last executing test programs: 2.832463489s ago: executing program 4 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) unshare(0x8000000) 2.761148255s ago: executing program 4 (id=1809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r5, 0x209, 0x2000000, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0xfc}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc001) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4c6, 0x0, "90337f00ff7f000000000000ff1efefff400"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r8, 0x100, 0x0) getdents64(r8, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x100000000, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.755929896s ago: executing program 1 (id=1810): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) fchdir(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r4}}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000400)={[{@dioread_lock}, {@errors_remount}, {@i_version}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) 2.513581158s ago: executing program 1 (id=1813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setregid(0x0, 0x0) 2.273116651s ago: executing program 1 (id=1816): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000008fda3b4f4b1bae01eb5aca9a8c11a9244cc70e05ea91b6356fc12c749ffc5c5865322e431366baf172192b8ff7d6000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000200)=0xb6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000180)=0x4ba54771) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x80045515, &(0x7f0000001200)={{{0x1, 0x1}}, 0x0, 0x2, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) pipe(&(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) vmsplice(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) 1.833338231s ago: executing program 4 (id=1831): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="9d29403fdc454083d8fd8ac0012910912c968308cf6d413d018549e3dd55b342c0ef7e8cc14288233cd1997f047864688f0e4b66db0ef876c8ee2e2108b205e0dd2e7e3f2e7ac2", 0x47, 0x20040800, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xffbf, 0x2) 1.714971192s ago: executing program 4 (id=1837): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x4e23, @multicast2}}) 1.659554147s ago: executing program 4 (id=1839): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000007000000030000004800000000000000", @ANYRES32, @ANYBLOB="00000000000000008d9600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x2000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xea53bde1d1e63ead, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0x5, &(0x7f00000026c0)=ANY=[@ANYBLOB="180000000000000000000000000000001600000000000000670000000000000095"], &(0x7f0000002700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYBLOB="67a9fde5"], 0x3}}, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) r7 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t') 1.404276171s ago: executing program 1 (id=1846): r0 = openat$uhid(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x69, "effd48c3df76e11ab04f686d0e8c01024d63a122df293ee86a443852fd2be7cca0b2e9e2f3237f823fc602282f5e5d2e91200c8874fd9e72a3f056acf15ef18a0cf2945c54a7ef4b92354cfea10971fc62913b1e69f648ae260169f86dbb73a13a8641696cf08377c4"}}, 0x6f) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@prjquota}, {@orlov}, {@data_err_ignore}, {@debug}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x841) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open_tree(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x80000) 1.317006769s ago: executing program 1 (id=1849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18) setregid(0x0, 0x0) 1.293187211s ago: executing program 1 (id=1851): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="150000004effff000000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) getpeername$inet(r5, &(0x7f0000000100), &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1.235629256s ago: executing program 2 (id=1853): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x8, 0x0, 0x0) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x8000000008, 0xffffffffffffffff}) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000500), 0x400, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r9, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xe4}}, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5ffc}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x46}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x9, 0xe, 0x4, 0xffffffffffffffe7, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x1, 0x0, 0x3, 0x9, 0x6, 0x10, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x9a, &(0x7f0000000300)=""/154, 0x41000, 0x8, '\x00', r6, @fallback=0x1d, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, 0x10, 0x0, r1, 0x3, &(0x7f0000000680)=[0x1, r0, r0, r0, r8, r0, r0, r12, r13, r0], &(0x7f0000000700)=[{0x2, 0x5, 0xc, 0x3}, {0x3, 0x5, 0x2, 0x3}, {0x4, 0x3, 0x10}], 0x10, 0x0, @void, @value}, 0x94) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 997.275188ms ago: executing program 2 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x25, 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r5, r7, 0x25, 0x1, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 888.153888ms ago: executing program 0 (id=1856): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) unshare(0x8000000) 823.574234ms ago: executing program 4 (id=1857): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_inodes=k']) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000700000002c68a8ff213995e12955e664b7700e0ff0300000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) time(0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/36, @ANYRES32], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/37], 0xb8}}, 0x0) getrusage(0x0, 0x0) r8 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xf2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 784.544418ms ago: executing program 0 (id=1859): r0 = openat$uhid(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x69, "effd48c3df76e11ab04f686d0e8c01024d63a122df293ee86a443852fd2be7cca0b2e9e2f3237f823fc602282f5e5d2e91200c8874fd9e72a3f056acf15ef18a0cf2945c54a7ef4b92354cfea10971fc62913b1e69f648ae260169f86dbb73a13a8641696cf08377c4"}}, 0x6f) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@prjquota}, {@orlov}, {@data_err_ignore}, {@debug}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x841) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open_tree(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x80000) 707.341705ms ago: executing program 0 (id=1860): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[]) 707.021345ms ago: executing program 0 (id=1861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 643.706681ms ago: executing program 0 (id=1863): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 587.465316ms ago: executing program 0 (id=1866): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000000), 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) write$tun(r1, 0x0, 0x0) 197.563842ms ago: executing program 3 (id=1869): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000275000/0x2000)=nil, 0xffffffffdfd8afff, 0x15) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x126, 0x126, 0x4, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x2e, 0x4}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @volatile={0xd}, @union={0x7, 0x8, 0x0, 0x5, 0x1, 0x21, [{0x6, 0x5, 0x9}, {0xb, 0x0, 0x6}, {0x9, 0x3, 0x6f5}, {0x2, 0x1, 0x3}, {0x9, 0x2, 0x4}, {0x10, 0x2, 0xffff}, {0x5, 0x3, 0x1}, {0x9, 0x3, 0xf}]}, @datasec={0x1, 0xa, 0x0, 0xf, 0x2, [{0x3, 0x7}, {0x5, 0x817, 0x10000}, {0x5, 0xc, 0x3}, {0x2, 0x7ff, 0x2}, {0x4, 0x5, 0x80000000}, {0x2, 0x7fff, 0x8}, {0x3, 0x1, 0x8}, {0x3, 0x4}, {0x5, 0x9, 0xffffff80}, {0x3, 0x6, 0x1000}], "d623"}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000200)=""/145, 0x144, 0x91, 0x8, 0xe88a, 0x10000, @value}, 0x28) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x0, 0x9, 0x10003, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x8}}, 0x20) close(r5) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f0000000500)="dc", 0x1, 0x40004, &(0x7f0000000100)={0xa, 0x4e23, 0x6, @loopback}, 0x1c) 119.776959ms ago: executing program 3 (id=1870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18) setresgid(0x0, 0x0, 0x0) 79.933563ms ago: executing program 3 (id=1871): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xa93, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) 79.405753ms ago: executing program 2 (id=1872): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000004000000000080000001800018014f2080073797a5f74756e00cf78bdb3321dcc47eaf60000000000002f28c85ad1c0d350763a0000773bb3"], 0x38}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000005000000000042000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r4}, &(0x7f0000000000), &(0x7f0000001340)='%pB \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='module_request\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 60.853294ms ago: executing program 3 (id=1873): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[]) 29.384287ms ago: executing program 2 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd']) 28.964617ms ago: executing program 2 (id=1875): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, r0) 22.150588ms ago: executing program 3 (id=1876): socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000275000/0x2000)=nil, 0xffffffffdfd8afff, 0x15) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x126, 0x126, 0x4, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x4c, 0x0, 0x2e, 0x4}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x2}, @volatile={0xd}, @union={0x7, 0x8, 0x0, 0x5, 0x1, 0x21, [{0x6, 0x5, 0x9}, {0xb, 0x0, 0x6}, {0x9, 0x3, 0x6f5}, {0x2, 0x1, 0x3}, {0x9, 0x2, 0x4}, {0x10, 0x2, 0xffff}, {0x5, 0x3, 0x1}, {0x9, 0x3, 0xf}]}, @datasec={0x1, 0xa, 0x0, 0xf, 0x2, [{0x3, 0x7}, {0x5, 0x817, 0x10000}, {0x5, 0xc, 0x3}, {0x2, 0x7ff, 0x2}, {0x4, 0x5, 0x80000000}, {0x2, 0x7fff, 0x8}, {0x3, 0x1, 0x8}, {0x3, 0x4}, {0x5, 0x9, 0xffffff80}, {0x3, 0x6, 0x1000}], "d623"}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000200)=""/145, 0x144, 0x91, 0x8, 0xe88a, 0x10000, @value}, 0x28) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x0, 0x9, 0x10003, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x8}}, 0x20) close(r5) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000140)=ANY=[], 0xef) 1.142889ms ago: executing program 2 (id=1877): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000007000000030000004800000000000000", @ANYRES32, @ANYBLOB="00000000000000008d9600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x2000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xea53bde1d1e63ead, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0x5, &(0x7f00000026c0)=ANY=[@ANYBLOB="180000000000000000000000000000001600000000000000670000000000000095"], &(0x7f0000002700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYBLOB="67a9fde5"], 0x3}}, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000100)='cpu&\t0\t\t\t') 0s ago: executing program 3 (id=1878): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000040000000180000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000000a80)=ANY=[@ANYRES8], 0x0, 0x9e7c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000001efc41000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000004000000000080000001800018014f2080073797a5f74756e00cf78bdb3321dcc47eaf60000000000002f28c85ad1c0d350763a0000773bb360f90356b63c970c0002800400010004000380d8e279f8039754b176ffe045ac9c5d46c693b925e9df4778cebf4383d7098262f3d2fb4f59c8d09b32e6"], 0x38}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x2, 0x0, 0x0, &(0x7f00000006c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000004d70000000000000000000a03000000000000000000070000000900010073797a300000000050000000090a010400000000000000000700000008000ac270ea8fce33752929694676ec2ae2a1000000000900020073797a31000000000900010073797a30000000000800054000000021140011800a00010071756f746100000004000280140000001000010000000000000000000084000a60bad1c1c95bff5c4400fe4ce4dbc5c2b138385cf9892710bb9c719efebba5f4b10982d8c93eeb473a78a7b9dd11025b1199c1791e92f35ab683b9376f81a7a5f561b3c505393abf678d690ea6d48750bfae1eaec56d7484d8ce2def239bf65210ab793f5fff9d35832a21a92b415279dc7846a364b9f7a4116066a523fbf0b9cccf7d614bfcceb4da27b059c082653b26aabfb7ea1590907e2aa5b6ff28821e590684cc96f5cea84db1c478d34c24044d4829cfdb6a7d49fbc608c9c086445f556fd7a2822a197373b7a2a79c81ecb03d0823208b46a49d74fa18a11dc02f227a95dc8ceeba75414a674e013304159049b8ed064a5b1fa0f70e6d8bf59199e6bdd1ba46667f6f33567bbcb4b92c4b61425405150d47"], 0x98}}, 0x0) kernel console output (not intermixed with test programs): cate VQ 0x0 after dequeue, screwing up backlog [ 129.500269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.508433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.516639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.524826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.544052][ T3341] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 129.552968][ T3341] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.688879][ T9748] hub 2-0:1.0: USB hub found [ 129.693787][ T9748] hub 2-0:1.0: 8 ports detected [ 129.745667][ T9752] loop4: detected capacity change from 0 to 2048 [ 129.803311][ T9752] Alternate GPT is invalid, using primary GPT. [ 129.809710][ T9752] loop4: p2 p3 p7 [ 129.987438][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1019'. [ 130.076027][ T3344] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 130.086069][ T3344] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 130.138671][ T9842] netlink: 'syz.1.1021': attribute type 8 has an invalid length. [ 130.435093][ T9890] Cannot find set identified by id 0 to match [ 130.685789][ T9918] hub 2-0:1.0: USB hub found [ 130.695785][ T9918] hub 2-0:1.0: 8 ports detected [ 130.820577][ T9937] netlink: 'syz.2.1029': attribute type 8 has an invalid length. [ 130.977827][ T9952] loop1: detected capacity change from 0 to 2048 [ 131.034042][ T9952] Alternate GPT is invalid, using primary GPT. [ 131.040508][ T9952] loop1: p2 p3 p7 [ 131.236079][ T9986] loop1: detected capacity change from 0 to 512 [ 131.242794][ T9986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.260889][ T9986] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 131.268878][ T9986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 131.277813][ T9986] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 131.287374][ T9986] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 131.296490][ T9986] EXT4-fs mount: 9 callbacks suppressed [ 131.296506][ T9986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 131.309833][ T9990] hub 2-0:1.0: USB hub found [ 131.315978][ T9986] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1037: dx entry: limit 65535 != root limit 120 [ 131.327454][ T9990] hub 2-0:1.0: 8 ports detected [ 131.330866][ T9986] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1037: Corrupt directory, running e2fsck is recommended [ 131.349960][ T9986] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1037: path /75/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 131.384810][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.398952][ T9992] loop3: detected capacity change from 0 to 512 [ 131.405511][ T9992] EXT4-fs: Ignoring removed orlov option [ 131.412900][ T9992] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 131.483094][T10007] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 131.491205][T10007] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1042'. [ 131.601378][T10045] loop3: detected capacity change from 0 to 512 [ 131.608306][T10045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.610901][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 131.626380][T10045] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.634406][T10045] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 131.642626][T10045] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 131.652263][T10045] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 131.661524][T10045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 131.676076][T10045] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1049: dx entry: limit 65535 != root limit 120 [ 131.688288][T10045] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1049: Corrupt directory, running e2fsck is recommended [ 131.697389][T10054] loop4: detected capacity change from 0 to 512 [ 131.701376][T10045] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1049: path /80/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 131.712482][T10056] loop1: detected capacity change from 0 to 512 [ 131.728874][T10054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.741143][T10056] EXT4-fs: Ignoring removed orlov option [ 131.747635][T10056] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 131.757827][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.769283][T10054] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 131.777318][T10054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 131.785675][T10054] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 131.795289][T10054] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 131.804677][T10054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 131.822867][T10054] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1053: dx entry: limit 65535 != root limit 120 [ 131.824894][T10058] loop2: detected capacity change from 0 to 1024 [ 131.835016][T10054] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1053: Corrupt directory, running e2fsck is recommended [ 131.855233][T10054] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1053: path /84/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 131.885289][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 131.913604][T10071] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 131.921569][T10071] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1057'. [ 132.033814][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1062'. [ 132.050733][T10084] netlink: 'syz.1.1060': attribute type 8 has an invalid length. [ 132.080251][ T9] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 132.088340][ T9] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.211909][T10119] 9pnet_fd: Insufficient options for proto=fd [ 132.372746][T10148] netlink: 'syz.2.1072': attribute type 1 has an invalid length. [ 132.397133][ T7429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.869563][ T35] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 132.880096][ T35] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.950444][T10272] __nla_validate_parse: 2 callbacks suppressed [ 132.950465][T10272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1077'. [ 133.030767][T10289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1079'. [ 133.103985][T10289] loop1: detected capacity change from 0 to 2048 [ 133.142995][T10289] Alternate GPT is invalid, using primary GPT. [ 133.149458][T10289] loop1: p2 p3 p7 [ 133.230519][T10320] 9pnet_fd: Insufficient options for proto=fd [ 133.244866][T10322] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 133.252850][T10322] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1085'. [ 133.303007][T10327] loop4: detected capacity change from 0 to 512 [ 133.310366][T10327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.319323][T10327] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 133.327319][T10327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 133.335686][T10327] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 133.345349][T10327] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 133.354479][T10327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 133.376571][T10327] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1087: dx entry: limit 65535 != root limit 120 [ 133.378390][T10331] loop1: detected capacity change from 0 to 1024 [ 133.388815][T10327] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1087: Corrupt directory, running e2fsck is recommended [ 133.397378][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 133.419764][T10327] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1087: path /87/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 133.440300][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1089'. [ 133.459503][T10335] netlink: 'syz.2.1088': attribute type 8 has an invalid length. [ 133.476196][ T7429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.526338][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 133.535596][T10348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1092'. [ 133.553200][T10353] hub 2-0:1.0: USB hub found [ 133.558129][T10353] hub 2-0:1.0: 8 ports detected [ 133.606489][T10348] loop1: detected capacity change from 0 to 2048 [ 133.625535][T10357] 9pnet_fd: Insufficient options for proto=fd [ 133.637979][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 133.637992][ T29] audit: type=1326 audit(1727394207.073:15684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.638855][T10348] Alternate GPT is invalid, using primary GPT. [ 133.655543][ T29] audit: type=1326 audit(1727394207.073:15685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.668095][T10348] loop1: p2 p3 p7 [ 133.674111][ T29] audit: type=1326 audit(1727394207.073:15686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.674151][ T29] audit: type=1326 audit(1727394207.073:15687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.674184][ T29] audit: type=1326 audit(1727394207.073:15688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.674216][ T29] audit: type=1326 audit(1727394207.073:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.674246][ T29] audit: type=1326 audit(1727394207.073:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.735269][T10363] loop4: detected capacity change from 0 to 512 [ 133.748729][ T29] audit: type=1326 audit(1727394207.073:15691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.774183][T10363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.795866][ T29] audit: type=1326 audit(1727394207.073:15692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.879786][ T29] audit: type=1326 audit(1727394207.073:15693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10358 comm="syz.3.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 133.911288][T10363] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 133.919370][T10363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 133.930234][T10366] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 133.931082][T10363] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 133.938032][T10366] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1099'. [ 133.947574][T10363] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 133.948030][T10363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 133.981548][T10363] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1098: dx entry: limit 65535 != root limit 120 [ 133.993889][T10363] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1098: Corrupt directory, running e2fsck is recommended [ 134.007387][T10363] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1098: path /91/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 134.085509][T10404] loop1: detected capacity change from 0 to 1024 [ 134.092844][T10404] EXT4-fs: Ignoring removed i_version option [ 134.109037][T10404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.124458][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 134.175686][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.545698][ T7429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.601516][T10490] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 134.609448][T10490] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1112'. [ 134.698764][T10502] Cannot find set identified by id 0 to match [ 134.711989][ T9] net_ratelimit: 83 callbacks suppressed [ 134.712004][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.937127][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.072839][ T35] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 135.084376][ T35] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.096874][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.215011][T10562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.223470][T10562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.233354][T10562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.245997][T10562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.254848][T10562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.274194][T10560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.282584][T10560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.644005][ T24] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 135.652351][ T24] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.960579][T10678] loop1: detected capacity change from 0 to 1024 [ 136.124384][T10690] hub 2-0:1.0: USB hub found [ 136.129539][T10690] hub 2-0:1.0: 8 ports detected [ 136.139717][T10692] loop2: detected capacity change from 0 to 512 [ 136.146427][T10692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.154441][T10692] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.162566][T10692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 136.171732][T10692] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 136.181367][T10692] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 136.191047][T10692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.204468][T10692] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1138: dx entry: limit 65535 != root limit 120 [ 136.216922][T10692] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1138: Corrupt directory, running e2fsck is recommended [ 136.230085][T10692] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1138: path /104/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 136.354144][T10710] loop0: detected capacity change from 0 to 1024 [ 136.362754][T10710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.370232][T10710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.378118][T10710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.385548][T10710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.447863][ T3340] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 136.455935][ T3340] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.504015][T10718] loop4: detected capacity change from 0 to 2048 [ 136.582730][T10718] Alternate GPT is invalid, using primary GPT. [ 136.588441][T10730] Process accounting resumed [ 136.589230][T10718] loop4: p2 p3 p7 [ 136.608127][T10718] 9pnet_fd: Insufficient options for proto=fd [ 136.973021][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.043453][T10810] 9pnet_fd: Insufficient options for proto=fd [ 137.356084][ T3341] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 137.364788][ T3341] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.476295][T10836] loop0: detected capacity change from 0 to 512 [ 137.482957][T10836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.491438][T10831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=10831 comm=syz.4.1166 [ 137.504859][T10836] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 137.512952][T10836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 137.514901][T10831] loop4: detected capacity change from 0 to 1764 [ 137.531696][T10836] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 137.541257][T10836] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 137.550847][T10836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 137.567920][T10836] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1167: dx entry: limit 65535 != root limit 120 [ 137.580139][T10836] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1167: Corrupt directory, running e2fsck is recommended [ 137.593374][T10836] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1167: path /72/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 137.641024][T10842] loop1: detected capacity change from 0 to 1024 [ 137.732274][ T3341] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 137.740413][ T3341] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.743074][T10863] loop4: detected capacity change from 0 to 2048 [ 137.820015][T10863] Alternate GPT is invalid, using primary GPT. [ 137.826493][T10863] loop4: p2 p3 p7 [ 137.843876][T10863] 9pnet_fd: Insufficient options for proto=fd [ 137.960653][T10910] __nla_validate_parse: 10 callbacks suppressed [ 137.960669][T10910] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1181'. [ 