last executing test programs:

4.957277897s ago: executing program 3:
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r1)
r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00')
statx(r2, &(0x7f0000000100)='\x00', 0x1000, 0x6000, 0x0)

4.945731309s ago: executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b5"], 0x0}, 0x90)
io_setup(0x4, &(0x7f0000000000)=<r6=>0x0)
io_submit(r6, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
unshare(0x64000600)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

4.319174917s ago: executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100"], 0x0)

3.999539847s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

3.877228666s ago: executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_bhoz_i~odes=K,\x00'])
syz_open_dev$usbfs(0x0, 0xfffffffffffffffe, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
setrlimit(0x7, &(0x7f0000000500)={0x0, 0xf91})
pipe2$9p(&(0x7f0000000000), 0x0)
syz_open_dev$usbfs(0x0, 0x3, 0x8800)
memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x0)
io_setup(0x5, &(0x7f0000000340)=<r0=>0x0)
io_destroy(r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

3.440389224s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10)
get_robust_list(0x0, 0x0, 0x0)

3.33550093s ago: executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x9, 0x7, {{0xe, 0x4, 0x0, 0x31, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty, {[@cipso={0x86, 0x21, 0x0, [{0x7, 0xb, "9278fa116a27d742b1"}, {0x0, 0x10, "970611703fe0f903d8b974483d84"}]}]}}}}})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d00000000000001090224000100000000090400000103000000"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x31, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@lld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
syz_usb_control_io(r1, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00'}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='quota,alloc_mode=default,usrjquota=\\\'%#--+[:,flush_merge,resuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6261636b67726f756e645f67633d73796e632c6e6f6c617a7974696d652c6a71666d743d76667376312c657874656e745f63616368652c6772706a71756f74613d666c7573685f6d657267652c66617374626f6f742c6e6f666c7573685f6d657267652c0038908b64095c58226c3d76204cc8c8f778a8cd7e32a4d42314eb8bce7a97ec5889ff28465d04debeed280593fe106e3c1d97275aef6d029eec69fc67ea099b92b81d"], 0x1, 0x54ff, &(0x7f0000000a40)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

2.741663723s ago: executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_find_extent_range_exit\x00', r1}, 0x10)
write$cgroup_int(r0, &(0x7f0000000100), 0x1001)

2.629207s ago: executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x1c243911)
keyctl$chown(0x4, r0, 0xee00, 0x0)
getgroups(0x2, &(0x7f0000000040)=[0x0, <r1=>0xee00])
keyctl$chown(0x4, r0, 0xffffffffffffffff, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
keyctl$chown(0x4, r0, 0x0, 0x0)

2.407364705s ago: executing program 0:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='ext4_da_reserve_space\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_da_reserve_space\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x43451)

2.349707313s ago: executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

2.316641458s ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f0000000040)='./file1\x00', 0x100002, 0x0)
pwrite64(r0, &(0x7f0000000140)="9d", 0x1, 0x10000000005)

2.235409851s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, &(0x7f0000000ac0)=""/244}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x3, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x2e, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x2c}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', <r4=>0x0, 0x4, 0x7, 0x1, 0x9, 0x16, @loopback, @mcast2, 0x20, 0x8000, 0x4, 0x80000000}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getuid()

2.062451888s ago: executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

1.993106699s ago: executing program 0:
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e0100"], 0x0)

1.768588574s ago: executing program 1:
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x1523, &(0x7f00000037c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000440)='./bus\x00', 0x6c842, 0x0)
read$FUSE(r0, &(0x7f0000004d00)={0x2020}, 0x2028)

1.673899059s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='tlb_flush\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.614661718s ago: executing program 1:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x1c243911)
keyctl$chown(0x4, r0, 0xee00, 0x0)
getgroups(0x2, &(0x7f0000000040)=[0x0, <r1=>0xee00])
keyctl$chown(0x4, r0, 0xffffffffffffffff, r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
keyctl$chown(0x4, r0, 0x0, 0x0)

1.387315413s ago: executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
write$binfmt_misc(r0, 0x0, 0xfdef)

1.355781988s ago: executing program 2:
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x0, @mcast1}}}, 0x88)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000078, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000010f4a6133d1261d69d3d000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x1d6)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001439)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.241062096s ago: executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f030212000610", 0xa, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.226592718s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)='%pB    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='tlb_flush\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.125314344s ago: executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0)

723.012257ms ago: executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000540)="$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")

590.285297ms ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r5, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x6}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0)

