224.248138][ T6329] ? __lock_acquire+0x747/0x2de0 [ 224.248183][ T6329] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 224.248252][ T6329] ? rcu_is_watching+0x16/0xb0 [ 224.248275][ T6329] ? queue_io+0x2d3/0x470 [ 224.248304][ T6329] wb_writeback+0x41c/0xad0 [ 224.248332][ T6329] ? queue_io+0x1f1/0x470 [ 224.248363][ T6329] ? __pfx_wb_writeback+0x10/0x10 [ 224.248385][ T6329] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.248426][ T6329] wb_workfn+0x431/0x10f0 [ 224.248468][ T6329] ? __pfx_wb_workfn+0x10/0x10 [ 224.248504][ T6329] ? do_raw_spin_lock+0x12b/0x2f0 [ 224.248538][ T6329] ? lock_acquire+0x115/0x350 [ 224.248567][ T6329] ? rcu_is_watching+0x16/0xb0 [ 224.248591][ T6329] ? process_scheduled_works+0x97a/0x1630 [ 224.248615][ T6329] process_scheduled_works+0xc3d/0x1630 [ 224.248671][ T6329] ? __pfx_process_scheduled_works+0x10/0x10 [ 224.248701][ T6329] ? assign_work+0x3cf/0x5d0 [ 224.248729][ T6329] worker_thread+0xa47/0xfb0 [ 224.248768][ T6329] ? __kthread_parkme+0x71/0x1f0 [ 224.248804][ T6329] kthread+0x38b/0x480 [ 224.248822][ T6329] ? __pfx_worker_thread+0x10/0x10 [ 224.248843][ T6329] ? __pfx_kthread+0x10/0x10 [ 224.248862][ T6329] ret_from_fork+0x514/0xb70 [ 224.248879][ T6329] ? save_fpregs_to_fpstate+0x176/0x200 [ 224.248903][ T6329] ? __pfx_ret_from_fork+0x10/0x10 [ 224.248922][ T6329] ? __switch_to+0xc78/0x1410 [ 224.248949][ T6329] ? __pfx_kthread+0x10/0x10 [ 224.248969][ T6329] ret_from_fork_asm+0x1a/0x30 [ 224.249003][ T6329] [ 224.256420][ T6329] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 224.354671][ T5615] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 224.644111][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 225.191784][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 225.212134][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 225.287220][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 225.292583][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 225.293996][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 225.295686][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.435'. [ 226.862102][ T7310] loop1: detected capacity change from 0 to 1024 [ 226.958631][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.437'. [ 227.124353][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 227.799982][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 227.941561][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 231.092851][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 231.100534][ T5615] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 231.698821][ T7339] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 231.887127][ T7353] loop2: detected capacity change from 0 to 1024 [ 231.915439][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 232.315710][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 232.341414][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 233.610869][ T7381] loop3: detected capacity change from 0 to 512 [ 233.612535][ T7381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.612626][ T7381] ext4: Unknown parameter 'fsname' [ 233.623794][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 233.668309][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 233.691222][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 233.890885][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 234.573006][ T7387] loop1: detected capacity change from 0 to 32768 [ 234.592615][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 234.594083][ T7387] (syz.1.462,7387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.594582][ T7387] (syz.1.462,7387,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.647397][ T7387] JBD2: Ignoring recovery information on journal [ 234.693987][ T7387] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 234.976500][ T7396] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.273164.2048), cmd(2) [ 235.728606][ T5608] ocfs2: Unmounting device (7,1) on (node local) [ 235.824107][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 235.838370][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 236.541856][ T7413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.472'. [ 237.298158][ T7421] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 238.094903][ T7430] loop0: detected capacity change from 0 to 128 [ 238.103025][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 238.166211][ T7430] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.187310][ T7430] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.412085][ T7445] loop3: detected capacity change from 0 to 164 [ 238.416199][ T7445] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 238.627240][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 238.638760][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 238.644969][ T5606] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.649290][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 238.752842][ T7447] loop4: detected capacity change from 0 to 256 [ 238.759023][ T7447] exfat: Deprecated parameter 'utf8' [ 238.759369][ T7447] exfat: Deprecated parameter 'namecase' [ 238.759611][ T7447] exfat: Deprecated parameter 'namecase' [ 238.759916][ T7447] exfat: Deprecated parameter 'namecase' [ 238.931023][ T7447] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 239.171297][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 239.664292][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 239.688723][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 241.341196][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 241.364445][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 241.747536][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.483'. [ 242.439795][ T7471] loop2: detected capacity change from 0 to 32768 [ 242.691461][ T7472] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 242.727212][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 242.889317][ T7471] (syz.2.488,7471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.892034][ T7471] (syz.2.488,7471,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 242.968542][ T7471] JBD2: Ignoring recovery information on journal [ 243.043113][ T7471] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 243.364467][ T1241] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 243.628882][ T1241] usb 1-1: Using ep0 maxpacket: 8 [ 243.637202][ T1241] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 243.680824][ T1241] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 243.681472][ T1241] usb 1-1: config 179 has no interface number 0 [ 243.682259][ T1241] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 243.682338][ T1241] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 243.682572][ T1241] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.682648][ T1241] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 243.682754][ T1241] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 243.683265][ T1241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.800480][ T7487] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.955767][ T5605] ocfs2: Unmounting device (7,2) on (node local) [ 244.061510][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.085370][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.482524][ T7507] loop2: detected capacity change from 0 to 164 [ 244.483632][ T7507] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 244.507278][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.530222][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.551319][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.607105][ T5773] usb 1-1: USB disconnect, device number 4 [ 244.607166][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 244.607213][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.625576][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 244.952323][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.370744][ T7522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 245.374288][ T7521] loop0: detected capacity change from 0 to 1024 [ 245.422051][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 245.700316][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 245.740767][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 246.159112][ T7530] loop2: detected capacity change from 0 to 32768 [ 246.288893][ T7530] (syz.2.505,7530,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.289185][ T7530] (syz.2.505,7530,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 246.330064][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 246.360025][ T7530] JBD2: Ignoring recovery information on journal [ 246.413630][ T7530] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 246.423892][ T7532] loop3: detected capacity change from 0 to 40427 [ 246.449037][ T7532] F2FS-fs (loop3): invalid crc value [ 246.474076][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 246.539650][ T7532] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.541897][ T7532] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 246.541936][ T7532] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 246.541960][ T7532] F2FS-fs (loop3): Start checkpoint disabled! [ 246.555358][ T7532] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 246.559403][ T7532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 246.816047][ T7548] loop4: detected capacity change from 0 to 164 [ 246.827637][ T7548] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 247.439687][ T5605] ocfs2: Unmounting device (7,2) on (node local) [ 247.650154][ T6445] kworker/u8:15: attempt to access beyond end of device [ 247.650154][ T6445] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.650406][ T6445] CPU: 0 UID: 0 PID: 6445 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 247.650433][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.650446][ T6445] Workqueue: writeback wb_workfn (flush-7:3) [ 247.650482][ T6445] Call Trace: [ 247.650490][ T6445] [ 247.650499][ T6445] dump_stack_lvl+0xe8/0x150 [ 247.650540][ T6445] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 247.650680][ T6445] f2fs_write_end_bio+0x118e/0x15d0 [ 247.650749][ T6445] __submit_merged_bio+0x258/0x6a0 [ 247.650804][ T6445] ? rcu_is_watching+0x16/0xb0 [ 247.650839][ T6445] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 247.650871][ T6445] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 247.650929][ T6445] f2fs_write_data_pages+0x2a13/0x36e0 [ 247.651002][ T6445] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.651079][ T6445] ? lock_acquire+0x115/0x350 [ 247.651122][ T6445] ? unwind_next_frame+0x1baf/0x2550 [ 247.651154][ T6445] ? ret_from_fork_asm+0x1a/0x30 [ 247.651191][ T6445] ? ret_from_fork_asm+0x1a/0x30 [ 247.651211][ T6445] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 247.651234][ T6445] do_writepages+0x338/0x560 [ 247.651271][ T6445] ? reacquire_held_locks+0x117/0x1a0 [ 247.651295][ T6445] ? writeback_sb_inodes+0x450/0x1af0 [ 247.651330][ T6445] __writeback_single_inode+0x136/0x1220 [ 247.651363][ T6445] ? do_raw_spin_unlock+0xf5/0x200 [ 247.651397][ T6445] writeback_sb_inodes+0x9de/0x1af0 [ 247.651424][ T6445] ? __lock_acquire+0x747/0x2de0 [ 247.651474][ T6445] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 247.651552][ T6445] ? rcu_is_watching+0x16/0xb0 [ 247.651579][ T6445] ? queue_io+0x2d3/0x470 [ 247.651612][ T6445] wb_writeback+0x41c/0xad0 [ 247.651644][ T6445] ? queue_io+0x1f1/0x470 [ 247.651677][ T6445] ? __pfx_wb_writeback+0x10/0x10 [ 247.651702][ T6445] ? do_raw_spin_lock+0x12b/0x2f0 [ 247.651750][ T6445] wb_workfn+0x431/0x10f0 [ 247.651798][ T6445] ? __pfx_wb_workfn+0x10/0x10 [ 247.651839][ T6445] ? irqentry_exit+0x218/0x920 [ 247.651896][ T6445] ? lockdep_hardirqs_on+0x7b/0x110 [ 247.651918][ T6445] ? irqentry_exit+0x218/0x920 [ 247.651949][ T6445] ? process_scheduled_works+0x97a/0x1630 [ 247.651985][ T6445] ? __pfx_wb_workfn+0x10/0x10 [ 247.652018][ T6445] ? process_scheduled_works+0x97a/0x1630 [ 247.652044][ T6445] process_scheduled_works+0xc3d/0x1630 [ 247.652108][ T6445] ? __pfx_process_scheduled_works+0x10/0x10 [ 247.652143][ T6445] ? assign_work+0x3cf/0x5d0 [ 247.652176][ T6445] worker_thread+0xa47/0xfb0 [ 247.652221][ T6445] ? __kthread_parkme+0x71/0x1f0 [ 247.652262][ T6445] kthread+0x38b/0x480 [ 247.652284][ T6445] ? __pfx_worker_thread+0x10/0x10 [ 247.652308][ T6445] ? __pfx_kthread+0x10/0x10 [ 247.652330][ T6445] ret_from_fork+0x514/0xb70 [ 247.652355][ T6445] ? __pfx_ret_from_fork+0x10/0x10 [ 247.652375][ T6445] ? __switch_to+0xc78/0x1410 [ 247.652406][ T6445] ? __pfx_kthread+0x10/0x10 [ 247.652428][ T6445] ret_from_fork_asm+0x1a/0x30 [ 247.652466][ T6445] [ 247.734386][ T6445] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 248.636302][ T7558] loop1: detected capacity change from 0 to 1024 [ 249.258266][ T5773] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 249.313349][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.517'. [ 249.366864][ T7575] loop0: detected capacity change from 0 to 512 [ 249.380436][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 249.383215][ T7575] EXT4-fs: quotafile must be on filesystem root [ 249.416821][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 249.601167][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 249.748733][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 249.751185][ T5773] usb 3-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 249.755443][ T5773] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 249.755468][ T5773] usb 3-1: config 179 has no interface number 0 [ 249.755508][ T5773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 249.755531][ T5773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 249.755555][ T5773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.755578][ T5773] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 249.755600][ T5773] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 249.755639][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.764134][ T7562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 250.258137][ T9] usb 3-1: USB disconnect, device number 7 [ 250.258137][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 250.258271][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 250.653552][ T7584] loop3: detected capacity change from 0 to 32768 [ 250.657235][ T7584] (syz.3.521,7584,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 250.664151][ T7584] (syz.3.521,7584,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 250.669698][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 250.705737][ T7584] JBD2: Ignoring recovery information on journal [ 250.741964][ T7584] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 250.971988][ T5609] ocfs2: Unmounting device (7,3) on (node local) [ 251.016321][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 251.035366][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 251.243854][ T7592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.645746][ T7600] loop4: detected capacity change from 0 to 1024 [ 251.655518][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 251.667708][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 252.332909][ T7601] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 252.358843][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 252.359609][ T9] usb 3-1: New USB device found: idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 252.367296][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.367323][ T9] usb 3-1: Product: syz [ 252.367336][ T9] usb 3-1: Manufacturer: syz [ 252.367349][ T9] usb 3-1: SerialNumber: syz [ 252.469204][ T9] usb 3-1: config 0 descriptor?? [ 252.520053][ T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 252.553570][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 252.590239][ T7249] udevd[7249]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 252.593715][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.596038][ T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 252.596161][ T9] usb 3-1: media controller created [ 252.605140][ T7249] udevd[7249]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 252.681847][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.719943][ T9] usb 3-1: selecting invalid altsetting 7 [ 252.719966][ T9] cxusb: set interface failed [ 252.719978][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 252.778894][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 252.778912][ T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 252.878774][ T9] rc_core: IR keymap rc-dvico-portable not found [ 252.878797][ T9] Registered IR keymap rc-empty [ 252.884195][ T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 252.919967][ T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 252.950782][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 252.950820][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 252.956419][ T9] usb 3-1: USB disconnect, device number 8 [ 255.070163][ T7630] loop3: detected capacity change from 0 to 164 [ 255.073467][ T7630] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 255.159125][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 255.211319][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 255.231875][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 256.112073][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.112178][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.261322][ T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 256.313734][ T7637] loop1: detected capacity change from 0 to 512 [ 256.314772][ T7637] EXT4-fs: quotafile must be on filesystem root [ 256.340372][ T7249] udevd[7249]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 256.553055][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 256.560890][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 257.633457][ T7659] fuse: Unknown parameter '0x0000000000000003' [ 257.822967][ T7656] loop4: detected capacity change from 0 to 32768 [ 257.830250][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 257.847713][ T7656] (syz.4.542,7656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 257.848460][ T7656] (syz.4.542,7656,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 257.881893][ T7656] JBD2: Ignoring recovery information on journal [ 257.964036][ T7656] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 257.992204][ T7664] loop0: detected capacity change from 0 to 256 [ 258.003143][ T7664] exfat: Deprecated parameter 'utf8' [ 258.013107][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 258.114116][ T7664] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 258.283547][ T5607] ocfs2: Unmounting device (7,4) on (node local) [ 258.351367][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 258.385315][ T7141] udevd[7141]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 258.756000][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'. [ 260.633469][ T7691] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 261.010744][ T7696] fuse: Unknown parameter '0x0000000000000003' [ 262.145602][ T7705] loop3: detected capacity change from 0 to 32768 [ 262.165556][ T7705] (syz.3.556,7705,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 262.165827][ T7705] (syz.3.556,7705,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 262.223854][ T7705] JBD2: Ignoring recovery information on journal [ 262.262064][ T7708] udevd[7708]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 262.287063][ T7705] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 262.491509][ T5609] ocfs2: Unmounting device (7,3) on (node local) [ 262.549787][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 262.569146][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 262.587568][ T5614] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 262.744777][ T5614] usb 5-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00 [ 262.748924][ T5614] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.748952][ T5614] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 262.748990][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.783348][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.563'. [ 263.722458][ T5614] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 263.921929][ T7736] fuse: Unknown parameter '0x0000000000000003' [ 264.066184][ T5614] usb 5-1: USB disconnect, device number 8 [ 264.092452][ T5614] idmouse 5-1:1.0: disconnected [ 264.909407][ T7746] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 265.096103][ T7751] loop1: detected capacity change from 0 to 512 [ 265.104095][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 265.156799][ T7751] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.571: iget: bad i_size value: 38620345925642 [ 265.156838][ T7751] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.159220][ T7751] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.571: couldn't read orphan inode 15 (err -117) [ 265.159250][ T7751] loop1: lost filesystem error report for type 5 error -117 [ 265.202396][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.244875][ T7751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.294980][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 265.312656][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 265.332108][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 265.353322][ T7751] loop1: detected capacity change from 0 to 512 [ 265.369504][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 265.373195][ T7751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 265.373609][ T7751] System zones: 1-12 [ 265.399147][ T7751] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.571: missing EA_INODE flag [ 265.399180][ T7751] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 265.408622][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 265.408648][ C0] EXT4-fs (loop1): initial error at time 1792027241: ext4_xattr_inode_iget:437: inode 12 [ 265.408678][ C0] EXT4-fs (loop1): last error at time 1792027241: ext4_xattr_inode_iget:437: inode 12 [ 265.414664][ T7751] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.571: error while reading EA inode 12 err=-117 [ 265.414696][ T7751] loop1: lost filesystem error report for type 5 error -117 [ 265.425859][ T7751] EXT4-fs (loop1): 1 orphan inode deleted [ 265.431786][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.443368][ T7751] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.501958][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 265.523019][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 265.539654][ T7751] loop1: detected capacity change from 0 to 2048 [ 265.551690][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 265.631804][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.919906][ T7767] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 266.173383][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.510065][ T7781] loop2: detected capacity change from 0 to 1024 [ 