138.038887][T10910] loop2: detected capacity change from 0 to 2048 [ 138.092000][T10910] Alternate GPT is invalid, using primary GPT. [ 138.098411][T10910] loop2: p2 p3 p7 [ 138.193270][T10954] hub 2-0:1.0: USB hub found [ 138.198241][T10954] hub 2-0:1.0: 8 ports detected [ 138.223485][T10956] loop2: detected capacity change from 0 to 512 [ 138.230577][T10956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.238408][T10956] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 138.246353][T10956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 138.254544][T10956] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 138.264290][T10956] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 138.273681][T10956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.288359][T10956] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1187: dx entry: limit 65535 != root limit 120 [ 138.300675][T10956] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1187: Corrupt directory, running e2fsck is recommended [ 138.313861][T10956] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1187: path /114/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 138.334864][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.371354][T10961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 138.657188][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 138.657202][ T29] audit: type=1326 audit(1727394212.093:16104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.687585][ T29] audit: type=1326 audit(1727394212.103:16105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.711373][ T29] audit: type=1326 audit(1727394212.103:16106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.735254][ T29] audit: type=1326 audit(1727394212.103:16107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.758954][ T29] audit: type=1326 audit(1727394212.103:16108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.782538][ T29] audit: type=1326 audit(1727394212.103:16109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.806184][ T29] audit: type=1326 audit(1727394212.103:16110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.829678][ T29] audit: type=1326 audit(1727394212.103:16111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.853325][ T29] audit: type=1326 audit(1727394212.103:16112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.877238][ T29] audit: type=1326 audit(1727394212.103:16113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.4.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 138.926875][T10976] Cannot find set identified by id 0 to match [ 139.181681][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.316360][T11028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1200'. [ 139.391616][T11034] hub 2-0:1.0: USB hub found [ 139.406804][T11034] hub 2-0:1.0: 8 ports detected [ 139.413902][T11035] Cannot find set identified by id 0 to match [ 139.496730][ T3344] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 139.517426][ T3344] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.580044][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1207'. [ 139.663154][T11086] loop4: detected capacity change from 0 to 2048 [ 139.702185][T11086] Alternate GPT is invalid, using primary GPT. [ 139.708722][T11086] loop4: p2 p3 p7 [ 139.796644][T11083] Cannot find set identified by id 0 to match [ 139.995370][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 140.146793][ T3341] net_ratelimit: 857 callbacks suppressed [ 140.146850][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.284729][T11099] Cannot find set identified by id 0 to match [ 140.297085][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.503373][T11149] loop0: detected capacity change from 0 to 512 [ 140.510535][T11149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.525092][T11149] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 140.533159][T11149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 140.555060][T11149] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 140.564757][T11149] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 140.596883][T11149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.612085][T11149] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1221: dx entry: limit 65535 != root limit 120 [ 140.624353][T11149] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1221: Corrupt directory, running e2fsck is recommended [ 140.643258][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 140.651465][ T24] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.663037][T11149] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1221: path /80/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 140.684935][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.693260][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.718061][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.726320][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.734912][T11149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.743326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.751517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.759705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.653580][T11360] hub 2-0:1.0: USB hub found [ 141.663103][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.665566][T11360] hub 2-0:1.0: 8 ports detected [ 141.688779][ T24] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 141.698413][ T24] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.784299][T11378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1243'. [ 141.805595][T11378] loop2: detected capacity change from 0 to 2048 [ 141.834008][T11378] Alternate GPT is invalid, using primary GPT. [ 141.840700][T11378] loop2: p2 p3 p7 [ 141.869603][T11383] netlink: 'syz.2.1244': attribute type 1 has an invalid length. [ 141.877450][T11383] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1244'. [ 141.948189][T11387] netlink: 'syz.0.1246': attribute type 8 has an invalid length. [ 142.081432][T11429] loop1: detected capacity change from 0 to 512 [ 142.081553][T11425] loop2: detected capacity change from 0 to 1024 [ 142.089944][T11429] EXT4-fs: Ignoring removed orlov option [ 142.094692][T11425] EXT4-fs: Ignoring removed i_version option [ 142.100785][T11429] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 142.138823][T11425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.152810][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 142.185993][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.196911][ T3344] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 142.204816][ T3344] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 142.289197][T11443] loop1: detected capacity change from 0 to 1024 [ 142.298287][T11443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.334394][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.343428][T11452] loop3: detected capacity change from 0 to 512 [ 142.343723][T11452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.358114][T11452] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 142.366183][T11452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 142.383718][T11452] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 142.393455][T11452] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 142.405263][T11452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.409838][T11464] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 142.425333][T11464] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1257'. [ 142.431570][T11452] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1255: dx entry: limit 65535 != root limit 120 [ 142.446642][T11452] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1255: Corrupt directory, running e2fsck is recommended [ 142.459826][T11452] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1255: path /124/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 142.491247][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.603728][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1258'. [ 142.754328][T11520] loop4: detected capacity change from 0 to 512 [ 142.761351][T11520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.770796][T11520] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 142.778952][T11520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 142.787524][T11520] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 142.797116][T11520] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 142.806460][T11520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.821635][T11520] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1261: dx entry: limit 65535 != root limit 120 [ 142.833977][T11520] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1261: Corrupt directory, running e2fsck is recommended [ 142.855758][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.870153][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.882875][T11520] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1261: path /114/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 142.921490][ T3344] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 142.930008][ T3344] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.392720][T11622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1266'. [ 143.410272][T11622] loop3: detected capacity change from 0 to 2048 [ 143.429629][ T7429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.446646][T11626] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 143.454640][T11626] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1269'. [ 143.482812][T11622] Alternate GPT is invalid, using primary GPT. [ 143.489256][T11622] loop3: p2 p3 p7 [ 143.750833][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 143.774579][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 143.774596][ T29] audit: type=1326 audit(1727394217.203:16533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.804859][ T29] audit: type=1326 audit(1727394217.203:16534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.828587][ T29] audit: type=1326 audit(1727394217.203:16535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.852215][ T29] audit: type=1326 audit(1727394217.203:16536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.867853][T11688] loop4: detected capacity change from 0 to 512 [ 143.875881][ T29] audit: type=1326 audit(1727394217.203:16537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.882567][T11688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.905630][ T29] audit: type=1326 audit(1727394217.213:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.924477][T11688] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 143.936410][ T29] audit: type=1326 audit(1727394217.213:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.944408][T11688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 143.967965][ T29] audit: type=1326 audit(1727394217.213:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.968012][ T29] audit: type=1326 audit(1727394217.213:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 143.977128][T11688] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 143.999470][ T29] audit: type=1326 audit(1727394217.213:16542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.4.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64f699df39 code=0x7ffc0000 [ 144.023439][T11688] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 144.071466][T11688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.074569][T11693] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 144.088396][T11688] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1280: dx entry: limit 65535 != root limit 120 [ 144.091328][T11693] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1282'. [ 144.103374][T11688] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1280: Corrupt directory, running e2fsck is recommended [ 144.125459][T11688] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1280: path /124/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 144.224137][T11729] loop0: detected capacity change from 0 to 512 [ 144.230739][T11729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.238410][T11729] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 144.246416][T11729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 144.254659][T11729] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 144.264162][T11729] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 144.273301][T11729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.286415][T11729] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1283: dx entry: limit 65535 != root limit 120 [ 144.298604][T11729] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1283: Corrupt directory, running e2fsck is recommended [ 144.311648][T11729] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1283: path /89/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 144.420430][T11735] hub 2-0:1.0: USB hub found [ 144.425310][T11735] hub 2-0:1.0: 8 ports detected [ 144.472338][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 144.599055][T11757] loop3: detected capacity change from 0 to 1024 [ 144.610920][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1289'. [ 144.619912][T11757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.627386][T11757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.635979][T11757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.643960][T11757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.664815][ T7429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.836010][T11795] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=11795 comm=syz.3.1295 [ 144.849467][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.859510][T11795] loop3: detected capacity change from 0 to 1764 [ 144.914827][T11801] hub 2-0:1.0: USB hub found [ 144.920350][T11801] hub 2-0:1.0: 8 ports detected [ 144.999941][T11813] hub 2-0:1.0: USB hub found [ 145.004801][T11813] hub 2-0:1.0: 8 ports detected [ 145.110791][T11836] loop0: detected capacity change from 0 to 512 [ 145.117662][T11836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.137761][T11836] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 145.145842][T11836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 145.159226][T11836] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 