282.766976ms ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x7, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x400)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000001)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0x15, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='io_uring_cqe_overflow\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000003c0)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "4402173fb9462d3589e67197f90be6e423ceb0024912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r4 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4812f9f6a31854ec98e950cfed21fcad7ff0fbcb566a098201008caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x4, 0x0, r4, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r3, r4, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0)
write$tun(r5, &(0x7f0000000280)=ANY=[], 0x15)

242.191382ms ago: executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x0, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @loopback}, 0x1c, 0x0}, 0x0)

220.912105ms ago: executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='ext4_sync_file_enter\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x4000)

12.192707ms ago: executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0)
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

0s ago: executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000250000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts.
2024/06/17 20:09:47 fuzzer started
2024/06/17 20:09:48 dialing manager at 10.128.0.163:30012
[   22.234741][   T28] audit: type=1400 audit(1718654988.013:66): avc:  denied  { node_bind } for  pid=285 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   22.255084][   T28] audit: type=1400 audit(1718654988.013:67): avc:  denied  { name_bind } for  pid=285 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   22.306665][   T28] audit: type=1400 audit(1718654988.083:68): avc:  denied  { setattr } for  pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   22.334696][  T294] cgroup: Unknown subsys name 'net'
[   22.341849][  T294] cgroup: Unknown subsys name 'devices'
[   22.347947][   T28] audit: type=1400 audit(1718654988.093:69): avc:  denied  { mounton } for  pid=295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   22.374498][   T28] audit: type=1400 audit(1718654988.093:70): avc:  denied  { mount } for  pid=295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.382017][  T299] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   22.397896][   T28] audit: type=1400 audit(1718654988.113:71): avc:  denied  { mounton } for  pid=294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   22.429448][   T28] audit: type=1400 audit(1718654988.113:72): avc:  denied  { mount } for  pid=294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.451510][   T28] audit: type=1400 audit(1718654988.123:73): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   22.471283][   T28] audit: type=1400 audit(1718654988.193:74): avc:  denied  { relabelto } for  pid=299 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.496658][   T28] audit: type=1400 audit(1718654988.193:75): avc:  denied  { write } for  pid=299 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.525062][  T294] cgroup: Unknown subsys name 'hugetlb'
[   22.530800][  T294] cgroup: Unknown subsys name 'rlimit'
[   22.533234][  T297] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
2024/06/17 20:09:48 starting 5 executor processes
[   24.041988][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.048860][  T312] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.056225][  T312] device bridge_slave_0 entered promiscuous mode
[   24.065384][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.072378][  T312] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.079594][  T312] device bridge_slave_1 entered promiscuous mode
[   24.112837][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.119804][  T310] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.127191][  T310] device bridge_slave_0 entered promiscuous mode
[   24.134165][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.141062][  T310] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.148434][  T310] device bridge_slave_1 entered promiscuous mode
[   24.169424][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.176289][  T314] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.183648][  T314] device bridge_slave_0 entered promiscuous mode
[   24.194108][  T314] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.201100][  T314] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.208574][  T314] device bridge_slave_1 entered promiscuous mode
[   24.235889][  T311] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.242877][  T311] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.250210][  T311] device bridge_slave_0 entered promiscuous mode
[   24.259639][  T311] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.266482][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.273892][  T311] device bridge_slave_1 entered promiscuous mode
[   24.301030][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.307885][  T313] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.315228][  T313] device bridge_slave_0 entered promiscuous mode
[   24.335819][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.342778][  T313] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.350106][  T313] device bridge_slave_1 entered promiscuous mode
[   24.543398][  T312] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.550366][  T312] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.557464][  T312] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.564413][  T312] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.572860][  T311] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.579730][  T311] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.586812][  T311] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.593620][  T311] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.613533][  T310] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.620418][  T310] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.627635][  T310] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.634444][  T310] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.646003][  T313] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.652979][  T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.660094][  T313] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.666940][  T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.688564][  T314] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.695458][  T314] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.702716][  