last executing test programs: 9.65830438s ago: executing program 2 (id=417): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffe01}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x2c}}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x88}}, 0x40000) 8.694248489s ago: executing program 2 (id=423): r0 = syz_usb_connect$hid(0x0, 0xfced, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.223924802s ago: executing program 2 (id=444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x7c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x7c}}, 0x40000) 4.166184949s ago: executing program 2 (id=453): r0 = gettid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000180)='./control\x00', 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="26643dfdeae340", @ANYRESHEX=r1, @ANYBLOB="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", @ANYRES16=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES8=r0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x28, 0x1, 0x2004000, 0x0, 0x0, 0xfffffffe, 0x2}}, 0x5d) syz_fuse_handle_req(r1, &(0x7f0000004e80)="791b73ae977429c2dba7b4fb8896e9e4d14e0fb279ae68edbe84e7254ddbf068c1c897ce2467ce798f281b2edb92b621d6f84f4a7cf8b5e93eb85d8d27f9b65c3a4b13ced482a489157a00f2a78dff41eda5dbe6b12f833c6d383711ab68976e6cc95aade7332a07ca7b7e2fda00d413a2bb41c6ee2d5df412e018900106189693d44f7832292b43f5a6f2561b5cfdc88e543d1dc6f0161f25013ed3afd00bff85bc6591ee4952d917fb2d565187c7a1f3a5ce73bbea4d4a72554fffe9f9fca1f85f4029ded5ce54360282ed71802fc19464271340bfc92b4dae3bcfc64bc41ca249a188ae888fc396b6db6513cde4363985d20c4ec4251f02243b40645268545e1b9358a4724b7d636ba8caab5e9a0a4637a01943973d33d79a696e179cd221ee7e7ee6dc2a84f410c600f94913eecbbc406f3d951f64288f867a11935c0d3420a62209f4b29eb36ce29cf7ad6fab6caac399e2cf90cab8e700cfb09ea2d9317dbebb3d89ea7d28eea4374ac0be3b9fd2674ce2bf1bafd4730247fb73ce5534ba72b269b30340befd07ab9d696f35e5f7a07c56a73fb91682e6a8f97cf595659de077bca25282f6317b7c7b11619b3384c32b9917972f7bde617aff04f082e475978a69808dfbecf2bbe2e9e03466f35fffb478b0980cde22f84a0b7a6fe1d079c8c3cadf0bfce1db94ef0e92b95432ddeee53b06e68aa31b7bc204ef62fa8b5e3dfa129629120028dbc8b8e87162184aec827ee246708641c18f7691649e103322bcb88f2a28720195ef2ebc23cda4cc429f6ed963b2a83b05088b8b2f002534b9ff2633b6d6e472661dc96a67d3247d46de2928cfc06825391f3638df6725871d713057f953a5609cfc58478886aa808d7135ecf2d83badd5c98526b127fd686936714a8d943ffd8e31228e29f02b2d0abd2e6169ed7f765a95d39720cb70310b6f50d94bc9ce9183d94f867b36820b79c628ec268eef2e698d28e3a9cf08fcde7013cc429ef9f75c9055ffd90424a0b65d7897dd810ecd0a4be4eff9cafac7af78e6a2dcdb0284154f666778386f25b6e589bbf52a21e21a679ede9eb8d9ef427fd48559c0a29e49d1138cb704ee302cb0b6fce474855577dbb1b2e5135b788a166053b19aa788c3ae01f7c02532745b36fc78585576213c65b67a813f70ee6dcb4ef66827485e176a1b5970663aab06c64eea58d5d909ada7811cd3bb323f109e839c734c23d3cd03cb94d2eaae5d2837b5c7942c2a3fca0a14f419aa7529fe734d5f70e6e902adce1398147ce43ed7a7cc90afb523c678a0c47e9c5e10d24f13b1e0ff1d596213524243428c7633cbed3ee1a304b0cf603378f25fadb340c6b64f13694e7c9365b34de71f49a26f49c1302e7b1612fc3e580423550dbf97521f117cd89c7e1578a8b55324dec19a440520265bf35ee92c0fcc5bfcddd54f9c7388db3deb5c9d5e9579ff7ad13c9d1adb976bb5d49e041949d6040e9b7985bb963044f8d066403860bce618d8725b2c03c7f96090bda0d3ce2971d8919ffb382615077439310b104bf76fceb31d5ed3a9d134810b43c3211b5a7d53fbc477a6185c77fd58fdb5d1668ff37eeb051fc28e81c90cf98de56344952f32e31ed119e1c6dff0062ec02ff8c738c1be76b8c86c4db1111822ee0a395a43993ab09d3dfeda826794288ae3420b2b52c1db56b1793c81a067429281498a22ab671393a5fb44383549644cccb87b01790a2d41b2fba242eba4fc525debdaff0e1cb10ba6ba0cbdc3ba14a12d60e72e13813bc95481807a695712d9ab4c3fd51f9510cc0994df6bef2a84e1c27c9547917fe94f15c55fae6a2d1ac52a877923cf83cd1b0e2ea7da0aaecbfb956e48b008333c30e3342e0ec6069e718c1c50b5b1139f22d313a5a3d46314d2f03a36a1a948b755e0c2e10a32961c4c73af2a9528a8a35fdea72e2af523aa8c9535a71181412cf1285c1540eb83ad749083187406d964903522e23363b4825093653b555565587a0715591e3567286b25e573497732ace3831763b5d95a7739582692caa9d3e6b7648be93257409dd631655edee78500ecf53415afcdc43b10954cdd5c0c5ac43bca5ac3d8645f892f57e0ac94abee342cb5005b1329d5a7a9217184ef7bf25a89b3724bbc73e7808c41f2df838d24548add06628097c2ba262bed90826295c8dbba48768370a0fae5153b6ef5f545c0b00565d8c8fde7c18079786e986c71f217dd3e5c23f11cab09539a929ebec8ca8e50f4b006aa451c171a4270759472ade327f3390197334c41e2bc95337f7f9754c8699e1ef68e337be1edaea5676445bd3b7612e3fe9328c3d56c3ab6acfbc7e88858a00d1152c4e5d54d6a314d79349194fd1c43c32054561fbcd614e6f46090a01c1ccd58677239b61d5541fc9591808c544be4c11c1e9955b2a4e6c66e4a8ccfc003e78b54f56f3cc158dccaeda4c27b77fd22a95aa99f542a7c10402b2bde1c903ab4df9320b8281f186e5321a6fd9902b26d2b4cc3b2e27bb41d292b9098878df4b2509b7164ce4d1d3244697b0503198703e7da543b6fb50f3cea75286dd7fe80abccd5edc69e903ce800228772aba8a8c46df93a1e6b53777db41e7d99d2e9fc20de05bdd86a3bc9a61ff9911f0fd16f195ebd1ec76359188f0aa43fb778075f292b1c140fbe780327b268cead192818084c10545e025b107e28358054ece3511c92ca8fbd321e1c42e9e92baa1cb6676613afc4510225021b44ed9b08a439a1f1a6d8f34490555e7f5c9d4a415281274f6474b3e5e8e0b37deaa0f57027bb7e40086ca9b4cefdc32628f26072e8e501ef6a39c986f354365eb62e7edae55eaa60d62cab3d049080d17598a533f376af6f1b07fe459e9b6890a1ff052a14fcb88bc7a3861cd875465df00fe2f42370c04cf3ee71a3c92c2b05b74555713918c955c822ebea884d121c96afb1f3c89ad6e50b550444a74b24e7d6354f3c7307bbd19914a35b90ef43f2700fa7300c1ea66f075f92ffca4abe56ca74846f26715107dc18e349b4f4dc7a25d280fa00ef8ad0c92601294a2d6df86d7318d413f2f016f00d91cdd670f37def1b4c5d92490742393dd3e258c5bcdb0bb4777b9fcdbc11ab30c6de93739a968ef1d1c3fcde3b3824f319d5002588ddfef4f113aaf1a01ede98ef95d397851ae22f5d30e73a9f7dd4302f7e2008b37021efdae8cb89f213412f1f9fd35d8583d8eabf12d801a16d812a82cafadaa466c6d529454f104307d68e41b462f4dd65253380927e60e179a8e63cdbce7d5b0ccc3b9bb2b526574ba1e85eae642209f5f25c08d1e8363a73af72c23f15045d5247c28dce84024eb6792b0e2c64bfba78097d32e83e2574e71e5dc685d7440c6c1e01a72ebe00d0f70a78c4604ce87c03bf46798789ae7538e1305353ffc430c6f04d4057f8819b56a5b6ec9fb987156e1bf4e5c47dbcb75d102a2bfc214eeea79b6db41e478e69e548f6163e1d216bdcd49dd4874c0ee71bcfcaf82a37ac02a53bcea949ca5c0766543802d84d044d3b46cda20b3bc3f9ec2f32f6f1f0e315ad4f62844a133857324763ee629d3d4b9d5a4d9af79f33f006c2058021c4d678ca7073f3634b79f24745756f131f585a000410177cc7775fa87b8a7429951671c7051aa3a84dfda1eae5519b0bd992a383ff2cae8497b615c2846a6f51039a81bf237037ee2f929711a05bafc6cf95d6d2ebedf5804433726abd7771adc8cc505b780fa746e5f7b03c8ba4799ffa1da2fd7c00f5ca9f7e4dc4e57c1c8e8d77ed334815b7b2a053033d5bcc1bdca012e0c775a14109f2cf66a6acaafb93eade6feca36a3058cb388e5172b386bcec64405eb6429dc03cedfd7045daf6e188dc773651580cfaf99e15c333b214ad1e14262778bbc8a939542cd18d56624d05bbfdbaae5fa1b6fe2bd9eaf9c000cd62e36105c99bc016931a7b916f1b4646285a185651d1c939c45c459c3689e314945f6c06bb4136ef4287b1173b5f4b7039a83659f4f623c16d67953e406b1f47c11a3054f7634b8ae2ed7a751a15d0bc138d03c573da15790e89c957f1a30a43ae891e59aae2820ff0d0ff193b2325a9a173fc9ca814334591883b48f9fe2bd3a1a532768ef8a126a6c6715922c780471c562a6e3818b3abf1f7caeeac432a80b0966de09051e69fe9dac7b3af1d0c31e1fe6528890370c50b4185dfd2bbd65f53a457786ad5526f7d3f20acae38395d00f9d15f5f5d715cc10de408e9093b42ca04e0367dcae096a96ed6f7f4870613714fda1675b813c02ad4abd28779f51cd41b2a18ae94241f72b589e91525bc211b508bfc727dba07a5fc00c387865964689337edf325581648ac7714662eb31bc09704a8d4658b014c4aed064f3d37997486e37c2696015e856754c471375c102bd6c87fb67bad5ec33a1fc2d909786dfa5f2a5d120dd2b4acfe908c5c71c5ce1927538fcd9e46ce88e318448eab364401fb7401acbf90fabcf131b6d36e28c0ea136c379132a0ef2447b057aabed259dabfda2a9ae69d4a6207b94f591c942e1b31569051c73f153180ec670e5ee4dcc6b7d150167e84b5f97dab435743689f2ca300cf88121c37662e7cab5027d7347aa3f64d5f552810da0ed1ca850597c8bab838284c347d80e9adab32c41063a625521650b8b6c10590917a587c830de0fa4407ce82dfedf0570006fc9c9be1a9865cae413f103ef7f5a36d469d7d67e241dfca8846002052b45e70aac77adcd22fe6bf7c639d0ec456791b7a5cb28b3d54714092dcc84dff8a5e514e847105bff38cdb911b769240793ecb8fdd2050a0c713b57c2fdb479711f19ac71640855a2e862d0fd0048d89553afa53a3d91b6fed385569f7d081fe62512f7121f2b6e9db1a67639bdcbd83dc9fbdcb6c7b7ae6e6de854e05af60abd42c5eaaf3635f43b73a8b0173d4d62fe63199288a34088550c3547a654ac3153d34c6a54283170a445e198fc72938c2fed7879f73d06ff48aa5112e6613001a08a4fd7e0daf86485f2798c87a32d4665bb1615b50d04144a58a7b9f53297ccd4616714c1353e2608552bc72a4d54e6b3078adb534d6f8e2a257bb0e9fb06c0005daac5650d8c031e6211647522696cac08b556432cd8e4d220afd3435775d3899014ba3f452ce5f597f8aef2600e7bfb5144866734193210f7f894d0fd67e373d7a0153153784b834fe00a9a288f29043890601f6ca5c45f2332e02745c05dad343414a91db7290f5d0b47c00f92e0665b616a0a97e03e2c0a49a1dde483b80bdfc6196d5e5e97445103c975cd7640da965b8bb1cb832786a0ac9589fb9a35f13ff7628d3c0790a81c4c50039f64480066eea99146b43011db195aac168185c0aaf2e325d462a4ab365d0ac14035d6221c1f3569ba2dea279b6b7e98fb94706e7471870ba34ad08fc76db911ed7de754bf259c8907cf20f0485214484c00db599ac24fddc0c0a738598a51b63c8c1460fd7a4315ce7a17aea1f4a627ccfa680776cbd19749574b4a0385bb5ebf77ceec91359c8270132c9a3614d0cce13f03fc0bc10e50155ea197ebec1c85d4ecd73dbaac09fd17d19c598fe8746a9c2daa6eeb334cd7cd29c8c2cb1b0929f82215b53efbe9efc1c19c702366391454df9b965b6049a11ae3df76e9b36b5947089b4bf898b3eb62586b087fb8d6c73a36e75ff442ccefca21360fe981a9a5c2d43f99a0d531902ef306642d72ebdd0bbf4a7d135e00c8cca541f1b851430877febf5fbc77b9baed72c102938b3d55c74ae328e806ce7b9fae695dc04b72bbe66e92e37806fa3a4c2bafdcb50f040dbe2ed1ca911979c4ba786366d1e14e96ebc830b8d214b98ce4b00951896c60b2e63e2caeb0c56b2e1e33000a182e7c49550350231d8c80deab6da193f1bd8aede68c5c2043b606d1b0962b71b60d3f1e21d7e21b86d7145bbfa388c713acc6079ca4ed34e8700107791af00e7ae46d96d408c9b314418669a0b1fbe9729e6e509fdbbba5d9e93b3f0ca7c72478c2689922d0caecdad1c78dca5cf4d76f8e9458b13a8c62fc1dca0763bdebaaf88a52ff46534b2ff0546229858e805932d9a8ef66107163ddb57e4f5757f2537f7532eb6ffc2595ee8d58a8b8fac14c3b5a2f379c200a8f15d5e5081974b722165d00facc0815897473b889feb7350a0a65c56e461c6fc2eada942631dcd3cc291512a372062f38b94abac078fa8a4e702c9d65186198dbbbb54a8def995b4fae943db0e8cc6048bdf62f155bf85aab6596c777ddd571c494a48824298bed68f1aadf686bddd10b45e03f0e90e18663d3ca557b2efd218cddd6b4d51c56dbd24165530293b105daaf3b85df8190b991f3111c2a814c10408ee5e8dfb0ebfc0f7f2dfd2dd85eb85ceb667bab5239420d39499f59d836dcc6ade921ecec6be4e0c37c0479359878470ef60ad1e8f0176b836ce4ff1cf0c226633d2c3f435e414b743bf3a1018bd5a05fb7a53010e3c815c9a88987bb0b8270f6383e739c9861bb0f96b37640277bf327c9b15760748d36eaed244b31b36809dc316372bb34c71e9ba40b983275a610a81c7ab3293830f13f04e22e52bc834286ca137775caec429fc3350553c7c15553657027f0b0abeedadbe9f4fbdbf5584f8c61beb3b5462ae6e842ade670b8e9db9eded45fc968a27805b88d873da87214cfa4e98704586845225131435fb5f3a18753a99525a8654eb2184940c05fc6a00a59a40281aad1c07f5a613de16f3dcd0fc4843d628fedbcfa1be3aa248f0c02f2482c417daaf81a6867b121ca4253adb234d1806532f88d9983a11e22cd50b7100d83ecd90e824ff103c8f7e6b3d667e996dce14f47c3e9d29c938ccd31af998af6a1e7e80840d83241ac5885f86d42cdc5f8d0916fd13993ff64a0dc9a6800e1d125154c1f85b13ddc6a9e7cd3586e3e6af9013b9df9e8448361a8b3e973d6166bd21b1b9ba06661f0521a784261cfef62cc723717279ccf0ad1255e56d72b486d899cb7d2b24bdbd6a60d115579cbf8166075f8cf5080bc4698ba564393c47fc510a1238591b78aa92a93b66651cccf802de40142d894d28769a2dc3b61b8ec153332e06556f97c630115a1091dcccf2fa59c5d2d106887e73836afb603d25523ee101adb81988c5277b18b2fc4ec4200d90dd7e18eb26fd386be5357102a529751385c47846dd09c1762240d7c8c4cef8f14a67af1a36c1b9505182732cc40b957c8dd4eb6e1d6f064e2351a1d16053648db29e5318a778c19d3255c964674baa264b572334d4e1d350d1913a96e0bb3ca152ca7a2f2a62cf96b50a336958a6dae5752870235ebe594fd7e64493b7b568cb5e3316558fff9ab5dacf948a9fe62ff64e3f216ce40455af8a1517ea0ec9fcdfe29eebdaf60170869752b21ab3f7ac1a53d075b048c54891e5066ebb04f32ee48e214c4a6a9a90be716f8fd1be046f5e8d043e29bc9e7db2164219ec7391405e3dedf3032d3716eed0af9489a2e8de36ae28813f8bb35dda8ef899192a12973b778bd43874119e9b55a0d3494913b87ed563036a113a116e66456f8a77dfc2c76e0c186467629dcd7c1eaad76e5e0e210bf783b60fdcd49867445f43280d4f6ba48cafbb0fdbaaa8971412d1f5e3177c68621ffa9f228bde41588fa588b463b17a7bdffccc0ff2b67da79dac96b9fa09323bef793f66f24e01f371b202c674eed9f1660e4d27f62622f2dfdd4221d4e64ce2419979a9c4231461a4c166ff73380c4b52bbacdb4e637931952508201a51a1daf9ffb8bdab5853cdd896016287bfd3336ff9f97fdfd3cf7d43cf21c114e09e4928b2696fbc3842988b8ec8eacc93d0ff7e0a1a6ab0d39884b4cd734c2b0cdc6912b1c09897e804274c540a09f03dc2a3308d04f43e023ec835e0157b1da974d0a74ce207bad902bbbca0414bf1f99303ec519288d53f311d61fe4bca12f1cec37bb02a9873f8dd0dfb77c969b8d4f4dcfe0c35835f3e93c781849667ef51185ca538813757c25b9363d6f10374f4fa804e46f7d78d7014b35a34cefdc8e976f2c1bd058d8614f6546f627a8faa4571e155253bf9b743d0751f36be974202c3c55f837e53761a78c4c34030a7af8784a0fae8123b47f778dec60b0d1125bf8f307f279c7f2c20f4b3c776e144c26d1b1c092361875361628736313ddb47fde74457ceb753ceb7b91410fb85898d7213b59eb7b104259707d7222b74f7e11ad2f16c620e70193be8af6ec2966f2c0dabc74309b3311e2f3bb642ff4cb623430e375479524c862409ac8339d34460abcbc01a11e772c52c48928d7ba5b1aa7efdd12ca9ef103bec814a09d4908c2950dfc1c6a9e8418643a772979e5fa79f66fc751c89bf925dee372de1ac972ea366ddec941a491fd2ad622edcace9aa814a57feea5f800946f4b5833dd21491c536f68e56291fa35b0233a02cddc189b0b63cf49865010f911e8730b848430d03e68e73806e5f28fc0d2f8a95b823472417e9a49a990a9d1a895007844ec071c3a03b6f2c4b368f36a9c7925f5e2fdb4ef4a90a95488a53d65555d33938f7b1ca21ee4e52a4f6ae79f0aa99f1531c596fd954544e186176273af9ab99892ae830ed6525ad183e5dd3936c7ed476e2b1c0cde7a4c6fcc65f8971fc134d4362d476f7767e314df8322056a24c7ca5fbe724fff5f4738480a4ab08c5d420556571457a7e7cdb4713a0e4d37036187d21bb9805b9f1738741802a8a6bf4c6a2a74fe4610a2d03207efe959cb76c0df728b4d817378439772104f9d5691fcf1ef8daa3144d444f7de8564878111682889d278293f9713f81c2939b38102f18f546795ea4933b00cde8614e25e609b44fb0325e1c4334ab01a6b7ea57a1926087bc983b1e9837ea9271980d2e3cab3c534c885b3992fd2c32d9bca42cfd37f4daedda20bfd6ff30d0414197a6ca7409f7d03ab48de74ed2d0f86cc9f1b56dda21fbcce0f4794f3d6153a86e9f19bfb7a79b50a7c01ee54d4a986a7dc74633f5b6bba51edce9f0c828841ac0ecf832458a1fa9d15e3bcd4ce8a0c7eada6ab247012e885a37b494ab2588a63cb2e0e800954d478c186ceadfeab72ddbcc82dff8aeec4dc843cdfdfa26b960af6541adf31359cb93f3995ea6556d04239e493aa6e13b8960a3d8529521eae7314267f69a75d0a259a1e67aed3e8e2342cac21beb1214c7776155c01b27c348d643aaa8cd779de6e05b1aafc5bf6046508552c7b64c7d53993b08d84ef52178654d867e3f4a313de2931c83966b9bb78dc3b1797d51e411be51c8e9264bd634bfd8cd2914b5649e915db36e6432e0d35f1ed683bd4d04d321430168bc32f8f47af87b4a26fd681fe3ca9814e947fe6d32bea79d0e77185ef0e32f4a3183d9ce144559a69224920999c8e77f39527b5a7016c0326b3d3ce9cbc0ac8d71429719b894745b06645b9e61ae8c03ac0d9cafe0355e79712a7d7d34f23d19031d478ac0474b5756db5fad1bafe894f9c18542d2ab798ef155e7cfc20971caab9f888d5ac5ebc6e0a1c85f8855974bd616c595eff616884c00e6151dd71dc2c100de72f6b300db980cceadcc3053c8485ca8edd34238714a74c78248ea881dcf43bef5e307f25fbedf00556bd1c0424f70f91a4ece6d569c3824d5522fd76c007ec1e32f9eda34021b7867a4b8c3086be8de726dd007e51f5b2ec3422499b43c4c932ef846288bd36d8063ef6477ac6a62e9e34c1b8adcd1e295a43d7c0182a65be00c9c6e69e4f15a00739883e05b7d0b407efb117c4e817fffb3c86fc717507b9413013b8bca293b77f077b20e7f5d69af600b6d024e7c01313c92dbfdc96400b50a4ff9f416200d7b253e53d78a649c88c552077b400d11817e8a05a0b1bc7ddc462fcadebe1910ffb82efdd7bdb34c667268c47833c80f2922973de943705fbc0248cfde161d9947722d89c1fdac792eb93f7993f989855a96f09a2e4eef01bd575314ef2b84a3405b75e1492f733c48e1942c429840fa6861f9432355643a572b5cb5c508cb6cda7d7738a9c4aa8fa204aef2bac64716e2efc8f979de2f2f31b5b51878d45dbd410e1f5cd35e749c93e4b34a0ddfd750c11a9ef83cc6a28bdb4f31d299ca26032078375aff98ee41126dd04ee8e735d56bbfc5606d06a7533f0056c83b9103e61d90107cde2b49304ef332d7be48172d0e9934781bcbb1565e2a5887b7284be52014062befe711636ee7c9f697028e396c6b086d9d090e3e6a9c0bacae0e659f1a1a467184d90338d74c5ceffc49fc55faca79db8b49004b661e07dc207e9823ad8bd1234096500c0e9d37a74950419b177c646ba3c51af404ef018ad1ead5e9337546d92e271074448f02cca3e1816c730264e6acf5cefbcaa3a67ff2223a095af1b6918ffa6c2acf4621733e1108b282f85595fa6bc5890199b7aecd52d315c3ae201cc2c13bd71d04f8ed8ac249253f89f9a77aa3a2329276eca6a9ccbed8a62ceb5e3b8c379ca6291e9e2936024bd972a70ec70017af25420cab82ea02ad3c10788868d8ef86c5add05dae5bec31a960b4aa301a78dd5f463a5a6391b69890fefdac25852e9b39aa45e363890ae1895e9108ad9542f26f0a5633da885d8eac04efe8c91a144fbc65ae87fa2f8d6453e38a0d88d555974bd887e7b926847446717d875ae9b3b0ab718c092a9c80c9604067cfeda49606175d962bbd6a5ebdc155cf3cf50761a3ba56f67dcadefb5668bd7ae78aeaa4ecbb735ae18bbdf18125a1003ca46041356e32681eb2bb32642cf12ea0d5ff59292c1816008a5cab5025af811692a7e4f44340124ba757d82dacb4484e6ab1c3f82f7019e7190f668980b56b42d7ede0eb1327a32e3feac726399f700eb49fc68ec703dfe3a6f4a3ddc950ab51d3718fb9b4d335c771c900e49d050af1679807203c7bc549320b182d40c8bd8808a5b70bc1129048393be277b22ff73a73c81109ea6a7ddfad8a8d2a59c0b990a09cd7546040583e1b0f5dc94e71655cef706e544f122ee919fe16abf5645f6839d206a38b7db04630d153930d7bea98520b3f11da04f844327682a0de676b57b6ff0805eee1542d2e4ba3ca29cac36d460445cb3fc503a58b2f7e1670af2fffc18e237b391863572a8813eb4c9e7c8b86a5aba753760f889d4adfdff0fd156e36250c67c663bf5f50ccf7c2cd8a1a25dbad9ce8e344cbe3357c410ba2f28e76757a260787323dbdc99b7bd98ce59c1737a5e9aa8ebaa6965179f42117f031ff0820c996d5e8771df5afa625d51fe6a6bc99fa91526c82031a44dfc493be21ccb3a370242534684f0b7b3158b73970382babd74a82adb93a14f81488a49e8e32c7aa64b7330909a615b0d6679d01cf8091b74cfd976cebdb281dbd9ad9c6face34dff733012070dc45052fc00ca90e9083b1af65eac5d814d8e66ae4920b27101e80a779bc1fe85ccd3c580bfe6f6f19edf8f1770f44152eb58bda50cf18b28d885a530231ed4dfed51994d2f9fbbdb7d516256e54c1001d7daefc5a5dc925d77439555719e07f39251d133f2057cc0313cd2c24c55c8f7cc9ae", 0x2000, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigqueueinfo(r0, 0x136, &(0x7f0000002440)={0x800, 0x401, 0xffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0xfff, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000002600)=@abs={0x1}, 0x6e) sendmmsg$unix(r8, &(0x7f0000002680), 0x0, 0x4048850) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(&(0x7f0000000080), 0x0) socket$inet6(0xa, 0x3, 0x2) r9 = open(&(0x7f0000002680)='./bus\x00', 0x351682, 0x170) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000001500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.116060323s ago: executing program 0 (id=454): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffe01}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x2c}}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x88}}, 0x40000) 3.828109156s ago: executing program 3 (id=457): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rpm_return_int\x00', r4}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000003df0000000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r8}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.752135643s ago: executing program 4 (id=460): r0 = inotify_init() pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x1e, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = dup2(r4, r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x0) inotify_rm_watch(r0, r6) mkdirat(0xffffffffffffffff, 0x0, 0x3bc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) ftruncate(0xffffffffffffffff, 0x7fffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4106, 0x8}], 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.279339341s ago: executing program 2 (id=463): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$eJzs3M9PHFUcAPDv7rK0tEWw/iy2ilYj8QcU+sMevNRo4kETEz3UeEKgDXZbTMHENkTRAx5NE+/Go4l/gRfrxagnE696NybEcLF6WjO7M3SBXVhgYWv380kG3tv3Nu99Z+btvn2zswF0rMHkTy7iUET8FhF91ezqCoPVf7eW5yf+WZ6fyEW5/OZfuUq9v5fnJ7Kq2fMOVjPl8gbtLr4TMV4qTV1N8yNzl98fmb12/fnpy+MXpy5OXRk7e/bUyWPdZ8ZOtyTO3qSvAx/NHD3y6ts3Xp84f+Pdn75J+nsoLa+No1UGq3u3rqda3Vib9dakc11t7AhbUoiI5HAVK+O/LwrRs1LWF6982tbOAbuqXM6X9zUuXigDd7Fkog50ouyNPvn8m217NPW4Iyydi5V1jFvpVi3pinxap5h+RtoNgxFxfuHfL5MtdmkdAgCg1s1zEfFcvflfPh6sqXdPem2oPyLujYjDEXFfRNwfEQ9EVOo+FBEPb7H9tVdI1s9/yn3bCqxJyfzvxfTa1ur5Xzb7i/5CmuutxF/MXZguTZ1I98lQFPcl+dEN2vj+5V8/b1RWO/9LtqT9bC6Y9uPPrjULdJPjc+M7ibnW0icRA1314s+tzHmT+fGRiBjYZhvTz3x9tFFZ/6bxb6AFk/LyVxFPV4//QqyJP5NreH1y9IUzY6dH9kdp6sRIdlas9/Mvi280an/z47+7lm6W40Dd838l/v7c/ojZa9cvVa7Xzm69jcXfP2v4mWa753937q1Kujt97MPxubmroxHdudfWPz52+7lZPqufnP9Dx+uP/8Nxe088EhHJSXwsIh6NiMfSvj8eEU9ExPEN4v/xpSff23r8G6zKt1AS/+Rmxz9qj//WE4VLP3xbt/Fis8f/VCU1lD7SzOtfsx3c4e4DAACA/4V85TvwufzwSjqfHx6OWKis7R7Il2Zm5569MPPBlcnqd+X7o5jPVrr6atZDR9O1vCw/tiZ/Ml03/qLQU8kPT8yUJtsdPHS4g9n4L6we/4k/Cu3uHbDr3K8Fncv4h85l/EPnMv6hcxn/0Lnqjf+P29APYO9t8v7fs1f9APae+T90LuMfOpfxDx2p4b3x+R3d8i/RpsR33Tv7rYbmE5G/Q0K+axLFqFvU1fSPWWwzsa9uUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrjvwAAAP//gk3jgQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_open_dev$usbmon(&(0x7f0000000140), 0x4, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040), 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x0, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.257133753s ago: executing program 0 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x88}}, 0x40000) 3.104252085s ago: executing program 4 (id=465): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2c00ec0ef1254500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) 3.087106137s ago: executing program 4 (id=466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffe01}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x2c}}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x88}}, 0x40000) 2.945580788s ago: executing program 3 (id=467): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x38, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f00000006c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000180100002020702500000000003120207b1af8ff00000000bfa100000000000007010000f87fffffb702000005000000b7030000000000008500000073000000956b3329d24cbfb3175a0a6737da2718640459b004e6956ee27d17f4d9f8f196bf6647b8e504277f2ffb3ad871f87a60f0247b673c29db58a18f9ef339f6b9bea51b7fd7417e52019dcada9d6f040f77ae167567cb960168ee8764372410bfa1ee3700"], &(0x7f0000000200)='GPL\x00', 0xac12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x48, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x11, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0xfff5, @remote}, 0x1c) 2.581051119s ago: executing program 2 (id=468): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x0, 0x0, 0x2, 0x5}, 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={&(0x7f0000002300)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000240)) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/82, &(0x7f0000000480)=""/74}) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "f6f81132ff"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$tun(r6, &(0x7f0000000300)={@void, @void, @llc={@snap={0x1, 0xab, "0692", "c8b73b", 0x886c, "66b3626ccb5f6f65f33a10cd9ad8aa8b818b76bd6e896dcdcd836ec46a8f65c58c71f65f4fd8fd2b70591cf657c9af1de6c8cdb5af11227b3c7d9b21d717cafddb113e375b421208cef6e59cc6d18a651a905ec0240f653ea13d3f905a13696da9c992b40a53071ec2089f39b7adf58bf28189aa82d68a2d2312b2259475f60f6fe017867ddc74f32647fcb07b9dbe7141cccc16b9dc5dff4ecbb2e83060c7cd25329227559491e30b9c9f3ed254406388ed4a40fd8e33f05c255d88440a8252ca42ad6ae79ad69cd130ecd4030276a7d1b3323a1d8cc4b445"}}}, 0xe2) 2.464225238s ago: executing program 1 (id=469): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2c00ec0ef1254500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 2.447922559s ago: executing program 1 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000440)={[{@acl}, {@noload}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@dioread_nolock}, {}, {@bsdgroups}]}, 0x6, 0x652, &(0x7f0000002580)="$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") 2.385243854s ago: executing program 0 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000440)={[{@acl}, {@noload}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@dioread_nolock}, {}, {@bsdgroups}]}, 0x6, 0x652, &(0x7f0000002580)="$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") 2.201675089s ago: executing program 4 (id=472): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_open_dev$usbmon(&(0x7f0000000140), 0x4, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040), 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x0, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.167218002s ago: executing program 0 (id=473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffe01}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x2c}}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x88}}, 0x40000) 2.114570717s ago: executing program 1 (id=474): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002080)=@delchain={0x1110, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_fw={{0x7}, {0x1068, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_MASK={0x8}, @TCA_FW_POLICE={0x1034, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8}]}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8}, @TCA_FLOW_MASK={0x8}]}}]}, 0x1110}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x148}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.012159855s ago: executing program 3 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4044014) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000ac0)={0x5, &(0x7f0000000000)=[{0x50, 0x0, 0x3, 0x10000}, {0x20}, {0x16, 0x0, 0x0, 0x9}, {0x5, 0x5, 0xeb, 0x4}, {0x4, 0x4, 0x6, 0x6}]}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) unshare(0x68040200) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x8, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000f104000000000000000084400000000000789288d9ea17c27e565dcea947c1"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x10200) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="093727bd7000fcdbdf252d0000007c004500108a02d020848b09a7b105a3f71153d32d9042fc180a02941ccc425051aed6d3dc1b9e303fa3a2b82deb8a1070cdac0d92c24c70858738a999a1d1ad2dcd57ec13ac70ddbd50c6ca89338f8c8745317d73b230e11042700eb2c448a0848e1676f9bc9e57784f94300191e9f8230bd923aa5c9d3dbb0361d8c1f8d096ff9f573ec84c65953319985e783e32b1541100dc676324b35431fd84657b6941fb1ee45f1ad14f4b7e0a5704712e"], 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x800) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000002c0)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x7a, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a003400020202020202000004004c0008004b0000000000"], 0x34}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64=r8, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000400000008fad07020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xa1e1, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) (async, rerun: 64) r11 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$AUDIT_USER_AVC(r11, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000040004"], 0x14}, 0x1, 0x0, 0x0, 0x4001040}, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000000)=0x54) 2.011635625s ago: executing program 3 (id=476): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2c00ec0ef1254500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) 2.005815055s ago: executing program 3 (id=477): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace$peek(0x3, r0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_delrule={0x40, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@FRA_TUN_ID={0xc}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1000}]}, 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r5 = getuid() setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@private=0xa010102, 0x4e23, 0x0, 0x4e24, 0x5, 0xa, 0xa0, 0x80, 0x2c, 0x0, r5}, {0x7fff, 0x3, 0x6, 0x8001, 0x3, 0x3, 0x7fffffff, 0x9f}, {0x1, 0x40, 0x1, 0x81}, 0x6, 0x6e6bb2, 0x1, 0x1, 0x3, 0x3}, {{@in=@broadcast, 0x4d5, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3507, 0x0, 0x2, 0x20, 0x1, 0x4, 0xffffff79}}, 0xe8) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@private}}, 0xe8) 1.9504663s ago: executing program 1 (id=478): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$eJzs3M9PHFUcAPDv7rK0tEWw/iy2ilYj8QcU+sMevNRo4kETEz3UeEKgDXZbTMHENkTRAx5NE+/Go4l/gRfrxagnE696NybEcLF6WjO7M3SBXVhgYWv380kG3tv3Nu99Z+btvn2zswF0rMHkTy7iUET8FhF91ezqCoPVf7eW5yf+WZ6fyEW5/OZfuUq9v5fnJ7Kq2fMOVjPl8gbtLr4TMV4qTV1N8yNzl98fmb12/fnpy+MXpy5OXRk7e/bUyWPdZ8ZOtyTO3qSvAx/NHD3y6ts3Xp84f+Pdn75J+nsoLa+No1UGq3u3rqda3Vib9dakc11t7AhbUoiI5HAVK+O/LwrRs1LWF6982tbOAbuqXM6X9zUuXigDd7Fkog50ouyNPvn8m217NPW4Iyydi5V1jFvpVi3pinxap5h+RtoNgxFxfuHfL5MtdmkdAgCg1s1zEfFcvflfPh6sqXdPem2oPyLujYjDEXFfRNwfEQ9EVOo+FBEPb7H9tVdI1s9/yn3bCqxJyfzvxfTa1ur5Xzb7i/5CmuutxF/MXZguTZ1I98lQFPcl+dEN2vj+5V8/b1RWO/9LtqT9bC6Y9uPPrjULdJPjc+M7ibnW0icRA1314s+tzHmT+fGRiBjYZhvTz3x9tFFZ/6bxb6AFk/LyVxFPV4//QqyJP5NreH1y9IUzY6dH9kdp6sRIdlas9/Mvi280an/z47+7lm6W40Dd838l/v7c/ojZa9cvVa7Xzm69jcXfP2v4mWa753937q1Kujt97MPxubmroxHdudfWPz52+7lZPqufnP9Dx+uP/8Nxe088EhHJSXwsIh6NiMfSvj8eEU9ExPEN4v/xpSff23r8G6zKt1AS/+Rmxz9qj//WE4VLP3xbt/Fis8f/VCU1lD7SzOtfsx3c4e4DAACA/4V85TvwufzwSjqfHx6OWKis7R7Il2Zm5569MPPBlcnqd+X7o5jPVrr6atZDR9O1vCw/tiZ/Ml03/qLQU8kPT8yUJtsdPHS4g9n4L6we/4k/Cu3uHbDr3K8Fncv4h85l/EPnMv6hcxn/0Lnqjf+P29APYO9t8v7fs1f9APae+T90LuMfOpfxDx2p4b3x+R3d8i/RpsR33Tv7rYbmE5G/Q0K+axLFqFvU1fSPWWwzsa9uUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrjvwAAAP//gk3jgQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_open_dev$usbmon(&(0x7f0000000140), 0x4, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x2000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040), 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x0, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.480090519s ago: executing program 4 (id=479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0xfffffffe}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r6, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000540)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dee49e176fe6a23b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437b55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c168c40008000000000000661396e9303b38aa5d26d06e2e676795fd2733f95da570bab387138ca041257e2b2a2792a630d8fcdc27507a7f53eb10d2519e64765cde5898dc3e65405730bd88ff966411"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xac, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 534.932706ms ago: executing program 0 (id=480): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2c00ec0ef1254500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 533.234006ms ago: executing program 1 (id=481): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9f18000000000000000c0000000c00000009000000040000000000000400000000000000007f61612e004d59d95065f8daf2b7679843da4b63f30b1f43ff7e29540d00f68d2b26bb6239fdfee54b6fff337e99b813ad3dc0a842c0e2ca6565cd331517dc4435345fcd0219884bd4bcc71767b70ac8123015f39d4698aed5377c2aefdb48e7d4197c68227398ccec51efd6cd1f6c2f075f155fb64c9960a8b54667dddfda9b000000"], 0x0, 0x2d}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x81, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x6, 0xe, 0x14, @remote, @mcast2, 0x781f, 0x10, 0x6014, 0x81}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9e70617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3}, &(0x7f00000004c0), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) setpgid(r1, r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[], 0x7e, 0x1cf, &(0x7f00000024c0)="$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") chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000040)='./file1\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="b729d09ea32a1290926877af1b6fecc5ca8fd798ea8b7a795e8499e0f0c235360b7586f429dd0c8193680b7bf6d070661ac01a05f02e7aeec704eaaab0c41c523e3c21d3d6916a8672ae84cc6ab19cda778b7c441c1db4d9be3eba222639b175f7a23f3ea2fcf46dc1f889d5cf899dfa07a634209d361f99ffed3f05588b8da9f15772180e3055405322ff7f70ac7f0c18a7ba2b44572970c5fad0dfcd60a7ded7ee769d5c01ca042bef5290825d0a8b31e06b6a536ee5d42b9592980950f84c781e23f8c758e64ef04088e13156b9ff8932fafd58550a2226813d6938b6f43da5cb1f4ef5003a17390e87f54d"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) 532.873396ms ago: executing program 3 (id=482): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001080)=ANY=[@ANYBLOB="7379735f226d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549cab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e6255a2e5cd64402a4de537bf113fc7370099e4faebe3f8803d000000004c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2000000000000000000000000632ff0fa874ac0769142daca624cb4e0206734b6ed975359c4c61af929e56449437f109207ab97933bfa547d54f09f318a621c0180844af3362417ea3266d51c40f1f6abeaa2e90ce22d20600e22cd20de", @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000480)="$eJzs3c9qK2UUAPAz+deoiwRxowgO6MJVuXXrplGuIHalRFAXGrz3giThwi0ErGDsqk/g0vfwEdy48Q0Et4K7dlEZmcxMk9CkrTWm0Pv7rQ7zzTlz8n0lXeXMV6+Ph4+eJnF8+nu020nU9mM/zpLoRi0qP0QjAID74yzL4q/sNpmN2ua7AQC2ofj/X7jrXgCA7fjks88/6h0cPPw4Tdvxaudk0k8iYnwy6RfrvSfxTYzicTyITpxHZBeK+IMPDx5GI811463xdNLPM8df/lrW7/0ZMcvfi050V+fvpYWF/Omk34wXI43ek2bVaideWZ3/zor86Lfi7TcX+t+NTvz2dTyNUTyKPHee//1emr6f/Xj63Rf5Y/L8pBb9ndl9c1l9m+cCAAAAAAAAAAAAAAAAAAAAAMD9tpumSTG+Zza/J79Uzt+pn8/Wd9NKd3k+T5GfVIWK+UBZlCN6pln8VM3XeZCmaVbeOM9vxGsNLxYAAAAAAAAAAAAAAAAAAACA3OG3R8PBaPT42UaCahpA9bP+29bZX7jyRhwNB/X1BXdu/qzFaQN5r1feHI1GbGhbrgteyPvZeOWd+eF+GkVQHcy/L9hcn/Xye0XRo+EgLZeqTR4Okuue1a4O7ufFpVb8103IZn8S59nymbYvWl3Oam1o51svrVz6O8uym9V594/ijMoryWzExs2e3iyDlR8wD9qXz+KX9QXXfmXUN/LFAwAAAAAAAAAAAAAAAAAAXDL/0e+KxeMrU2v/W1MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGXz9/9XQTsilq9cCqZl8lX3lEErnh3e8UcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBPAAAA//8s7E5o") 321.674433ms ago: executing program 4 (id=483): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffffe01}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x2c}}, 0x20008050) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) read$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x58, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x88}}, 0x40000) 321.317903ms ago: executing program 0 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000400000000000081000000"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x94, &(0x7f0000000740)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x1, 0x6, 0x3cac}, 0x10, 0x1013e, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000880)=[{}], 0x10, 0x2}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x5, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) 0s ago: executing program 1 (id=485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_pts(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nogrpid}, {@jqfmt_vfsv0}, {@journal_checksum}, {@debug}, {@data_ordered}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff00052406000105240000000d240f010000000000f2ff000006241a000000042402"], 0x0) syz_usb_connect(0x6, 0xf64, &(0x7f0000000d80)={{0x12, 0x1, 0x300, 0x16, 0x89, 0xf2, 0x40, 0x12d1, 0x6187, 0x614b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf52, 0x4, 0x3, 0x0, 0x0, 0xff, [{{0x9, 0x4, 0x56, 0x2, 0xf, 0xff, 0x1, 0xb, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x2}}], [{{0x9, 0x5, 0x1, 0x4, 0x400, 0xb, 0x0, 0xf3}}, {{0x9, 0x5, 0x1, 0x8, 0x270, 0x7, 0x9, 0x6, [@generic={0x3f, 0x31, "c8b50273e9b9390a8dd48fdd5028915a47c0c5075a2dd69ad4cf2af4445186069e3e3934b71b054ee4573bbc7780f5af64a5c3709de46e62418b389591"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x0, 0xe0, 0x6, [@generic={0xc3, 0xa, "c67a9a6b378c55550b71ff086720425403056755112bea0d22ae93ffec74b457a2a5fb40829824e88d241df943a75bc5a0859f3b0dfd72bbd9711a22582b44a5dba94910ec3ef0b5c997fff6791bcc8b884ae0b82b2dfa392d0715039a3c0050d085d8feb595e1ea6ad366e20631e2c8f6a01ced2b3c245e0dee4ee557c1b6c1b7ce0c841db56d1ea00396a2d9f87ea0ec0b4e91fa51417aea4152f11e45215259942be13ce4dc0986280a7ef34bc9d34842bedf7416c6c488a832193e6ad03ee0"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x4, 0x9, 0xf9, [@generic={0x92, 0x22, "ca5113db416f5e0b35c8fd2ea3bc1844d4a09d69cf02c7db7ef82cd9e713e3f474f79e847b7a6ec2f83ebe86cd5f122c3fcc163c6435b5e16a55014b48c363f0e481a69dc103861386c1d1545194a09a66b0649778289d93976a09866cb8a62e45c11a0abb8cbb7ea1920d83aa5ff4537bc1b61b6e5750f732f9f23f06630c1a4299849342e80fb5eec19ee531a343e2"}, @generic={0x76, 0x23, "ed61c3a6cf0602f3eb38c5782964c842cc3d74d6c2dd9cb72fcaa33b7e951c31a7376a3c5b660c5ae7277eb57f28613341c5c758159c03a7f2aeddb075fdd7922ecd9c28a010fb22071efc076acdcce0b2f8bdc899782fc0f03941262cee30ab39ba700c4a230cf644a9226124efb0a356518557"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x7f, 0x4, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x80a6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xc00}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0xfb, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xa}]}}, {{0x9, 0x5, 0x7, 0x2, 0x0, 0x9, 0x65, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7f}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x40, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x4, 0x8, 0x8, [@generic={0xf2, 0x24, "d50477b9e2f3096f5bf37feeac204de4e8173b17f4fc27a3d4a27fca30ffd09d2768dc6f26fdd0e69436df24657a60fa3b16eb2738c856b1546fe460140e6c925d6b04ba83241ded747651aa4b74d89397faec2caa326ac08d0c13a4c6ab61d253e18d04693b54e046fbcead1176828395cbaab3971865a9e284c33e63a24eb0db7abfb9253529184c7d784ee2039961d413bccb22f46d42b21658014f6004a069fb43afd6adf47f04a4c586e7a8ab25ac007ce31ffdc39e9a3a45e2e2d972c2c7df4ff2082236659e22866e51d8620dd850d17048fdfbce91cec1fd8273640610285a1ff675c6eb4890e4a98a0a9690"}]}}, {{0x9, 0x5, 0x0, 0xc6b5185168a31532, 0x200, 0x6, 0x3, 0x8}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xd0, 0x3, 0xc5, [@generic={0x15, 0xe, "5a67e386a7b7563eefab4012ffc538a17a65d9"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0xfe, 0x80, 0x8, [@generic={0xbf, 0xa, "d57a6b6cce23ab4d4c3d3ac1748e1b605f2b8110dc0ddc567930d26cdf9dd2c6671ad97f1b17a6d0a189ec378e2e26fb34d0ae68efcd333ad47e221fa61c44a07471ae61d76b22ca7e80fd5c1933edc79f2f7a3716ece22fc531e4e431671fc346067d270c4833db52bfc30016b328226e63f7fa2f0215d451f705276e41bad69bec280fe2d6fc3ea5bc6e90e13782a11888cbb5ca85f3c9a40d0f7d8d06a1fa3696881eab12662f7401eed8a5fea262e2938c919f558bc23565668f3d"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0xf9, 0x5, 0x7, [@generic={0x77, 0x11, "77cc0c8d04b99a0ca9be17438a4691ded0fadf07eb58b2981564f410405e2be64cd64cff214660313fdc383c3603872508a9a0aa6b3d6c4b1429bb6338915a22523f8390fc71d649f242a1689ac390f141aac82ee8ebad7412d55c0d10547ca39c4cdf1b234082652e260128558966aa50b4183859"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x3, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x953}, @uac_iso={0x7, 0x25, 0x1, 0x7, 0xac, 0x70}]}}]}}, {{0x9, 0x4, 0x5, 0x0, 0x9, 0x51, 0x81, 0xc3, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x80, 0xd3}, [@feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0xa, 0x1, 0x2, 0x5, 0x4], 0x10}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0xf4, "cce44bae"}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x0, 0x3}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x3, "85077d6ef70b"}]}], [{{0x9, 0x5, 0x3, 0x3, 0x400, 0x2, 0xc8, 0x6, [@generic={0xff, 0x3, "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"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x5, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0xb}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0xff, 0x5, 0x36}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0xff, 0xfb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfa, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0x2, 0x9, [@generic={0xfe, 0xa, "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"}, @generic={0xe6, 0xf, "f3cab383529129eab94343760bc81ed8ba01ea083cd528d727050b32e09378ccca0472af46c3fede5de9235df6bcec16e2ef1992d3431beb889f55bf65877a369657c2a267ac8d9939fecafebfe6df01b6416e1bcd320c227875d9721de86a6f7badef626ab2c8f57cb2d78523045c7a694f9dfe15e955a81bb1427a18edffcd4d2e27ecb01d6001c00234b2f003114d2ed0ec0ce47c515ad49d6198a7ce9cd46d662781d426bb38f0fc00e95bef3a21a3f73a60d43aceb570346fc1804a03cbe7b304d3769d7d76e824e4f72dcae3683523763a70f3a91e5c5e27e42d6b3ae45214de73"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x7bf, 0x9, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0xb1, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x1e7, 0xf, 0xb, 0x70}}, {{0x9, 0x5, 0x3, 0x7, 0x8, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x8868}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x1, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}]}}]}}, {{0x9, 0x4, 0x4c, 0x2, 0x8, 0xff, 0x0, 0x0, 0x7, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x80, 0x3, 0x9, 0x4, 'W', "7ed36e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb0, 0x2, 0x90, "95c9bb1813"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x31, 0x4}]}], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x80, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x89, 0x8000}]}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x0, 0x1b, 0x5, [@generic={0xf8, 0x11, "052fcd940dfa279b8df2f9fe7a10c6014f4a579dc4359c3ecb97d8bac1437cf93d3128a807c81d0317e35903cf4528f6a34772527d2bc05382d85b96cb3a5b02786d6cefeee0ddbc59af84dc2dd542f327643151ebc80d73b622c2f761d084e726ef738a2e26431f7b6dbd3871eb11a7c1ae546d57cd934aa2a15aaeb5bb3d0ba27f8041f9e092c360692993b1e2d9bc1f1b657b66a6e849409bb1571f8df8460f7eaaf86d4323eafb422f0a081762f0b03834318ddcfac403f7f727c4a306b469cb54b4ec0a4984af650a537c2676ca788c80231e5720ffd457336069ae2121c047b8c31af17b6dda119a47b203ba72faeee672e0cf"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x2, 0x2, 0xfa, [@generic={0x53, 0xe, "ff7055d2313f7a50c96de5809dcf15f9bc4b218c2a751f3baf612b2c702eb14e917d09c308f0158dc436aebf89d9e956447b33685897a2f5f8a103603baa3a32387c5d97ce1251e1ca25382ae32147075f"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xe, 0x7, 0x8, [@generic={0x9b, 0xc, "a4f30dc877e79c6ddad56e7d017f4f06fd7406442eea22e96840c22007cde53349653c0fba42bcc5c080af47a5135b9a5df8ab09960e9b32ea8d3679f4dc9d68d94c9d501a4330cf5c2e38787a34b100f83aa6838524331179b932a4b43cab56b78a02d1d75616e0eb74cf33a5521b80900a8a554ef18f9099a59878bb77688c4bc0e469880b2db983d35e63c82f8bfa9ab1a28fa9786dfd49"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x7}, @generic={0xe3, 0x5, "262cb0f0203d905334a9b543fe7dace226b01616676403c2bbdb094bdb6bf53d1dc5bb8aac47553c8554e45cd741d29fcb6574fafcfbc1f6d3fe4cc2803e59be11e2fca855a4f61c5fb29b534373776a2fc5f20d3b5ed80c2a3723f08cb50c22bdef6a36fe6238327eb82032b7ba1d48b16603d62a583ed4453ceb3432e840e85a8d9730ac06903885c2ea5b54f1d11b5db60d2a6e6e73ad2a105231ad83bbd561827015fa4111221a7ed84a0842cbb9c43b183148b6938791cc5c1bc22cd2579f75d073d290dd1e8d27da8a3ff903861ad5c0e6ca7742557c72a8bb2f68e9e075"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x80, 0x5a, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0x1}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x2, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x200}, @generic={0x90, 0x5, "99aa2ad6807faf74578e894796686a610f14304080a2ab1547d1a655cd612715828d34f623057ecd1ae166a703c469aa5bef4622a1e4f74c58d6b4704a181f17e0cd2012703db2d2bf0292d16124eba6a2a0c465ced226cd7ba020be0ac139b92a051ef5ef8f14a3a1ec0c5705a10f3b3ff23e2d9e5be519dcf1fb872127e466862073e3465889d50145226347ca"}]}}]}}, {{0x9, 0x4, 0x5, 0x5, 0xe, 0x15, 0x77, 0xf6, 0x81, [@generic={0x2c, 0x6, "d8bbe7074fe095e7905bf945ac02f2ba11ad3bc033a66ef04d328c6d052b1c66567f60df9585612b6e86"}, @generic={0xa6, 0x11, "4a2a212fba6c39c1949cfe61012082ba7cfb0d4a9703263082bd1e11f7fbdb3c09144a0cd5e8955cbe683ad327f87c4828fcd55c7d72019dd7c7ef910b2cf7c99413de2cf340ac33aedf95b57a9fa6d63ea4a5a290e1666f419f17f2cb5b23c3374018435607dc21c51f0b14ae2055256401ec943ba4d424038a107ca63b150af2814bf194dba6c3eb512a68a5fc7f0b4fe55da93ef322f91260ab8c203b1b33da72ce42"}], [{{0x9, 0x5, 0x3, 0x13, 0x20, 0x5, 0x3a, 0x5}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x2, 0xff, 0x40}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0x3, 0x9, [@generic={0x31, 0xb, "cfe5f39e5ff09cc03b8a261d9c42953a9edf0d0483b5abf9c8c54ff862ba3af40660b5a7ee8930a375f3316eb94449"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x88, 0xb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x9}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xd}]}}, {{0x9, 0x5, 0x0, 0x6, 0x40, 0x6, 0xee, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1f, 0x1}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0xd, 0xf9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x52}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xc0, 0x6, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1c, 0x40}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x3, 0x4, 0x99}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x12, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x5, 0x1c, 0x10, 0x2, 0xad, 0xcf}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x9, 0x1, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x10, 0x7, [@generic={0x82, 0x11, "b34ea1de985022face185fda0bb6bd24e6b99474b5553548d8ce864b9c9adfea2444318f7337701b54dfb54d1b57e27e3fac813db6b447a1863239dbb2b6b562bdbcdbcaa1ff2bdfa5e92557001c1015f9d7bfcd0ab0aa31d4d23f639889d0ef45b75e4f4cf142c1e06a44ddf5e3be8ba2cc16a436acbd659aac7b752858b046"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6a, 0x1}]}}, {{0x9, 0x5, 0xa, 0x8c12bd63fb547fca, 0x200, 0x41, 0x7, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x35}, @generic={0x47, 0x21, "bfcd3f6578434d8a89f08bcf5181896da2805c109288942adeead3f5abd51b5fb5f55b52231fe6182a06ea139f7d8f62d1d21da5815b96e35e2deeecd350d3ad5a2159298c"}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x6, 0x2, 0x50, 0xff, 0x81}, 0xa4, &(0x7f00000000c0)={0x5, 0xf, 0xa4, 0x5, [@generic={0x6b, 0x10, 0x3, "9142224e53a99f8b1d242fbf1c625ccde615fff55aa1b8ffce5584aa4df397b3ab4cd939bafb3299073f47096f854bb7eae8fb0460b55a1fb686093659fde70a9dd3473fee992b5610ada05a4067bc7f409015c10f29244d9f0d830a2a2d4381b8efa40e9226f77b"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1ab, 0xcf, 0x6, 0xb, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0xf2c3, 0xf00, 0x2, [0xc000, 0xc03f, 0x60, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x5, 0xd3, 0x2}]}, 0x4, [{0x78, &(0x7f0000000280)=@string={0x78, 0x3, "83d59bdd48a0e2c0d26f55dbb43cf167b284aa42db491579b0d712231b5dd8c3e1ec549aae3fa9ee7f820bea1c682d1870494df0e9bd86b5f1c3016c3189823699910cd66be8c6f334c78909c9b3ec2813f12c7321c29a32ff35c72febc2e9934e8dbdd770fcc9c1897d8f73fab18479d603ec5ff7d3"}}, {0x21, &(0x7f0000000180)=ANY=[@ANYBLOB="2103e3db1daa78a68c66f7bd18b85e0dc9d316769ad43d00000000000000000700"]}, {0xe6, &(0x7f00000004c0)=ANY=[@ANYBLOB="e603ae8b85211e925c19551e9ef47d3c22675b0cd534e408015d42f13a4debca79603a45192623295cb265ca5372022de961f039442cdaf20f5f84ceb635730255c846a4bd952adcbde70493c50024ebebab32887ee647bbe311621a99c2a49d99ad102e331f448f5549a07eeb878d159ed345083030bd37712cbe47e8f94831006292437ad52c069a2f07f6fd5c17b65d734fb967a2b26707fa07d9c4e551313ffad5fabebbb9d2a5962e56de57537edb73e404dd1957b13e59cb2c180696c89f0e51a2e1defc8fcd1cdc2fe01c8a4c4e5c125c1a4abd593c28dc4c346b80ab6f0a0ff632bb18311700"/248]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x814}}]}) kernel console output (not intermixed with test programs): block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 63.212595][ T20] usb 5-1: USB disconnect, device number 10 [ 63.226989][ T1020] loop0: detected capacity change from 0 to 512 [ 63.233770][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.246321][ T1030] xt_hashlimit: overflow, try lower: 1585548543811125248/8 [ 63.270149][ T1029] FAULT_INJECTION: forcing a failure. [ 63.270149][ T1029] name failslab, interval 1, probability 0, space 0, times 0 [ 63.282640][ T1029] CPU: 0 PID: 1029 Comm: syz.1.198 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 63.292289][ T1029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.296028][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.302180][ T1029] Call Trace: [ 63.302186][ T1029] [ 63.302192][ T1029] dump_stack_lvl+0x151/0x1b7 [ 63.320502][ T1029] ? io_uring_drop_tctx_refs+0x190/0x190 [ 63.325955][ T1029] ? __skb_flow_dissect+0x5644/0x5f50 [ 63.331160][ T1029] dump_stack+0x15/0x17 [ 63.335153][ T1029] should_fail+0x3c6/0x510 [ 63.339409][ T1029] __should_failslab+0xa4/0xe0 [ 63.344007][ T1029] ? skb_clone+0x1d1/0x360 [ 63.348256][ T1029] should_failslab+0x9/0x20 [ 63.352597][ T1029] slab_pre_alloc_hook+0x37/0xd0 [ 63.357371][ T1029] ? skb_clone+0x1d1/0x360 [ 63.361623][ T1029] kmem_cache_alloc+0x44/0x200 [ 63.366223][ T1029] skb_clone+0x1d1/0x360 [ 63.370304][ T1029] maybe_deliver+0x1a4/0x2a0 [ 63.374731][ T1029] br_flood+0x2e5/0x420 [ 63.378733][ T1029] br_dev_xmit+0xbaa/0xf40 [ 63.382980][ T1029] ? br_net_exit+0x1c0/0x1c0 [ 63.387401][ T1029] ? netif_skb_features+0x7fc/0xb70 [ 63.392439][ T1029] dev_hard_start_xmit+0x228/0x620 [ 63.397389][ T1029] __dev_queue_xmit+0x18b4/0x2e70 [ 63.402251][ T1029] ? dev_queue_xmit+0x20/0x20 [ 63.406757][ T1029] ? packet_parse_headers+0x7cc/0xac0 [ 63.411962][ T1029] ? packet_parse_headers+0x7dd/0xac0 [ 63.417172][ T1029] ? __check_object_size+0x2ec/0x3d0 [ 63.422292][ T1029] ? skb_setup_tx_timestamp+0x210/0x210 [ 63.427674][ T1029] ? skb_copy_datagram_from_iter+0x5d0/0x6d0 [ 63.433487][ T1029] dev_queue_xmit+0x17/0x20 [ 63.437828][ T1029] packet_sendmsg+0x47a9/0x6350 [ 63.442687][ T1029] ? avc_denied+0x1b0/0x1b0 [ 63.447033][ T1029] ? selinux_socket_sendmsg+0x243/0x340 [ 63.452407][ T1029] ? selinux_socket_accept+0x5b0/0x5b0 [ 63.457702][ T1029] ? __stack_depot_save+0x34/0x470 [ 63.462649][ T1029] ? packet_getsockopt+0xea0/0xea0 [ 63.467596][ T1029] ? set_track+0x90/0x100 [ 63.471766][ T1029] ? kasan_set_free_info+0x23/0x40 [ 63.476713][ T1029] ? check_stack_object+0x114/0x130 [ 63.481747][ T1029] ? security_socket_sendmsg+0x82/0xb0 [ 63.487038][ T1029] ? packet_getsockopt+0xea0/0xea0 [ 63.491984][ T1029] ____sys_sendmsg+0x59e/0x8f0 [ 63.496594][ T1029] ? __sys_sendmsg_sock+0x40/0x40 [ 63.501446][ T1029] ? import_iovec+0xe5/0x120 [ 63.505884][ T1029] ___sys_sendmsg+0x252/0x2e0 [ 63.510385][ T1029] ? __sys_sendmsg+0x260/0x260 [ 63.514988][ T1029] ? __fdget+0x1bc/0x240 [ 63.519064][ T1029] __se_sys_sendmsg+0x19a/0x260 [ 63.523753][ T1029] ? __x64_sys_sendmsg+0x90/0x90 [ 63.528523][ T1029] ? ksys_write+0x260/0x2c0 [ 63.532864][ T1029] ? debug_smp_processor_id+0x17/0x20 [ 63.538074][ T1029] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 63.543975][ T1029] __x64_sys_sendmsg+0x7b/0x90 [ 63.548572][ T1029] do_syscall_64+0x3d/0xb0 [ 63.552825][ T1029] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 63.558556][ T1029] RIP: 0033:0x7fac907a8bd9 [ 63.562816][ T1029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.582251][ T1029] RSP: 002b:00007fac8fa2a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.590497][ T1029] RAX: ffffffffffffffda RBX: 00007fac90936f60 RCX: 00007fac907a8bd9 [ 63.598401][ T1029] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 63.606209][ T1029] RBP: 00007fac8fa2a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 63.614014][ T1029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.621824][ T1029] R13: 000000000000000b R14: 00007fac90936f60 R15: 00007ffe696dad88 [ 63.629643][ T1029] [ 63.670368][ T1036] loop3: detected capacity change from 0 to 512 [ 63.746723][ T1036] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 63.746723][ T1036] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 63.746723][ T1036] [ 63.764585][ T1020] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 63.764585][ T1020] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 63.764585][ T1020] [ 63.790810][ T1020] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 63.805784][ T1020] EXT4-fs (loop0): 1 truncate cleaned up [ 63.838658][ T1036] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 63.856229][ T1020] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 63.870664][ T1041] loop1: detected capacity change from 0 to 1024 [ 63.885793][ T8] device bridge_slave_1 left promiscuous mode [ 63.892720][ T1036] EXT4-fs (loop3): 1 truncate cleaned up [ 63.898250][ T1036] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 63.899710][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.950133][ T1041] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.965988][ T8] device bridge_slave_0 left promiscuous mode [ 63.979963][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.994747][ T8] device veth1_macvtap left promiscuous mode [ 64.004968][ T1041] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.200: Invalid block bitmap block 0 in block_group 0 [ 64.019000][ T1041] EXT4-fs error (device loop1): ext4_free_blocks:6216: comm syz.1.200: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.033427][ T1041] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.200: Invalid inode bitmap blk 0 in block_group 0 [ 64.096097][ T1041] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 64.107191][ T1044] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 64.300031][ T1046] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 64.407284][ T1041] EXT4-fs (loop1): 1 orphan inode deleted [ 64.471340][ T1041] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 64.550969][ T8] device veth0_vlan left promiscuous mode [ 65.134336][ T1060] loop4: detected capacity change from 0 to 40427 [ 65.162351][ T1060] F2FS-fs (loop4): invalid crc value [ 65.169301][ T1060] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.196124][ T1060] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 65.309393][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.316641][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.324299][ T1061] device bridge_slave_0 entered promiscuous mode [ 65.331807][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.338687][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.339143][ T293] attempt to access beyond end of device [ 65.339143][ T293] loop4: rw=2049, want=45104, limit=40427 [ 65.346508][ T1061] device bridge_slave_1 entered promiscuous mode [ 65.413232][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.420110][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.427219][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.434037][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.477392][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.534843][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.545534][ T1080] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.561562][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.594081][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.609952][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.616832][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.632918][ T1089] loop1: detected capacity change from 0 to 512 [ 65.641371][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.660847][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.667944][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.676699][ T1089] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 65.676699][ T1089] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 65.676699][ T1089] [ 65.689564][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.699536][ T1089] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 65.718158][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.720589][ T1089] EXT4-fs (loop1): 1 truncate cleaned up [ 65.731643][ T1089] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 65.754058][ T1096] loop3: detected capacity change from 0 to 1024 [ 65.773983][ T1061] device veth0_vlan entered promiscuous mode [ 65.792067][ T1061] device veth1_macvtap entered promiscuous mode [ 65.822858][ T1100] loop4: detected capacity change from 0 to 512 [ 65.834121][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.835795][ T1101] loop2: detected capacity change from 0 to 512 [ 65.846461][ T1096] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.854586][ T1100] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 65.860991][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.877266][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.892582][ T1096] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.212: Invalid block bitmap block 0 in block_group 0 [ 65.919204][ T1100] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz.4.213: invalid block [ 65.937764][ T1104] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 66.018503][ T1100] EXT4-fs (loop4): Remounting filesystem read-only [ 66.028543][ T1100] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.213: couldn't read orphan inode 11 (err -117) [ 66.042062][ T1100] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 66.044410][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.066444][ T1100] FAULT_INJECTION: forcing a failure. [ 66.066444][ T1100] name failslab, interval 1, probability 0, space 0, times 0 [ 66.085474][ T1096] EXT4-fs error (device loop3): ext4_free_blocks:6216: comm syz.3.212: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.097139][ T1100] CPU: 0 PID: 1100 Comm: syz.4.213 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 66.108120][ T1100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 66.118116][ T1100] Call Trace: [ 66.121234][ T1100] [ 66.124010][ T1100] dump_stack_lvl+0x151/0x1b7 [ 66.128524][ T1100] ? io_uring_drop_tctx_refs+0x190/0x190 [ 66.133988][ T1100] ? format_decode+0x72f/0x1f10 [ 66.138687][ T1100] ? pointer+0xc40/0xc40 [ 66.142756][ T1100] dump_stack+0x15/0x17 [ 66.146747][ T1100] should_fail+0x3c6/0x510 [ 66.151002][ T1100] __should_failslab+0xa4/0xe0 [ 66.155600][ T1100] should_failslab+0x9/0x20 [ 66.159940][ T1100] slab_pre_alloc_hook+0x37/0xd0 [ 66.164728][ T1100] ? sidtab_sid2str_get+0x12b/0x2a0 [ 66.169748][ T1100] __kmalloc_track_caller+0x6c/0x260 [ 66.174866][ T1100] ? ptr_to_hashval+0x60/0x60 [ 66.179380][ T1100] ? sidtab_sid2str_get+0x12b/0x2a0 [ 66.184415][ T1100] kmemdup+0x24/0x50 [ 66.188144][ T1100] sidtab_sid2str_get+0x12b/0x2a0 [ 66.193124][ T1100] security_sid_to_context_core+0x2b5/0x490 [ 66.198854][ T1100] security_sid_to_context+0x33/0x40 [ 66.203976][ T1100] avc_audit_post_callback+0x1af/0xb20 [ 66.209266][ T1100] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 66.214649][ T1100] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 66.220027][ T1100] common_lsm_audit+0xbc6/0x18b0 [ 66.224801][ T1100] ? avc_audit_pre_callback+0x2b0/0x2b0 [ 66.230185][ T1100] ? ipv6_skb_to_auditdata+0xd90/0xd90 [ 66.235572][ T1100] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 66.241217][ T1100] ? avc_update_node+0x2f9/0xd50 [ 66.245990][ T1100] slow_avc_audit+0x26c/0x3c0 [ 66.250503][ T1100] ? avc_get_hash_stats+0x180/0x180 [ 66.255567][ T1100] ? avc_has_perm_noaudit+0x2dd/0x430 [ 66.260746][ T1100] avc_has_perm+0x1f5/0x260 [ 66.265082][ T1100] ? avc_has_perm_noaudit+0x430/0x430 [ 66.270291][ T1100] ? vfs_write+0x9ec/0x1110 [ 66.274668][ T1100] ? kmem_cache_free+0x116/0x2e0 [ 66.279406][ T1100] selinux_socket_getsockopt+0x243/0x340 [ 66.284872][ T1100] ? selinux_socket_getpeername+0x340/0x340 [ 66.290601][ T1100] ? wait_for_completion_killable_timeout+0x10/0x10 [ 66.297021][ T1100] ? __fget_files+0x31e/0x380 [ 66.301536][ T1100] security_socket_getsockopt+0x72/0xb0 [ 66.306915][ T1100] __sys_getsockopt+0xef/0x4f0 [ 66.311514][ T1100] ? debug_smp_processor_id+0x17/0x20 [ 66.316811][ T1100] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 66.322712][ T1100] __x64_sys_getsockopt+0xbf/0xd0 [ 66.327570][ T1100] do_syscall_64+0x3d/0xb0 [ 66.332085][ T1100] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 66.337812][ T1100] RIP: 0033:0x7fb36c563bd9 [ 66.342068][ T1100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.362202][ T1100] RSP: 002b:00007fb36b7e5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 66.370621][ T1100] RAX: ffffffffffffffda RBX: 00007fb36c6f1f60 RCX: 00007fb36c563bd9 [ 66.378431][ T1100] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000005 [ 66.386244][ T1100] RBP: 00007fb36b7e50a0 R08: 0000000020000280 R09: 0000000000000000 [ 66.394055][ T1100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.401867][ T1100] R13: 000000000000000b R14: 00007fb36c6f1f60 R15: 00007ffe8e68e288 [ 66.409785][ T1100] [ 66.447480][ T1096] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.212: Invalid inode bitmap blk 0 in block_group 0 [ 66.463036][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.467152][ T1107] loop0: detected capacity change from 0 to 1024 [ 66.470442][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.478105][ T1096] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 66.483777][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.500540][ T1101] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.508224][ T1096] EXT4-fs (loop3): 1 orphan inode deleted [ 66.515763][ T1107] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.516922][ T1096] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 66.568576][ T1101] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.204: invalid block [ 66.580069][ T1101] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.204: couldn't read orphan inode 11 (err -117) [ 66.595656][ T1107] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.215: Invalid block bitmap block 0 in block_group 0 [ 66.609644][ T1107] __quota_error: 22 callbacks suppressed [ 66.609661][ T1107] Quota error (device loop0): write_blk: dquota write failed [ 66.610117][ T1101] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 66.615118][ T1107] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 66.670056][ T1107] EXT4-fs error (device loop0): ext4_free_blocks:6216: comm syz.0.215: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.683651][ T1107] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.215: Invalid inode bitmap blk 0 in block_group 0 [ 66.696278][ T537] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 66.705216][ T1107] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 66.781194][ T1107] EXT4-fs (loop0): 1 orphan inode deleted [ 66.786748][ T1107] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 66.818715][ T1120] loop3: detected capacity change from 0 to 512 [ 66.855270][ T1120] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 66.866569][ T1120] EXT4-fs (loop3): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 66.969911][ T1123] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 67.139489][ T30] audit: type=1400 audit(1721020324.774:174): avc: denied { execute } for pid=1119 comm="syz.3.217" path="/4/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.172138][ T1130] loop3: detected capacity change from 0 to 512 [ 67.214207][ T1130] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 67.214207][ T1130] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.214207][ T1130] [ 67.963501][ T30] audit: type=1400 audit(1721020325.604:175): avc: denied { write } for pid=1139 comm="syz.4.224" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.986159][ T30] audit: type=1400 audit(1721020325.614:176): avc: denied { open } for pid=1139 comm="syz.4.224" path="/dev/ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.004069][ T1130] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 68.023156][ T30] audit: type=1400 audit(1721020325.624:177): avc: denied { node_bind } for pid=1142 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.043633][ T30] audit: type=1400 audit(1721020325.624:178): avc: denied { create } for pid=1142 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 68.043894][ T1130] EXT4-fs (loop3): 1 truncate cleaned up [ 68.064065][ T30] audit: type=1400 audit(1721020325.624:179): avc: denied { write } for pid=1142 comm="syz.0.225" path="socket:[17051]" dev="sockfs" ino=17051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 68.091874][ T1130] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 68.094042][ T30] audit: type=1400 audit(1721020325.624:180): avc: denied { nlmsg_read } for pid=1142 comm="syz.0.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 68.140062][ T8] device bridge_slave_1 left promiscuous mode [ 68.152686][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.167729][ T8] device bridge_slave_0 left promiscuous mode [ 68.196820][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.243263][ T8] device veth1_macvtap left promiscuous mode [ 68.255785][ T1161] loop0: detected capacity change from 0 to 1024 [ 68.257819][ T8] device veth0_vlan left promiscuous mode [ 68.272281][ T1161] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.337735][ T1163] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 68.427506][ T1161] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.228: Invalid block bitmap block 0 in block_group 0 [ 68.489921][ T1161] EXT4-fs error (device loop0): ext4_free_blocks:6216: comm syz.0.228: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.511651][ T1161] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.228: Invalid inode bitmap blk 0 in block_group 0 [ 68.532757][ T1161] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 68.543543][ T1161] EXT4-fs (loop0): 1 orphan inode deleted [ 68.549226][ T1161] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 68.588132][ T1166] loop3: detected capacity change from 0 to 1024 [ 68.597486][ T1166] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.611070][ T1166] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.229: Invalid block bitmap block 0 in block_group 0 [ 68.624726][ T1166] EXT4-fs error (device loop3): ext4_free_blocks:6216: comm syz.3.229: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.639545][ T1166] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.229: Invalid inode bitmap blk 0 in block_group 0 [ 68.653137][ T1166] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 68.664094][ T1166] EXT4-fs (loop3): 1 orphan inode deleted [ 68.670274][ T1166] EXT4-fs (loop3): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 68.701658][ T1171] FAULT_INJECTION: forcing a failure. [ 68.701658][ T1171] name failslab, interval 1, probability 0, space 0, times 0 [ 68.726259][ T1171] CPU: 1 PID: 1171 Comm: syz.2.231 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 68.735893][ T1171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.745792][ T1171] Call Trace: [ 68.748908][ T1171] [ 68.751711][ T1171] dump_stack_lvl+0x151/0x1b7 [ 68.756379][ T1171] ? io_uring_drop_tctx_refs+0x190/0x190 [ 68.761843][ T1171] dump_stack+0x15/0x17 [ 68.765845][ T1171] should_fail+0x3c6/0x510 [ 68.770086][ T1171] __should_failslab+0xa4/0xe0 [ 68.774684][ T1171] ? security_file_alloc+0x29/0x120 [ 68.779895][ T1171] should_failslab+0x9/0x20 [ 68.784234][ T1171] slab_pre_alloc_hook+0x37/0xd0 [ 68.789020][ T1171] ? security_file_alloc+0x29/0x120 [ 68.794040][ T1171] kmem_cache_alloc+0x44/0x200 [ 68.798639][ T1171] security_file_alloc+0x29/0x120 [ 68.803501][ T1171] __alloc_file+0xb2/0x2a0 [ 68.807881][ T1171] alloc_empty_file+0x95/0x180 [ 68.812476][ T1171] alloc_file+0x5a/0x4e0 [ 68.816646][ T1171] alloc_file_pseudo+0x259/0x2f0 [ 68.821417][ T1171] ? alloc_empty_file_noaccount+0x80/0x80 [ 68.826970][ T1171] ? __kasan_check_write+0x14/0x20 [ 68.831916][ T1171] ? clear_nlink+0x89/0xe0 [ 68.836166][ T1171] __shmem_file_setup+0x1d6/0x2a0 [ 68.841029][ T1171] shmem_file_setup+0x2f/0x40 [ 68.845555][ T1171] __se_sys_memfd_create+0x1e1/0x3e0 [ 68.850665][ T1171] __x64_sys_memfd_create+0x5b/0x70 [ 68.855715][ T1171] do_syscall_64+0x3d/0xb0 [ 68.859949][ T1171] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.865677][ T1171] RIP: 0033:0x7faa879a8bd9 [ 68.870031][ T1171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.889756][ T1171] RSP: 002b:00007faa86c29e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 68.897993][ T1171] RAX: ffffffffffffffda RBX: 000000000000050e RCX: 00007faa879a8bd9 [ 68.905805][ T1171] RDX: 00007faa86c29f00 RSI: 0000000000000000 RDI: 00007faa87a16d24 [ 68.913615][ T1171] RBP: 0000000020000f80 R08: 00007faa86c29bc7 R09: 00007faa86c29e50 [ 68.921436][ T1171] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000500 [ 68.929239][ T1171] R13: 00007faa86c29f00 R14: 00007faa86c29ec0 R15: 0000000020000180 [ 68.937056][ T1171] [ 69.007135][ T1181] capability: warning: `syz.1.232' uses 32-bit capabilities (legacy support in use) [ 69.601953][ T1197] loop0: detected capacity change from 0 to 256 [ 69.826748][ T1200] SELinux: Context system_u:object_r:chkpwd_exec_t:s0 is not valid (left unmapped). [ 70.610357][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 70.669612][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 70.849486][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 71.009450][ T26] usb 4-1: device descriptor read/64, error -71 [ 71.099794][ T6] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 71.110753][ T6] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 71.119598][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.409662][ T6] usb 2-1: string descriptor 0 read error: -71 [ 71.434407][ T6] hub 2-1:32.0: USB hub found [ 71.449497][ T26] usb 4-1: device descriptor read/64, error -71 [ 71.509516][ T6] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 71.559865][ T6] usb 2-1: USB disconnect, device number 9 [ 71.729489][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 71.883623][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 71.883637][ T30] audit: type=1326 audit(1721020329.524:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac907a8bd9 code=0x0 [ 71.985694][ T30] audit: type=1400 audit(1721020329.624:233): avc: denied { block_suspend } for pid=1250 comm="syz.1.257" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 72.009561][ T451] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 72.029700][ T26] usb 4-1: device descriptor read/64, error -71 [ 72.048969][ T1252] netlink: 'syz.1.257': attribute type 4 has an invalid length. [ 72.060799][ T30] audit: type=1400 audit(1721020329.704:234): avc: denied { create } for pid=1250 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.269465][ T451] usb 3-1: Using ep0 maxpacket: 32 [ 72.399708][ T451] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 72.407857][ T451] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 72.418827][ T451] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 72.631546][ T26] usb 4-1: device descriptor read/64, error -71 [ 72.643026][ T451] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 72.660782][ T451] usb 3-1: config 0 interface 0 has no altsetting 0 [ 72.726021][ T1267] loop1: detected capacity change from 0 to 1024 [ 72.749736][ T26] usb usb4-port1: attempt power cycle [ 72.770132][ T1267] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.784369][ T1267] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.262: Invalid block bitmap block 0 in block_group 0 [ 72.797837][ T1267] Quota error (device loop1): write_blk: dquota write failed [ 72.805292][ T1267] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 72.815047][ T1267] EXT4-fs error (device loop1): ext4_free_blocks:6216: comm syz.1.262: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.828321][ T1267] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.262: Invalid inode bitmap blk 0 in block_group 0 [ 72.829488][ T451] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 72.840800][ T8] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 72.849696][ T451] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 72.858283][ T1267] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 72.866153][ T451] usb 3-1: Product: syz [ 72.878731][ T451] usb 3-1: Manufacturer: syz [ 72.878770][ T1267] EXT4-fs (loop1): 1 orphan inode deleted [ 72.883258][ T451] usb 3-1: SerialNumber: syz [ 72.888844][ T1267] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 72.895823][ T451] usb 3-1: config 0 descriptor?? [ 73.324286][ T1277] syz.3.264[1277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.325302][ T1277] syz.3.264[1277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.833850][ T451] usb 3-1: USB disconnect, device number 13 [ 73.874089][ T30] audit: type=1400 audit(1721020331.514:235): avc: denied { create } for pid=1288 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.876779][ T1290] loop2: detected capacity change from 0 to 512 [ 73.894723][ T30] audit: type=1400 audit(1721020331.514:236): avc: denied { getopt } for pid=1288 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.901555][ T1289] loop4: detected capacity change from 0 to 256 [ 73.962402][ T1290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.009318][ T1290] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 74.029989][ T1290] EXT4-fs (loop2): Unrecognized mount option "csrjquota=" or missing value [ 74.038568][ T30] audit: type=1400 audit(1721020331.664:237): avc: denied { mounton } for pid=1288 comm="syz.2.268" path="/10/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.061744][ T1290] ext4 filesystem being remounted at /10/file0/file0 supports timestamps until 2038 (0x7fffffff) [ 74.068007][ T30] audit: type=1400 audit(1721020331.674:238): avc: denied { remount } for pid=1288 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.120160][ T1289] x_tables: duplicate underflow at hook 2 [ 74.203503][ T1306] loop2: detected capacity change from 0 to 1024 [ 74.233281][ T1308] loop4: detected capacity change from 0 to 128 [ 74.245492][ T1306] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.270342][ T1306] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.274: Invalid block bitmap block 0 in block_group 0 [ 74.287490][ T1306] EXT4-fs error (device loop2): ext4_free_blocks:6216: comm syz.2.274: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.314611][ T1306] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.274: Invalid inode bitmap blk 0 in block_group 0 [ 74.329085][ T1306] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 74.356350][ T1306] EXT4-fs (loop2): 1 orphan inode deleted [ 74.364203][ T1306] EXT4-fs (loop2): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 74.796841][ T1313] loop2: detected capacity change from 0 to 40427 [ 74.874716][ T1313] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 74.882493][ T1313] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 74.895287][ T1313] F2FS-fs (loop2): Found nat_bits in checkpoint [ 74.896775][ T1322] incfs: Can't find or create .index dir in ./file0 [ 74.908172][ T1322] incfs: mount failed -14 [ 74.931928][ T1313] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 74.938920][ T1313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 74.951445][ T1328] loop1: detected capacity change from 0 to 16 [ 74.964866][ T1313] attempt to access beyond end of device [ 74.964866][ T1313] loop2: rw=10241, want=45104, limit=40427 [ 74.976469][ T1313] attempt to access beyond end of device [ 74.976469][ T1313] loop2: rw=2049, want=45112, limit=40427 [ 74.993231][ T1061] attempt to access beyond end of device [ 74.993231][ T1061] loop2: rw=2049, want=40968, limit=40427 [ 75.029138][ T1328] erofs: (device loop1): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 75.043861][ T1332] loop3: detected capacity change from 0 to 512 [ 75.063459][ T1332] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 75.063459][ T1332] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 75.063459][ T1332] [ 75.117384][ T1332] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 75.144936][ T1332] EXT4-fs (loop3): 1 truncate cleaned up [ 75.153659][ T1332] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 75.363362][ T1352] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 76.423514][ T301] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 76.449540][ T451] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 76.669445][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 76.714917][ T1358] loop2: detected capacity change from 0 to 2048 [ 76.749447][ T451] usb 5-1: Using ep0 maxpacket: 8 [ 76.755325][ T1358] loop2: p3 < > p4 < > [ 76.759334][ T1358] loop2: partition table partially beyond EOD, truncated [ 76.767328][ T1358] loop2: p3 start 4284289 is beyond EOD, truncated [ 76.782700][ T100] loop2: p3 < > p4 < > [ 76.787426][ T100] loop2: partition table partially beyond EOD, truncated [ 76.789914][ T301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.796265][ T100] loop2: p3 start 4284289 is beyond EOD, truncated [ 76.814545][ T301] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 76.889532][ T451] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 76.899510][ T301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.906570][ T335] udevd[335]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.919466][ T301] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 76.925901][ T451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.946559][ T451] usb 5-1: config 0 descriptor?? [ 76.982650][ T1355] loop0: detected capacity change from 0 to 131072 [ 77.000527][ T1355] F2FS-fs (loop0): invalid crc value [ 77.007374][ T1355] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.030205][ T1355] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 77.036791][ T1355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 77.044273][ T301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.054536][ T301] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 77.085392][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 77.085417][ T30] audit: type=1400 audit(1721020334.714:248): avc: denied { read } for pid=1354 comm="syz.0.290" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.155431][ T30] audit: type=1400 audit(1721020334.714:249): avc: denied { open } for pid=1354 comm="syz.0.290" path="/65/file1/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.485606][ T30] audit: type=1400 audit(1721020335.054:250): avc: denied { ioctl } for pid=1354 comm="syz.0.290" path="/65/file1/file1" dev="loop0" ino=7 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.604428][ T1378] loop3: detected capacity change from 0 to 512 [ 77.613164][ T30] audit: type=1400 audit(1721020335.194:251): avc: denied { write } for pid=1341 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.642805][ T301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.649900][ T30] audit: type=1400 audit(1721020335.284:252): avc: denied { unlink } for pid=290 comm="syz-executor" name="memory.events" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.651724][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.684776][ T301] usb 2-1: SerialNumber: syz [ 77.690625][ T1378] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.705722][ T1378] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.293: casefold flag without casefold feature [ 77.718696][ T1378] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.293: missing EA_INODE flag [ 77.730369][ T1378] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.293: error while reading EA inode 12 err=-117 [ 77.742773][ T1378] EXT4-fs (loop3): 1 orphan inode deleted [ 77.748315][ T1378] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 77.775747][ T301] cdc_acm 2-1:1.0: Zero length descriptor references [ 77.790044][ T45] tipc: Disabling bearer [ 77.800017][ T45] tipc: Left network mode [ 77.824094][ T301] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 77.836358][ T1382] loop2: detected capacity change from 0 to 128 [ 77.890022][ T30] audit: type=1400 audit(1721020335.534:253): avc: denied { setopt } for pid=1377 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.911207][ T30] audit: type=1400 audit(1721020335.554:254): avc: denied { ioctl } for pid=1377 comm="syz.3.293" path="/16/file0/file1" dev="loop3" ino=15 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.998981][ T1348] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 78.008275][ T1348] fuse: Invalid rootmode [ 78.019151][ T30] audit: type=1400 audit(1721020335.664:255): avc: denied { write } for pid=1341 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.021355][ T451] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 78.038741][ T30] audit: type=1400 audit(1721020335.664:256): avc: denied { read } for pid=1341 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.076151][ T451] asix: probe of 5-1:0.0 failed with error -61 [ 78.171051][ T290] syz-executor (290) used greatest stack depth: 19792 bytes left [ 78.575974][ T45] device bridge_slave_1 left promiscuous mode [ 78.586937][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.598996][ T45] device bridge_slave_0 left promiscuous mode [ 78.607142][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.668924][ T45] device veth1_macvtap left promiscuous mode [ 78.692962][ T45] device veth0_vlan left promiscuous mode [ 78.821674][ T1396] loop3: detected capacity change from 0 to 512 [ 78.932086][ T1396] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 78.932086][ T1396] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 78.932086][ T1396] [ 78.980767][ T1396] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 78.991858][ T1396] EXT4-fs (loop3): 1 truncate cleaned up [ 78.997417][ T1396] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 79.205883][ T1401] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 79.789842][ T1375] usb 2-1: USB disconnect, device number 10 [ 79.828169][ T451] usb 5-1: USB disconnect, device number 11 [ 79.851968][ T1407] loop4: detected capacity change from 0 to 512 [ 79.908961][ T1407] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 79.908961][ T1407] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 79.908961][ T1407] [ 79.935588][ T1407] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 79.946182][ T1407] EXT4-fs (loop4): 1 truncate cleaned up [ 79.952189][ T1407] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 80.040206][ T1390] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.047058][ T1390] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.054325][ T1390] device bridge_slave_0 entered promiscuous mode [ 80.139685][ T1417] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 80.313538][ T1390] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.327770][ T1390] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.343449][ T1390] device bridge_slave_1 entered promiscuous mode [ 80.451605][ T1422] loop4: detected capacity change from 0 to 16 [ 80.454857][ T1390] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.464487][ T1390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.471680][ T1390] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.478442][ T1390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.496339][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.503492][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.511009][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.518243][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.526454][ T1422] erofs: (device loop4): mounted with root inode @ nid 36. [ 80.528639][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.545184][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.548221][ T1422] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 80.552060][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.569669][ T1422] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 80.588839][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.597027][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.603919][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.611193][ T30] audit: type=1400 audit(1721020338.244:257): avc: denied { write } for pid=1418 comm="syz.2.304" path="socket:[18527]" dev="sockfs" ino=18527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.620148][ T1422] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 80.637593][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.652122][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.667314][ T537] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.667419][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.685979][ T1390] device veth0_vlan entered promiscuous mode [ 80.692855][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.700954][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.708689][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.731875][ T1390] device veth1_macvtap entered promiscuous mode [ 80.739565][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.757959][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.767154][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.788085][ T1438] loop1: detected capacity change from 0 to 128 [ 80.849245][ T1426] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 80.876229][ T1442] loop0: detected capacity change from 0 to 512 [ 80.889117][ T1426] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 80.902239][ T1426] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 81.144655][ T1442] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 81.144655][ T1442] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 81.144655][ T1442] [ 81.183023][ T1442] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 81.193662][ T1442] EXT4-fs (loop0): 1 truncate cleaned up [ 81.199153][ T1442] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 81.456165][ T1449] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 81.735425][ T1455] loop1: detected capacity change from 0 to 512 [ 81.777001][ T1455] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 81.777001][ T1455] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 81.777001][ T1455] [ 81.801058][ T1455] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 81.810041][ T1455] EXT4-fs (loop1): 1 truncate cleaned up [ 81.815506][ T1455] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 81.827032][ T1453] loop0: detected capacity change from 0 to 40427 [ 81.879985][ T1453] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.889471][ T1453] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.913543][ T1453] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.939594][ T20] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 82.001738][ T1465] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 82.151480][ T1453] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 82.162276][ T1453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 82.210105][ T30] audit: type=1400 audit(1721020339.844:258): avc: denied { ioctl } for pid=1452 comm="syz.0.310" path="socket:[19698]" dev="sockfs" ino=19698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.251538][ T1460] loop4: detected capacity change from 0 to 40427 [ 82.293299][ T1453] attempt to access beyond end of device [ 82.293299][ T1453] loop0: rw=10241, want=45104, limit=40427 [ 82.307694][ T1390] attempt to access beyond end of device [ 82.307694][ T1390] loop0: rw=2049, want=40968, limit=40427 [ 82.314479][ T1460] F2FS-fs (loop4): invalid crc value [ 82.335935][ T1460] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.343444][ T1471] FAULT_INJECTION: forcing a failure. [ 82.343444][ T1471] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.356769][ T1471] CPU: 0 PID: 1471 Comm: syz.1.314 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 82.366378][ T1471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.376356][ T1471] Call Trace: [ 82.379480][ T1471] [ 82.382261][ T1471] dump_stack_lvl+0x151/0x1b7 [ 82.386774][ T1471] ? io_uring_drop_tctx_refs+0x190/0x190 [ 82.392239][ T1471] ? kmem_cache_free+0x116/0x2e0 [ 82.397020][ T1471] dump_stack+0x15/0x17 [ 82.401003][ T1471] should_fail+0x3c6/0x510 [ 82.405262][ T1471] should_fail_usercopy+0x1a/0x20 [ 82.410123][ T1471] _copy_from_user+0x20/0xd0 [ 82.414545][ T1471] __copy_msghdr_from_user+0xaf/0x7c0 [ 82.419754][ T1471] ? __ia32_sys_shutdown+0x70/0x70 [ 82.424705][ T1471] ___sys_sendmsg+0x166/0x2e0 [ 82.429219][ T1471] ? __sys_sendmsg+0x260/0x260 [ 82.433820][ T1471] ? __fdget+0x1bc/0x240 [ 82.437890][ T1471] __se_sys_sendmsg+0x19a/0x260 [ 82.442577][ T1471] ? __x64_sys_sendmsg+0x90/0x90 [ 82.447871][ T1471] ? ksys_write+0x260/0x2c0 [ 82.452212][ T1471] ? debug_smp_processor_id+0x17/0x20 [ 82.457420][ T1471] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 82.463334][ T1471] __x64_sys_sendmsg+0x7b/0x90 [ 82.467922][ T1471] do_syscall_64+0x3d/0xb0 [ 82.472174][ T1471] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.477902][ T1471] RIP: 0033:0x7fac907a8bd9 [ 82.482157][ T1471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.501684][ T1471] RSP: 002b:00007fac8fa09048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.509929][ T1471] RAX: ffffffffffffffda RBX: 00007fac90937038 RCX: 00007fac907a8bd9 [ 82.517738][ T1471] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000008 [ 82.525551][ T1471] RBP: 00007fac8fa090a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.533362][ T1471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.541172][ T1471] R13: 000000000000006e R14: 00007fac90937038 R15: 00007ffe696dad88 [ 82.548996][ T1471] [ 82.573746][ T1460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.190310][ T301] Bluetooth: hci0: command 0x1003 tx timeout [ 83.196246][ T1428] Bluetooth: hci0: sending frame failed (-49) [ 83.248388][ T293] attempt to access beyond end of device [ 83.248388][ T293] loop4: rw=2049, want=45104, limit=40427 [ 83.259630][ T20] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 83.270580][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.281909][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.293713][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 83.306892][ T20] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 83.316009][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.327731][ T20] usb 4-1: config 0 descriptor?? [ 83.335292][ T30] audit: type=1400 audit(1721020340.984:259): avc: denied { write } for pid=1485 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.784144][ T1495] loop0: detected capacity change from 0 to 128 [ 84.000331][ T20] thrustmaster 0003:044F:B653.0005: unbalanced delimiter at end of report description [ 84.009945][ T20] thrustmaster 0003:044F:B653.0005: parse failed [ 84.016480][ T20] thrustmaster: probe of 0003:044F:B653.0005 failed with error -22 [ 84.209969][ T1451] loop3: detected capacity change from 0 to 512 [ 84.364453][ T1451] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 84.380685][ T1451] ext4 filesystem being mounted at /21/bus supports timestamps until 2038 (0x7fffffff) [ 84.406193][ T30] audit: type=1400 audit(1721020342.044:260): avc: denied { mounton } for pid=1450 comm="syz.3.311" path="/21/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.771022][ T30] audit: type=1400 audit(1721020342.414:261): avc: denied { write } for pid=1513 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.771050][ T1514] netlink: 172 bytes leftover after parsing attributes in process `syz.1.325'. [ 84.810204][ T1451] UDC core: couldn't find an available UDC or it's busy: -16 [ 84.817556][ T1451] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.826458][ T295] usb 4-1: USB disconnect, device number 8 [ 84.831495][ T30] audit: type=1400 audit(1721020342.474:262): avc: denied { read } for pid=1513 comm="syz.1.325" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.854516][ T30] audit: type=1400 audit(1721020342.474:263): avc: denied { open } for pid=1513 comm="syz.1.325" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.886539][ T30] audit: type=1400 audit(1721020342.524:264): avc: denied { view } for pid=1513 comm="syz.1.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.030857][ T1518] loop0: detected capacity change from 0 to 1024 [ 85.130763][ T1518] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.188422][ T1518] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.327: Invalid block bitmap block 0 in block_group 0 [ 85.258365][ T1518] Quota error (device loop0): write_blk: dquota write failed [ 85.268439][ T1518] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 85.269541][ T301] Bluetooth: hci0: command 0x1001 tx timeout [ 85.278698][ T1518] EXT4-fs error (device loop0): ext4_free_blocks:6216: comm syz.0.327: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.293677][ T1428] Bluetooth: hci0: sending frame failed (-49) [ 85.303493][ T1518] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.327: Invalid inode bitmap blk 0 in block_group 0 [ 85.316152][ T1518] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 85.325118][ T45] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 85.325536][ T1518] EXT4-fs (loop0): 1 orphan inode deleted [ 85.339331][ T1518] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 85.348991][ T990] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /21/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 85.381758][ T1525] syz.4.328[1525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.382656][ T1525] syz.4.328[1525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.665923][ T45] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:2: Invalid inode table block 2353348557 in block_group 0 [ 85.701211][ T537] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #4: block 19: comm kworker/u4:4: lblock 2 mapped to illegal pblock 19 (length 1) [ 85.715917][ T990] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 2353348557 in block_group 0 [ 85.740274][ T990] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 85.750538][ T990] EXT4-fs error (device loop3): ext4_quota_off:6464: inode #3: comm syz-executor: mark_inode_dirty error [ 85.787281][ T990] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 2353348557 in block_group 0 [ 85.803198][ T990] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 85.813275][ T990] EXT4-fs error (device loop3): ext4_quota_off:6464: inode #4: comm syz-executor: mark_inode_dirty error [ 86.219469][ T295] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 86.243338][ T1540] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.250298][ T1540] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.257407][ T1540] device bridge_slave_0 entered promiscuous mode [ 86.264345][ T1540] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.271372][ T1540] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.278797][ T1540] device bridge_slave_1 entered promiscuous mode [ 86.329532][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.336864][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.347786][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.355974][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.364000][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.370865][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.378579][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.388213][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.396654][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.404688][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.411523][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.426240][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.434017][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.448291][ T1540] device veth0_vlan entered promiscuous mode [ 86.454541][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.462732][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.469459][ T295] usb 1-1: Using ep0 maxpacket: 32 [ 86.471479][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.482426][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.495173][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.503966][ T1540] device veth1_macvtap entered promiscuous mode [ 86.512711][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.524949][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.546667][ T1546] loop3: detected capacity change from 0 to 128 [ 86.609550][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.620346][ T295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.629908][ T295] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.638835][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.647422][ T295] usb 1-1: config 0 descriptor?? [ 86.717998][ T295] hub 1-1:0.0: USB hub found [ 86.723165][ T45] device bridge_slave_1 left promiscuous mode [ 86.729104][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.737401][ T45] device bridge_slave_0 left promiscuous mode [ 86.743530][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.751489][ T45] device veth1_macvtap left promiscuous mode [ 86.757426][ T45] device veth0_vlan left promiscuous mode [ 86.929472][ T295] hub 1-1:0.0: 1 port detected [ 87.035898][ T1554] loop4: detected capacity change from 0 to 512 [ 87.090878][ T1554] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 87.090878][ T1554] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 87.090878][ T1554] [ 87.132739][ T1531] loop0: detected capacity change from 0 to 512 [ 87.155071][ T1554] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 87.170917][ T1554] EXT4-fs (loop4): 1 truncate cleaned up [ 87.179135][ T1554] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 87.353577][ T1561] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 87.498196][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 87.673035][ T301] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 87.746601][ T1571] loop4: detected capacity change from 0 to 40427 [ 87.755844][ T295] usb 1-1: USB disconnect, device number 9 [ 87.841034][ T1571] F2FS-fs (loop4): invalid crc value [ 87.849151][ T1571] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.871291][ T1571] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.319637][ T301] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 88.330310][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.340947][ T301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.350513][ T301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 88.363254][ T301] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 88.372101][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.380631][ T301] usb 2-1: config 0 descriptor?? [ 88.425551][ T1582] loop0: detected capacity change from 0 to 512 [ 88.511076][ T293] attempt to access beyond end of device [ 88.511076][ T293] loop4: rw=2049, want=45104, limit=40427 [ 88.523831][ T1582] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 88.537017][ T1582] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.346: invalid block [ 88.547884][ T1582] EXT4-fs (loop0): Remounting filesystem read-only [ 88.554297][ T1582] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.346: couldn't read orphan inode 11 (err -117) [ 88.566115][ T1582] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 88.882248][ T301] thrustmaster 0003:044F:B653.0006: unbalanced delimiter at end of report description [ 88.899590][ T301] thrustmaster 0003:044F:B653.0006: parse failed [ 88.915960][ T301] thrustmaster: probe of 0003:044F:B653.0006 failed with error -22 [ 88.933798][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 88.933813][ T30] audit: type=1400 audit(1721020346.574:265): avc: denied { name_bind } for pid=1591 comm="syz.4.348" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 88.966788][ T30] audit: type=1400 audit(1721020346.604:266): avc: denied { connect } for pid=1591 comm="syz.4.348" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.036018][ T1590] loop0: detected capacity change from 0 to 40427 [ 89.092258][ T1559] loop1: detected capacity change from 0 to 512 [ 89.130132][ T1590] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 89.138044][ T1590] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.148395][ T1590] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.155643][ T1559] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 89.172336][ T1559] ext4 filesystem being mounted at /83/bus supports timestamps until 2038 (0x7fffffff) [ 89.182600][ T1590] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.189743][ T1590] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.215747][ T1590] attempt to access beyond end of device [ 89.215747][ T1590] loop0: rw=2049, want=45104, limit=40427 [ 89.232171][ T1390] attempt to access beyond end of device [ 89.232171][ T1390] loop0: rw=2049, want=40968, limit=40427 [ 89.239448][ T1375] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 89.362593][ T1559] UDC core: couldn't find an available UDC or it's busy: -16 [ 89.370313][ T1559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.388899][ T1603] loop0: detected capacity change from 0 to 128 [ 89.397465][ T295] usb 2-1: USB disconnect, device number 11 [ 89.469358][ T30] audit: type=1400 audit(1721020347.104:267): avc: denied { map } for pid=1600 comm="syz.3.351" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.709526][ T1375] usb 5-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 89.728440][ T1375] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 89.809555][ T1375] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.831849][ T1375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.850568][ T1375] usb 5-1: SerialNumber: syz [ 90.077130][ T292] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /83/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 90.124458][ T1592] loop4: detected capacity change from 0 to 256 [ 90.171987][ T813] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm kworker/u4:5: Invalid inode table block 2353348557 in block_group 0 [ 90.223791][ T1609] loop3: detected capacity change from 0 to 512 [ 90.231850][ T813] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #4: block 19: comm kworker/u4:5: lblock 2 mapped to illegal pblock 19 (length 1) [ 90.246910][ T813] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 90.254966][ T813] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 90.268736][ T292] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 2353348557 in block_group 0 [ 90.285473][ T1609] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 90.285473][ T1609] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 90.285473][ T1609] [ 90.313242][ T30] audit: type=1400 audit(1721020347.954:268): avc: denied { getopt } for pid=1591 comm="syz.4.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.335257][ T292] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 90.337338][ T301] usb 5-1: USB disconnect, device number 12 [ 90.344734][ T292] EXT4-fs error (device loop1): ext4_quota_off:6464: inode #3: comm syz-executor: mark_inode_dirty error [ 90.367481][ T1609] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 90.381791][ T1614] incfs: Can't find or create .index dir in ./file0 [ 90.388318][ T1614] incfs: mount failed -14 [ 90.389889][ T292] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 2353348557 in block_group 0 [ 90.393080][ T1609] EXT4-fs (loop3): 1 truncate cleaned up [ 90.406415][ T292] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 90.420799][ T292] EXT4-fs error (device loop1): ext4_quota_off:6464: inode #4: comm syz-executor: mark_inode_dirty error [ 90.423390][ T1609] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 90.565547][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.572615][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.582009][ T1618] device bridge_slave_0 entered promiscuous mode [ 90.591796][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.598680][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.608603][ T1618] device bridge_slave_1 entered promiscuous mode [ 90.632789][ T1625] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 90.857889][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.864768][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.871865][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.878632][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.938559][ T451] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 90.960080][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.967359][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.975525][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.984254][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.098344][ T1618] device veth0_vlan entered promiscuous mode [ 91.241774][ T1637] loop4: detected capacity change from 0 to 512 [ 91.254500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.262999][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.271227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.278460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.285846][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.303902][ T1618] device veth1_macvtap entered promiscuous mode [ 91.312043][ T1637] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 91.312043][ T1637] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 91.312043][ T1637] [ 91.330341][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.338714][ T1637] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 91.339771][ T451] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.353650][ T1637] EXT4-fs (loop4): 1 truncate cleaned up [ 91.357421][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.362630][ T1637] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 91.373653][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.397527][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.405828][ T451] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.412778][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.432757][ T1627] device bridge_slave_0 entered promiscuous mode [ 91.439899][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.448231][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.482945][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.490076][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.497519][ T1627] device bridge_slave_1 entered promiscuous mode [ 91.529536][ T451] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.538416][ T451] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.546856][ T451] usb 1-1: Manufacturer: syz [ 91.572316][ T451] usb 1-1: config 0 descriptor?? [ 91.604867][ T1646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 91.787703][ T1649] loop3: detected capacity change from 0 to 512 [ 91.854555][ T1654] loop4: detected capacity change from 0 to 128 [ 91.866349][ T1649] EXT4-fs (loop3): 1 truncate cleaned up [ 91.872367][ T1649] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.883347][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.921024][ T1620] UDC core: couldn't find an available UDC or it's busy: -16 [ 91.928346][ T1620] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.943317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.974113][ T1627] device veth0_vlan entered promiscuous mode [ 91.986676][ T1627] device veth1_macvtap entered promiscuous mode [ 92.580614][ T451] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 92.587888][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.596564][ T451] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 92.604567][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.613949][ T451] appleir 0003:05AC:8243.0007: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 92.625436][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.635203][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.642550][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.651001][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.659599][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.668798][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.677140][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.684774][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.693539][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.704040][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.712799][ T1375] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.719760][ T1375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.727914][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.736327][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.745219][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.753612][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.763177][ T1663] FAULT_INJECTION: forcing a failure. [ 92.763177][ T1663] name failslab, interval 1, probability 0, space 0, times 0 [ 92.775732][ T1663] CPU: 1 PID: 1663 Comm: syz.3.363 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 92.785403][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.795287][ T1663] Call Trace: [ 92.798407][ T1663] [ 92.801188][ T1663] dump_stack_lvl+0x151/0x1b7 [ 92.805701][ T1663] ? io_uring_drop_tctx_refs+0x190/0x190 [ 92.811167][ T1663] ? memcpy+0x56/0x70 [ 92.814988][ T1663] dump_stack+0x15/0x17 [ 92.818975][ T1663] should_fail+0x3c6/0x510 [ 92.824521][ T1663] __should_failslab+0xa4/0xe0 [ 92.829569][ T1663] ? skb_clone+0x1d1/0x360 [ 92.833820][ T1663] should_failslab+0x9/0x20 [ 92.838157][ T1663] slab_pre_alloc_hook+0x37/0xd0 [ 92.842932][ T1663] ? skb_clone+0x1d1/0x360 [ 92.847183][ T1663] kmem_cache_alloc+0x44/0x200 [ 92.851786][ T1663] ? tcf_action_dump_1+0x515/0x740 [ 92.856731][ T1663] skb_clone+0x1d1/0x360 [ 92.860813][ T1663] netlink_trim+0x165/0x230 [ 92.865149][ T1663] netlink_broadcast_filtered+0x66/0x1220 [ 92.870718][ T1663] ? nla_put+0x13a/0x1f0 [ 92.874783][ T1663] ? tcf_action_dump+0x1fc/0x290 [ 92.879563][ T1663] nlmsg_notify+0x101/0x1c0 [ 92.883897][ T1663] rtnetlink_send+0x61/0x70 [ 92.888235][ T1663] tc_ctl_action+0x8fb/0xd00 [ 92.892665][ T1663] ? tcf_free_cookie_rcu+0x50/0x50 [ 92.897619][ T1663] ? __mutex_lock_slowpath+0xe/0x10 [ 92.902645][ T1663] ? mutex_lock+0x135/0x1e0 [ 92.906982][ T1663] ? wait_for_completion_killable_timeout+0x10/0x10 [ 92.913406][ T1663] ? ns_capable+0x89/0xe0 [ 92.917573][ T1663] ? netlink_net_capable+0x125/0x160 [ 92.922695][ T1663] ? tcf_free_cookie_rcu+0x50/0x50 [ 92.927643][ T1663] rtnetlink_rcv_msg+0x951/0xc40 [ 92.932422][ T1663] ? rtnetlink_bind+0x80/0x80 [ 92.936927][ T1663] ? find_lock_lowest_rq+0x75/0x480 [ 92.941962][ T1663] ? __kasan_check_write+0x14/0x20 [ 92.946907][ T1663] ? push_rt_task+0x46e/0x5c0 [ 92.951421][ T1663] ? _raw_spin_unlock+0x4d/0x70 [ 92.956109][ T1663] ? finish_task_switch+0x167/0x7b0 [ 92.961143][ T1663] ? requeue_task_rt+0x410/0x410 [ 92.966005][ T1663] ? __kasan_check_write+0x14/0x20 [ 92.970951][ T1663] ? _raw_spin_lock+0xa4/0x1b0 [ 92.975550][ T1663] ? _raw_spin_trylock_bh+0x190/0x190 [ 92.980758][ T1663] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 92.986398][ T1663] ? rcu_preempt_deferred_qs_irqrestore+0x709/0x9f0 [ 92.992823][ T1663] netlink_rcv_skb+0x1cf/0x410 [ 92.997540][ T1663] ? rtnetlink_bind+0x80/0x80 [ 93.002034][ T1663] ? netlink_ack+0xb10/0xb10 [ 93.006464][ T1663] ? irqentry_exit+0x30/0x40 [ 93.010888][ T1663] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 93.016356][ T1663] rtnetlink_rcv+0x1c/0x20 [ 93.020611][ T1663] netlink_unicast+0x8df/0xac0 [ 93.025210][ T1663] ? netlink_detachskb+0x90/0x90 [ 93.029991][ T1663] ? security_netlink_send+0x7b/0xa0 [ 93.035102][ T1663] netlink_sendmsg+0xa0a/0xd20 [ 93.039705][ T1663] ? netlink_getsockopt+0x560/0x560 [ 93.044737][ T1663] ? security_socket_sendmsg+0x82/0xb0 [ 93.050209][ T1663] ? netlink_getsockopt+0x560/0x560 [ 93.055324][ T1663] ____sys_sendmsg+0x59e/0x8f0 [ 93.059925][ T1663] ? __sys_sendmsg_sock+0x40/0x40 [ 93.064785][ T1663] ? import_iovec+0xe5/0x120 [ 93.069212][ T1663] ___sys_sendmsg+0x252/0x2e0 [ 93.073725][ T1663] ? copy_from_kernel_nofault_allowed+0x8d/0x100 [ 93.079887][ T1663] ? __sys_sendmsg+0x260/0x260 [ 93.084488][ T1663] ? find_lock_lowest_rq+0x75/0x480 [ 93.089522][ T1663] ? push_rt_task+0x46e/0x5c0 [ 93.094034][ T1663] ? __fdget+0x1bc/0x240 [ 93.098124][ T1663] __se_sys_sendmsg+0x19a/0x260 [ 93.102801][ T1663] ? __x64_sys_sendmsg+0x90/0x90 [ 93.107572][ T1663] ? switch_fpu_return+0x1ed/0x3d0 [ 93.112521][ T1663] ? __kasan_check_read+0x11/0x20 [ 93.117380][ T1663] __x64_sys_sendmsg+0x7b/0x90 [ 93.121979][ T1663] do_syscall_64+0x3d/0xb0 [ 93.126231][ T1663] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 93.131960][ T1663] RIP: 0033:0x7f8beafd1bd9 [ 93.136217][ T1663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.155655][ T1663] RSP: 002b:00007f8bea211048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.163900][ T1663] RAX: ffffffffffffffda RBX: 00007f8beb160110 RCX: 00007f8beafd1bd9 [ 93.171710][ T1663] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000008 [ 93.179528][ T1663] RBP: 00007f8bea2110a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.187332][ T1663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.195145][ T1663] R13: 000000000000006e R14: 00007f8beb160110 R15: 00007fff77e42568 [ 93.202962][ T1663] [ 93.228604][ T6] usb 1-1: USB disconnect, device number 10 [ 93.244403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.261671][ T1669] netlink: 172 bytes leftover after parsing attributes in process `syz.1.359'. [ 93.281630][ T813] device bridge_slave_1 left promiscuous mode [ 93.287980][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.299775][ T813] device bridge_slave_0 left promiscuous mode [ 93.305717][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.314440][ T813] device veth1_macvtap left promiscuous mode [ 93.321525][ T813] device veth0_vlan left promiscuous mode [ 93.450223][ T1673] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 93.782697][ T1676] loop4: detected capacity change from 0 to 512 [ 93.828611][ T1673] fuse: Unknown parameter 'uid>00000000000000000000' [ 93.880885][ T1676] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 93.891341][ T1676] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 93.907575][ T1676] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 93.915982][ T1676] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.922982][ T1676] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.370: Invalid block bitmap block 0 in block_group 0 [ 93.936489][ T1676] EXT4-fs (loop4): Remounting filesystem read-only [ 93.949305][ T1676] Quota error (device loop4): write_blk: dquota write failed [ 93.956791][ T1676] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 93.966736][ T1676] EXT4-fs (loop4): 1 orphan inode deleted [ 93.983384][ T1676] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noinit_itable,noquota,noblock_validity,data_err=ignore,mblk_io_submit,acl,usrquota,. Quota mode: writeback. [ 94.005191][ T1673] EXT4-fs error (device loop4): ext4_remount:5845: comm syz.4.370: Abort forced by user [ 94.481273][ T1681] loop2: detected capacity change from 0 to 40427 [ 94.508954][ T1691] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.516416][ T1691] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.524158][ T1691] device bridge_slave_0 entered promiscuous mode [ 94.608604][ T1681] F2FS-fs (loop2): invalid crc value [ 94.648493][ T1700] device veth1_macvtap left promiscuous mode [ 94.660758][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.672437][ T1691] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.680049][ T1691] device bridge_slave_1 entered promiscuous mode [ 94.697289][ T1681] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.709379][ T1708] loop3: detected capacity change from 0 to 512 [ 94.757785][ T1681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 94.780116][ T1711] process 'syz.1.376' launched '/dev/fd/5' with NULL argv: empty string added [ 94.793560][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.800433][ T1691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.807500][ T1691] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.814357][ T1691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.821755][ T1708] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 94.821755][ T1708] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 94.821755][ T1708] [ 94.848671][ T30] audit: type=1400 audit(1721020352.484:269): avc: denied { mounton } for pid=1680 comm="syz.2.371" path="/5/file0/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.882386][ T1681] attempt to access beyond end of device [ 94.882386][ T1681] loop2: rw=524288, want=45072, limit=40427 [ 94.882968][ T1708] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 94.907050][ T1681] attempt to access beyond end of device [ 94.907050][ T1681] loop2: rw=0, want=45072, limit=40427 [ 94.907365][ T30] audit: type=1400 audit(1721020352.484:270): avc: denied { mount } for pid=1680 comm="syz.2.371" name="/" dev="ramfs" ino=20588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 94.993039][ T30] audit: type=1400 audit(1721020352.524:271): avc: denied { rename } for pid=1680 comm="syz.2.371" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.024776][ T1708] EXT4-fs (loop3): 1 truncate cleaned up [ 95.026420][ T1618] attempt to access beyond end of device [ 95.026420][ T1618] loop2: rw=0, want=45072, limit=40427 [ 95.030495][ T1708] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 95.067503][ T1618] attempt to access beyond end of device [ 95.067503][ T1618] loop2: rw=2049, want=45112, limit=40427 [ 95.074960][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.086930][ T576] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.093898][ T30] audit: type=1400 audit(1721020352.524:272): avc: denied { rmdir } for pid=1680 comm="syz.2.371" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.116202][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.144862][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.153052][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.160000][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.167257][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.175397][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.182431][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.189667][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.226769][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.314859][ T1721] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 95.701528][ T1691] device veth0_vlan entered promiscuous mode [ 95.704399][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.704629][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.704803][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.704967][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.705772][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.705967][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.713618][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.713754][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.714719][ T1691] device veth1_macvtap entered promiscuous mode [ 95.716872][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.717004][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.717120][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.717938][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.718076][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.988780][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.995798][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.003365][ T1741] device bridge_slave_0 entered promiscuous mode [ 97.016354][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.023482][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.191894][ T1762] loop0: detected capacity change from 0 to 1024 [ 97.203190][ T1741] device bridge_slave_1 entered promiscuous mode [ 97.209738][ T30] audit: type=1400 audit(1721020354.734:273): avc: denied { bind } for pid=1756 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.240155][ T1762] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 97.402360][ T813] device bridge_slave_1 left promiscuous mode [ 97.408577][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.418700][ T1762] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 97.426760][ T1762] System zones: 0-1, 3-12 [ 97.449334][ T1762] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue. Quota mode: none. [ 97.485562][ T1767] binder: BINDER_SET_CONTEXT_MGR already set [ 97.520643][ T1776] loop1: detected capacity change from 0 to 128 [ 97.529474][ T30] audit: type=1400 audit(1721020355.124:274): avc: denied { read } for pid=1764 comm="syz.4.394" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.551891][ T30] audit: type=1400 audit(1721020355.124:275): avc: denied { open } for pid=1764 comm="syz.4.394" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.575415][ T30] audit: type=1400 audit(1721020355.124:276): avc: denied { ioctl } for pid=1764 comm="syz.4.394" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.575578][ T813] device bridge_slave_0 left promiscuous mode [ 97.600854][ T1767] binder: 1764:1767 ioctl 4018620d 20000040 returned -16 [ 97.616489][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.647204][ T813] device bridge_slave_1 left promiscuous mode [ 97.686407][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.706746][ T1771] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 97.730757][ T1771] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 97.759908][ T813] device bridge_slave_0 left promiscuous mode [ 97.765862][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.910133][ T813] device veth1_macvtap left promiscuous mode [ 97.915984][ T813] device veth0_vlan left promiscuous mode [ 97.955635][ T813] device veth1_macvtap left promiscuous mode [ 97.986904][ T813] device veth0_vlan left promiscuous mode [ 98.013863][ T1790] loop0: detected capacity change from 0 to 1024 [ 98.082044][ T1790] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.139118][ T1790] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.400: Invalid block bitmap block 0 in block_group 0 [ 98.188498][ T1790] EXT4-fs error (device loop0): ext4_free_blocks:6216: comm syz.0.400: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.213040][ T1790] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.400: Invalid inode bitmap blk 0 in block_group 0 [ 98.235898][ T1790] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 98.252888][ T1790] EXT4-fs (loop0): 1 orphan inode deleted [ 98.266727][ T1790] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 98.355164][ T1793] loop0: detected capacity change from 0 to 256 [ 98.972321][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 98.972341][ T30] audit: type=1400 audit(1721020356.524:279): avc: denied { mounton } for pid=1792 comm="syz.0.401" path="/5/bus/file0" dev="loop0" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 99.074823][ T1803] loop1: detected capacity change from 0 to 2048 [ 99.101885][ T1803] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 99.153021][ T1809] loop4: detected capacity change from 0 to 1024 [ 99.242694][ T1803] loop1: detected capacity change from 0 to 512 [ 99.260462][ T1809] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.269189][ T1805] loop3: detected capacity change from 0 to 40427 [ 99.280047][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.287422][ T576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.291813][ T1803] EXT4-fs (loop1): Ignoring removed bh option [ 99.301849][ T1809] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.406: Invalid block bitmap block 0 in block_group 0 [ 99.310679][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.329115][ T1803] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 99.335121][ T1805] F2FS-fs (loop3): invalid crc value [ 99.344963][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.350561][ T1809] Quota error (device loop4): write_blk: dquota write failed [ 99.358183][ T1803] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.362772][ T1809] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 99.373000][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.383435][ T1809] EXT4-fs error (device loop4): ext4_free_blocks:6216: comm syz.4.406: Freeing blocks not in datazone - block = 0, count = 4096 [ 99.390229][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.408109][ T1803] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.409937][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.421057][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.423149][ T1803] EXT4-fs (loop1): 1 truncate cleaned up [ 99.430660][ T1809] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.406: Invalid inode bitmap blk 0 in block_group 0 [ 99.441184][ T1803] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,bh,,errors=continue. Quota mode: none. [ 99.452939][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.495114][ T1809] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 99.504824][ T1805] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.520088][ T1809] EXT4-fs (loop4): 1 orphan inode deleted [ 99.525949][ T1809] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 99.553120][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.555736][ T1805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 99.560230][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.560777][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.613859][ T1820] capability: warning: `syz.1.403' uses deprecated v2 capabilities in a way that may be insecure [ 99.694265][ T1805] attempt to access beyond end of device [ 99.694265][ T1805] loop3: rw=524288, want=45072, limit=40427 [ 99.748040][ T1805] attempt to access beyond end of device [ 99.748040][ T1805] loop3: rw=0, want=45072, limit=40427 [ 99.801227][ T1540] attempt to access beyond end of device [ 99.801227][ T1540] loop3: rw=0, want=45072, limit=40427 [ 99.814614][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.824711][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.832460][ T1540] attempt to access beyond end of device [ 99.832460][ T1540] loop3: rw=2049, want=45112, limit=40427 [ 99.833245][ T537] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 99.845263][ T30] audit: type=1400 audit(1721020357.494:280): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.881062][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.884269][ T30] audit: type=1400 audit(1721020357.494:281): avc: denied { unlink } for pid=82 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.888967][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.919138][ T30] audit: type=1400 audit(1721020357.514:282): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.921392][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.947924][ T1741] device veth0_vlan entered promiscuous mode [ 99.967258][ T1824] loop4: detected capacity change from 0 to 512 [ 99.972890][ T1741] device veth1_macvtap entered promiscuous mode [ 99.980506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.993208][ T1824] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 99.993208][ T1824] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 99.993208][ T1824] [ 100.012360][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.017219][ T1824] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 100.021680][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.029047][ T1824] EXT4-fs (loop4): 1 truncate cleaned up [ 100.036984][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.050175][ T1824] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 100.146274][ T1831] netlink: 172 bytes leftover after parsing attributes in process `syz.2.387'. [ 100.317312][ T1833] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 100.399499][ T295] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 100.615447][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.622614][ T1836] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.631625][ T1836] device bridge_slave_0 entered promiscuous mode [ 100.715528][ T30] audit: type=1400 audit(1721020358.344:283): avc: denied { sys_module } for pid=1845 comm="syz.4.416" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.780418][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.787546][ T1836] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.795371][ T1836] device bridge_slave_1 entered promiscuous mode [ 100.802224][ T30] audit: type=1400 audit(1721020358.444:284): avc: denied { getopt } for pid=1845 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.821837][ T295] usb 2-1: Using ep0 maxpacket: 16 [ 100.867790][ T1848] netlink: 116 bytes leftover after parsing attributes in process `syz.4.416'. [ 100.939518][ T295] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 100.987040][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.993938][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.001208][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.008220][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.027726][ T576] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.035150][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.053821][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.061083][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.069770][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.242476][ T1375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.250704][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.257538][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.279576][ T295] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 101.289348][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.297298][ T295] usb 2-1: Product: syz [ 101.301350][ T295] usb 2-1: Manufacturer: syz [ 101.305726][ T295] usb 2-1: SerialNumber: syz [ 101.310982][ T295] usb 2-1: config 0 descriptor?? [ 101.355383][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.364737][ T295] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 101.372543][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.380820][ T295] usb 2-1: Detected FT232RL [ 101.385368][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.392246][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.409087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.416839][ T451] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 101.424576][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.432523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.440522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.457833][ T1836] device veth0_vlan entered promiscuous mode [ 101.464770][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.473022][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.481126][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.488763][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.501606][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.508882][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.521475][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.529692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.542078][ T1836] device veth1_macvtap entered promiscuous mode [ 101.551056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.558442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.566122][ T1826] loop1: detected capacity change from 0 to 512 [ 101.567146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.584931][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.593133][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.658085][ T813] device bridge_slave_1 left promiscuous mode [ 101.664183][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.671951][ T813] device bridge_slave_0 left promiscuous mode [ 101.678990][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.687811][ T813] device bridge_slave_1 left promiscuous mode [ 101.693953][ T813] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.729828][ T295] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 101.776420][ T813] device bridge_slave_0 left promiscuous mode [ 101.783624][ T295] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 101.796359][ T813] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.904041][ T295] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 101.913039][ T295] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.920734][ T576] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 101.929290][ T813] device veth0_vlan left promiscuous mode [ 101.938555][ T813] device veth1_macvtap left promiscuous mode [ 101.944660][ T813] device veth0_vlan left promiscuous mode [ 101.979831][ T451] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 101.990737][ T451] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.004578][ T295] usb 2-1: USB disconnect, device number 12 [ 102.010932][ T295] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 102.020571][ T295] ftdi_sio 2-1:0.0: device disconnected [ 102.079538][ T451] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.089103][ T451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 102.097066][ T451] usb 5-1: SerialNumber: syz [ 102.140202][ T1853] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.259460][ T576] usb 1-1: Using ep0 maxpacket: 16 [ 102.279514][ T313] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 102.357173][ T1887] loop1: detected capacity change from 0 to 1024 [ 102.363582][ T1853] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.379473][ T576] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 102.387347][ T576] usb 1-1: config 0 has no interface number 0 [ 102.393318][ T576] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 102.440029][ T1887] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.453786][ T1887] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.426: Invalid block bitmap block 0 in block_group 0 [ 102.467581][ T1887] Quota error (device loop1): write_blk: dquota write failed [ 102.475282][ T1887] EXT4-fs error (device loop1): ext4_free_blocks:6216: comm syz.1.426: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.488808][ T1887] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.426: Invalid inode bitmap blk 0 in block_group 0 [ 102.503846][ T1887] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 102.512642][ T1887] EXT4-fs (loop1): 1 orphan inode deleted [ 102.518237][ T1887] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 102.537861][ T576] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 102.547954][ T576] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 102.555838][ T576] usb 1-1: Product: syz [ 102.559894][ T576] usb 1-1: SerialNumber: syz [ 102.565299][ T576] usb 1-1: config 0 descriptor?? [ 102.589579][ T1862] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 102.699471][ T313] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 102.707204][ T313] usb 3-1: can't read configurations, error -22 [ 102.763223][ T1898] veth0_to_bond: mtu less than device minimum [ 102.821871][ T451] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 102.859450][ T313] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 102.890233][ T576] usb 1-1: invalid MIDI in EP 0 [ 102.895151][ T576] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 102.908774][ T576] usb 1-1: USB disconnect, device number 11 [ 103.043733][ T1853] fuse: Bad value for 'fd' [ 103.049788][ T6] usb 5-1: USB disconnect, device number 13 [ 103.056955][ T6] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 103.259510][ T313] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 103.267255][ T313] usb 3-1: can't read configurations, error -22 [ 103.273457][ T313] usb usb3-port1: attempt power cycle [ 103.533955][ T1951] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.544694][ T1951] exFAT-fs (loop0): unable to read boot sector [ 103.550673][ T1951] exFAT-fs (loop0): failed to read boot sector [ 103.556617][ T1951] exFAT-fs (loop0): failed to recognize exfat type [ 103.799441][ T313] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 104.279503][ T313] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 104.322097][ T313] usb 3-1: can't read configurations, error -22 [ 104.587911][ T1956] loop4: detected capacity change from 0 to 131072 [ 104.618668][ T1956] F2FS-fs (loop4): invalid crc value [ 104.628603][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 104.628620][ T30] audit: type=1400 audit(1721020362.274:288): avc: denied { getopt } for pid=1971 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.654660][ T313] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 104.809245][ T1956] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.815798][ T30] audit: type=1326 audit(1721020362.374:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a88bbd9 code=0x7ffc0000 [ 104.830995][ T1980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 104.848380][ T1980] FAULT_INJECTION: forcing a failure. [ 104.848380][ T1980] name failslab, interval 1, probability 0, space 0, times 0 [ 104.859045][ T30] audit: type=1326 audit(1721020362.374:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fb51a88bbd9 code=0x7ffc0000 [ 104.878280][ T1980] CPU: 0 PID: 1980 Comm: syz.0.441 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 104.884694][ T30] audit: type=1326 audit(1721020362.384:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a88bbd9 code=0x7ffc0000 [ 104.893411][ T1980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.893423][ T1980] Call Trace: [ 104.893428][ T1980] [ 104.893435][ T1980] dump_stack_lvl+0x151/0x1b7 [ 104.893456][ T1980] ? io_uring_drop_tctx_refs+0x190/0x190 [ 104.916921][ T30] audit: type=1326 audit(1721020362.384:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.3.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51a88bbd9 code=0x7ffc0000 [ 104.926393][ T1980] dump_stack+0x15/0x17 [ 104.926416][ T1980] should_fail+0x3c6/0x510 [ 104.973529][ T1980] __should_failslab+0xa4/0xe0 [ 104.978137][ T1980] ? __alloc_skb+0xbe/0x550 [ 104.982465][ T1980] should_failslab+0x9/0x20 [ 104.986800][ T1980] slab_pre_alloc_hook+0x37/0xd0 [ 104.991574][ T1980] ? __alloc_skb+0xbe/0x550 [ 104.995914][ T1980] kmem_cache_alloc+0x44/0x200 [ 105.000514][ T1980] __alloc_skb+0xbe/0x550 [ 105.004679][ T1980] __tcf_chain_get+0x3c8/0x590 [ 105.009280][ T1980] tc_new_tfilter+0xa0d/0x1c00 [ 105.013882][ T1980] ? tcf_gate_entry_destructor+0x20/0x20 [ 105.019349][ T1980] ? security_capable+0x87/0xb0 [ 105.024034][ T1980] ? ns_capable+0x89/0xe0 [ 105.028199][ T1980] ? netlink_net_capable+0x125/0x160 [ 105.033318][ T1980] ? tcf_gate_entry_destructor+0x20/0x20 [ 105.038795][ T1980] rtnetlink_rcv_msg+0x776/0xc40 [ 105.043573][ T1980] ? rtnetlink_bind+0x80/0x80 [ 105.048075][ T1980] ? stack_trace_save+0x1c0/0x1c0 [ 105.052937][ T1980] ? __kernel_text_address+0x9b/0x110 [ 105.058143][ T1980] ? unwind_get_return_address+0x4d/0x90 [ 105.063618][ T1980] ? avc_has_perm_noaudit+0x348/0x430 [ 105.068819][ T1980] ? memcpy+0x56/0x70 [ 105.072640][ T1980] ? avc_has_perm_noaudit+0x2dd/0x430 [ 105.077848][ T1980] ? avc_denied+0x1b0/0x1b0 [ 105.082274][ T1980] ? avc_has_perm+0x16f/0x260 [ 105.086794][ T1980] ? ____kasan_kmalloc+0xed/0x110 [ 105.091646][ T1980] ? avc_has_perm_noaudit+0x430/0x430 [ 105.096976][ T1980] ? do_syscall_64+0x3d/0xb0 [ 105.101403][ T1980] netlink_rcv_skb+0x1cf/0x410 [ 105.106001][ T1980] ? rtnetlink_bind+0x80/0x80 [ 105.110626][ T1980] ? netlink_ack+0xb10/0xb10 [ 105.115061][ T1980] ? __netlink_lookup+0x37b/0x3a0 [ 105.119915][ T1980] rtnetlink_rcv+0x1c/0x20 [ 105.124175][ T1980] netlink_unicast+0x8df/0xac0 [ 105.128767][ T1980] ? netlink_detachskb+0x90/0x90 [ 105.133539][ T1980] ? security_netlink_send+0x7b/0xa0 [ 105.138659][ T1980] netlink_sendmsg+0xa0a/0xd20 [ 105.143261][ T1980] ? netlink_getsockopt+0x560/0x560 [ 105.148294][ T1980] ? kasan_set_track+0x5d/0x70 [ 105.152911][ T1980] ? security_socket_sendmsg+0x82/0xb0 [ 105.158188][ T1980] ? netlink_getsockopt+0x560/0x560 [ 105.163231][ T1980] ____sys_sendmsg+0x59e/0x8f0 [ 105.167831][ T1980] ? __sys_sendmsg_sock+0x40/0x40 [ 105.172682][ T1980] ? import_iovec+0xe5/0x120 [ 105.177109][ T1980] ___sys_sendmsg+0x252/0x2e0 [ 105.181622][ T1980] ? __sys_sendmsg+0x260/0x260 [ 105.186226][ T1980] ? __fdget+0x1bc/0x240 [ 105.190305][ T1980] __se_sys_sendmsg+0x19a/0x260 [ 105.195001][ T1980] ? __x64_sys_sendmsg+0x90/0x90 [ 105.199781][ T1980] ? ksys_write+0x260/0x2c0 [ 105.204111][ T1980] ? debug_smp_processor_id+0x17/0x20 [ 105.209307][ T1980] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 105.215208][ T1980] __x64_sys_sendmsg+0x7b/0x90 [ 105.219807][ T1980] do_syscall_64+0x3d/0xb0 [ 105.224058][ T1980] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.229787][ T1980] RIP: 0033:0x7ffb8961fbd9 [ 105.234041][ T1980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.254181][ T1980] RSP: 002b:00007ffb888a1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.262423][ T1980] RAX: ffffffffffffffda RBX: 00007ffb897adf60 RCX: 00007ffb8961fbd9 [ 105.270231][ T1980] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 105.278056][ T1980] RBP: 00007ffb888a10a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.285868][ T1980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.293672][ T1980] R13: 000000000000000b R14: 00007ffb897adf60 R15: 00007fffee46fdf8 [ 105.301485][ T1980] [ 105.308574][ T1956] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 105.324405][ T1956] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 105.340816][ T30] audit: type=1400 audit(1721020362.984:293): avc: denied { mount } for pid=1955 comm="syz.4.435" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.372258][ T313] usb 3-1: device descriptor read/all, error -71 [ 105.389700][ T313] usb usb3-port1: unable to enumerate USB device [ 105.435560][ T30] audit: type=1400 audit(1721020363.064:294): avc: denied { relabelfrom } for pid=1990 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.455435][ T30] audit: type=1400 audit(1721020363.064:295): avc: denied { relabelto } for pid=1990 comm="syz.1.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.489182][ T1994] syz.3.446 uses obsolete (PF_INET,SOCK_PACKET) [ 105.598662][ T30] audit: type=1400 audit(1721020363.234:296): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.621316][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 105.868689][ T2008] loop4: detected capacity change from 0 to 512 [ 106.042190][ T2008] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 106.042190][ T2008] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 106.042190][ T2008] [ 106.077341][ T2008] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 106.090500][ T2008] EXT4-fs (loop4): 1 truncate cleaned up [ 106.095987][ T2008] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 106.261862][ T2014] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 106.464366][ T2019] fuse: Unknown parameter '&d' [ 106.578172][ T2027] loop4: detected capacity change from 0 to 1024 [ 106.588698][ T2027] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.608692][ T2027] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.452: Invalid block bitmap block 0 in block_group 0 [ 106.623155][ T2027] Quota error (device loop4): write_blk: dquota write failed [ 106.630855][ T2027] EXT4-fs error (device loop4): ext4_free_blocks:6216: comm syz.4.452: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.645091][ T2027] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.452: Invalid inode bitmap blk 0 in block_group 0 [ 106.793203][ T2027] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 106.829315][ T2027] EXT4-fs (loop4): 1 orphan inode deleted [ 106.839427][ T2027] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 106.876051][ T2038] loop1: detected capacity change from 0 to 512 [ 106.959979][ T2038] EXT4-fs (loop1): Ignoring removed bh option [ 106.967500][ T2038] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.980245][ T2038] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.459: invalid block [ 106.991113][ T2038] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.459: couldn't read orphan inode 11 (err -117) [ 107.002940][ T2038] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsv1,noinit_itable,stripe=0x0000000000000004,dioread_nolock,jqfmt=vfsv0,dioread_nolock,bh,quota,,errors=continue. Quota mode: writeback. [ 107.029040][ T2038] netlink: 165 bytes leftover after parsing attributes in process `syz.1.459'. [ 107.039634][ T2038] device bridge0 entered promiscuous mode [ 107.045284][ T2038] device macsec1 entered promiscuous mode [ 107.051632][ T2038] device bridge0 left promiscuous mode [ 107.191013][ T2047] loop1: detected capacity change from 0 to 2048 [ 107.260704][ T2047] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.346075][ T2051] loop2: detected capacity change from 0 to 512 [ 107.442503][ T2051] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 107.442503][ T2051] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 107.442503][ T2051] [ 107.519605][ T2051] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 107.613002][ T2051] EXT4-fs (loop2): 1 truncate cleaned up [ 107.618489][ T2051] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 107.837352][ T2067] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 108.188963][ T2074] loop1: detected capacity change from 0 to 1024 [ 108.249656][ T2076] loop0: detected capacity change from 0 to 1024 [ 108.280687][ T2076] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.295719][ T2074] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.312978][ T2076] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.471: Invalid block bitmap block 0 in block_group 0 [ 108.322928][ T2074] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.470: Invalid block bitmap block 0 in block_group 0 [ 108.326523][ T2076] EXT4-fs error (device loop0): ext4_free_blocks:6216: comm syz.0.471: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.339792][ T2074] EXT4-fs error (device loop1): ext4_free_blocks:6216: comm syz.1.470: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.353120][ T2076] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.471: Invalid inode bitmap blk 0 in block_group 0 [ 108.366030][ T2074] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.470: Invalid inode bitmap blk 0 in block_group 0 [ 108.390691][ T2076] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 108.399150][ T2076] EXT4-fs (loop0): 1 orphan inode deleted [ 108.404938][ T295] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 108.407561][ T2076] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 108.423806][ T2080] loop4: detected capacity change from 0 to 512 [ 108.431733][ T2074] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 108.446440][ T2074] EXT4-fs (loop1): 1 orphan inode deleted [ 108.456474][ T2074] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,dioread_nolock,bsddf,bsdgroups,,errors=continue. Quota mode: writeback. [ 108.501662][ T2080] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 108.501662][ T2080] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 108.501662][ T2080] [ 108.524088][ T2080] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 108.540897][ T2080] EXT4-fs (loop4): 1 truncate cleaned up [ 108.546363][ T2080] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 108.673088][ T2103] loop1: detected capacity change from 0 to 512 [ 108.709478][ T295] usb 3-1: Using ep0 maxpacket: 32 [ 108.937329][ T2100] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 109.166369][ T2103] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 109.166369][ T2103] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 109.166369][ T2103] [ 109.199647][ T295] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.203438][ T2103] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 109.218110][ T2103] EXT4-fs (loop1): 1 truncate cleaned up [ 109.223218][ T295] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.223714][ T2103] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 109.445192][ T2111] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 110.192288][ T295] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.255911][ T2120] loop1: detected capacity change from 0 to 16 [ 110.264129][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.273029][ T295] usb 3-1: Product: syz [ 110.277009][ T295] usb 3-1: Manufacturer: syz [ 110.281790][ T295] usb 3-1: SerialNumber: syz [ 110.299670][ T2120] erofs: Unknown parameter '' [ 110.399251][ T2126] loop3: detected capacity change from 0 to 256 [ 110.479338][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 110.490479][ T2126] FAT-fs (loop3): Unrecognized mount option "sys_"mmutable" or missing value [ 110.499302][ T30] audit: type=1400 audit(1721020368.024:306): avc: denied { create } for pid=2115 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 SYZFAIL: bad allocate request allocated=0 size=18446744071864494321/18446744071864494328 (errno 11: Resource temporarily unavailable) [ 110.592481][ T2130] loop1: detected capacity change from 0 to 512 [ 110.639570][ T295] usb 3-1: 0:2 : does not exist [ 110.647718][ T295] usb 3-1: USB disconnect, device number 18 [ 110.661009][ T2130] EXT4-fs (loop1): Mount option "journal_checksum" incompatible with ext2 [ 110.676943][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.350412][ T8] device bridge_slave_1 left promiscuous mode [ 111.356410][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.363680][ T8] device bridge_slave_0 left promiscuous mode [ 111.369688][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.377212][ T8] device veth1_macvtap left promiscuous mode [ 111.383088][ T8] device veth0_vlan left promiscuous mode [ 112.710180][ T8] device bridge_slave_1 left promiscuous mode [ 112.716140][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.723444][ T8] device bridge_slave_0 left promiscuous mode [ 112.729357][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.736984][ T8] device bridge_slave_1 left promiscuous mode [ 112.743002][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.750332][ T8] device bridge_slave_0 left promiscuous mode [ 112.756262][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.763913][ T8] device bridge_slave_1 left promiscuous mode [ 112.769895][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.776954][ T8] device bridge_slave_0 left promiscuous mode [ 112.783013][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.790637][ T8] device bridge_slave_1 left promiscuous mode [ 112.796525][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.804008][ T8] device bridge_slave_0 left promiscuous mode [ 112.809958][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.817972][ T8] device veth1_macvtap left promiscuous mode [ 112.823818][ T8] device veth0_vlan left promiscuous mode [ 112.829680][ T8] device veth1_macvtap left promiscuous mode [ 112.835478][ T8] device veth0_vlan left promiscuous mode [ 112.841318][ T8] device veth1_macvtap left promiscuous mode [ 112.847248][ T8] device veth0_vlan left promiscuous mode [ 112.853021][ T8] device veth1_macvtap left promiscuous mode [ 112.858834][ T8] device veth0_vlan left promiscuous mode