267.528598][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 267.559359][ T7781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.038058][ T5605] EXT4-fs error (device loop2): ext4_empty_dir:3116: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 269.047268][ T5605] EXT4-fs (loop2): Remounting filesystem read-only [ 269.113820][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.173073][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 269.191428][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 269.337270][ T7811] CIFS: Attempting to mount //127.0.0.1/share [ 270.050667][ T7811] CIFS: VFS: Error connecting to socket. Aborting operation. [ 270.052366][ T7811] CIFS: VFS: cifs_mount failed w/return code = -4 [ 270.432040][ T7823] loop2: detected capacity change from 0 to 512 [ 270.437264][ T7823] EXT4-fs: Ignoring removed oldalloc option [ 270.437358][ T7823] ext4: Unknown parameter 'oldalloc.lazytime' [ 270.460793][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 270.487957][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 270.492496][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 270.539102][ T7823] loop2: detected capacity change from 0 to 2048 [ 270.540624][ T7823] udf: Unknown parameter 'ÿÿ017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 270.564220][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 270.581563][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 270.586025][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 270.999435][ T7834] warning: `syz.2.594' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 274.797538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 275.638999][ T32] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 275.808485][ T32] usb 2-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 275.809973][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.816488][ T32] usb 2-1: config 0 descriptor?? [ 275.822608][ T32] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 275.977937][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573b0000: rx timeout, send abort [ 276.015245][ T32] gp8psk: usb in 128 operation failed. [ 276.017832][ T32] gp8psk: usb in 137 operation failed. [ 276.017851][ T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 276.017890][ T32] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 276.030256][ T32] usb 2-1: USB disconnect, device number 4 [ 276.478010][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880573b0000: abort rx timeout. Force session deactivation [ 276.478207][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057311000: rx timeout, send abort [ 276.978260][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057311000: abort rx timeout. Force session deactivation [ 278.101575][ T7901] netlink: 48 bytes leftover after parsing attributes in process `syz.4.623'. [ 278.771657][ T7872] loop3: detected capacity change from 0 to 32768 [ 278.825300][ T7872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.614 (7872) [ 278.838996][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 278.905925][ T7872] BTRFS error (device loop3): open_ctree failed: -EINTR [ 278.957751][ T7911] loop2: detected capacity change from 0 to 164 [ 278.958859][ T7911] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 278.984843][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 279.028607][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 279.062641][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 279.120902][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 279.164475][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 279.416988][ T7921] loop0: detected capacity change from 0 to 164 [ 279.427541][ T7921] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 279.429347][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 279.459105][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 279.814339][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 281.683214][ T7970] loop0: detected capacity change from 0 to 256 [ 281.688511][ T7970] exfat: Deprecated parameter 'utf8' [ 281.688826][ T7970] exfat: Deprecated parameter 'namecase' [ 281.689069][ T7970] exfat: Deprecated parameter 'namecase' [ 281.689363][ T7970] exfat: Deprecated parameter 'namecase' [ 281.787296][ T7970] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 281.854846][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 282.894261][ T7980] loop2: detected capacity change from 0 to 164 [ 282.895397][ T7980] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 283.178423][ T7976] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 283.989386][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 284.042154][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 284.421041][ T5817] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 284.720383][ T5817] usb 1-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 285.477941][ T5817] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.478013][ T5817] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 285.478037][ T5817] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.526725][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 286.526757][ T5817] usb 1-1: Product: syz [ 286.526771][ T5817] usb 1-1: Manufacturer: syz [ 286.560483][ T7998] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.617619][ T5817] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 286.762224][ T5817] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 286.937250][ T5817] usb 1-1: USB disconnect, device number 5 [ 287.000454][ T5817] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 287.001837][ T5817] garmin_gps 1-1:1.0: device disconnected [ 289.015287][ T8083] loop0: detected capacity change from 0 to 512 [ 289.032665][ T8083] EXT4-fs: Ignoring removed oldalloc option [ 289.032757][ T8083] ext4: Unknown parameter 'oldalloc.lazytime' [ 289.057411][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 289.081232][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 289.090250][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 289.160309][ T8083] loop0: detected capacity change from 0 to 2048 [ 289.168802][ T8083] udf: Unknown parameter 'ÿÿ017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 289.199993][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 289.227377][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 289.251196][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 289.332804][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 291.838047][ T8124] loop4: detected capacity change from 0 to 40427 [ 291.849439][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 291.865458][ T8124] F2FS-fs (loop4): invalid crc value [ 291.950427][ T8124] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 291.953081][ T8124] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 291.953106][ T8124] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 291.953126][ T8124] F2FS-fs (loop4): Start checkpoint disabled! [ 291.970852][ T8124] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 291.976444][ T8124] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 292.266556][ T8135] syz.4.694: attempt to access beyond end of device [ 292.266556][ T8135] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 292.269331][ T8135] syz.4.694: attempt to access beyond end of device [ 292.269331][ T8135] loop4: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 292.539119][ T6910] kworker/u8:16: attempt to access beyond end of device [ 292.539119][ T6910] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 292.539202][ T6910] CPU: 1 UID: 0 PID: 6910 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 292.539225][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.539238][ T6910] Workqueue: writeback wb_workfn (flush-7:4) [ 292.539274][ T6910] Call Trace: [ 292.539282][ T6910] [ 292.539292][ T6910] dump_stack_lvl+0xe8/0x150 [ 292.539323][ T6910] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 292.539361][ T6910] f2fs_write_end_bio+0x118e/0x15d0 [ 292.539405][ T6910] __submit_merged_bio+0x258/0x6a0 [ 292.539433][ T6910] ? rcu_is_watching+0x16/0xb0 [ 292.539466][ T6910] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 292.539498][ T6910] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 292.539555][ T6910] f2fs_write_data_pages+0x2a13/0x36e0 [ 292.539617][ T6910] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 292.539655][ T6910] ? cfg80211_inform_single_bss_data+0x1499/0x1be0 [ 292.539797][ T6910] ? __pfx_read_node_cache+0x10/0x10 [ 292.539881][ T6910] ? __lock_acquire+0x747/0x2de0 [ 292.539924][ T6910] ? __pfx_wake_up_bit+0x10/0x10 [ 292.539952][ T6910] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 292.539976][ T6910] do_writepages+0x338/0x560 [ 292.540004][ T6910] ? __lock_acquire+0x747/0x2de0 [ 292.540030][ T6910] ? reacquire_held_locks+0x117/0x1a0 [ 292.540054][ T6910] ? writeback_sb_inodes+0x450/0x1af0 [ 292.540087][ T6910] __writeback_single_inode+0x136/0x1220 [ 292.540118][ T6910] ? do_raw_spin_unlock+0xf5/0x200 [ 292.540150][ T6910] writeback_sb_inodes+0x9de/0x1af0 [ 292.540175][ T6910] ? __lock_acquire+0x747/0x2de0 [ 292.540226][ T6910] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 292.540299][ T6910] ? rcu_is_watching+0x16/0xb0 [ 292.540325][ T6910] ? queue_io+0x2d3/0x470 [ 292.540355][ T6910] wb_writeback+0x41c/0xad0 [ 292.540385][ T6910] ? queue_io+0x1f1/0x470 [ 292.540419][ T6910] ? __pfx_wb_writeback+0x10/0x10 [ 292.540443][ T6910] ? do_raw_spin_lock+0x12b/0x2f0 [ 292.540489][ T6910] wb_workfn+0x431/0x10f0 [ 292.540536][ T6910] ? __pfx_wb_workfn+0x10/0x10 [ 292.540566][ T6910] ? trace_hrtimer_start+0x82/0x200 [ 292.540594][ T6910] ? do_raw_spin_lock+0x12b/0x2f0 [ 292.540632][ T6910] ? lock_acquire+0x115/0x350 [ 292.540664][ T6910] ? rcu_is_watching+0x16/0xb0 [ 292.540691][ T6910] ? process_scheduled_works+0x97a/0x1630 [ 292.540719][ T6910] process_scheduled_works+0xc3d/0x1630 [ 292.540790][ T6910] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.540823][ T6910] ? assign_work+0x3cf/0x5d0 [ 292.540856][ T6910] worker_thread+0xa47/0xfb0 [ 292.540899][ T6910] ? __kthread_parkme+0x71/0x1f0 [ 292.540939][ T6910] kthread+0x38b/0x480 [ 292.540959][ T6910] ? __pfx_worker_thread+0x10/0x10 [ 292.540982][ T6910] ? __pfx_kthread+0x10/0x10 [ 292.541003][ T6910] ret_from_fork+0x514/0xb70 [ 292.541026][ T6910] ? __pfx_ret_from_fork+0x10/0x10 [ 292.541046][ T6910] ? __switch_to+0xc78/0x1410 [ 292.541075][ T6910] ? __pfx_kthread+0x10/0x10 [ 292.541096][ T6910] ret_from_fork_asm+0x1a/0x30 [ 292.541133][ T6910] [ 292.546426][ T6910] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 293.669466][ T8150] loop0: detected capacity change from 0 to 512 [ 293.671994][ T8150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.672057][ T8150] ext4: Unknown parameter 'fsname' [ 294.053713][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 294.107388][ T7740] udevd[7740]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 294.332078][ T7740] udevd[7740]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 294.333450][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 294.374912][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 295.827529][ T32] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 295.959507][ T32] usb 5-1: device descriptor read/64, error -71 [ 296.201413][ T32] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 296.332387][ T32] usb 5-1: device descriptor read/64, error -71 [ 296.438088][ T32] usb usb5-port1: attempt power cycle [ 296.979044][ T8181] loop0: detected capacity change from 0 to 40427 [ 297.038125][ T32] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 297.058290][ T32] usb 5-1: device descriptor read/8, error -71 [ 297.183410][ T8181] F2FS-fs (loop0): invalid crc value [ 297.271639][ T8181] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 297.291085][ T8181] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 297.291114][ T8181] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 297.291140][ T8181] F2FS-fs (loop0): Start checkpoint disabled! [ 297.342614][ T8181] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 297.355036][ T32] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 297.377572][ T32] usb 5-1: device descriptor read/8, error -71 [ 297.407763][ T8181] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 297.438407][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 297.490007][ T32] usb usb5-port1: unable to enumerate USB device [ 297.764995][ T8193] syz.0.713: attempt to access beyond end of device [ 297.764995][ T8193] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.767155][ T8193] syz.0.713: attempt to access beyond end of device [ 297.767155][ T8193] loop0: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 298.005911][ T6974] kworker/u8:17: attempt to access beyond end of device [ 298.005911][ T6974] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 298.005996][ T6974] CPU: 1 UID: 0 PID: 6974 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 298.006018][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 298.006030][ T6974] Workqueue: writeback wb_workfn (flush-7:0) [ 298.006065][ T6974] Call Trace: [ 298.006073][ T6974] [ 298.006082][ T6974] dump_stack_lvl+0xe8/0x150 [ 298.006112][ T6974] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 298.006149][ T6974] f2fs_write_end_bio+0x118e/0x15d0 [ 298.006191][ T6974] __submit_merged_bio+0x258/0x6a0 [ 298.006219][ T6974] ? rcu_is_watching+0x16/0xb0 [ 298.006250][ T6974] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 298.006294][ T6974] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 298.006348][ T6974] f2fs_write_data_pages+0x2a13/0x36e0 [ 298.006408][ T6974] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 298.006479][ T6974] ? __pfx_read_node_cache+0x10/0x10 [ 298.006533][ T6974] ? __lock_acquire+0x747/0x2de0 [ 298.006578][ T6974] ? __pfx_wake_up_bit+0x10/0x10 [ 298.006607][ T6974] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 298.006630][ T6974] do_writepages+0x338/0x560 [ 298.006665][ T6974] ? reacquire_held_locks+0x117/0x1a0 [ 298.006688][ T6974] ? writeback_sb_inodes+0x450/0x1af0 [ 298.006722][ T6974] __writeback_single_inode+0x136/0x1220 [ 298.006754][ T6974] ? do_raw_spin_unlock+0xf5/0x200 [ 298.006786][ T6974] writeback_sb_inodes+0x9de/0x1af0 [ 298.006812][ T6974] ? __lock_acquire+0x747/0x2de0 [ 298.006849][ T6974] ? lock_acquire+0x115/0x350 [ 298.006878][ T6974] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 298.006954][ T6974] ? rcu_is_watching+0x16/0xb0 [ 298.006980][ T6974] ? queue_io+0x2d3/0x470 [ 298.007011][ T6974] wb_writeback+0x41c/0xad0 [ 298.007041][ T6974] ? queue_io+0x1f1/0x470 [ 298.007075][ T6974] ? __pfx_wb_writeback+0x10/0x10 [ 298.007099][ T6974] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.007145][ T6974] wb_workfn+0x431/0x10f0 [ 298.007191][ T6974] ? __pfx_wb_workfn+0x10/0x10 [ 298.007230][ T6974] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.007268][ T6974] ? lock_acquire+0x115/0x350 [ 298.007370][ T6974] ? rcu_is_watching+0x16/0xb0 [ 298.007397][ T6974] ? process_scheduled_works+0x97a/0x1630 [ 298.007422][ T6974] process_scheduled_works+0xc3d/0x1630 [ 298.007481][ T6974] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.007515][ T6974] ? assign_work+0x3cf/0x5d0 [ 298.007547][ T6974] worker_thread+0xa47/0xfb0 [ 298.007591][ T6974] ? __kthread_parkme+0x71/0x1f0 [ 298.007630][ T6974] kthread+0x38b/0x480 [ 298.007651][ T6974] ? __pfx_worker_thread+0x10/0x10 [ 298.007674][ T6974] ? __pfx_kthread+0x10/0x10 [ 298.007696][ T6974] ret_from_fork+0x514/0xb70 [ 298.007721][ T6974] ? __pfx_ret_from_fork+0x10/0x10 [ 298.007741][ T6974] ? __switch_to+0xc78/0x1410 [ 298.007773][ T6974] ? __pfx_kthread+0x10/0x10 [ 298.007794][ T6974] ret_from_fork_asm+0x1a/0x30 [ 298.007834][ T6974] [ 298.169136][ T8201] loop4: detected capacity change from 0 to 512 [ 298.174672][ T8201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.174732][ T8201] ext4: Unknown parameter 'fsname' [ 298.188807][ T6974] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 298.220575][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 298.389622][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 298.423922][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 298.425314][ T32] loop0: lost filesystem error report for type 5 error -108 [ 298.610307][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 298.761524][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 300.838384][ T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 300.867551][ T5817] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 300.970299][ T32] usb 5-1: device descriptor read/64, error -71 [ 301.023490][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 301.024620][ T5817] usb 4-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 301.026252][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 301.026302][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.031614][ T5817] usb 4-1: config 0 descriptor?? [ 301.037519][ T8234] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 301.207951][ T32] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 301.337610][ T32] usb 5-1: device descriptor read/64, error -71 [ 301.440087][ T8257] loop0: detected capacity change from 0 to 512 [ 301.441984][ T8257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.442077][ T8257] ext4: Unknown parameter 'fsname' [ 301.452402][ T32] usb usb5-port1: attempt power cycle [ 301.456193][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 301.465045][ T8234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.471427][ T8234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.479896][ T5817] usbhid 4-1:0.0: can't add hid device: -71 [ 301.480070][ T5817] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 301.493765][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 301.499953][ T5817] usb 4-1: USB disconnect, device number 7 [ 301.514846][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 301.807607][ T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 301.832677][ T32] usb 5-1: device descriptor read/8, error -71 [ 302.068017][ T32] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 302.091829][ T32] usb 5-1: device descriptor read/8, error -71 [ 302.348689][ T32] usb usb5-port1: unable to enumerate USB device [ 304.614297][ T8286] loop0: detected capacity change from 0 to 1024 [ 304.622668][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 304.659267][ T8286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.198188][ T8297] loop4: detected capacity change from 0 to 32768 [ 305.247921][ T8297] (syz.4.756,8297,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.274503][ T8297] (syz.4.756,8297,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 305.286510][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 305.327938][ T8297] JBD2: Ignoring recovery information on journal [ 305.329716][ T5606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.376425][ T8297] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 305.392000][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 305.420691][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 305.595554][ T5607] ocfs2: Unmounting device (7,4) on (node local) [ 305.650041][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 305.663146][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 307.540410][ T8318] loop1: detected capacity change from 0 to 65536 [ 307.556043][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 307.925333][ T8318] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 307.980210][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 308.273491][ T8352] tipc: Started in network mode [ 308.273528][ T8352] tipc: Node identity 4ab763474ece, cluster identity 4711 [ 308.301010][ T8352] tipc: Enabled bearer , priority 0 [ 308.313801][ T32] usb 1-1: New USB device found: idVendor=0711, idProduct=0210, bcdDevice=1.02 [ 308.315667][ T32] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 308.315698][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.315738][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.323557][ T8340] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 308.334314][ T32] mct_u232 1-1:1.0: MCT U232 converter detected [ 308.343073][ T32] usb 1-1: MCT U232 converter now attached to ttyUSB0 [ 308.390673][ T8318] XFS (loop1): Ending clean mount [ 308.553099][ T8318] XFS (loop1): Quotacheck needed: Please wait. [ 308.570551][ T8352] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.619686][ T10] usb 1-1: USB disconnect, device number 6 [ 308.700056][ T6445] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 [ 308.700135][ T6445] XFS (loop1): Unmount and run xfs_repair [ 308.700148][ T6445] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 308.700165][ T6445] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 308.700180][ T6445] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 308.700193][ T6445] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 308.700206][ T6445] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 308.700220][ T6445] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 308.700233][ T6445] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.700247][ T6445] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.700260][ T6445] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 308.701655][ T6445] XFS (loop1): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74 [ 308.701992][ T6445] loop1: lost filesystem error report for type 5 error -117 [ 308.883602][ T5615] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 309.309889][ T10] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 309.315650][ T10] mct_u232 1-1:1.0: device disconnected [ 309.376596][ T8318] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 309.385253][ T8318] loop1: lost filesystem error report for type 5 error -117 [ 309.400734][ T5753] tipc: Node number set to 75064135 [ 309.445638][ T5608] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 309.448569][ T5608] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 309.683369][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 309.717865][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 311.351717][ T8388] loop4: detected capacity change from 0 to 256 [ 311.352926][ T8388] exfat: Deprecated parameter 'utf8' [ 311.353004][ T8388] exfat: Deprecated parameter 'namecase' [ 311.353060][ T8388] exfat: Deprecated parameter 'namecase' [ 311.353164][ T8388] exfat: Deprecated parameter 'namecase' [ 311.382754][ T8388] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 311.583689][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 312.449992][ T7740] udevd[7740]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 312.474932][ T7714] udevd[7714]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 313.781551][ T8398] Bluetooth: MGMT ver 1.23 [ 313.805666][ T8405] CIFS: Attempting to mount //127.0.0.1/share [ 314.030213][ T8405] CIFS: VFS: Error connecting to socket. Aborting operation. [ 314.030270][ T8405] CIFS: VFS: cifs_mount failed w/return code = -4 [ 316.607346][ T8414] loop1: detected capacity change from 0 to 512 [ 316.630904][ T8414] EXT4-fs: Ignoring removed oldalloc option [ 316.630998][ T8414] ext4: Unknown parameter 'oldalloc.lazytime' [ 316.703999][ T8422] udevd[8422]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 316.707182][ T8414] loop1: detected capacity change from 0 to 2048 [ 316.723789][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 316.745300][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 316.749271][ T8414] udf: Unknown parameter 'ÿÿ017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 316.769963][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 316.785102][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 316.864008][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 316.925951][ T8352] tipc: Disabling bearer [ 317.279326][ T8424] loop3: detected capacity change from 0 to 40427 [ 317.656142][ T8437] loop4: detected capacity change from 0 to 256 [ 317.657260][ T8437] exfat: Deprecated parameter 'utf8' [ 317.657342][ T8437] exfat: Deprecated parameter 'namecase' [ 317.657404][ T8437] exfat: Deprecated parameter 'namecase' [ 317.657551][ T8437] exfat: Deprecated parameter 'namecase' [ 317.665468][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.665561][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.738502][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 317.824400][ T8437] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 318.036936][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 318.039129][ T8424] F2FS-fs (loop3): invalid crc value [ 318.139900][ T8424] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 318.149737][ T8424] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0 [ 318.149768][ T8424] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 318.149793][ T8424] F2FS-fs (loop3): Start checkpoint disabled! [ 318.166970][ T8424] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0 [ 318.876604][ T8424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 319.101846][ T8446] syz.3.795: attempt to access beyond end of device [ 319.101846][ T8446] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 319.103933][ T8446] syz.3.795: attempt to access beyond end of device [ 319.103933][ T8446] loop3: rw=2049, sector=45104, nr_sectors = 48 limit=40427 [ 319.402483][ T6041] kworker/u8:11: attempt to access beyond end of device [ 319.402483][ T6041] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 319.402582][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 319.402605][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 319.402618][ T6041] Workqueue: writeback wb_workfn (flush-7:3) [ 319.402662][ T6041] Call Trace: [ 319.402670][ T6041] [ 319.402679][ T6041] dump_stack_lvl+0xe8/0x150 [ 319.402711][ T6041] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 319.402752][ T6041] f2fs_write_end_bio+0x118e/0x15d0 [ 319.402797][ T6041] __submit_merged_bio+0x258/0x6a0 [ 319.402826][ T6041] ? rcu_is_watching+0x16/0xb0 [ 319.402860][ T6041] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 319.402892][ T6041] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 319.402951][ T6041] f2fs_write_data_pages+0x2a13/0x36e0 [ 319.403017][ T6041] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 319.403053][ T6041] ? __kasan_slab_free+0x5c/0x80 [ 319.403075][ T6041] ? nft_do_chain+0x18d6/0x1b10 [ 319.403170][ T6041] ? nft_do_chain_inet+0x360/0x4b0 [ 319.403253][ T6041] ? __pfx_read_node_cache+0x10/0x10 [ 319.403311][ T6041] ? __lock_acquire+0x747/0x2de0 [ 319.403352][ T6041] ? __pfx_wake_up_bit+0x10/0x10 [ 319.403380][ T6041] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 319.403403][ T6041] do_writepages+0x338/0x560 [ 319.403432][ T6041] ? __lock_acquire+0x747/0x2de0 [ 319.403456][ T6041] ? reacquire_held_locks+0x117/0x1a0 [ 319.403478][ T6041] ? writeback_sb_inodes+0x450/0x1af0 [ 319.403512][ T6041] __writeback_single_inode+0x136/0x1220 [ 319.403543][ T6041] ? do_raw_spin_unlock+0xf5/0x200 [ 319.403576][ T6041] writeback_sb_inodes+0x9de/0x1af0 [ 319.403602][ T6041] ? __lock_acquire+0x747/0x2de0 [ 319.403659][ T6041] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 319.403739][ T6041] ? rcu_is_watching+0x16/0xb0 [ 319.403765][ T6041] ? queue_io+0x2d3/0x470 [ 319.403797][ T6041] wb_writeback+0x41c/0xad0 [ 319.403829][ T6041] ? queue_io+0x1f1/0x470 [ 319.403864][ T6041] ? __pfx_wb_writeback+0x10/0x10 [ 319.403889][ T6041] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.403938][ T6041] wb_workfn+0x431/0x10f0 [ 319.403987][ T6041] ? __pfx_wb_workfn+0x10/0x10 [ 319.404017][ T6041] ? trace_hrtimer_start+0x82/0x200 [ 319.404044][ T6041] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.404083][ T6041] ? lock_acquire+0x115/0x350 [ 319.404116][ T6041] ? rcu_is_watching+0x16/0xb0 [ 319.404143][ T6041] ? process_scheduled_works+0x97a/0x1630 [ 319.404171][ T6041] process_scheduled_works+0xc3d/0x1630 [ 319.404236][ T6041] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.404271][ T6041] ? assign_work+0x3cf/0x5d0 [ 319.404304][ T6041] worker_thread+0xa47/0xfb0 [ 319.404366][ T6041] kthread+0x38b/0x480 [ 319.404386][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 319.404409][ T6041] ? __pfx_kthread+0x10/0x10 [ 319.404431][ T6041] ret_from_fork+0x514/0xb70 [ 319.404456][ T6041] ? __pfx_ret_from_fork+0x10/0x10 [ 319.404477][ T6041] ? __switch_to+0xc78/0x1410 [ 319.404509][ T6041] ? __pfx_kthread+0x10/0x10 [ 319.404532][ T6041] ret_from_fork_asm+0x1a/0x30 [ 319.404570][ T6041] [ 319.597275][ T6041] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 319.709280][ T10] loop3: lost filesystem error report for type 5 error -108 [ 319.781695][ T8422] udevd[8422]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 319.936201][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 319.954087][ T8456] loop4: detected capacity change from 0 to 1024 [ 320.922765][ T8456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.027911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 323.219646][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 323.260713][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 323.349563][ T8475] rxe_eth0 speed is unknown, defaulting to 1000 [ 323.437394][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.522155][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 323.551923][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 323.647830][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 323.701551][ T8482] loop1: detected capacity change from 0 to 1024 [ 323.735829][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 323.736609][ T8482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.777560][ T10] usb 1-1: device descriptor read/64, error -71 [ 323.862073][ T8491] netlink: 48 bytes leftover after parsing attributes in process `syz.3.802'. [ 323.917669][ T5614] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 324.018021][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 324.069877][ T5614] usb 5-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 324.072098][ T5614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.072134][ T5614] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 324.072150][ T5614] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 324.072184][ T5614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.157762][ T10] usb 1-1: device descriptor read/64, error -71 [ 324.207604][ T5773] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 324.279825][ T10] usb usb1-port1: attempt power cycle [ 324.302444][ T5614] cxacru 5-1:1.0: invalid response length to cm 0x90: 63 [ 324.304180][ T8497] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 324.624461][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.638431][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 324.640415][ T5614] usb 5-1: USB disconnect, device number 17 [ 324.668637][ T10] usb 1-1: device descriptor read/8, error -71 [ 324.719190][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 324.763687][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 324.863642][ T5773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 324.863847][ T5773] usb 3-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40 [ 324.866338][ T5773] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 324.866378][ T5773] usb 3-1: can't read configurations, error -71 [ 324.908126][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 324.929354][ T10] usb 1-1: device descriptor read/8, error -71 [ 325.137261][ T10] usb usb1-port1: unable to enumerate USB device [ 326.266462][ T8521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 326.924597][ T8530] netlink: 48 bytes leftover after parsing attributes in process `syz.1.823'. [ 327.748288][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 327.908543][ T9] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 327.910010][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.910063][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 327.910091][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 327.910197][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.793668][ T9] cxacru 2-1:1.0: invalid response length to cm 0x90: 63 [ 328.907011][ T8556] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 329.372498][ T5614] usb 2-1: USB disconnect, device number 5 [ 329.572648][ T8563] loop2: detected capacity change from 0 to 4096 [ 329.573921][ T8563] EXT4-fs: Ignoring removed nobh option [ 329.574095][ T8563] EXT4-fs: Ignoring removed bh option [ 329.647107][ T8563] EXT4-fs (loop2): Test dummy encryption mode enabled [ 329.653914][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 329.666964][ T8545] loop4: detected capacity change from 0 to 32768 [ 329.890083][ T8569] loop0: detected capacity change from 0 to 16 [ 329.927093][ T8569] erofs (device loop0): invalid ishare xattr prefix id 0 [ 330.025945][ T8545] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.828 (8545) [ 330.425936][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 330.444270][ T8422] udevd[8422]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 330.445055][ T8563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.464674][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 330.501376][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 330.590831][ T8545] BTRFS error (device loop4): open_ctree failed: -EINTR [ 330.619776][ T8572] loop3: detected capacity change from 0 to 512 [ 330.644770][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 330.657062][ T8572] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 331.749113][ T8572] EXT4-fs (loop3): 1 truncate cleaned up [ 331.760509][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 331.763624][ T8572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.812306][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 332.773546][ T8590] netlink: 48 bytes leftover after parsing attributes in process `syz.4.837'. [ 332.944978][ T8594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.325797][ T5609] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.372549][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 333.401612][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 333.440320][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.058367][ T8612] loop0: detected capacity change from 0 to 