145.168852][T11836] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 145.178442][T11836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.192293][T11836] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1302: dx entry: limit 65535 != root limit 120 [ 145.204465][T11836] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1302: Corrupt directory, running e2fsck is recommended [ 145.214299][T11845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1303'. [ 145.218379][T11836] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1302: path /93/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 145.250968][T11849] net_ratelimit: 809 callbacks suppressed [ 145.250982][T11849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.265086][T11849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.275672][T11836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.284029][T11836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.293001][T11836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.301289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.309451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.317624][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.325757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.333896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.391480][T11865] loop3: detected capacity change from 0 to 512 [ 145.407126][T11865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.418868][T11865] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 145.426871][T11865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 145.435171][T11865] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 145.444794][T11865] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 145.455486][T11865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.470537][T11865] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1306: dx entry: limit 65535 != root limit 120 [ 145.483521][T11865] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1306: Corrupt directory, running e2fsck is recommended [ 145.496794][T11865] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1306: path /139/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 145.554788][T11881] loop4: detected capacity change from 0 to 512 [ 145.566117][T11881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.587255][T11881] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 145.595232][T11881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 145.608946][T11881] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 145.618517][T11881] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 145.627740][T11881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.641075][T11881] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1307: dx entry: limit 65535 != root limit 120 [ 145.653247][T11881] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1307: Corrupt directory, running e2fsck is recommended [ 145.667032][T11881] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1307: path /126/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 145.696891][ T7429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.010004][T11974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=11974 comm=syz.2.1309 [ 146.035401][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.208857][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 146.217976][ T35] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.362357][T11999] loop3: detected capacity change from 0 to 512 [ 146.368953][T11999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.376853][T11999] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.385073][T11999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 146.393232][T11999] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 146.402743][T11999] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 146.411786][T11999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 146.426265][T11999] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1320: dx entry: limit 65535 != root limit 120 [ 146.438475][T11999] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1320: Corrupt directory, running e2fsck is recommended [ 146.451736][T11999] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1320: path /147/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 146.481472][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.611084][T12012] loop1: detected capacity change from 0 to 512 [ 146.617735][T12012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.627710][T12013] loop4: detected capacity change from 0 to 2048 [ 146.635330][T12012] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 146.643323][T12012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 146.651436][T12012] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 146.660964][T12012] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 146.670909][T12012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 146.675576][T12013] Alternate GPT is invalid, using primary GPT. [ 146.689359][T12013] loop4: p2 p3 p7 [ 146.693834][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.708139][T12013] 9pnet_fd: Insufficient options for proto=fd [ 146.717146][T12004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.725987][T12004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.820270][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 146.869150][T12024] loop1: detected capacity change from 0 to 1024 [ 146.878212][T12024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.903766][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.254390][T12117] loop3: detected capacity change from 0 to 512 [ 147.261357][T12117] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.269212][T12117] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.277208][T12117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 147.285273][T12117] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 147.294835][T12117] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 147.303910][T12117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.325567][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.551007][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 147.568681][T12170] loop4: detected capacity change from 0 to 1024 [ 147.575388][T12170] EXT4-fs: Ignoring removed i_version option [ 147.590474][T12170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.603608][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 147.666336][ T7429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.986170][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 147.996833][ T35] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.132582][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.152831][T12281] loop0: detected capacity change from 0 to 512 [ 148.159400][T12281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.167065][T12281] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 148.175182][T12281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 148.183417][T12281] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 148.192902][T12281] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 148.202014][T12281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 148.223643][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.259934][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.268645][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.540530][T12287] loop1: detected capacity change from 0 to 2048 [ 148.582606][T12287] Alternate GPT is invalid, using primary GPT. [ 148.589066][T12287] loop1: p2 p3 p7 [ 148.616161][T12297] __nla_validate_parse: 1 callbacks suppressed [ 148.616175][T12297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 148.690262][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1355'. [ 148.852705][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 148.852718][ T29] audit: type=1326 audit(1727394222.283:16964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 148.883726][ T29] audit: type=1326 audit(1727394222.283:16965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 148.907452][ T29] audit: type=1326 audit(1727394222.293:16966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 148.931048][ T29] audit: type=1326 audit(1727394222.323:16967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 148.954851][ T29] audit: type=1326 audit(1727394222.323:16968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 148.978439][ T29] audit: type=1326 audit(1727394222.323:16969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 149.002029][ T29] audit: type=1326 audit(1727394222.323:16970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 149.026744][ T29] audit: type=1326 audit(1727394222.323:16971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 149.050363][ T29] audit: type=1326 audit(1727394222.343:16972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 149.073951][ T29] audit: type=1326 audit(1727394222.343:16973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12306 comm="syz.1.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8773df39 code=0x7ffc0000 [ 149.524839][T12484] netlink: 'syz.4.1364': attribute type 8 has an invalid length. [ 149.598818][T12498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1365'. [ 149.697785][T12520] loop1: detected capacity change from 0 to 512 [ 149.704428][T12520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.712539][T12520] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 149.720574][T12520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 149.728758][T12520] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 149.738392][T12520] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 149.748407][T12520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.784368][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.809828][T12536] hub 2-0:1.0: USB hub found [ 149.814449][T12528] loop2: detected capacity change from 0 to 1024 [ 149.814523][T12536] hub 2-0:1.0: 8 ports detected [ 149.832983][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 149.861147][T12541] loop1: detected capacity change from 0 to 512 [ 149.867836][T12541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.876507][T12541] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 149.884510][T12541] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 149.901227][T12541] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 149.910761][T12541] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 149.939893][T12541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.955904][T12541] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1371: dx entry: limit 65535 != root limit 120 [ 149.968081][T12541] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1371: Corrupt directory, running e2fsck is recommended [ 149.981283][T12541] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1371: path /167/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 150.291603][T12598] loop2: detected capacity change from 0 to 512 [ 150.298259][T12598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.306328][T12598] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 150.314327][T12598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 150.322399][T12598] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 150.331916][T12598] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 150.341545][T12598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.355545][T12598] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1374: dx entry: limit 65535 != root limit 120 [ 150.367707][T12598] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1374: Corrupt directory, running e2fsck is recommended [ 150.380703][T12598] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1374: path /152/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 150.409085][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.427211][T12603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1376'. [ 150.521642][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.536876][ T35] net_ratelimit: 772 callbacks suppressed [ 150.536892][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.616448][T12644] netlink: 'syz.1.1378': attribute type 8 has an invalid length. [ 150.663301][T12650] hub 2-0:1.0: USB hub found [ 150.668122][T12650] hub 2-0:1.0: 8 ports detected [ 150.693366][T12653] netlink: 'syz.2.1382': attribute type 1 has an invalid length. [ 150.701377][T12653] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1382'. [ 150.710880][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.791688][T12657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.800147][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.812923][T12659] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 150.820792][T12659] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1385'. [ 150.850206][T12664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.858893][T12664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.867756][T12664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.876090][T12664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.884394][T12664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.893299][T12664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.916515][T12667] loop3: detected capacity change from 0 to 512 [ 150.923684][T12667] EXT4-fs: Ignoring removed orlov option [ 150.929732][T12667] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 150.957419][T12671] loop3: detected capacity change from 0 to 512 [ 150.964106][T12671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.972429][T12671] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 150.980473][T12671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 150.988541][T12671] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 150.998251][T12671] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 151.008522][T12671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.024278][T12671] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1390: dx entry: limit 65535 != root limit 120 [ 151.036481][T12671] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1390: Corrupt directory, running e2fsck is recommended [ 151.050310][T12671] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1390: path /162/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 151.081135][T12676] 9pnet: Could not find request transport: f [ 151.129364][T12679] loop2: detected capacity change from 0 to 1024 [ 151.136033][T12679] EXT4-fs: Ignoring removed i_version option [ 151.148310][T12679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.161258][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 151.178291][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.488121][T12771] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 151.495920][T12771] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1399'. [ 151.567214][T12778] loop1: detected capacity change from 0 to 1024 [ 151.583599][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'. [ 151.596458][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.679786][T12798] loop2: detected capacity change from 0 to 2048 [ 151.706529][T12798] Alternate GPT is invalid, using primary GPT. [ 151.713008][T12798] loop2: p2 p3 p7 [ 152.617804][T12971] loop3: detected capacity change from 0 to 1024 [ 152.684691][T13008] netlink: 'syz.2.1410': attribute type 8 has an invalid length. [ 152.867682][T13034] loop1: detected capacity change from 0 to 512 [ 152.874489][T13034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.889877][T13034] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 152.897856][T13034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 152.906092][T13034] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 152.915627][T13034] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 152.935822][T13034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.940804][T13037] loop4: detected capacity change from 0 to 2048 [ 152.955644][T13034] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1420: dx entry: limit 65535 != root limit 120 [ 152.968504][T13034] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1420: Corrupt directory, running e2fsck is recommended [ 152.981758][T13034] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1420: path /178/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 153.013045][T13037] Alternate GPT is invalid, using primary GPT. [ 153.019553][T13037] loop4: p2 p3 p7 [ 153.020171][T13039] loop3: detected capacity change from 0 to 512 [ 153.030700][T13039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.038815][T13039] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 153.046813][T13039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 153.055239][T13039] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 153.064852][T13039] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 153.074439][T13039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.090075][T13039] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1422: dx entry: limit 65535 != root limit 120 [ 153.102279][T13039] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1422: Corrupt directory, running e2fsck is recommended [ 153.115890][T13039] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1422: path /169/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 153.146431][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.166863][T13056] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 153.231976][T13065] hub 2-0:1.0: USB hub found [ 153.236869][T13065] hub 2-0:1.0: 8 ports detected [ 153.264918][T13069] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 153.384702][T13073] loop0: detected capacity change from 0 to 512 [ 153.391476][T13073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.401495][ T24] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 153.411665][T13073] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 153.419713][T13073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 153.428025][T13073] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 153.437656][T13073] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 153.441678][ T24] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.447406][T13073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.472157][T13073] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1436: dx entry: limit 65535 != root limit 120 [ 153.484351][T13073] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1436: Corrupt directory, running e2fsck is recommended [ 153.497979][T13073] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1436: path /102/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 153.546406][T13088] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 153.568644][T13092] 9pnet_fd: Insufficient options for proto=fd [ 153.655775][T13106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=13106 comm=syz.2.1449 [ 153.679319][ T9] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 153.704726][ T9] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.725141][T13114] netlink: 'syz.0.1454': attribute type 8 has an invalid length. [ 153.735877][T13118] __nla_validate_parse: 11 callbacks suppressed [ 153.735890][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1455'. [ 153.817958][T13131] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1460'. [ 153.857596][ T29] kauditd_printk_skb: 1603 callbacks suppressed [ 153.857615][ T29] audit: type=1326 audit(1727394227.283:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fb04498a9 code=0x7ffc0000 [ 153.895782][T13134] loop2: detected capacity change from 0 to 2048 [ 153.902665][ T29] audit: type=1326 audit(1727394227.293:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fb04a4ee7 code=0x7ffc0000 [ 153.926253][ T29] audit: type=1326 audit(1727394227.293:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fb04498a9 code=0x7ffc0000 [ 153.949798][ T29] audit: type=1326 audit(1727394227.293:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fb04a4ee7 code=0x7ffc0000 [ 153.973738][ T29] audit: type=1326 audit(1727394227.293:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fb04498a9 code=0x7ffc0000 [ 153.993145][T13137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'. [ 153.998085][ T29] audit: type=1326 audit(1727394227.293:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fb04a4ee7 code=0x7ffc0000 [ 154.030626][ T29] audit: type=1326 audit(1727394227.293:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fb04498a9 code=0x7ffc0000 [ 154.054190][ T29] audit: type=1326 audit(1727394227.293:18584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fb04a4ee7 code=0x7ffc0000 [ 154.077753][ T29] audit: type=1326 audit(1727394227.293:18585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fb04498a9 code=0x7ffc0000 [ 154.101356][ T29] audit: type=1326 audit(1727394227.293:18586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.3.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fb04a4ee7 code=0x7ffc0000 [ 154.112617][T13141] Cannot find set identified by id 0 to match [ 154.140612][T13144] 9pnet_fd: Insufficient options for proto=fd [ 154.169229][T13134] Alternate GPT is invalid, using primary GPT. [ 154.175783][T13134] loop2: p2 p3 p7 [ 154.501110][T13162] loop1: detected capacity change from 0 to 2048 [ 154.554500][T13162] Alternate GPT is invalid, using primary GPT. [ 154.561002][T13162] loop1: p2 p3 p7 [ 154.584810][T13162] 9pnet_fd: Insufficient options for proto=fd [ 154.592230][T13164] hub 2-0:1.0: USB hub found [ 154.599779][T13164] hub 2-0:1.0: 8 ports detected [ 154.642771][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1472'. [ 154.827261][T13190] loop4: detected capacity change from 0 to 2048 [ 154.873262][T13190] Alternate GPT is invalid, using primary GPT. [ 154.879688][T13190] loop4: p2 p3 p7 [ 154.887697][T13190] 9pnet_fd: Insufficient options for proto=fd [ 154.913135][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1484'. [ 154.992048][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1486'. [ 155.315599][T13218] loop3: detected capacity change from 0 to 1024 [ 155.322207][T13218] EXT4-fs: Ignoring removed i_version option [ 155.340862][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 155.379972][T13227] loop1: detected capacity change from 0 to 512 [ 155.386542][T13227] EXT4-fs: Ignoring removed orlov option [ 155.392650][T13227] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 155.427944][T13214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.436476][T13214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.442211][T13231] loop3: detected capacity change from 0 to 2048 [ 155.473938][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 155.482551][T13231] Alternate GPT is invalid, using primary GPT. [ 155.489356][T13231] loop3: p2 p3 p7 [ 155.736810][ T35] net_ratelimit: 476 callbacks suppressed [ 155.736829][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.771295][T13293] loop1: detected capacity change from 0 to 2048 [ 155.842027][T13293] Alternate GPT is invalid, using primary GPT. [ 155.848413][T13293] loop1: p2 p3 p7 [ 155.858584][T13293] 9pnet_fd: Insufficient options for proto=fd [ 155.896829][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.989904][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1507'. [ 156.021231][T13331] loop2: detected capacity change from 0 to 2048 [ 156.072543][T13331] Alternate GPT is invalid, using primary GPT. [ 156.078906][T13331] loop2: p2 p3 p7 [ 156.137309][T13335] loop2: detected capacity change from 0 to 1024 [ 156.144176][T13335] EXT4-fs: Ignoring removed i_version option [ 156.159626][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 156.186287][T13342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.194802][T13342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.203226][T13342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.211748][T13342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.220458][T13342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.229800][T13341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.358150][T13348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.366592][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.417342][T13353] validate_nla: 1 callbacks suppressed [ 156.417360][T13353] netlink: 'syz.3.1516': attribute type 8 has an invalid length. [ 156.442323][T13355] loop0: detected capacity change from 0 to 512 [ 156.449081][T13355] EXT4-fs: Ignoring removed orlov option [ 156.455087][T13355] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 156.562031][T13365] loop4: detected capacity change from 0 to 512 [ 156.569002][T13365] EXT4-fs: Ignoring removed orlov option [ 156.576261][T13365] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 156.600286][T13369] loop2: detected capacity change from 0 to 512 [ 156.608936][T13369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.626763][T13369] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 156.626852][T13371] 9pnet_fd: Insufficient options for proto=fd [ 156.634701][T13369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 156.646868][T13369] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 156.658622][T13369] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 156.682721][T13369] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1522: dx entry: limit 65535 != root limit 120 [ 156.694927][T13369] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1522: Corrupt directory, running e2fsck is recommended [ 156.712330][T13369] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1522: path /197/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 156.775101][T13381] hub 2-0:1.0: USB hub found [ 156.781173][T13381] hub 2-0:1.0: 8 ports detected [ 156.899981][T13394] loop0: detected capacity change from 0 to 1024 [ 156.908327][T13394] EXT4-fs: Ignoring removed i_version option [ 156.968179][T13406] 9pnet_fd: Insufficient options for proto=fd [ 156.978593][T13405] loop0: detected capacity change from 0 to 512 [ 156.985197][T13405] EXT4-fs: Ignoring removed orlov option [ 157.007356][T13405] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 157.229530][T13487] hub 2-0:1.0: USB hub found [ 157.234223][T13487] hub 2-0:1.0: 8 ports detected [ 157.323318][T13492] loop3: detected capacity change from 0 to 1024 [ 157.330265][T13492] EXT4-fs: Ignoring removed i_version option [ 157.408996][T13501] loop3: detected capacity change from 0 to 1024 [ 157.416107][T13501] EXT4-fs: Ignoring removed i_version option [ 157.474106][T13515] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 157.529872][T13519] hub 2-0:1.0: USB hub found [ 157.534663][T13519] hub 2-0:1.0: 8 ports detected [ 157.580029][T13521] loop3: detected capacity change from 0 to 1024 [ 157.587023][T13521] EXT4-fs: Ignoring removed i_version option [ 157.676379][T13536] Cannot find set identified by id 0 to match [ 157.811106][T13550] loop4: detected capacity change from 0 to 2048 [ 157.829469][T13555] hub 2-0:1.0: USB hub found [ 157.840253][T13555] hub 2-0:1.0: 8 ports detected [ 157.846273][T13552] loop2: detected capacity change from 0 to 1024 [ 157.860468][T13552] EXT4-fs: Ignoring removed i_version option [ 157.892878][T13550] Alternate GPT is invalid, using primary GPT. [ 157.899542][T13550] loop4: p2 p3 p7 [ 158.079694][T13572] loop4: detected capacity change from 0 to 512 [ 158.098205][T13572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.127286][T13572] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 158.135320][T13572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 158.156142][T13572] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 158.165738][T13572] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 158.252934][T13572] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1573: dx entry: limit 65535 != root limit 120 [ 158.265175][T13572] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1573: Corrupt directory, running e2fsck is recommended [ 158.281607][T13572] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1573: path /172/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 158.402780][T13617] 9pnet_fd: Insufficient options for proto=fd [ 158.446508][T13620] macsec1: entered promiscuous mode [ 158.451802][T13620] macvlan0: entered promiscuous mode [ 158.471810][T13620] macvlan0: left promiscuous mode [ 158.499825][T13621] hub 2-0:1.0: USB hub found [ 158.504896][T13621] hub 2-0:1.0: 8 ports detected [ 158.519086][T13629] loop0: detected capacity change from 0 to 512 [ 