T314] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.709576][  T314] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.749472][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.756660][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.763957][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.771018][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.778027][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.785440][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.792432][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.800028][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.807067][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.814300][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.822680][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.849257][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.856840][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.865105][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.872063][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.910877][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.918395][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   24.927388][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.935643][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.942511][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[   24.950374][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   24.958425][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.965302][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[   24.972451][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   24.980303][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   24.988107][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   24.996189][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.003070][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.010357][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.018341][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.025342][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.032479][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.040632][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.047458][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.054838][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   25.062260][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   25.069657][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   25.077624][  T315] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.084480][  T315] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.091627][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.099693][  T315] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.106550][  T315] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.130593][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.156072][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   25.164698][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.171894][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.179211][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.186975][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.195046][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.202962][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.210804][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.218595][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.226431][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.234763][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.242595][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.250455][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.258161][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.266117][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.273986][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   25.282481][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   25.291923][  T311] device veth0_vlan entered promiscuous mode
[   25.299261][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.306607][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.320569][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.329370][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.347342][  T313] device veth0_vlan entered promiscuous mode
[   25.358847][  T312] device veth0_vlan entered promiscuous mode
[   25.365579][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.373948][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.382263][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.390133][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   25.397976][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   25.405908][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.413669][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.421667][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.429022][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.436293][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.443738][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.461138][  T314] device veth0_vlan entered promiscuous mode
[   25.468748][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.477117][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.485364][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.493528][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.501565][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.508970][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.521426][  T311] device veth1_macvtap entered promiscuous mode
[   25.530506][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.538557][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.549488][  T314] device veth1_macvtap entered promiscuous mode
[   25.561436][  T312] device veth1_macvtap entered promiscuous mode
[   25.577602][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.585827][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.594201][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.602433][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.610964][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.618858][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.627016][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.634491][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.643165][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.651545][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.659618][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.682256][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.690448][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.698563][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.706893][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.715444][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.723747][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   25.731886][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   25.740103][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   25.748203][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.759841][  T310] device veth0_vlan entered promiscuous mode
[   25.779281][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   25.787048][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   25.795368][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   25.802794][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   25.811869][  T313] device veth1_macvtap entered promiscuous mode
[   25.818672][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   25.827140][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   25.845082][  T310] device veth1_macvtap entered promiscuous mode
[   25.881518][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   25.892092][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   25.914574][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   25.954311][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   25.963639][  T345] loop2: detected capacity change from 0 to 2048
[   25.963849][  T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.103223][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   26.122399][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   26.158285][  T357] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   26.165603][  T345] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   26.191382][  T314] EXT4-fs (loop2): unmounting filesystem.
[   26.197264][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   26.205688][  T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   26.254035][  T363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[   26.269182][  T365] syz-executor.1[365] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   26.269266][  T365] syz-executor.1[365] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   26.467476][  T368] loop2: detected capacity change from 0 to 40427
[   26.495013][  T368] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   26.502755][  T368] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   26.523737][  T368] F2FS-fs (loop2): Found nat_bits in checkpoint
[   26.563127][  T392] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   26.571076][  T368] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   26.590798][  T368] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   26.597758][  T368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   26.679042][  T350] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   26.702180][  T401] loop1: detected capacity change from 0 to 8192
[   26.708624][  T367] syz-executor.2: attempt to access beyond end of device
[   26.708624][  T367] loop2: rw=2049, sector=77824, nr_sectors = 2216 limit=40427
[   26.721513][  T401] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   26.749734][  T368] syz-executor.2: attempt to access beyond end of device
[   26.749734][  T368] loop2: rw=2049, sector=80040, nr_sectors = 1880 limit=40427
[   26.770357][  T402] syz-executor.2: attempt to access beyond end of device
[   26.770357][  T402] loop2: rw=2049, sector=49152, nr_sectors = 8 limit=40427
[   26.822866][  T368] syz-executor.2: attempt to access beyond end of device
[   26.822866][  T368] loop2: rw=2049, sector=49160, nr_sectors = 4088 limit=40427
[   26.869243][  T411] loop1: detected capacity change from 0 to 512
[   26.869930][  T368] syz-executor.2: attempt to access beyond end of device
[   26.869930][  T368] loop2: rw=2049, sector=57344, nr_sectors = 4376 limit=40427
[   26.884655][  T411] =======================================================
[   26.884655][  T411] WARNING: The mand mount option has been deprecated and
[   26.884655][  T411]          and is ignored by this kernel. Remove the mand
[   26.884655][  T411]          option from the mount to silence this warning.
[   26.884655][  T411] =======================================================
[   26.952110][  T411] EXT4-fs (loop1): 1 orphan inode deleted
[   26.958269][  T411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   26.985251][   T10] kworker/u4:1: attempt to access beyond end of device
[   26.985251][   T10] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   26.986359][  T411] ext4 filesystem being mounted at /root/syzkaller-testdir1732292791/syzkaller.dHSoOo/9/file1 supports timestamps until 2038 (0x7fffffff)
[   27.114570][  T350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   27.129994][  T350] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   27.246020][  T425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   27.403576][   T28] kauditd_printk_skb: 76 callbacks suppressed
[   27.403601][   T28] audit: type=1400 audit(1718654993.183:152): avc:  denied  { read } for  pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   27.461731][  T432] loop4: detected capacity change from 0 to 256
[   27.479301][  T350] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   27.481763][  T432] FAT-fs (loop4): Directory bread(block 64) failed
[   27.489716][  T350] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   27.497804][  T432] FAT-fs (loop4): Directory bread(block 65) failed
[   27.502679][   T28] audit: type=1326 audit(1718654993.273:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=433 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44d8c7cf29 code=0x0
[   27.509632][  T432] FAT-fs (loop4): Directory bread(block 66) failed
[   27.533896][  T350] usb 4-1: SerialNumber: syz
[   27.545868][  T432] FAT-fs (loop4): Directory bread(block 67) failed
[   27.552858][  T432] FAT-fs (loop4): Directory bread(block 68) failed
[   27.562144][   T28] audit: type=1400 audit(1718654993.343:154): avc:  denied  { read write } for  pid=435 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   27.565833][  T432] FAT-fs (loop4): Directory bread(block 69) failed
[   27.585953][   T28] audit: type=1400 audit(1718654993.343:155): avc:  denied  { open } for  pid=435 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   27.593173][  T432] FAT-fs (loop4): Directory bread(block 70) failed
[   27.623019][  T432] FAT-fs (loop4): Directory bread(block 71) failed
[   27.629464][  T432] FAT-fs (loop4): Directory bread(block 72) failed
[   27.636132][  T432] FAT-fs (loop4): Directory bread(block 73) failed
[   27.674065][   T28] audit: type=1400 audit(1718654993.453:156): avc:  denied  { unmount } for  pid=312 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   27.694993][  T346] kworker/u4:3: attempt to access beyond end of device
[   27.694993][  T346] loop4: rw=1, sector=1224, nr_sectors = 128 limit=256
[   27.710507][   T28] audit: type=1400 audit(1718654993.493:157): avc:  denied  { setopt } for  pid=440 comm="syz-executor.0" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   27.747244][  T444] Invalid ELF section header overflow
[   27.752620][   T28] audit: type=1400 audit(1718654993.523:158): avc:  denied  { sys_module } for  pid=433 comm="syz-executor.2" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   27.774818][  T310] EXT4-fs (loop1): unmounting filesystem.
[   27.781542][   T28] audit: type=1400 audit(1718654993.523:159): avc:  denied  { module_load } for  pid=433 comm="syz-executor.2" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1
[   27.850245][  T350] usb 4-1: 0:2 : does not exist
[   27.856827][   T28] audit: type=1400 audit(1718654993.633:160): avc:  denied  { write } for  pid=447 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   27.871445][  T350] usb 4-1: USB disconnect, device number 2
[   27.931254][  T457] loop0: detected capacity change from 0 to 256
[   27.938130][  T457] exfat: Deprecated parameter 'namecase'
[   27.946290][  T457] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d)
[   27.960678][  T450] udevd[450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   28.029034][  T334] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   28.051636][  T467] loop0: detected capacity change from 0 to 256
[   28.061786][   T28] audit: type=1326 audit(1718654993.843:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=462 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15d7e7cf29 code=0x0
[   28.066158][  T467] FAT-fs (loop0): Directory bread(block 64) failed
[   28.091337][  T467] FAT-fs (loop0): Directory bread(block 65) failed
[   28.097622][  T467] FAT-fs (loop0): Directory bread(block 66) failed
[   28.104196][  T467] FAT-fs (loop0): Directory bread(block 67) failed
[   28.110827][  T467] FAT-fs (loop0): Directory bread(block 68) failed
[   28.117666][  T467] FAT-fs (loop0): Directory bread(block 69) failed
[   28.124773][  T467] FAT-fs (loop0): Directory bread(block 70) failed
[   28.131575][  T467] FAT-fs (loop0): Directory bread(block 71) failed
[   28.138026][  T467] FAT-fs (loop0): Directory bread(block 72) failed
[   28.144670][  T467] FAT-fs (loop0): Directory bread(block 73) failed
[   28.178120][  T346] kworker/u4:3: attempt to access beyond end of device
[   28.178120][  T346] loop0: rw=1, sector=1224, nr_sectors = 128 limit=256
[   28.214824][  T472] syz-executor.0[472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   28.214886][  T472] syz-executor.0[472] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   28.240074][  T474] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   28.289001][  T334] usb 5-1: Using ep0 maxpacket: 16
[   28.529523][  T494] request_module fs-aio succeeded, but still no fs?
[   28.569358][  T334] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b
[   28.581912][  T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.591715][  T334] usb 5-1: Product: syz
[   28.646313][  T334] usb 5-1: Manufacturer: syz
[   28.651210][  T334] usb 5-1: SerialNumber: syz
[   28.656633][  T334] usb 5-1: config 0 descriptor??
[   28.677372][  T499] loop3: detected capacity change from 0 to 1024
[   28.684658][  T499] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   28.695023][  T499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002]
[   28.703544][  T499] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[   28.710599][  T499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   28.867513][  T499] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz-executor.3: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0)
[   29.012151][  T313] EXT4-fs (loop3): unmounting filesystem.
[   29.046795][  T510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   29.108790][  T515] loop1: detected capacity change from 0 to 256
[   29.115834][  T515] exfat: Deprecated parameter 'namecase'
[   29.126066][  T515] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d)
[   29.159189][  T334] usb 5-1: MIDIStreaming interface descriptor not found
[   29.174295][  T334] usb 5-1: USB disconnect, device number 2
[   29.196273][  T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   29.331793][  T534] loop0: detected capacity change from 0 to 512
[   29.350839][  T534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   29.360382][  T534] ext4 filesystem being mounted at /root/syzkaller-testdir3501971337/syzkaller.5THXga/24/file0 supports timestamps until 2038 (0x7fffffff)
[   29.374883][  T521] loop1: detected capacity change from 0 to 40427
[   29.382232][  T521] F2FS-fs (loop1): Unrecognized mount option "ifline_xattr" or missing value
[   29.398630][  T312] EXT4-fs (loop0): unmounting filesystem.
[   29.570019][  T314] syz-executor.2 (314) used greatest stack depth: 21520 bytes left
[   29.699088][  T544] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.723403][  T544] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.751845][  T544] device bridge_slave_0 entered promiscuous mode
[   29.761804][  T544] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.792378][  T544] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.808556][  T555] loop4: detected capacity change from 0 to 256
[   29.818799][  T544] device bridge_slave_1 entered promiscuous mode
[   29.827806][  T555] exfat: Deprecated parameter 'namecase'
[   29.839484][  T555] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d)
[   29.971225][  T544] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.978122][  T544] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.985530][  T544] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.992482][  T544] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.026850][  T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.039858][  T350] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.052029][  T350] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.073699][  T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.084282][  T350] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.091192][  T350] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.104692][  T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.113524][  T350] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.120445][  T350] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.139227][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.147290][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.162794][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.170709][  T502] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   30.183524][  T393] device bridge_slave_1 left promiscuous mode
[   30.191814][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.209545][  T393] device bridge_slave_0 left promiscuous mode
[   30.215644][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.236946][  T393] device veth1_macvtap left promiscuous mode
[   30.242956][  T393] device veth0_vlan left promiscuous mode
[   30.358028][  T564] loop3: detected capacity change from 0 to 2048
[   30.491929][  T564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   30.562801][  T502] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.573094][  T502] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   30.588363][  T313] EXT4-fs (loop3): unmounting filesystem.
[   30.607016][  T544] device veth0_vlan entered promiscuous mode
[   30.616438][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.624468][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.632680][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.659259][  T502] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   30.668754][  T502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   30.678166][  T502] usb 5-1: SerialNumber: syz
[   30.815546][  T583] Invalid ELF section header overflow
[   30.951145][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.959429][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.968650][  T544] device veth1_macvtap entered promiscuous mode
[   30.978798][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   30.986794][  T502] usb 5-1: 0:2 : does not exist
[   30.992623][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.014275][  T502] usb 5-1: USB disconnect, device number 3
[   31.070310][  T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.087438][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.095977][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.568247][  T610] devtmpfs: Unknown parameter 'nr_bhoz_i~odes'
[   31.585796][  T609] loop2: detected capacity change from 0 to 256
[   32.573213][   T28] kauditd_printk_skb: 29 callbacks suppressed
[   32.573230][   T28] audit: type=1326 audit(1718654998.353:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=633 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15d7e7cf29 code=0x0
[   32.633586][  T608] syz-executor.4 (608) used greatest stack depth: 21040 bytes left
[   32.692165][   T28] audit: type=1400 audit(1718654998.473:192): avc:  denied  { unmount } for  pid=311 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   32.767351][   T28] audit: type=1400 audit(1718654998.543:193): avc:  denied  { mount } for  pid=642 comm="syz-executor.4" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1
[   32.805023][  T644] Invalid ELF section header overflow
[   32.903708][  T653] loop4: detected capacity change from 0 to 256
[   33.199002][  T333] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   33.201427][  T638] loop0: detected capacity change from 0 to 131072
[   33.223238][  T638] F2FS-fs (loop0): Found nat_bits in checkpoint
[   33.273072][  T638] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   33.302622][   T28] audit: type=1400 audit(1718654999.083:194): avc:  denied  { read write } for  pid=637 comm="syz-executor.0" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.325454][   T28] audit: type=1400 audit(1718654999.083:195): avc:  denied  { open } for  pid=637 comm="syz-executor.0" path="/root/syzkaller-testdir3501971337/syzkaller.5THXga/32/file0/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   33.439050][  T333] usb 3-1: Using ep0 maxpacket: 8
[   33.501709][   T28] audit: type=1400 audit(1718654999.283:196): avc:  denied  { read } for  pid=666 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   33.535342][   T28] audit: type=1400 audit(1718654999.313:197): avc:  denied  { open } for  pid=666 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   33.564192][   T28] audit: type=1400 audit(1718654999.343:198): avc:  denied  { ioctl } for  pid=666 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   33.619090][  T333] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   33.698011][  T677] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[   33.729143][  T333] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   33.738254][  T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   33.753635][  T333] usb 3-1: SerialNumber: syz
[   33.768401][  T333] usb 3-1: config 0 descriptor??
[   33.819651][  T333] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   33.827833][  T333] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized!
[   33.836589][  T333] usb 3-1: Failed to create links for entity 255
[   33.843106][  T333] usb 3-1: Failed to register entities (-22).
[   33.954132][   T28] audit: type=1400 audit(1718654999.733:199): avc:  denied  { create } for  pid=686 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   34.022500][  T502] usb 3-1: USB disconnect, device number 2
[   34.039041][  T336] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   34.279030][  T336] usb 2-1: Using ep0 maxpacket: 8
[   34.310757][  T706] tipc: Started in network mode
[   34.315628][  T706] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   34.326401][  T706] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   34.334939][  T706] tipc: Enabled bearer <udp:syz1>, priority 10
[   34.342649][  T706] tipc: Enabling of bearer <eth:batadv0> rejected, failed to enable media
[   34.360325][  T703] loop4: detected capacity change from 0 to 40427
[   34.369634][  T703] F2FS-fs (loop4): Unrecognized mount option "ifline_xattr" or missing value
[   34.444790][  T336] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   34.529061][  T336] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   34.550308][  T715] devtmpfs: Unknown parameter 'nr_bhoz_i~odes'
[   34.558604][  T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   34.558637][  T336] usb 2-1: SerialNumber: syz
[   34.561381][  T336] usb 2-1: config 0 descriptor??
[   34.663177][   T28] audit: type=1326 audit(1718655000.443:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=714 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa55467cf29 code=0x0
[   34.879615][  T336] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   34.889042][  T336] usb 2-1: No valid video chain found.
[   35.016204][  T336] usb 2-1: USB disconnect, device number 2
[   35.187463][  T350] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   35.449676][  T350] usb 1-1: Using ep0 maxpacket: 16
[   35.455810][    T6] tipc: Node number set to 1
[   35.639073][  T350] usb 1-1: unable to get BOS descriptor or descriptor too short
[   35.739179][  T350] usb 1-1: config 0 has no interfaces?
[   35.745363][  T758] overlayfs: conflicting options: nfs_export=on,metacopy=on
[   36.247285][  T350] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=7d.64
[   36.256638][  T333] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   36.264156][  T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.272003][  T350] usb 1-1: Product: syz
[   36.275969][  T350] usb 1-1: Manufacturer: syz
[   36.280494][  T350] usb 1-1: SerialNumber: syz
[   36.286093][  T350] usb 1-1: config 0 descriptor??
[   36.519052][  T333] usb 5-1: Using ep0 maxpacket: 8
[   36.534426][   T19] usb 1-1: USB disconnect, device number 2
[   36.650333][  T333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   36.669179][  T334] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   36.739265][  T333] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   36.748211][  T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   36.756293][  T333] usb 5-1: SerialNumber: syz
[   36.761785][  T333] usb 5-1: config 0 descriptor??
[   36.799633][  T333] usb 5-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   36.806399][  T333] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized!
[   36.815105][  T333] usb 5-1: Failed to create links for entity 255
[   36.821416][  T333] usb 5-1: Failed to register entities (-22).
[   36.843228][  T774] devtmpfs: Unknown parameter 'nr_bhoz_i~odes'
[   36.909093][  T334] usb 2-1: Using ep0 maxpacket: 8
[   37.002942][  T502] usb 5-1: USB disconnect, device number 4
[   37.029097][  T334] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   37.089039][  T777] loop0: detected capacity change from 0 to 1024
[   37.111085][  T777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   37.120000][  T334] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   37.130812][  T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   37.139551][  T334] usb 2-1: SerialNumber: syz
[   37.154636][  T334] usb 2-1: config 0 descriptor??
[   37.239538][  T312] EXT4-fs (loop0): unmounting filesystem.
[   37.284436][  T773] syz-executor.3 (773) used greatest stack depth: 20984 bytes left
[   37.352457][  T788] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[   37.479071][  T334] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   37.486260][  T334] usb 2-1: No valid video chain found.
[   37.494480][  T334] usb 2-1: USB disconnect, device number 3
[   37.548207][  T502] kernel write not supported for file bpf-prog (pid: 502 comm: kworker/1:6)
[   37.566679][  T800] loop4: detected capacity change from 0 to 2048
[   37.593203][   T28] kauditd_printk_skb: 15 callbacks suppressed
[   37.593222][   T28] audit: type=1400 audit(1718655003.373:216): avc:  denied  { read write } for  pid=801 comm="syz-executor.4" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.599315][   T28] audit: type=1400 audit(1718655003.373:217): avc:  denied  { open } for  pid=801 comm="syz-executor.4" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.649014][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   37.650037][   T28] audit: type=1400 audit(1718655003.373:218): avc:  denied  { ioctl } for  pid=801 comm="syz-executor.4" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.876622][  T806] devtmpfs: Unknown parameter 'nr_bhoz_i~odes'
[   37.941403][   T28] audit: type=1326 audit(1718655003.723:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc73527cf29 code=0x0
[   37.971182][   T28] audit: type=1326 audit(1718655003.753:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc73527cf29 code=0x0
[   37.995561][   T28] audit: type=1326 audit(1718655003.773:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fc73527cf29 code=0x0
[   38.019121][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   38.029910][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   38.047599][   T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   38.060775][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.080702][   T24] usb 4-1: config 0 descriptor??
[   38.119791][   T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   38.130852][  T804] loop4: detected capacity change from 0 to 131072
[   38.146195][  T804] F2FS-fs (loop4): Found nat_bits in checkpoint
[   38.195014][  T804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   38.216003][   T28] audit: type=1326 audit(1718655003.993:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=803 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f785a27cf29 code=0x0
[   38.364491][   T28] audit: type=1400 audit(1718655004.143:223): avc:  denied  { bind } for  pid=803 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.412170][  T823] loop0: detected capacity change from 0 to 512
[   38.431611][  T823] EXT4-fs (loop0): 1 orphan inode deleted
[   38.437328][  T823] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   38.446473][  T823] ext4 filesystem being mounted at /root/syzkaller-testdir3501971337/syzkaller.5THXga/46/file1 supports timestamps until 2038 (0x7fffffff)
[   38.480673][  T312] EXT4-fs (loop0): unmounting filesystem.
[   38.662974][   T28] audit: type=1400 audit(1718655004.443:224): avc:  denied  { ioctl } for  pid=832 comm="syz-executor.2" path="socket:[16926]" dev="sockfs" ino=16926 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   38.689062][  T833] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.696115][  T833] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.792812][   T28] audit: type=1400 audit(1718655004.573:225): avc:  denied  { nlmsg_read } for  pid=841 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.963004][  T868] loop1: detected capacity change from 0 to 256
[   38.980249][  T868] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72a6026c, utbl_chksum : 0xe619d30d)
[   38.998999][  T333] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   39.012195][  T870] incfs: Can't find or create .index dir in ./file0
[   39.022764][  T870] incfs: mount failed -1
[   39.092840][  T310] syz-executor.1 (310) used greatest stack depth: 20808 bytes left
[   39.183849][  T895] loop4: detected capacity change from 0 to 512
[   39.201736][  T895] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   39.223006][  T895] EXT4-fs (loop4): orphan cleanup on readonly fs
[   39.231905][  T895] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #3: comm syz-executor.4: corrupted inode contents
[   39.245256][  T895] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #3: comm syz-executor.4: mark_inode_dirty error
[   39.257009][  T333] usb 1-1: Using ep0 maxpacket: 8
[   39.268747][  T898] incfs: Can't find or create .index dir in ./file0
[   39.275989][  T895] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #3: comm syz-executor.4: corrupted inode contents
[   39.288225][  T898] incfs: mount failed -1
[   39.290213][  T895] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz-executor.4: mark_inode_dirty error
[   39.319814][  T895] EXT4-fs (loop4): 1 orphan inode deleted
[   39.339072][  T895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   39.359846][  T895] syz-executor.4 (895) used greatest stack depth: 19976 bytes left
[   39.373419][  T311] EXT4-fs (loop4): unmounting filesystem.
[   39.379922][  T900] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.386795][  T900] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.395009][  T333] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   39.408081][  T900] device bridge_slave_0 entered promiscuous mode
[   39.418657][  T900] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.425945][  T900] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.433795][  T900] device bridge_slave_1 entered promiscuous mode
[   39.499067][  T333] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[   39.509824][  T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[   39.948541][  T333] usb 1-1: SerialNumber: syz
[   39.969419][  T333] usb 1-1: config 0 descriptor??
[   40.018520][  T925] loop4: detected capacity change from 0 to 512
[   40.056168][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.064053][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.072593][  T925] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   40.082548][  T925] ext4 filesystem being mounted at /root/syzkaller-testdir4266093675/syzkaller.FqoMAA/56/file0 supports timestamps until 2038 (0x7fffffff)
[   40.098497][   T10] device bridge_slave_1 left promiscuous mode
[   40.114814][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.124787][  T311] EXT4-fs (loop4): unmounting filesystem.
[   40.130801][   T10] device bridge_slave_0 left promiscuous mode
[   40.136762][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.150479][  T922] loop3: detected capacity change from 0 to 40427
[   40.159283][   T10] device veth1_macvtap left promiscuous mode
[   40.162681][  T922] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 7
[   40.166883][   T10] device veth0_vlan left promiscuous mode
[   40.178034][  T922] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[   40.309111][  T333] usb 1-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[   40.315886][  T333] usb 1-1: No valid video chain found.
[   40.327523][  T333] usb 1-1: USB disconnect, device number 3
[   40.369301][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.377555][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.385731][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.392584][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.400100][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.408289][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.416562][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.423511][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.432319][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.503340][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.512694][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.583059][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.591770][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.600191][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.608613][  T502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.642770][  T900] device veth0_vlan entered promiscuous mode
[   40.649593][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.657686][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   40.675599][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   40.715681][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.723925][    C0] softirq: huh, entered softirq 9 RCU ffffffff8160d1a0 with preempt_count 00000102, exited with 00000101?
[   40.735081][  T102] BUG: scheduling while atomic: udevd/102/0x00000002
[   40.741777][  T102] Modules linked in:
[   40.745492][  T102] Preemption disabled at:
[   40.745501][  T102] [<ffffffff815860b6>] up_read+0x16/0x170
[   40.755379][  T102] CPU: 0 PID: 102 Comm: udevd Not tainted 6.1.78-syzkaller-00013-gde6fb073c606 #0
[   40.764508][  T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   40.774693][  T102] Call Trace:
[   40.777782][  T102]  <TASK>
[   40.780704][  T102]  dump_stack_lvl+0x151/0x1b7
[   40.785217][  T102]  ? up_read+0x16/0x170
[   40.789237][  T102]  ? up_read+0x16/0x170
[   40.793291][  T102]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[   40.798757][  T102]  ? up_read+0x16/0x170
[   40.802749][  T102]  dump_stack+0x15/0x1b
[   40.806755][  T102]  __schedule_bug+0x195/0x260
[   40.811251][  T102]  ? mntput_no_expire+0xfc/0x6b0
[   40.816024][  T102]  ? cpu_util_update_eff+0x10e0/0x10e0
[   40.821401][  T102]  ? lockref_put_not_zero+0x350/0x350
[   40.826610][  T102]  ? mntput+0xc0/0xc0
[   40.830435][  T102]  __schedule+0xcf7/0x1550
[   40.834683][  T102]  ? path_put+0x57/0x60
[   40.838679][  T102]  ? __sched_text_start+0x8/0x8
[   40.843361][  T102]  ? do_readlinkat+0x32c/0x3a0
[   40.847966][  T102]  ? cp_old_stat+0x720/0x720
[   40.852400][  T102]  schedule+0xc3/0x180
[   40.856570][  T102]  exit_to_user_mode_loop+0x4e/0xa0
[   40.861595][  T102]  exit_to_user_mode_prepare+0x5a/0xa0
[   40.866978][  T102]  syscall_exit_to_user_mode+0x26/0x140
[   40.872346][  T102]  do_syscall_64+0x49/0xb0
[   40.876595][  T102]  ? sysvec_apic_timer_interrupt+0x55/0xc0
[   40.882239][  T102]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   40.887968][  T102] RIP: 0033:0x7fe81a317d47
[   40.892220][  T102] Code: 73 01 c3 48 8b 0d e1 90 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b1 90 0d 00 f7 d8 64 89 01 48
2024/06/17 20:10:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[   40.911879][  T102] RSP: 002b:00007ffc1a536fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
[   40.920146][  T102] RAX: 0000000000000021 RBX: 00007ffc1a536fe8 RCX: 00007fe81a317d47
[   40.928281][  T102] RDX: 0000000000000400 RSI: 00007ffc1a536fe8 RDI: 00007ffc1a5374c8
[   40.936177][  T102] RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000
[   40.944059][  T102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc1a5374c8
[   40.951862][  T102] R13: 00007ffc1a537438 R14: 00005558d02182c0 R15: 0000000000000000
[   40.959680][  T102]  </TASK>
[   40.983083][  T900] device veth1_macvtap entered promiscuous mode
[   41.012173][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   41.029470][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.055030][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.069713][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.101555][    T6] usb 4-1: USB disconnect, device number 3
[   41.127594][   T10] tipc: Disabling bearer <udp:syz1>
[   41.133100][   T10] tipc: Left network mode