128 [ 334.178849][ T8612] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 334.181463][ T8612] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.299231][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 334.492530][ T27] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 334.515112][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 334.565809][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.566091][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 334.566135][ T27] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 334.566327][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.234302][ T27] cxacru 2-1:1.0: invalid response length to cm 0x90: 63 [ 335.250880][ T8623] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 335.413689][ T8624] loop3: detected capacity change from 0 to 32768 [ 335.427123][ T8624] (syz.3.849,8624,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 335.427647][ T8624] (syz.3.849,8624,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 335.435628][ T8422] udevd[8422]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 335.438585][ T5606] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.491365][ T8624] JBD2: Ignoring recovery information on journal [ 335.538550][ T8624] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 335.557180][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 335.570852][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 335.609290][ T9] usb 2-1: USB disconnect, device number 6 [ 336.000006][ T5609] ocfs2: Unmounting device (7,3) on (node local) [ 336.051431][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 336.092122][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 336.473536][ T8640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.852'. [ 337.437480][ T8638] syzkaller0: entered promiscuous mode [ 337.437509][ T8638] syzkaller0: entered allmulticast mode [ 337.703876][ T8652] loop4: detected capacity change from 0 to 164 [ 337.707035][ T8652] iso9660: Unknown parameter 'ÿÿÿÿÿ .ÃNÛBþO' [ 337.725832][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 337.973644][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 337.991089][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 338.372289][ T8634] loop2: detected capacity change from 0 to 32768 [ 338.420119][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 338.485350][ T8634] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.853 (8634) [ 338.519430][ T8634] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 338.519582][ T8634] BTRFS info (device loop2): using sha256 checksum algorithm [ 339.116205][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 339.132460][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 339.132969][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 339.133307][ T8634] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 339.227554][ T8634] BTRFS error (device loop2): open_ctree failed: -ENOMEM [ 339.749402][ T8681] loop4: detected capacity change from 0 to 64 [ 340.244996][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 340.252901][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 340.541111][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 340.571397][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 341.227924][ T5773] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 341.388433][ T5773] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 341.408580][ T5773] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.408637][ T5773] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 341.408661][ T5773] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 341.408704][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.827334][ T5773] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 341.827365][ T5773] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 341.827379][ T5773] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 341.871766][ T5773] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 341.894725][ T5773] usb 3-1: USB disconnect, device number 11 [ 343.282264][ T8689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.866'. [ 343.282462][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.861'. [ 343.414798][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 343.445002][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 343.752774][ T8710] loop4: detected capacity change from 0 to 512 [ 343.754660][ T8710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 343.754733][ T8710] ext4: Unknown parameter 'fsname' [ 343.758988][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 343.958001][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'. [ 344.039718][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 344.273182][ T8707] loop2: detected capacity change from 0 to 4096 [ 344.286329][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 344.292313][ T8707] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 344.299277][ T8422] udevd[8422]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 344.317719][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 344.467763][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 344.468540][ T9] usb 1-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 344.469748][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 344.469771][ T9] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 344.469790][ T9] usb 1-1: config 179 has no interface number 0 [ 344.469833][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 344.469856][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 344.469897][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.748107][ T5817] usb 1-1: USB disconnect, device number 11 [ 344.872733][ T8707] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 344.997623][ T6059] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 345.006704][ T5605] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 345.006738][ T5605] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 345.006754][ T5605] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 345.016286][ T6974] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 345.049971][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 345.062427][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 345.079580][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 345.108243][ T8726] loop3: detected capacity change from 0 to 2048 [ 345.109280][ T8726] ext4: Unknown parameter 'smackfstransmute' [ 345.198608][ T9] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 345.200207][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.200263][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 345.200290][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 345.200332][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.397579][ T8730] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 345.532830][ T8730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 345.586815][ T8730] team0: Port device netdevsim1 added [ 345.638942][ T9] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 345.638974][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 345.638989][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 345.748858][ T9] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 345.771016][ T9] usb 2-1: USB disconnect, device number 7 [ 346.106102][ T8735] syzkaller0: entered promiscuous mode [ 346.106140][ T8735] syzkaller0: entered allmulticast mode [ 346.452971][ T8751] loop4: detected capacity change from 0 to 512 [ 346.470428][ T8751] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 346.470452][ T8751] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 346.470467][ T8751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 346.470486][ T8751] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 346.493069][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 346.530761][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 346.548854][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 346.701502][ T8751] loop4: detected capacity change from 0 to 512 [ 346.775506][ T8751] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.886: iget: bad extended attribute block 6 [ 346.775531][ T8751] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 346.777498][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 346.777521][ C1] EXT4-fs (loop4): initial error at time 1792027322: ext4_orphan_get:1404: inode 15 [ 346.777546][ C1] EXT4-fs (loop4): last error at time 1792027322: ext4_orphan_get:1404: inode 15 [ 346.779592][ T8751] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.886: couldn't read orphan inode 15 (err -117) [ 346.779619][ T8751] loop4: lost filesystem error report for type 5 error -117 [ 346.787212][ T8751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.882980][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 347.798363][ T8750] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.939321][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 347.955763][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 348.675136][ T8770] loop2: detected capacity change from 0 to 512 [ 348.687636][ T8770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 348.687707][ T8770] ext4: Unknown parameter 'fsname' [ 348.712919][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 348.762700][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 348.794699][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 348.895109][ T5773] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 349.059477][ T5773] usb 4-1: Using ep0 maxpacket: 8 [ 349.061101][ T5773] usb 4-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 349.062406][ T5773] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 349.062441][ T5773] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 349.062459][ T5773] usb 4-1: config 179 has no interface number 0 [ 349.062502][ T5773] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 349.062525][ T5773] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 349.062569][ T5773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.396537][ T5773] usb 4-1: USB disconnect, device number 8 [ 350.638402][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 350.760438][ T8782] serio: Serial port ttyS3 [ 350.800252][ T9] usb 3-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 350.801872][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.801922][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 350.801947][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 350.801987][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.267196][ T9] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 351.267226][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 351.267239][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 351.306787][ T9] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 351.341764][ T9] usb 3-1: USB disconnect, device number 12 [ 351.493068][ T8784] loop1: detected capacity change from 0 to 32768 [ 351.511797][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 351.513910][ T8784] [ 351.513910][ T8784] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 351.513910][ T8784] [ 351.653014][ T5608] [ 351.653014][ T5608] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 351.653014][ T5608] [ 351.662612][ T5608] [ 351.662612][ T5608] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 351.662612][ T5608] [ 351.721761][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 351.749020][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 351.887604][ T8792] Cannot find add_set index 0 as target [ 352.899631][ T8801] loop1: detected capacity change from 0 to 512 [ 352.903112][ T8801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 352.903189][ T8801] ext4: Unknown parameter 'fsname' [ 352.973205][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 353.008781][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 353.013937][ T8419] udevd[8419]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 355.064248][ T8836] ntfs3(loop2): try to read out of volume at offset 0x0 [ 356.156703][ T8846] loop2: detected capacity change from 0 to 512 [ 356.164056][ T8846] EXT4-fs: Ignoring removed nobh option [ 356.308516][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 356.440569][ T8846] EXT4-fs error (device loop2) in ext4_process_orphan:346: Out of memory [ 356.440601][ T8846] loop2: lost filesystem error report for type 5 error -12 [ 356.453693][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 356.453719][ C0] EXT4-fs (loop2): initial error at time 1792027332: ext4_process_orphan:346 [ 356.453744][ C0] EXT4-fs (loop2): last error at time 1792027332: ext4_process_orphan:346 [ 356.484325][ T8846] EXT4-fs (loop2): 2 truncates cleaned up [ 356.485997][ T8846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.140962][ T8843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.922: bg 0: block 5: invalid block bitmap [ 357.176115][ T8843] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 357.176192][ T8843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 357.176192][ T8843] [ 357.176246][ T8843] EXT4-fs (loop2): Total free blocks count 0 [ 357.176280][ T8843] EXT4-fs (loop2): Free/Dirty block details [ 357.176355][ T8843] EXT4-fs (loop2): free_blocks=0 [ 357.176432][ T8843] EXT4-fs (loop2): dirty_blocks=33 [ 357.176472][ T8843] EXT4-fs (loop2): Block reservation details [ 357.176504][ T8843] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 357.433498][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.463812][ T8863] loop3: detected capacity change from 0 to 512 [ 357.465885][ T8863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.465962][ T8863] ext4: Unknown parameter 'fsname' [ 357.484004][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 357.537124][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 357.542394][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 357.551512][ T8848] udevd[8848]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 357.561871][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 357.724556][ T8869] loop2: detected capacity change from 0 to 164 [ 357.747984][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 358.163657][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 358.209109][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 358.217306][ T8873] loop2: detected capacity change from 0 to 128 [ 358.251960][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 358.270686][ T8873] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 358.271098][ T8873] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.117210][ T8878] loop3: detected capacity change from 0 to 2048 [ 359.650373][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 359.652269][ T8878] ext4: Unknown parameter 'smackfstransmute' [ 361.671472][ T5605] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.608192][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 362.651385][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 363.120082][ T8911] loop2: detected capacity change from 0 to 512 [ 363.121150][ T8911] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.130451][ T8911] ext4: Unknown parameter 'fsname' [ 363.141917][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 363.156336][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 363.201202][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 364.351591][ T6445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.670230][ T6445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.935897][ T6445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.285678][ T6445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.794307][ T6445] bridge_slave_1: left allmulticast mode [ 366.794353][ T6445] bridge_slave_1: left promiscuous mode [ 366.799069][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.811731][ T6445] bridge_slave_0: left allmulticast mode [ 366.811757][ T6445] bridge_slave_0: left promiscuous mode [ 366.813514][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.019375][ T6445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.022812][ T6445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.023907][ T6445] bond0 (unregistering): Released all slaves [ 367.425700][ T8971] netlink: 'syz.1.945': attribute type 19 has an invalid length. [ 367.522030][ T8972] netlink: 48 bytes leftover after parsing attributes in process `syz.3.947'. [ 367.903889][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.152050][ T6445] hsr_slave_0: left promiscuous mode [ 368.154253][ T6445] hsr_slave_1: left promiscuous mode [ 368.155947][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.155987][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.206847][ T6445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.206875][ T6445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.321225][ T6445] veth1_macvtap: left promiscuous mode [ 368.321292][ T6445] veth0_macvtap: left promiscuous mode [ 368.321547][ T6445] veth1_vlan: left promiscuous mode [ 368.321651][ T6445] veth0_vlan: left promiscuous mode [ 369.303560][ T6445] team0 (unregistering): Port device team_slave_1 removed [ 369.331144][ T9012] loop2: detected capacity change from 0 to 512 [ 369.337156][ T9012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.337226][ T9012] ext4: Unknown parameter 'fsname' [ 369.362919][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 369.385737][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 369.389677][ T6445] team0 (unregistering): Port device team_slave_0 removed [ 369.412906][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 369.924827][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 370.567351][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 371.461394][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 372.080794][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 372.106122][ T9060] veth1_macvtap: left promiscuous mode [ 372.428407][ T9068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.138588][ T9060] veth1_macvtap: entered promiscuous mode [ 373.138872][ T9060] macsec0: entered promiscuous mode [ 373.139119][ T9060] macsec0: entered allmulticast mode [ 373.139133][ T9060] veth1_macvtap: entered allmulticast mode [ 374.595339][ T9124] loop2: detected capacity change from 0 to 512 [ 374.597217][ T9124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.597293][ T9124] ext4: Unknown parameter 'fsname' [ 374.610577][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 374.644295][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 374.664055][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 376.371914][ T9142] loop2: detected capacity change from 0 to 1024 [ 376.388371][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 376.492814][ T9142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.577360][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.616333][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 377.631515][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 378.417698][ T9208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.006171][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.006238][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.367595][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 379.938399][ T9] usb 4-1: New USB device found: idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 379.939431][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.942524][ T9] usb 4-1: config 0 descriptor?? [ 380.961491][ T9] usb 4-1: Cannot set autoneg [ 380.962042][ T9] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 380.999208][ T9] usb 4-1: USB disconnect, device number 9 [ 381.061071][ T9229] loop1: detected capacity change from 0 to 512 [ 381.068356][ T9229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.068419][ T9229] ext4: Unknown parameter 'fsname' [ 381.077098][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 381.086994][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 381.101400][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 383.392142][ T9241] loop2: detected capacity change from 0 to 1024 [ 383.413303][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 383.437000][ T9241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.564419][ T9252] loop1: detected capacity change from 0 to 512 [ 383.578605][ T9252] EXT4-fs: Ignoring removed oldalloc option [ 383.580251][ T9252] ext4: Unknown parameter 'oldalloc.lazytime' [ 383.603335][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 383.650347][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 383.659686][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 383.686370][ T9252] loop1: detected capacity change from 0 to 2048 [ 383.687046][ T9252] udf: Unknown parameter 'ÿÿ017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 383.697194][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 383.709648][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 383.736325][ T8865] udevd[8865]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 385.073185][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.498159][ T9352] netlink: 'syz.3.1006': attribute type 3 has an invalid length. [ 387.498185][ T9352] netlink: 'syz.3.1006': attribute type 1 has an invalid length. [ 387.498200][ T9352] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1006'. [ 389.523925][ T9364] loop3: detected capacity change from 0 to 512 [ 389.527996][ T9364] EXT4-fs: Ignoring removed oldalloc option [ 389.528079][ T9364] ext4: Unknown parameter 'oldalloc.lazytime' [ 389.550117][ T9366] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1010'. [ 389.566687][ T9367] udevd[9367]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 389.585365][ T9367] udevd[9367]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 389.779713][ T9367] udevd[9367]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 389.815625][ T9364] loop3: detected capacity change from 0 to 2048 [ 389.816300][ T9364] udf: Unknown parameter 'ÿÿ017777777777777777777770xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 389.825847][ T9367] udevd[9367]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 389.834386][ T9367] udevd[9367]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 389.841969][ T9367] udevd[9367]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 393.409743][ T6059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.491279][ T9390] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.617022][ T6059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.797742][ T6059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.978883][ T6059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.023889][ T6059] bridge_slave_1: left allmulticast mode [ 395.023920][ T6059] bridge_slave_1: left promiscuous mode [ 395.024299][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.086541][ T6059] bridge_slave_0: left allmulticast mode [ 395.086568][ T6059] bridge_slave_0: left promiscuous mode [ 395.086849][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.636734][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.659167][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.661012][ T6059] bond0 (unregistering): Released all slaves [ 395.924082][ T9416] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1024'. [ 396.074431][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 396.966726][ T9429] [ 396.969132][ T9429] ====================================================== [ 396.976178][ T9429] WARNING: possible circular locking dependency detected [ 396.983233][ T9429] syzkaller #0 Not tainted [ 396.987677][ T9429] ------------------------------------------------------ [ 396.994714][ T9429] syz.3.1027/9429 is trying to acquire lock: [ 397.000718][ T9429] ffff88803441c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 397.009566][ T9429] [ 397.009566][ T9429] but task is already holding lock: [ 397.016959][ T9429] ffff888077802440 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 397.026933][ T9429] [ 397.026933][ T9429] which lock already depends on the new lock. [ 397.026933][ T9429] [ 397.037374][ T9429] [ 397.037374][ T9429] the existing dependency chain (in reverse order) is: [ 397.046496][ T9429] [ 397.046496][ T9429] -> #2 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 397.054349][ T9429] __d_alloc_parallel+0xc32/0x1700 [ 397.060018][ T9429] __lookup_slow+0x82/0x2f0 [ 397.065170][ T9429] lookup_slow+0x59/0x80 [ 397.069972][ T9429] link_path_walk+0xd22/0x1910 [ 397.075305][ T9429] path_openat+0x1b7/0x20f0 [ 397.080526][ T9429] do_file_open+0x258/0x570 [ 397.085580][ T9429] do_sys_openat2+0x115/0x200 [ 397.091074][ T9429] __x64_sys_openat+0x138/0x170 [ 397.096658][ T9429] do_syscall_64+0x166/0x520 [ 397.101956][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.108496][ T9429] [ 397.108496][ T9429] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 397.117133][ T9429] down_write+0x91/0x200 [ 397.121987][ T9429] lookup_open+0x246/0x1970 [ 397.127043][ T9429] path_openat+0x70c/0x20f0 [ 397.132253][ T9429] do_file_open+0x258/0x570 [ 397.137378][ T9429] do_sys_openat2+0x115/0x200 [ 397.142586][ T9429] __x64_sys_openat+0x138/0x170 [ 397.147979][ T9429] do_syscall_64+0x166/0x520 [ 397.153187][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.159628][ T9429] [ 397.159628][ T9429] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 397.167223][ T9429] __lock_acquire+0x164c/0x2de0 [ 397.172612][ T9429] lock_acquire+0x115/0x350 [ 397.177664][ T9429] sb_start_write+0x48/0x1c0 [ 397.182793][ T9429] mnt_want_write+0x41/0x90 [ 397.187836][ T9429] ovl_lookup+0xb93/0x1c80 [ 397.192923][ T9429] lookup_open+0x94b/0x1970 [ 397.197984][ T9429] path_openat+0x70c/0x20f0 [ 397.203149][ T9429] do_file_open+0x258/0x570 [ 397.208212][ T9429] do_sys_openat2+0x115/0x200 [ 397.213631][ T9429] __x64_sys_openat+0x138/0x170 [ 397.219016][ T9429] do_syscall_64+0x166/0x520 [ 397.224235][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.230670][ T9429] [ 397.230670][ T9429] other info that might help us debug this: [ 397.230670][ T9429] [ 397.240916][ T9429] Chain exists of: [ 397.240916][ T9429] sb_writers#5 --> &type->i_mutex_dir_key#5 --> DCACHE_PAR_LOOKUP [ 397.240916][ T9429] [ 397.254769][ T9429] Possible unsafe locking scenario: [ 397.254769][ T9429] [ 397.262313][ T9429] CPU0 CPU1 [ 397.267692][ T9429] ---- ---- [ 397.273073][ T9429] lock(DCACHE_PAR_LOOKUP); [ 397.277696][ T9429] lock(&type->i_mutex_dir_key#5); [ 397.285485][ T9429] lock(DCACHE_PAR_LOOKUP); [ 397.292608][ T9429] rlock(sb_writers#5); [ 397.296864][ T9429] [ 397.296864][ T9429] *** DEADLOCK *** [ 397.296864][ T9429] [ 397.305023][ T9429] locks held by syz.3.1027/9429: 2, last CPU#1: [ 397.311261][ T9429] #0: ffff888057a8c300 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_open+0x221/0x1970 [ 397.321804][ T9429] #1: ffff888077802440 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 397.332098][ T9429] [ 397.332098][ T9429] stack backtrace: [ 397.338017][ T9429] CPU: 1 UID: 0 PID: 9429 Comm: syz.3.1027 Not tainted syzkaller #0 PREEMPT(full) [ 397.347304][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 397.357411][ T9429] Call Trace: [ 397.360781][ T9429] [ 397.363715][ T9429] dump_stack_lvl+0xe8/0x150 [ 397.368326][ T9429] print_circular_bug+0x2e2/0x300 [ 397.373556][ T9429] check_noncircular+0x12f/0x150 [ 397.378511][ T9429] __lock_acquire+0x164c/0x2de0 [ 397.383371][ T9429] ? do_raw_spin_unlock+0xf5/0x200 [ 397.388763][ T9429] lock_acquire+0x115/0x350 [ 397.393293][ T9429] ? mnt_want_write+0x41/0x90 [ 397.397995][ T9429] sb_start_write+0x48/0x1c0 [ 397.402597][ T9429] ? mnt_want_write+0x41/0x90 [ 397.407382][ T9429] mnt_want_write+0x41/0x90 [ 397.411898][ T9429] ovl_lookup+0xb93/0x1c80 [ 397.416341][ T9429] ? lock_acquire+0x115/0x350 [ 397.421060][ T9429] ? __pfx_ovl_lookup+0x10/0x10 [ 397.425967][ T9429] ? __pfx___d_alloc_parallel+0x10/0x10 [ 397.431641][ T9429] ? d_lookup+0x1f/0xa0 [ 397.435845][ T9429] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 397.442040][ T9429] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.447265][ T9429] lookup_open+0x94b/0x1970 [ 397.451875][ T9429] path_openat+0x70c/0x20f0 [ 397.456425][ T9429] do_file_open+0x258/0x570 [ 397.460950][ T9429] ? __pfx_do_file_open+0x10/0x10 [ 397.466090][ T9429] ? _raw_spin_unlock+0x28/0x50 [ 397.471042][ T9429] ? alloc_fd+0x6af/0x760 [ 397.475743][ T9429] do_sys_openat2+0x115/0x200 [ 397.480442][ T9429] ? __se_sys_futex+0x3a8/0x450 [ 397.485394][ T9429] ? __pfx_do_sys_openat2+0x10/0x10 [ 397.490611][ T9429] ? rcu_is_watching+0x16/0xb0 [ 397.495386][ T9429] __x64_sys_openat+0x138/0x170 [ 397.500249][ T9429] do_syscall_64+0x166/0x520 [ 397.504857][ T9429] ? trace_irq_disable+0x3b/0x140 [ 397.509892][ T9429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.515962][ T9429] ? clear_bhb_loop+0x70/0xc0 [ 397.520856][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.526781][ T9429] RIP: 0033:0x7f583859e559 [ 397.531226][ T9429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.550889][ T9429] RSP: 002b:00007f58394c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 397.559524][ T9429] RAX: ffffffffffffffda RBX: 00007f5838825fa0 RCX: 00007f583859e559 [ 397.567630][ T9429] RDX: 0000000000040400 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 397.575628][ T9429] RBP: 00007f58386358b0 R08: 0000000000000000 R09: 0000000000000000 [ 397.583641][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.591652][ T9429] R13: 00007f5838826038 R14: 00007f5838825fa0 R15: 00007fffa327e288 [ 397.599844][ T9429] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 398.441621][ T6059] hsr_slave_0: left promiscuous mode [ 398.443764][ T6059] hsr_slave_1: left promiscuous mode [ 398.444321][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.444338][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.444871][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.444886][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.494081][ T6059] veth1_macvtap: left promiscuous mode [ 398.494116][ T6059] veth0_macvtap: left promiscuous mode [ 398.494183][ T6059] veth1_vlan: left promiscuous mode [ 398.494229][ T6059] veth0_vlan: left promiscuous mode [ 398.836552][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 398.846296][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 398.887248][ T5269] 8021q: adding VLAN 0 to HW filter on device eth5 [ 399.200977][ T6059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.224928][ T5269] 8021q: adding VLAN 0 to HW filter on device eth6 [ 399.242828][ T6059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.300184][ T6059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.352998][ T6059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.450602][ T6059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.477760][ T5269] 8021q: adding VLAN 0 to HW filter on device eth7 [ 399.494115][ T6059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.595539][ T6059] team0: Port device netdevsim1 removed [ 399.596160][ T6059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.652856][ T6059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.725940][ T5269] 8021q: adding VLAN 0 to HW filter on device eth8 [ 399.761442][ T6059] bridge_slave_1: left allmulticast mode [ 399.761462][ T6059] bridge_slave_1: left promiscuous mode [ 399.761556][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.763239][ T6059] bridge_slave_0: left allmulticast mode [ 399.763256][ T6059] bridge_slave_0: left promiscuous mode [ 399.763337][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.789761][ T6059] bridge_slave_1: left allmulticast mode [ 399.789787][ T6059] bridge_slave_1: left promiscuous mode [ 399.789927][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.803860][ T6059] bridge_slave_0: left allmulticast mode [ 399.803887][ T6059] bridge_slave_0: left promiscuous mode [ 399.804030][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.883987][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.885274][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.885989][ T6059] bond0 (unregistering): Released all slaves [ 399.934709][ T6059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.935859][ T6059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.936589][ T6059] bond0 (unregistering): Released all slaves [ 400.021162][ T6059] tipc: Left network mode [ 400.211910][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 400.463865][ T6059] hsr_slave_0: left promiscuous mode [ 400.464745][ T6059] hsr_slave_1: left promiscuous mode [ 400.465311][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.465329][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.465869][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.465885][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.508442][ T6059] hsr_slave_0: left promiscuous mode [ 400.508744][ T6059] hsr_slave_1: left promiscuous mode [ 400.509082][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.509094][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.509442][ T6059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.509457][ T6059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.512846][ T6059] veth1_macvtap: left promiscuous mode [ 400.512885][ T6059] veth0_macvtap: left promiscuous mode [ 400.512934][ T6059] veth1_vlan: left promiscuous mode [ 400.512946][ T6059] veth0_vlan: left promiscuous mode [ 400.513625][ T6059] veth1_macvtap: left promiscuous mode [ 400.513644][ T6059] veth0_macvtap: left promiscuous mode [ 400.513680][ T6059] veth1_vlan: left promiscuous mode [ 400.513711][ T6059] veth0_vlan: left promiscuous mode [ 400.675569][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 400.686583][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 400.788934][ T6059] team0 (unregistering): Port device team_slave_1 removed [ 400.791891][ T6059] team0 (unregistering): Port device team_slave_0 removed [ 400.843708][ T5269] 8021q: adding VLAN 0 to HW filter on device eth10 [ 401.165891][ T5269] 8021q: adding VLAN 0 to HW filter on device eth11 [ 401.402854][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 401.586676][ T5269] 8021q: adding VLAN 0 to HW filter on device eth13 [ 401.766082][ T5269] 8021q: adding VLAN 0 to HW filter on device eth14 [ 401.956074][ T5269] 8021q: adding VLAN 0 to HW filter on device eth15 [ 402.132477][ T5269] 8021q: adding VLAN 0 to HW filter on device eth16