158.525713][T13629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.544312][T13629] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 158.552336][T13629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 158.562218][T13629] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 158.571878][T13629] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 158.585145][T13629] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1584: dx entry: limit 65535 != root limit 120 [ 158.597507][T13629] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1584: Corrupt directory, running e2fsck is recommended [ 158.610634][T13629] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1584: path /132/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 158.639729][T13639] loop3: detected capacity change from 0 to 512 [ 158.646592][T13639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.654497][T13639] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.662464][T13639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 158.670895][T13639] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 158.680488][T13639] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 158.689030][T13637] loop2: detected capacity change from 0 to 512 [ 158.691517][T13639] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1588: dx entry: limit 65535 != root limit 120 [ 158.696055][T13637] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.707618][T13639] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1588: Corrupt directory, running e2fsck is recommended [ 158.727386][T13639] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1588: path /206/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 158.738593][T13637] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.765322][T13637] xt_bpf: check failed: parse error [ 158.773931][T13646] loop3: detected capacity change from 0 to 512 [ 158.780584][T13646] EXT4-fs: Ignoring removed orlov option [ 158.786811][T13646] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 158.865900][T13654] loop1: detected capacity change from 0 to 512 [ 158.872947][T13654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.880927][T13654] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 158.889010][T13654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 158.898845][T13654] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 158.908703][T13654] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 158.931748][T13654] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1593: dx entry: limit 65535 != root limit 120 [ 158.943971][T13654] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1593: Corrupt directory, running e2fsck is recommended [ 158.957190][T13654] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1593: path /206/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 158.978783][ T24] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 158.986856][ T24] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.036909][T13662] loop2: detected capacity change from 0 to 2048 [ 159.093042][T13662] Alternate GPT is invalid, using primary GPT. [ 159.099544][T13662] loop2: p2 p3 p7 [ 159.106989][ T29] kauditd_printk_skb: 1196 callbacks suppressed [ 159.107023][ T29] audit: type=1326 audit(1727394232.543:19780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.137847][ T29] audit: type=1326 audit(1727394232.543:19781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.138507][T13662] 9pnet_fd: Insufficient options for proto=fd [ 159.161488][ T29] audit: type=1326 audit(1727394232.543:19782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.161525][ T29] audit: type=1326 audit(1727394232.543:19783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.215127][ T29] audit: type=1326 audit(1727394232.543:19784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.222394][T13672] loop3: detected capacity change from 0 to 512 [ 159.238825][ T29] audit: type=1326 audit(1727394232.543:19785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.245513][T13672] EXT4-fs: Ignoring removed orlov option [ 159.268650][ T29] audit: type=1326 audit(1727394232.543:19786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.268688][ T29] audit: type=1326 audit(1727394232.543:19787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.268719][ T29] audit: type=1326 audit(1727394232.543:19788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.274815][T13672] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 159.298029][ T29] audit: type=1326 audit(1727394232.543:19789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13668 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4fb04adf39 code=0x7ffc0000 [ 159.336437][T13676] netlink: 'syz.4.1603': attribute type 1 has an invalid length. [ 159.387376][T13676] __nla_validate_parse: 9 callbacks suppressed [ 159.387391][T13676] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1603'. [ 159.415336][T13679] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 159.423433][T13679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1600'. [ 159.438877][T13681] loop3: detected capacity change from 0 to 2048 [ 159.472615][T13681] Alternate GPT is invalid, using primary GPT. [ 159.479239][T13681] loop3: p2 p3 p7 [ 159.569404][T13695] loop3: detected capacity change from 0 to 512 [ 159.586198][T13695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.606492][T13695] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 159.614499][T13695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 159.632896][T13695] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 159.642426][T13695] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 159.652597][T13695] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1611: dx entry: limit 65535 != root limit 120 [ 159.664807][T13695] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1611: Corrupt directory, running e2fsck is recommended [ 159.677891][T13695] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1611: path /216/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 159.739749][T13701] hub 2-0:1.0: USB hub found [ 159.744527][T13701] hub 2-0:1.0: 8 ports detected [ 159.814190][T13708] netlink: 'syz.1.1616': attribute type 1 has an invalid length. [ 159.822178][T13708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1616'. [ 159.880322][T13711] loop2: detected capacity change from 0 to 512 [ 159.887029][T13711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.898489][T13711] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 159.906616][T13711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 159.914734][T13711] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 159.924251][T13711] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 159.936648][T13711] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1617: dx entry: limit 65535 != root limit 120 [ 159.938119][T13714] 9pnet_fd: Insufficient options for proto=fd [ 159.949162][T13711] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1617: Corrupt directory, running e2fsck is recommended [ 159.956740][T13711] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1617: path /211/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 160.016640][T13717] loop1: detected capacity change from 0 to 2048 [ 160.072314][T13717] Alternate GPT is invalid, using primary GPT. [ 160.078815][T13717] loop1: p2 p3 p7 [ 160.213589][T13719] FAULT_INJECTION: forcing a failure. [ 160.213589][T13719] name failslab, interval 1, probability 0, space 0, times 0 [ 160.226471][T13719] CPU: 1 UID: 0 PID: 13719 Comm: syz.1.1620 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 160.238401][T13719] Tainted: [W]=WARN [ 160.242248][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.252353][T13719] Call Trace: [ 160.255673][T13719] [ 160.258614][T13719] dump_stack_lvl+0xf2/0x150 [ 160.263260][T13719] dump_stack+0x15/0x20 [ 160.267425][T13719] should_fail_ex+0x223/0x230 [ 160.272123][T13719] ? shmem_alloc_inode+0x34/0x50 [ 160.277162][T13719] should_failslab+0x8f/0xb0 [ 160.281793][T13719] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 160.287573][T13719] shmem_alloc_inode+0x34/0x50 [ 160.292385][T13719] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 160.297969][T13719] alloc_inode+0x3c/0x160 [ 160.302428][T13719] new_inode+0x1e/0x100 [ 160.306607][T13719] shmem_get_inode+0x24e/0x710 [ 160.311411][T13719] __shmem_file_setup+0x127/0x1f0 [ 160.316622][T13719] shmem_file_setup+0x3b/0x50 [ 160.321351][T13719] __se_sys_memfd_create+0x31d/0x5c0 [ 160.326683][T13719] __x64_sys_memfd_create+0x31/0x40 [ 160.331921][T13719] x64_sys_call+0x2891/0x2d60 [ 160.336726][T13719] do_syscall_64+0xc9/0x1c0 [ 160.341317][T13719] ? clear_bhb_loop+0x55/0xb0 [ 160.346017][T13719] ? clear_bhb_loop+0x55/0xb0 [ 160.350810][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.356734][T13719] RIP: 0033:0x7f5d8773df39 [ 160.361248][T13719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.380975][T13719] RSP: 002b:00007f5d863b0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 160.389477][T13719] RAX: ffffffffffffffda RBX: 0000000000000220 RCX: 00007f5d8773df39 [ 160.397507][T13719] RDX: 00007f5d863b0ef0 RSI: 0000000000000000 RDI: 00007f5d877b0a09 [ 160.405499][T13719] RBP: 0000000020000b00 R08: 00007f5d863b0bb7 R09: 00007f5d863b0e40 [ 160.413468][T13719] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200000c0 [ 160.421674][T13719] R13: 00007f5d863b0ef0 R14: 00007f5d863b0eb0 R15: 0000000020000180 [ 160.429678][T13719] [ 160.503254][T13722] Cannot find set identified by id 0 to match [ 160.588048][T13738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1627'. [ 160.614708][T13742] loop4: detected capacity change from 0 to 512 [ 160.638520][T13742] EXT4-fs (loop4): blocks per group (33) and clusters per group (32768) inconsistent [ 160.701234][T13746] 9pnet_fd: Insufficient options for proto=fd [ 160.752240][T13751] loop2: detected capacity change from 0 to 512 [ 160.760080][T13754] net_ratelimit: 291 callbacks suppressed [ 160.760099][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.766859][T13751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.783073][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.791604][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.800741][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.809033][T13754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.818615][T13753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.827134][T13751] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 160.835433][T13751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 160.843677][T13751] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 160.853269][T13751] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 160.883452][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.893813][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.903126][T13761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.911495][T13751] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1631: dx entry: limit 65535 != root limit 120 [ 160.923783][T13751] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1631: Corrupt directory, running e2fsck is recommended [ 160.937118][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.946045][T13751] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1631: path /214/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 161.192977][T13775] sctp: [Deprecated]: syz.4.1640 (pid 13775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.192977][T13775] Use struct sctp_sack_info instead [ 161.302532][T13781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1643'. [ 161.533011][ C1] hrtimer: interrupt took 37288 ns [ 161.574781][T13798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'. [ 161.622747][T13839] hub 2-0:1.0: USB hub found [ 161.627667][T13839] hub 2-0:1.0: 8 ports detected [ 161.828170][T13852] Cannot find set identified by id 0 to match [ 161.886848][T13855] netlink: 'syz.3.1659': attribute type 8 has an invalid length. [ 161.947211][ T7420] EXT4-fs unmount: 33 callbacks suppressed [ 161.947231][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.236748][ T3344] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 162.256137][ T3344] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.269100][T13880] loop4: detected capacity change from 0 to 2048 [ 162.324258][T13880] Alternate GPT is invalid, using primary GPT. [ 162.330749][T13880] loop4: p2 p3 p7 [ 162.462941][T13892] loop0: detected capacity change from 0 to 512 [ 162.470835][T13892] EXT4-fs (loop0): blocks per group (33) and clusters per group (32768) inconsistent [ 162.598199][T13897] netlink: 'syz.0.1676': attribute type 1 has an invalid length. [ 162.606075][T13897] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1676'. [ 162.714859][T13940] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 162.722753][T13940] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1681'. [ 162.939593][T13954] loop3: detected capacity change from 0 to 256 [ 162.946340][T13954] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.069541][T13965] loop1: detected capacity change from 0 to 128 [ 163.086781][T13965] syz.1.1691: attempt to access beyond end of device [ 163.086781][T13965] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 163.100912][T13958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.133249][T13959] Cannot find set identified by id 0 to match [ 163.139652][T13958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.300629][ T3340] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 163.326793][ T3340] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.338855][T13976] loop3: detected capacity change from 0 to 2048 [ 163.373207][T13976] Alternate GPT is invalid, using primary GPT. [ 163.379841][T13976] loop3: p2 p3 p7 [ 163.443704][T13980] loop1: detected capacity change from 0 to 512 [ 163.467319][T13980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 163.506175][T13980] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1695: bg 0: block 264: padding at end of block bitmap is not set [ 163.520747][T13980] EXT4-fs (loop1): Remounting filesystem read-only [ 163.527475][T13980] EXT4-fs (loop1): 1 truncate cleaned up [ 163.533590][T13980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.545714][T13980] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 163.552926][T13980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.696102][T14024] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 163.704035][T14024] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1699'. [ 163.804374][T14029] loop2: detected capacity change from 0 to 512 [ 163.805998][T14030] loop0: detected capacity change from 0 to 512 [ 163.811578][T14029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.818849][T14030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.832764][T14030] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 163.840864][T14030] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 163.842154][T14029] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 163.849332][T14030] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 163.856845][T14029] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 163.866306][T14030] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 163.883115][T14029] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 163.883581][T14030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.892615][T14029] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 163.893093][T14029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.918577][T14030] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1702: dx entry: limit 65535 != root limit 120 [ 163.930613][T14029] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1701: dx entry: limit 65535 != root limit 120 [ 163.937319][T14030] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1702: Corrupt directory, running e2fsck is recommended [ 163.949391][T14029] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1701: Corrupt directory, running e2fsck is recommended [ 163.962432][T14030] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1702: path /157/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 163.975246][T14029] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.1701: path /219/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 164.015769][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.036603][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.110875][T14040] hub 2-0:1.0: USB hub found [ 164.115715][T14040] hub 2-0:1.0: 8 ports detected [ 164.185033][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1709'. [ 164.192648][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 164.192665][ T29] audit: type=1326 audit(1727394237.613:20223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.223977][ T29] audit: type=1326 audit(1727394237.613:20224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.250784][ T29] audit: type=1326 audit(1727394237.633:20225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.276949][ T29] audit: type=1326 audit(1727394237.683:20226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.300712][ T29] audit: type=1326 audit(1727394237.703:20227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.324602][ T29] audit: type=1326 audit(1727394237.703:20228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.348297][ T29] audit: type=1326 audit(1727394237.703:20229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.348517][T14087] netlink: 'syz.1.1712': attribute type 1 has an invalid length. [ 164.372123][ T29] audit: type=1326 audit(1727394237.703:20230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.403689][ T29] audit: type=1326 audit(1727394237.703:20231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.427369][ T29] audit: type=1326 audit(1727394237.703:20232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14033 comm="syz.0.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0d3ddf39 code=0x7ffc0000 [ 164.536267][T14092] __nla_validate_parse: 1 callbacks suppressed [ 164.536288][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'. [ 164.578171][T14103] netlink: 65047 bytes leftover after parsing attributes in process `+}[@'. [ 164.629420][ C1] sd 0:0:1:0: [sda] tag#7062 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 164.639919][ C1] sd 0:0:1:0: [sda] tag#7062 CDB: Read(6) 08 00 00 00 00 00 [ 164.706400][T14126] 9pnet_fd: Insufficient options for proto=fd [ 164.760196][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 164.867518][T14147] loop3: detected capacity change from 0 to 512 [ 164.897039][T14147] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.924974][T14147] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 164.932968][T14147] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 164.942069][T14152] loop0: detected capacity change from 0 to 512 [ 164.948568][T14147] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 164.951019][T14152] EXT4-fs: Ignoring removed orlov option [ 164.958225][T14147] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 164.967111][T14152] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 164.973377][T14147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.001370][T14147] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1738: dx entry: limit 65535 != root limit 120 [ 165.013621][T14147] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1738: Corrupt directory, running e2fsck is recommended [ 165.027040][T14147] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1738: path /250/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 165.038055][T14145] loop2: detected capacity change from 0 to 512 [ 165.064260][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.069369][T14157] 9pnet_fd: Insufficient options for proto=fd [ 165.074337][T14145] EXT4-fs (loop2): 1 truncate cleaned up [ 165.085596][T14145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.177606][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.196453][T14159] FAULT_INJECTION: forcing a failure. [ 165.196453][T14159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.209855][T14159] CPU: 0 UID: 0 PID: 14159 Comm: syz.0.1743 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 165.221792][T14159] Tainted: [W]=WARN [ 165.225658][T14159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.235883][T14159] Call Trace: [ 165.239186][T14159] [ 165.242145][T14159] dump_stack_lvl+0xf2/0x150 [ 165.246879][T14159] dump_stack+0x15/0x20 [ 165.251120][T14159] should_fail_ex+0x223/0x230 [ 165.255951][T14159] should_fail+0xb/0x10 [ 165.260151][T14159] should_fail_usercopy+0x1a/0x20 [ 165.265225][T14159] _copy_from_iter+0xd3/0xd20 [ 165.269962][T14159] ? __check_object_size+0x2f8/0x520 [ 165.275382][T14159] ? 0xffffffff81000000 [ 165.279555][T14159] ? __check_object_size+0x364/0x520 [ 165.284907][T14159] netlink_sendmsg+0x460/0x6e0 [ 165.289792][T14159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.295106][T14159] __sock_sendmsg+0x140/0x180 [ 165.299851][T14159] ____sys_sendmsg+0x312/0x410 [ 165.304717][T14159] __sys_sendmmsg+0x259/0x500 [ 165.309529][T14159] __x64_sys_sendmmsg+0x57/0x70 [ 165.314415][T14159] x64_sys_call+0xa49/0x2d60 [ 165.319090][T14159] do_syscall_64+0xc9/0x1c0 [ 165.323682][T14159] ? clear_bhb_loop+0x55/0xb0 [ 165.328397][T14159] ? clear_bhb_loop+0x55/0xb0 [ 165.333225][T14159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.339199][T14159] RIP: 0033:0x7fef0d3ddf39 [ 165.344311][T14159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.363966][T14159] RSP: 002b:00007fef0c051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.372579][T14159] RAX: ffffffffffffffda RBX: 00007fef0d595f80 RCX: 00007fef0d3ddf39 [ 165.380682][T14159] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 165.388747][T14159] RBP: 00007fef0c051090 R08: 0000000000000000 R09: 0000000000000000 [ 165.396834][T14159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.404944][T14159] R13: 0000000000000000 R14: 00007fef0d595f80 R15: 00007ffe92b87448 [ 165.412947][T14159] [ 165.486189][T14179] loop0: detected capacity change from 0 to 512 [ 165.499132][T14179] EXT4-fs: Ignoring removed orlov option [ 165.506785][T14179] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 165.625083][T14198] loop0: detected capacity change from 0 to 512 [ 165.652503][T14198] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.677216][T14198] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.787207][T14245] loop1: detected capacity change from 0 to 512 [ 165.794836][T14245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.806180][T14245] EXT4-fs (loop1): 1 truncate cleaned up [ 165.812411][T14245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.827185][T14245] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1766: corrupted in-inode xattr: overlapping e_value [ 165.841473][T14245] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1772: inode #15: comm syz.1.1766: unable to update i_inline_off [ 165.854677][T14254] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.854773][T14245] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1766: corrupted in-inode xattr: overlapping e_value [ 165.876736][T14245] EXT4-fs error (device loop1): ext4_xattr_ibody_list:797: inode #15: comm syz.1.1766: corrupted in-inode xattr: overlapping e_value [ 165.887482][T14255] netlink: 'syz.4.1769': attribute type 8 has an invalid length. [ 165.944436][T14257] FAULT_INJECTION: forcing a failure. [ 165.944436][T14257] name failslab, interval 1, probability 0, space 0, times 0 [ 165.957279][T14257] CPU: 0 UID: 0 PID: 14257 Comm: syz.1.1766 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 165.969272][T14257] Tainted: [W]=WARN [ 165.973078][T14257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.983239][T14257] Call Trace: [ 165.986544][T14257] [ 165.989507][T14257] dump_stack_lvl+0xf2/0x150 [ 165.994128][T14257] dump_stack+0x15/0x20 [ 165.998303][T14257] should_fail_ex+0x223/0x230 [ 166.003043][T14257] ? security_file_alloc+0x32/0x100 [ 166.008366][T14257] should_failslab+0x8f/0xb0 [ 166.012982][T14257] kmem_cache_alloc_noprof+0x4c/0x290 [ 166.018417][T14257] security_file_alloc+0x32/0x100 [ 166.023496][T14257] alloc_empty_file+0x121/0x2f0 [ 166.028364][T14257] path_openat+0x6a/0x1fa0 [ 166.032847][T14257] ? _parse_integer+0x27/0x30 [ 166.037813][T14257] ? kstrtoull+0x110/0x140 [ 166.042251][T14257] ? kstrtouint+0x77/0xc0 [ 166.046662][T14257] do_filp_open+0xf7/0x200 [ 166.051200][T14257] do_sys_openat2+0xab/0x120 [ 166.055841][T14257] __x64_sys_openat+0xf3/0x120 [ 166.060625][T14257] x64_sys_call+0x1025/0x2d60 [ 166.065320][T14257] do_syscall_64+0xc9/0x1c0 [ 166.069846][T14257] ? clear_bhb_loop+0x55/0xb0 [ 166.074573][T14257] ? clear_bhb_loop+0x55/0xb0 [ 166.079308][T14257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.085314][T14257] RIP: 0033:0x7f5d8773df39 [ 166.089760][T14257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.109605][T14257] RSP: 002b:00007f5d86390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.118069][T14257] RAX: ffffffffffffffda RBX: 00007f5d878f6058 RCX: 00007f5d8773df39 [ 166.126050][T14257] RDX: 0000000000101200 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 166.134030][T14257] RBP: 00007f5d86390090 R08: 0000000000000000 R09: 0000000000000000 [ 166.142011][T14257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.150058][T14257] R13: 0000000000000000 R14: 00007f5d878f6058 R15: 00007ffc759630e8 [ 166.158147][T14257] [ 166.164309][ T3341] net_ratelimit: 964 callbacks suppressed [ 166.164327][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.214241][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.229133][T14254] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1761'. [ 166.238231][T14254] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 166.245955][T14254] 0ªX¹¦Dö»: entered allmulticast mode [ 166.252636][T14262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'. [ 166.262172][T14262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1770'. [ 166.296871][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.301286][T14266] hub 2-0:1.0: USB hub found [ 166.309890][T14266] hub 2-0:1.0: 8 ports detected [ 166.342431][T14270] loop3: detected capacity change from 0 to 1024 [ 166.358293][T14270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.472212][T14276] loop2: detected capacity change from 0 to 512 [ 166.482737][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.584924][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.608119][T14276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.620915][T14276] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.948076][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.957077][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.977692][T14285] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 166.985577][T14285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1776'. [ 167.021636][T14290] loop3: detected capacity change from 0 to 512 [ 167.028426][T14290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.030723][T14292] loop4: detected capacity change from 0 to 128 [ 167.036484][T14290] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 167.049296][T14290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 167.055711][T14292] syz.4.1780: attempt to access beyond end of device [ 167.055711][T14292] loop4: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 167.057430][T14290] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 167.080455][T14290] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 167.090199][T14290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.104867][T14290] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1779: dx entry: limit 65535 != root limit 120 [ 167.117060][T14290] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1779: Corrupt directory, running e2fsck is recommended [ 167.125110][T14296] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 167.130014][T14290] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1779: path /259/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 167.137751][T14296] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1781'. [ 167.181254][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.214687][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.259516][T14303] hub 2-0:1.0: USB hub found [ 167.264348][T14303] hub 2-0:1.0: 8 ports detected [ 167.300841][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 167.332717][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.344308][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.345048][ T3340] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 167.364643][ T3340] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.439287][T14320] netlink: 'syz.2.1789': attribute type 8 has an invalid length. [ 167.456716][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.482960][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.502485][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.511185][T14325] loop1: detected capacity change from 0 to 512 [ 167.517607][T14323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.518324][T14325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.535296][T14325] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 167.543264][T14325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 167.559041][T14325] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 167.568562][T14325] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 167.596466][T14325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.628653][T14325] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1793: dx entry: limit 65535 != root limit 120 [ 167.640885][T14325] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1793: Corrupt directory, running e2fsck is recommended [ 167.665627][T14325] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1793: path /247/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 167.726354][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.757382][T14332] loop0: detected capacity change from 0 to 512 [ 167.764501][T14332] EXT4-fs: Ignoring removed orlov option [ 167.770866][T14332] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 167.782990][T14334] loop1: detected capacity change from 0 to 128 [ 167.802212][T14334] syz.1.1795: attempt to access beyond end of device [ 167.802212][T14334] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 167.825233][T14337] 9pnet_fd: Insufficient options for proto=fd [ 167.879471][T14339] hub 2-0:1.0: USB hub found [ 167.884176][T14339] hub 2-0:1.0: 8 ports detected [ 167.935085][ T35] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 167.943443][ T35] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.147905][T14360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1808'. [ 168.152183][T14361] loop3: detected capacity change from 0 to 512 [ 168.195556][T14365] loop1: detected capacity change from 0 to 1024 [ 168.202458][T14361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.209350][T14365] EXT4-fs: Ignoring removed i_version option [ 168.220300][T14361] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 168.228305][T14361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 168.236428][T14361] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 168.245930][T14361] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 168.255337][T14361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 168.274457][T14361] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1807: dx entry: limit 65535 != root limit 120 [ 168.286410][T14365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.286645][T14361] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1807: Corrupt directory, running e2fsck is recommended [ 168.312033][T14361] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1807: path /263/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 168.361177][T14378] loop2: detected capacity change from 0 to 128 [ 168.411564][ T7419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.513040][T14378] syz.2.1811: attempt to access beyond end of device [ 168.513040][T14378] loop2: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 168.725575][T14392] loop0: detected capacity change from 0 to 512 [ 168.733648][T14392] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm +}[@: iget: bogus i_mode (0) [ 168.744664][T14392] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm +}[@: couldn't read orphan inode 17 (err -117) [ 168.756707][T14392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.772805][T14392] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 7: invalid block bitmap [ 168.795638][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.923531][T14413] 9pnet_fd: Insufficient options for proto=fd [ 168.940292][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.987348][T14417] loop2: detected capacity change from 0 to 1024 [ 168.994096][T14417] EXT4-fs: Ignoring removed i_version option [ 169.052003][T14425] hub 2-0:1.0: USB hub found [ 169.056886][T14425] hub 2-0:1.0: 8 ports detected [ 169.069066][T14417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.108122][T14440] loop0: detected capacity change from 0 to 2048 [ 169.117277][ T7420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.162802][T14445] loop2: detected capacity change from 0 to 2048 [ 169.211448][ T29] kauditd_printk_skb: 7614 callbacks suppressed [ 169.211463][ T29] audit: type=1400 audit(1727394242.643:27847): avc: denied { unmount } for pid=7415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 169.233193][T14445] Alternate GPT is invalid, using primary GPT. [ 169.244386][T14445] loop2: p2 p3 p7 [ 169.258578][ T3340] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 169.268622][ T3340] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.290734][T14459] loop0: detected capacity change from 0 to 512 [ 169.292456][T14460] netlink: 'syz.4.1839': attribute type 8 has an invalid length. [ 169.297601][T14459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.334313][T14459] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 169.342431][T14459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 169.367175][T14459] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 169.376770][T14459] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 169.387049][T14459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 169.408374][T14459] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1841: dx entry: limit 65535 != root limit 120 [ 169.420598][T14459] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1841: Corrupt directory, running e2fsck is recommended [ 169.442072][T14459] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1841: path /195/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 169.468566][T14469] loop3: detected capacity change from 0 to 1024 [ 169.475143][T14469] EXT4-fs: Ignoring removed i_version option [ 169.498554][T14469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.524276][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.527809][T14479] loop1: detected capacity change from 0 to 512 [ 169.542662][T14477] hub 2-0:1.0: USB hub found [ 169.547602][T14477] hub 2-0:1.0: 8 ports detected [ 169.552685][T14479] EXT4-fs: Ignoring removed orlov option [ 169.559985][T14479] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 169.619234][ T29] audit: type=1326 audit(1727394243.043:27848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.642928][ T29] audit: type=1326 audit(1727394243.043:27849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.666501][ T29] audit: type=1326 audit(1727394243.043:27850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.690256][ T29] audit: type=1326 audit(1727394243.043:27851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.691409][ T24] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 169.715293][ T29] audit: type=1326 audit(1727394243.043:27852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.715329][ T29] audit: type=1326 audit(1727394243.043:27853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.715360][ T29] audit: type=1326 audit(1727394243.043:27854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.793509][ T29] audit: type=1326 audit(1727394243.053:27855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 169.796804][ T24] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.817100][ T29] audit: type=1326 audit(1727394243.053:27856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14486 comm="syz.2.1850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f3e5507df39 code=0x7ffc0000 [ 170.033376][T14549] __nla_validate_parse: 4 callbacks suppressed [ 170.033391][T14549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'. [ 170.035050][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.145895][T14571] loop0: detected capacity change from 0 to 512 [ 170.152748][T14571] EXT4-fs: Ignoring removed orlov option [ 170.159115][T14571] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 170.184599][T14569] hub 2-0:1.0: USB hub found [ 170.198520][T14569] hub 2-0:1.0: 8 ports detected [ 170.249512][T14589] 9pnet_fd: Insufficient options for proto=fd [ 170.355800][ T24] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 170.357703][T14607] loop0: detected capacity change from 0 to 512 [ 170.378522][ T24] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.393921][T14607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.409450][T14607] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 170.435273][T14607] EXT4-fs (loop0): 1 truncate cleaned up [ 170.444164][T14607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.467439][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1867'. [ 170.612011][T14662] loop3: detected capacity change from 0 to 512 [ 170.640788][T14662] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm +}[@: iget: bogus i_mode (0) [ 170.658158][T14662] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm +}[@: couldn't read orphan inode 17 (err -117) [ 170.673489][T14662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.689759][T14662] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 7: invalid block bitmap [ 170.726202][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.847580][T14711] hub 2-0:1.0: USB hub found [ 170.852295][T14711] hub 2-0:1.0: 8 ports detected [ 170.876654][T14716] 9pnet_fd: Insufficient options for proto=fd [ 170.929521][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1878'. [ 170.956465][T14564] ================================================================== [ 170.964588][T14564] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 170.972312][T14564] [ 170.974627][T14564] write to 0xffff888104d62758 of 8 bytes by task 14566 on cpu 0: [ 170.982337][T14564] fasync_remove_entry+0xd2/0x130 [ 170.987456][T14564] fasync_helper+0x96/0xc0 [ 170.991896][T14564] sock_fasync+0x5a/0xc0 [ 170.996183][T14564] __fput+0x664/0x6d0 [ 171.000191][T14564] ____fput+0x1c/0x30 [ 171.004205][T14564] task_work_run+0x13a/0x1a0 [ 171.008822][T14564] syscall_exit_to_user_mode+0xbe/0x130 [ 171.014495][T14564] do_syscall_64+0xd6/0x1c0 [ 171.019045][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.024974][T14564] [ 171.027348][T14564] read to 0xffff888104d62758 of 8 bytes by task 14564 on cpu 1: [ 171.035000][T14564] sock_wake_async+0x2a/0x120 [ 171.035646][T14736] loop3: detected capacity change from 0 to 512 [ 171.039682][T14564] unix_write_space+0x135/0x140 [ 171.039714][T14564] sock_wfree+0x147/0x3b0 [ 171.048653][T14736] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.1880: iget: bogus i_mode (0) [ 171.050789][T14564] unix_destruct_scm+0xc5/0xf0 [ 171.055194][T14736] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1880: couldn't read orphan inode 17 (err -117) [ 171.066293][T14564] skb_release_head_state+0xbb/0x1b0 [ 171.066330][T14564] __kfree_skb+0x16/0x150 [ 171.066357][T14564] sk_skb_reason_drop+0xba/0x290 [ 171.071646][T14736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.082993][T14564] unix_release_sock+0x603/0x750 [ 171.083022][T14564] unix_release+0x57/0x80 [ 171.118847][T14564] sock_close+0x68/0x150 [ 171.123132][T14564] __fput+0x17a/0x6d0 [ 171.127208][T14564] ____fput+0x1c/0x30 [ 171.131193][T14564] task_work_run+0x13a/0x1a0 [ 171.135807][T14564] syscall_exit_to_user_mode+0xbe/0x130 [ 171.141368][T14564] do_syscall_64+0xd6/0x1c0 [ 171.145887][T14564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.151791][T14564] [ 171.154111][T14564] value changed: 0xffff888115bf3330 -> 0x0000000000000000 [ 171.161212][T14564] [ 171.163527][T14564] Reported by Kernel Concurrency Sanitizer on: [ 171.169670][T14564] CPU: 1 UID: 0 PID: 14564 Comm: syz.4.1857 Tainted: G W 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 171.181568][T14564] Tainted: [W]=WARN [ 171.185362][T14564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.195425][T14564] ================================================================== [ 171.206546][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.216559][T14738] netlink: 'syz.2.1877': attribute type 8 has an invalid length. [ 171.217984][ T7422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.265546][T14741] loop0: detected capacity change from 0 to 1024 [ 171.272247][T14741] EXT4-fs: Ignoring removed i_version option [ 171.288369][T14741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.301093][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1879'. [ 171.317810][ T7415] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.417935][ T3343] net_ratelimit: 70 callbacks suppressed [ 171.417956][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.497193][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.736933][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.457122][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.464410][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.537192][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.497072][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.576881][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.376887][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.387150][ T3340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.616894][ T24] net_ratelimit: 7 callbacks suppressed [ 176.616908][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.696855][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.656969][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.736869][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.536856][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.696826][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.705036][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.776862][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.736973][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.816833][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog