last executing test programs:

6.819488164s ago: executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main=@item_012={0x1, 0x0, 0x0, '`'}]}}, 0x0}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x8010550e, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x9, 0x20000)
openat$cgroup_ro(r3, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x31fa6d74}, 0x90)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8)
mlock2(&(0x7f000080e000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)
mmap(&(0x7f000050b000/0x2000)=nil, 0x2000, 0x1000000, 0x8031, 0xffffffffffffffff, 0xa490a000)

4.532120188s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x21d4840, 0x0, 0x1, 0x0, &(0x7f0000000100))
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0)
ftruncate(r2, 0xc17a)
io_setup(0x22, &(0x7f00000003c0))

4.26677148s ago: executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main=@item_012={0x1, 0x0, 0x0, '`'}]}}, 0x0}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x8010550e, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$mouse(&(0x7f0000000280), 0x9, 0x20000)
openat$cgroup_ro(r3, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x31fa6d74}, 0x90)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0)
signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8)
mlock2(&(0x7f000080e000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)
mmap(&(0x7f000050b000/0x2000)=nil, 0x2000, 0x1000000, 0x8031, 0xffffffffffffffff, 0xa490a000)

2.087939507s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730128000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
close(r3)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3031600000000000000000000000200090040000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000030200000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)
r5 = inotify_init()
r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000ff00030006000000000000000000380000000000000000191bda0000200020"], 0x69)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xcc, 0x10001, 0x5, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r8}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20)
inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x22000112)
close(r6)
accept4$unix(r6, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x80800)

2.035150515s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10)
write$cgroup_int(r2, 0x0, 0x0)

2.019799168s ago: executing program 1:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
r0 = gettid()
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000040))

2.010129519s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

1.998812051s ago: executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe90)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f58004"])
accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x80000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000"], 0xf8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0)

1.897165266s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000100850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)

1.74515954s ago: executing program 4:
r0 = socket(0x1000000000000010, 0x80802, 0x0)
bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'veth0_to_batadv\x00'})

1.719235354s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000099000040"])

1.715507915s ago: executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(0x0, 0x0)
sync()
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0)

1.624094219s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10)
setitimer(0x0, 0x0, 0x0)

1.317482056s ago: executing program 0:
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8)
r0 = gettid()
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10)
rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000040))

1.244657768s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

1.23259844s ago: executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r5, &(0x7f0000000000), 0x248800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unshare(0x0)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x1}})

1.22906304s ago: executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_pid(r3, &(0x7f0000000980), 0x12)

1.131686626s ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000e006"])

346.813446ms ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='ext4_journal_start\x00', r2}, 0x10)
unlink(&(0x7f0000000000)='./cgroup\x00')

295.987934ms ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)

274.467308ms ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = dup2(r0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
sched_getscheduler(0x0)

264.72207ms ago: executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8)
close(r0)

256.995941ms ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x10)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[])

252.739882ms ago: executing program 0:
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000940)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
open(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
chdir(0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x598b, 0x3, 0x0)

237.743044ms ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

212.585768ms ago: executing program 3:
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000016c0)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@fmask={'fmask', 0x3d, 0x4}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x1}}, {@errors_remount}, {@namecase}, {@fmask={'fmask', 0x3d, 0x3}}, {@umask}, {@codepage={'codepage', 0x3d, 'cp932'}}]}, 0x9, 0x1505, &(0x7f0000000180)="$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")
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0)

189.418531ms ago: executing program 4:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = open(&(0x7f0000000200)='./file0\x00', 0x145142, 0x0)
ftruncate(r2, 0x2007ffc)
accept$packet(r0, 0x0, &(0x7f0000000280))
sendfile(r2, r2, 0x0, 0x800000009)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0)

103.241375ms ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x22}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

12.492129ms ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r1}, 0x10)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)

0s ago: executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='logon\x00', &(0x7f0000000280)='id:')
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mknod$loop(0x0, 0x0, 0x1)
link(&(0x7f0000001f80)='./file0\x00', 0x0)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="2400000012000100000000000000000008", @ANYRES32], 0x24}], 0x1}, 0x0)
ppoll(&(0x7f0000000300), 0x200000000000007e, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

38.235374][ T1051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0002]
[   38.286871][ T1061] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2810: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   38.305707][ T1051] EXT4-fs (loop4): re-mounted. Quota mode: none.
[   38.332620][   T28] audit: type=1400 audit(1718248205.701:231): avc:  denied  { unmount } for  pid=311 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   38.354766][  T311] EXT4-fs (loop4): unmounting filesystem.
[   38.535648][   T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   38.558901][ T1065] binder: 1064:1065 ioctl c0306201 20000380 returned -14
[   38.596732][   T39] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[   38.615560][   T39] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   38.800472][   T39] usb 2-1: USB disconnect, device number 3
[   38.806185][   T60] usb 3-1: Using ep0 maxpacket: 16
[   39.095719][   T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   39.113149][   T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.137539][   T60] usb 3-1: Product: syz
[   39.149606][   T60] usb 3-1: Manufacturer: syz
[   39.163298][   T60] usb 3-1: SerialNumber: syz
[   39.178834][   T60] usb 3-1: config 0 descriptor??
[   39.226239][   T60] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   39.233865][   T60] usb 3-1: Detected FT232H
[   39.435696][   T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   39.745698][   T60] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[   39.755541][   T60] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   39.772235][   T60] usb 3-1: USB disconnect, device number 3
[   39.787868][   T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   39.805845][   T60] ftdi_sio 3-1:0.0: device disconnected
[   39.877770][ T1099] binder: 1098:1099 ioctl c0306201 20000380 returned -14
[   39.977358][ T1109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   40.017874][ T1111] loop3: detected capacity change from 0 to 256
[   40.036876][ T1111] FAT-fs (loop3): bogus number of FAT sectors
[   40.054727][ T1111] FAT-fs (loop3): Can't find a valid FAT filesystem
[   40.089852][ T1107] loop4: detected capacity change from 0 to 40427
[   40.101598][ T1107] F2FS-fs (loop4): Invalid log sectorsize (2)
[   40.125171][ T1107] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   40.168207][ T1107] F2FS-fs (loop4): Found nat_bits in checkpoint
[   40.240552][ T1107] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   40.259933][ T1107] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   40.285294][ T1107] syz-executor.4: attempt to access beyond end of device
[   40.285294][ T1107] loop4: rw=2049, sector=53248, nr_sectors = 128 limit=40427
[   40.333997][  T311] syz-executor.4: attempt to access beyond end of device
[   40.333997][  T311] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   41.224576][ T1163] device wireguard0 entered promiscuous mode
[   41.857379][ T1190] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET)
[   42.016893][ T1177] loop3: detected capacity change from 0 to 40427
[   42.035937][ T1177] F2FS-fs (loop3): Invalid log sectorsize (2)
[   42.041825][ T1177] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   42.053268][ T1177] F2FS-fs (loop3): Found nat_bits in checkpoint
[   42.358503][ T1177] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   42.368574][ T1177] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   42.380694][   T28] kauditd_printk_skb: 24 callbacks suppressed
[   42.380706][   T28] audit: type=1400 audit(1718248209.751:256): avc:  denied  { mount } for  pid=1208 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   42.406220][ T1177] syz-executor.3: attempt to access beyond end of device
[   42.406220][ T1177] loop3: rw=2049, sector=53248, nr_sectors = 128 limit=40427
[   42.461746][   T28] audit: type=1400 audit(1718248209.781:257): avc:  denied  { mounton } for  pid=1208 comm="syz-executor.1" path="/root/syzkaller-testdir1039546069/syzkaller.8XqYbo/40/file1/file0" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   42.499710][  T315] syz-executor.3: attempt to access beyond end of device
[   42.499710][  T315] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   42.549054][   T28] audit: type=1400 audit(1718248209.781:258): avc:  denied  { unlink } for  pid=1208 comm="syz-executor.1" name="#c" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   42.606602][   T28] audit: type=1400 audit(1718248209.781:259): avc:  denied  { mount } for  pid=1208 comm="syz-executor.1" name="/" dev="overlay" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.629418][   T28] audit: type=1400 audit(1718248209.781:260): avc:  denied  { remount } for  pid=1208 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.649702][   T28] audit: type=1400 audit(1718248209.791:261): avc:  denied  { unmount } for  pid=693 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   42.669498][   T28] audit: type=1400 audit(1718248209.791:262): avc:  denied  { unmount } for  pid=693 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   42.727660][   T28] audit: type=1400 audit(1718248209.811:263): avc:  denied  { mounton } for  pid=1210 comm="syz-executor.1" path="/root/syzkaller-testdir1039546069/syzkaller.8XqYbo/41/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[   42.838429][   T28] audit: type=1400 audit(1718248209.811:264): avc:  denied  { mount } for  pid=1210 comm="syz-executor.1" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   42.875663][   T28] audit: type=1400 audit(1718248209.821:265): avc:  denied  { unmount } for  pid=693 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[   43.105667][    T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   43.205689][ T1235] device wireguard0 entered promiscuous mode
[   43.345741][    T6] usb 5-1: Using ep0 maxpacket: 8
[   43.385715][    T6] usb 5-1: too many configurations: 241, using maximum allowed: 8
[   43.445441][ T1231] loop3: detected capacity change from 0 to 40427
[   43.465686][    T6] usb 5-1: config index 0 descriptor too short (expected 31, got 27)
[   43.473580][    T6] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   43.483136][ T1231] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   43.501670][ T1231] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   43.522371][ T1231] F2FS-fs (loop3): invalid crc value
[   43.526793][    T6] usb 5-1: can't read configurations, error -22
[   43.560667][ T1231] F2FS-fs (loop3): Found nat_bits in checkpoint
[   43.637474][ T1231] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   43.646531][ T1231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   43.674811][ T1258] loop2: detected capacity change from 0 to 2048
[   43.685695][    T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   43.832851][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.842304][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.849788][ T1259] device bridge_slave_0 entered promiscuous mode
[   43.857042][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.863921][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.875589][ T1259] device bridge_slave_1 entered promiscuous mode
[   43.925859][    T6] usb 5-1: Using ep0 maxpacket: 8
[   43.932296][ T1264] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   43.975729][    T6] usb 5-1: too many configurations: 241, using maximum allowed: 8
[   44.057677][    T8] device bridge_slave_1 left promiscuous mode
[   44.063611][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.071147][    T6] usb 5-1: config index 0 descriptor too short (expected 31, got 27)
[   44.082485][    T6] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   44.096112][    T8] device bridge_slave_0 left promiscuous mode
[   44.099591][    T6] usb 5-1: can't read configurations, error -22
[   44.102039][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.114424][    T6] usb usb5-port1: attempt power cycle
[   44.137208][    T8] device veth1_macvtap left promiscuous mode
[   44.155695][  T315] syz-executor.3: attempt to access beyond end of device
[   44.155695][  T315] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[   44.155790][    T8] device veth0_vlan left promiscuous mode
[   44.185045][  T315] syz-executor.3: attempt to access beyond end of device
[   44.185045][  T315] loop3: rw=2051, sector=57344, nr_sectors = 20480 limit=40427
[   44.220220][  T315] syz-executor.3: attempt to access beyond end of device
[   44.220220][  T315] loop3: rw=2051, sector=81920, nr_sectors = 4096 limit=40427
[   44.234956][  T315] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5
[   44.234985][  T315] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5
[   44.251056][  T315] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5
[   44.382368][ T1266] device wireguard0 entered promiscuous mode
[   44.404000][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.410875][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.417964][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.424731][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.439547][   T19] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.446820][   T19] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.469141][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.476575][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.495704][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.503817][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.513206][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.520061][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.527273][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.535398][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.543264][    T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   44.550692][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.557553][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.564976][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.573085][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.592187][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.602363][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.629241][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.637490][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.646058][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   44.653736][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.661274][    T6] usb 5-1: Using ep0 maxpacket: 8
[   44.667531][ T1259] device veth0_vlan entered promiscuous mode
[   44.674681][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.682007][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.695218][ T1259] device veth1_macvtap entered promiscuous mode
[   44.703229][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.712454][    T6] usb 5-1: too many configurations: 241, using maximum allowed: 8
[   44.728170][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.745920][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   44.764005][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   44.781509][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.806156][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   44.845733][    T6] usb 5-1: config index 0 descriptor too short (expected 31, got 27)
[   44.875839][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.884866][    T6] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   44.997371][    T6] usb 5-1: can't read configurations, error -22
[   45.185729][    T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   45.275806][    T6] usb 5-1: Using ep0 maxpacket: 8
[   45.315747][    T6] usb 5-1: too many configurations: 241, using maximum allowed: 8
[   45.395773][    T6] usb 5-1: config index 0 descriptor too short (expected 31, got 27)
[   45.403707][    T6] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 8
[   45.412774][    T6] usb 5-1: can't read configurations, error -22
[   45.418956][    T6] usb usb5-port1: unable to enumerate USB device
[   45.477792][   T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   45.609500][ T1310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[   45.835745][   T19] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[   45.842452][ T1320] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request.  Check SNMP counters.
[   45.844612][   T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.870786][   T19] usb 2-1: config 0 descriptor??
[   46.345835][   T19] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   46.360840][   T19] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[   46.383321][   T19] asix: probe of 2-1:0.0 failed with error -71
[   46.397677][   T19] usb 2-1: USB disconnect, device number 4
[   47.126038][ T1354] bpf_get_probe_write_proto: 4 callbacks suppressed
[   47.126053][ T1354] syz-executor.1[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.144956][ T1354] syz-executor.1[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.161105][ T1354] syz-executor.1[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.174115][ T1354] syz-executor.1[1354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   47.806625][ T1365] loop1: detected capacity change from 0 to 40427
[   47.829161][ T1365] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   47.837243][ T1365] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   47.846822][ T1365] F2FS-fs (loop1): invalid crc value
[   47.866019][ T1365] F2FS-fs (loop1): Found nat_bits in checkpoint
[   47.916081][ T1365] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   47.923012][ T1365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   48.540525][ T1396] overlayfs: missing 'lowerdir'
[   48.585926][   T28] kauditd_printk_skb: 30 callbacks suppressed
[   48.586045][   T28] audit: type=1400 audit(1718248215.911:296): avc:  denied  { mounton } for  pid=1392 comm="syz-executor.2" path="/root/syzkaller-testdir3419555189/syzkaller.fmKEHg/102/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[   48.707223][ T1400] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   48.987612][ T1259] syz-executor.1: attempt to access beyond end of device
[   48.987612][ T1259] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[   49.005695][ T1259] syz-executor.1: attempt to access beyond end of device
[   49.005695][ T1259] loop1: rw=2051, sector=57344, nr_sectors = 20480 limit=40427
[   49.033944][ T1259] syz-executor.1: attempt to access beyond end of device
[   49.033944][ T1259] loop1: rw=2051, sector=81920, nr_sectors = 4096 limit=40427
[   49.081081][ T1259] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5
[   49.081110][ T1259] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5
[   49.095648][ T1259] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5
[   49.181514][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.196395][ T1405] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.226078][ T1405] device bridge_slave_0 entered promiscuous mode
[   49.245982][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.265836][ T1405] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.277036][ T1405] device bridge_slave_1 entered promiscuous mode
[   49.354726][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.361607][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.368700][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.375464][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.401937][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.410703][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.418261][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.436278][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.444589][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.451454][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.458882][   T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.466913][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.473760][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.491215][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.499161][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.513960][ T1405] device veth0_vlan entered promiscuous mode
[   49.521581][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   49.530019][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   49.539414][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   49.547287][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   49.562108][ T1405] device veth1_macvtap entered promiscuous mode
[   49.574488][  T362] device bridge_slave_1 left promiscuous mode
[   49.581958][  T362] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.613169][  T362] device bridge_slave_0 left promiscuous mode
[   49.619232][  T362] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.647220][  T362] device veth1_macvtap left promiscuous mode
[   49.654125][  T362] device veth0_vlan left promiscuous mode
[   49.800007][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.824614][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.839680][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.930523][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[   49.947210][ T1429] loop1: detected capacity change from 0 to 40427
[   49.961918][ T1429] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   49.983615][ T1429] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   49.992349][ T1439] binder: 1438:1439 ioctl 89f1 0 returned -22
[   50.015743][ T1429] F2FS-fs (loop1): invalid crc value
[   50.042457][ T1429] F2FS-fs (loop1): Found nat_bits in checkpoint
[   50.116362][ T1429] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   50.123303][ T1429] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   50.427561][   T28] audit: type=1400 audit(1718248217.801:297): avc:  denied  { ioctl } for  pid=1454 comm="syz-executor.3" path="socket:[19067]" dev="sockfs" ino=19067 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   50.487643][   T28] audit: type=1326 audit(1718248217.861:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   50.516127][ T1459] SELinux: security_context_str_to_sid (root) failed with errno=-22
[   50.554706][   T28] audit: type=1326 audit(1718248217.861:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   50.610678][   T28] audit: type=1326 audit(1718248217.881:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   50.665763][   T28] audit: type=1326 audit(1718248217.881:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   50.689508][   T28] audit: type=1326 audit(1718248217.881:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   50.720706][ T1467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[   50.739830][   T28] audit: type=1326 audit(1718248217.881:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   50.781576][   T28] audit: type=1326 audit(1718248217.881:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   50.823663][   T28] audit: type=1326 audit(1718248217.881:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bbd47cea9 code=0x7ffc0000
[   51.016558][ T1259] syz-executor.1: attempt to access beyond end of device
[   51.016558][ T1259] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[   51.045689][ T1259] syz-executor.1: attempt to access beyond end of device
[   51.045689][ T1259] loop1: rw=2051, sector=57344, nr_sectors = 20480 limit=40427
[   51.077240][ T1259] syz-executor.1: attempt to access beyond end of device
[   51.077240][ T1259] loop1: rw=2051, sector=81920, nr_sectors = 4096 limit=40427
[   51.105829][ T1259] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5
[   51.105857][ T1259] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5
[   51.113480][ T1259] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5
[   51.462596][ T1493] binder: 1492:1493 ioctl 89f1 0 returned -22
[   51.602754][ T1511] loop2: detected capacity change from 0 to 16
[   51.621068][ T1511] erofs: (device loop2): mounted with root inode @ nid 36.
[   51.657971][ T1511] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36
[   51.675192][ T1514] Bluetooth: hci0: sending frame failed (-49)
[   51.681561][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -49
[   52.085508][ T1546] syz-executor.2[1546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.085577][ T1546] syz-executor.2[1546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.135781][ T1546] syz-executor.2[1546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.165738][ T1546] syz-executor.2[1546] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   52.244962][ T1564] fuse: Bad value for 'fd'
[   52.515714][  T333] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   52.895738][  T333] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[   52.915663][  T333] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 1
[   52.924655][  T333] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   52.944796][  T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.265749][  T333] usb 3-1: string descriptor 0 read error: -71
[   53.273742][  T333] usb 3-1: USB disconnect, device number 4
[   53.494573][ T1621] fuse: Bad value for 'fd'
[   53.543273][ T1627] device ip6erspan0 entered promiscuous mode
[   53.904362][ T1643] loop3: detected capacity change from 0 to 16
[   54.016407][ T1643] erofs: (device loop3): mounted with root inode @ nid 36.
[   54.050080][ T1643] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36
[   54.210215][   T28] kauditd_printk_skb: 36 callbacks suppressed
[   54.210229][   T28] audit: type=1400 audit(1718248221.581:342): avc:  denied  { bind } for  pid=1650 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   54.264053][ T1655] device ip6erspan0 entered promiscuous mode
[   54.614038][ T1664] loop2: detected capacity change from 0 to 40427
[   54.629077][ T1664] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   54.636740][ T1664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   54.660966][ T1664] F2FS-fs (loop2): invalid crc value
[   54.671313][ T1676] loop3: detected capacity change from 0 to 512
[   54.754877][ T1679] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[   54.764267][ T1679] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[   54.781384][ T1676] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   54.849629][   T28] audit: type=1400 audit(1718248222.221:343): avc:  denied  { remove_name } for  pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   54.901309][   T28] audit: type=1400 audit(1718248222.241:344): avc:  denied  { rename } for  pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   54.923948][   T28] audit: type=1400 audit(1718248222.271:345): avc:  denied  { create } for  pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   54.945068][ T1664] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.957998][ T1676] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters
[   54.980227][ T1676] EXT4-fs (loop3): 1 orphan inode deleted
[   54.985842][ T1676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   54.996771][ T1676] ext4 filesystem being mounted at /root/syzkaller-testdir84994831/syzkaller.9CVwRa/146/file0 supports timestamps until 2038 (0x7fffffff)
[   55.010964][   T43] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   55.098966][ T1664] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   55.105906][ T1664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   55.562984][  T315] EXT4-fs (loop3): unmounting filesystem.
[   55.585240][ T1694] syz-executor.1[1694] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.585295][ T1694] syz-executor.1[1694] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.624962][ T1700] loop3: detected capacity change from 0 to 16
[   55.644853][ T1694] syz-executor.1[1694] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.644917][ T1694] syz-executor.1[1694] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   55.657410][ T1700] erofs: (device loop3): mounted with root inode @ nid 36.
[   55.702408][   T28] audit: type=1400 audit(1718248223.071:346): avc:  denied  { mounton } for  pid=1699 comm="syz-executor.3" path="/root/syzkaller-testdir84994831/syzkaller.9CVwRa/149/file2/file0" dev="loop3" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   55.735762][  T315] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[   55.746770][  T315] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   55.819549][  T315] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[   56.077071][   T28] audit: type=1400 audit(1718248223.451:347): avc:  denied  { setopt } for  pid=1711 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   56.166567][ T1719] loop3: detected capacity change from 0 to 128
[   56.275257][ T1715] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.282519][ T1715] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.290064][ T1715] device bridge_slave_0 entered promiscuous mode
[   56.297098][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.303970][ T1715] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.413900][ T1715] device bridge_slave_1 entered promiscuous mode
[   56.682707][   T28] audit: type=1400 audit(1718248224.051:348): avc:  denied  { map } for  pid=1741 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   56.695210][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.708132][   T28] audit: type=1400 audit(1718248224.051:349): avc:  denied  { read write } for  pid=1741 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   56.715083][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.760369][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.768517][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.776891][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.783713][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.790911][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.798980][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.807199][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.814036][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.832542][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.840025][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.848119][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.855954][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.863750][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.899049][ T1715] device veth0_vlan entered promiscuous mode
[   56.911658][ T1715] device veth1_macvtap entered promiscuous mode
[   56.940773][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.958689][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.967505][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.975151][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.983274][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.991369][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.748260][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.756477][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.764541][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.782459][ T1766] syz-executor.1[1766] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.782527][ T1766] syz-executor.1[1766] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   57.805251][   T28] audit: type=1400 audit(1718248225.171:350): avc:  denied  { remount } for  pid=1769 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   57.876091][ T1772] loop2: detected capacity change from 0 to 16
[   57.887226][  T362] device bridge_slave_1 left promiscuous mode
[   57.895728][ T1772] erofs: (device loop2): mounted with root inode @ nid 36.
[   57.902860][  T362] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.917337][  T362] device bridge_slave_0 left promiscuous mode
[   57.923463][  T362] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.943319][  T362] device veth1_macvtap left promiscuous mode
[   57.950546][  T362] device veth0_vlan left promiscuous mode
[   57.957646][ T1772] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[   57.979079][ T1772] syz-executor.2: attempt to access beyond end of device
[   57.979079][ T1772] loop2: rw=0, sector=296, nr_sectors = 8 limit=16
[   57.980696][ T1786] loop3: detected capacity change from 0 to 128
[   58.014352][ T1772] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[   58.163229][ T1798] syz-executor.1[1798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.163301][ T1798] syz-executor.1[1798] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   58.573103][ T1796] loop0: detected capacity change from 0 to 40427
[   58.594848][ T1796] F2FS-fs (loop0): invalid crc value
[   58.610344][ T1796] F2FS-fs (loop0): Found nat_bits in checkpoint
[   58.658026][ T1796] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   58.682191][ T1715] syz-executor.0: attempt to access beyond end of device
[   58.682191][ T1715] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   58.696711][ T1715] syz-executor.0: attempt to access beyond end of device
[   58.696711][ T1715] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   59.054030][  T362] kworker/u4:4: attempt to access beyond end of device
[   59.054030][  T362] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   59.097819][ T1837] syz-executor.3[1837] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.097885][ T1837] syz-executor.3[1837] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   59.352107][ T1875] loop3: detected capacity change from 0 to 16
[   59.382557][ T1875] erofs: (device loop3): mounted with root inode @ nid 36.
[   59.443846][ T1259] ------------[ cut here ]------------
[   59.449180][ T1259] WARNING: CPU: 0 PID: 1259 at fs/overlayfs/util.c:484 ovl_dir_modified+0x1a5/0x1e0
[   59.458450][ T1259] Modules linked in:
[   59.462162][ T1259] CPU: 0 PID: 1259 Comm: syz-executor.1 Not tainted 6.1.78-syzkaller-00006-gb22d7c4ca0d3 #0
[   59.472155][ T1259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   59.482034][ T1259] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0
[   59.487670][ T1259] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 42 44 9d ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 cb 46 56 ff <0f> 0b e9 06 ff ff ff e8 bf 46 56 ff 0f 0b e9 3d ff ff ff 44 89 e1
[   59.507237][ T1259] RSP: 0000:ffffc90009727ae0 EFLAGS: 00010293
[   59.508990][ T1875] erofs: (device loop3): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[   59.513110][ T1259] RAX: ffffffff821f2d35 RBX: 0000000000000000 RCX: ffff88811a07d100
[   59.523150][ T1875] syz-executor.3: attempt to access beyond end of device
[   59.523150][ T1875] loop3: rw=0, sector=296, nr_sectors = 8 limit=16
[   59.530169][ T1259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.543635][ T1875] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[   59.551145][ T1259] RBP: ffffc90009727b10 R08: ffffffff821f2c34 R09: ffffed1023eb21ed
[   59.551159][ T1259] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810edc2330
[   59.551171][ T1259] R13: ffff88810edc2360 R14: 1ffff11021db846c R15: ffff88811f590ec0
[   59.582751][ T1259] FS:  0000555555b14480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   59.591523][ T1259] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.597942][ T1259] CR2: 0000555555b1d818 CR3: 000000011a6a3000 CR4: 00000000003506b0
[   59.605742][ T1259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   59.613529][ T1259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   59.621364][ T1259] Call Trace:
[   59.624463][ T1259]  <TASK>
[   59.627264][ T1259]  ? show_regs+0x58/0x60
[   59.631320][ T1259]  ? __warn+0x160/0x3d0
[   59.635317][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   59.640204][ T1259]  ? report_bug+0x4d5/0x7d0
[   59.644512][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   59.649413][ T1259]  ? handle_bug+0x41/0x70
[   59.653537][ T1259]  ? exc_invalid_op+0x1b/0x50
[   59.658074][ T1259]  ? asm_exc_invalid_op+0x1b/0x20
[   59.662912][ T1259]  ? ovl_dir_modified+0xa4/0x1e0
[   59.667705][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   59.672547][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   59.677442][ T1259]  ovl_do_remove+0x7fc/0xbf0
[   59.681833][ T1259]  ? ovl_set_redirect+0x670/0x670
[   59.686713][ T1259]  ? selinux_inode_rmdir+0x22/0x30
[   59.691639][ T1259]  ovl_rmdir+0x1a/0x20
[   59.695546][ T1259]  vfs_rmdir+0x398/0x500
[   59.699656][ T1259]  incfs_kill_sb+0x113/0x230
[   59.704053][ T1259]  deactivate_locked_super+0xad/0x110
[   59.709279][ T1259]  deactivate_super+0xbe/0xf0
[   59.713773][ T1259]  cleanup_mnt+0x485/0x510
[   59.718127][ T1259]  ? user_path_at_empty+0x14e/0x1a0
[   59.723058][ T1259]  __cleanup_mnt+0x19/0x20
[   59.727333][ T1259]  task_work_run+0x24d/0x2e0
[   59.731739][ T1259]  ? task_work_cancel+0x2b0/0x2b0
[   59.736632][ T1259]  ? __x64_sys_umount+0x122/0x170
[   59.741457][ T1259]  exit_to_user_mode_loop+0x94/0xa0
[   59.746524][ T1259]  exit_to_user_mode_prepare+0x5a/0xa0
[   59.751786][ T1259]  syscall_exit_to_user_mode+0x26/0x140
[   59.757199][ T1259]  do_syscall_64+0x49/0xb0
[   59.761419][ T1259]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   59.767170][ T1259] RIP: 0033:0x7f0254e7e1d7
[   59.771402][ T1259] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[   59.790871][ T1259] RSP: 002b:00007ffe79fb6968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   59.799114][ T1259] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0254e7e1d7
[   59.806918][ T1259] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe79fb6a20
[   59.814712][ T1259] RBP: 00007ffe79fb6a20 R08: 0000000000000000 R09: 0000000000000000
[   59.822549][ T1259] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe79fb7ad0
[   59.830353][ T1259] R13: 00007f0254ed9636 R14: 000000000000e4b0 R15: 0000000000000017
[   59.838159][ T1259]  </TASK>
[   59.841005][ T1259] ---[ end trace 0000000000000000 ]---
[   59.846802][ T1259] ------------[ cut here ]------------
[   59.852079][ T1259] WARNING: CPU: 1 PID: 1259 at fs/overlayfs/util.c:484 ovl_dir_modified+0x1a5/0x1e0
[   59.861298][ T1259] Modules linked in:
[   59.864996][ T1259] CPU: 1 PID: 1259 Comm: syz-executor.1 Tainted: G        W          6.1.78-syzkaller-00006-gb22d7c4ca0d3 #0
[   59.876389][ T1259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   59.886268][ T1259] RIP: 0010:ovl_dir_modified+0x1a5/0x1e0
[   59.891723][ T1259] Code: 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ff e8 42 44 9d ff 49 ff 07 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 cb 46 56 ff <0f> 0b e9 06 ff ff ff e8 bf 46 56 ff 0f 0b e9 3d ff ff ff 44 89 e1
[   59.911191][ T1259] RSP: 0000:ffffc90009727ae0 EFLAGS: 00010293
[   59.917079][ T1259] RAX: ffffffff821f2d35 RBX: 0000000000000000 RCX: ffff88811a07d100
[   59.924877][ T1259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   59.932714][ T1259] RBP: ffffc90009727b10 R08: ffffffff821f2c34 R09: ffffed1023eb21ed
[   59.940518][ T1259] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810edc2330
[   59.948336][ T1259] R13: ffff88810edc2360 R14: 1ffff11021db846c R15: ffff88811f590ec0
[   59.956167][ T1259] FS:  0000555555b14480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   59.964889][ T1259] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   59.971338][ T1259] CR2: 0000555556bc0818 CR3: 000000011a6a3000 CR4: 00000000003506a0
[   59.979137][ T1259] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   59.986951][ T1259] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   59.994746][ T1259] Call Trace:
[   59.997897][ T1259]  <TASK>
[   60.000646][ T1259]  ? show_regs+0x58/0x60
[   60.004727][ T1259]  ? __warn+0x160/0x3d0
[   60.008738][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   60.013580][ T1259]  ? report_bug+0x4d5/0x7d0
[   60.017947][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   60.022783][ T1259]  ? handle_bug+0x41/0x70
[   60.026961][ T1259]  ? exc_invalid_op+0x1b/0x50
[   60.031457][ T1259]  ? asm_exc_invalid_op+0x1b/0x20
[   60.036343][ T1259]  ? ovl_dir_modified+0xa4/0x1e0
[   60.041096][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   60.045972][ T1259]  ? ovl_dir_modified+0x1a5/0x1e0
[   60.050816][ T1259]  ovl_do_remove+0x7fc/0xbf0
[   60.055240][ T1259]  ? ovl_set_redirect+0x670/0x670
[   60.060126][ T1259]  ? selinux_inode_rmdir+0x22/0x30
[   60.065047][ T1259]  ovl_rmdir+0x1a/0x20
[   60.068973][ T1259]  vfs_rmdir+0x398/0x500
[   60.073033][ T1259]  incfs_kill_sb+0x1b4/0x230
[   60.077478][ T1259]  deactivate_locked_super+0xad/0x110
[   60.082666][ T1259]  deactivate_super+0xbe/0xf0
[   60.087197][ T1259]  cleanup_mnt+0x485/0x510
[   60.091431][ T1259]  ? user_path_at_empty+0x14e/0x1a0
[   60.096484][ T1259]  __cleanup_mnt+0x19/0x20
[   60.100718][ T1259]  task_work_run+0x24d/0x2e0
[   60.105145][ T1259]  ? task_work_cancel+0x2b0/0x2b0
[   60.110022][ T1259]  ? __x64_sys_umount+0x122/0x170
[   60.114864][ T1259]  exit_to_user_mode_loop+0x94/0xa0
[   60.119992][ T1259]  exit_to_user_mode_prepare+0x5a/0xa0
[   60.125193][ T1259]  syscall_exit_to_user_mode+0x26/0x140
[   60.130593][ T1259]  do_syscall_64+0x49/0xb0
[   60.134966][ T1259]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.140901][ T1259] RIP: 0033:0x7f0254e7e1d7
[   60.145110][ T1259] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[   60.164608][ T1259] RSP: 002b:00007ffe79fb6968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   60.172811][ T1259] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0254e7e1d7
[   60.180915][ T1259] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe79fb6a20
[   60.188706][ T1259] RBP: 00007ffe79fb6a20 R08: 0000000000000000 R09: 0000000000000000
[   60.196525][ T1259] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe79fb7ad0
[   60.204512][ T1259] R13: 00007f0254ed9636 R14: 000000000000e4b0 R15: 0000000000000017
[   60.212348][ T1259]  </TASK>
[   60.215189][ T1259] ---[ end trace 0000000000000000 ]---
[   60.260368][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.285338][ T1876] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.294453][ T1876] device bridge_slave_0 entered promiscuous mode
[   60.301440][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.308320][ T1876] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.316470][ T1876] device bridge_slave_1 entered promiscuous mode
[   60.426051][ T1909] fuse: Bad value for 'fd'
[   60.663385][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.670258][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.677354][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.684120][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.714366][   T19] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.723704][   T19] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.730947][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.738438][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.750734][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.760521][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.767384][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.787228][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.795188][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.802044][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.809242][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.817272][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.848417][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.863639][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.871510][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.879822][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.887654][ T1876] device veth0_vlan entered promiscuous mode
[   60.901366][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.911429][ T1876] device veth1_macvtap entered promiscuous mode
[   60.926608][  T736] device bridge_slave_1 left promiscuous mode
[   60.930675][   T28] kauditd_printk_skb: 9 callbacks suppressed
[   60.930688][   T28] audit: type=1326 audit(1718248228.301:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1939 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0254e7cea9 code=0x7ffc0000
[   60.934621][  T736] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.939298][   T28] audit: type=1326 audit(1718248228.301:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1939 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f0254e7cea9 code=0x7ffc0000
[   60.992610][  T736] device bridge_slave_0 left promiscuous mode
[   60.992719][   T28] audit: type=1326 audit(1718248228.301:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1939 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0254e7cea9 code=0x7ffc0000
[   60.998850][  T736] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.033098][  T736] device veth1_macvtap left promiscuous mode
[   61.040798][  T736] device veth0_vlan left promiscuous mode
[   61.477345][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.494864][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.592518][   T28] audit: type=1400 audit(1718248228.961:363): avc:  denied  { create } for  pid=1961 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   61.612220][   T28] audit: type=1400 audit(1718248228.961:364): avc:  denied  { write } for  pid=1961 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   61.947503][ T1973] loop2: detected capacity change from 0 to 128
[   61.954062][ T1973] EXT4-fs: Ignoring removed orlov option
[   61.960302][ T1973] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   61.972887][ T1973] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   61.982119][ T1973] ext4 filesystem being mounted at /root/syzkaller-testdir1718315053/syzkaller.veuMh2/73/control supports timestamps until 2038 (0x7fffffff)
[   61.998579][ T1973] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz-executor.2: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19
[   62.016326][ T1405] EXT4-fs (loop2): unmounting filesystem.
[   62.037610][   T28] audit: type=1400 audit(1718248229.411:365): avc:  denied  { mounton } for  pid=1978 comm="syz-executor.2" path="/proc/1978/task" dev="proc" ino=22408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[   62.061075][   T28] audit: type=1400 audit(1718248229.411:366): avc:  denied  { mount } for  pid=1978 comm="syz-executor.2" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   62.243108][ T1983] fuse: Bad value for 'fd'
[   62.644446][ T2008] loop0: detected capacity change from 0 to 256
[   63.035530][  T333] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   63.095593][ T2028] loop2: detected capacity change from 0 to 256
[   63.104723][ T2028] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   63.134124][   T28] audit: type=1400 audit(1718248230.501:367): avc:  denied  { create } for  pid=2029 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[   63.320414][  T333] usb 4-1: Using ep0 maxpacket: 32
[   63.450585][ T2048] fuse: Bad value for 'fd'
[   63.655986][  T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   63.676403][  T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   63.688844][  T333] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   63.698031][  T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.703206][ T2053] loop0: detected capacity change from 0 to 256
[   63.712359][ T2053] exfat: Deprecated parameter 'utf8'
[   63.717820][  T333] usb 4-1: config 0 descriptor??
[   63.729152][ T2053] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[   63.741046][ T2010] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   63.756355][  T333] hub 4-1:0.0: USB hub found
[   63.784580][   T28] audit: type=1400 audit(1718248231.151:368): avc:  denied  { map } for  pid=2063 comm="syz-executor.0" path="socket:[22537]" dev="sockfs" ino=22537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   63.860589][   T28] audit: type=1400 audit(1718248231.231:369): avc:  denied  { wake_alarm } for  pid=2071 comm="syz-executor.0" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   63.884591][ T2074] loop0: detected capacity change from 0 to 256
[   64.045870][  T333] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[   64.325721][  T333] usbhid 4-1:0.0: can't add hid device: -71
[   64.331499][  T333] usbhid: probe of 4-1:0.0 failed with error -71
[   64.365940][  T333] usb 4-1: USB disconnect, device number 4
[   64.366692][ T2094] loop2: detected capacity change from 0 to 512
[   64.387860][ T2094] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters
[   64.402183][ T2094] EXT4-fs (loop2): 1 orphan inode deleted
[   64.407762][ T2094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   64.416778][ T2094] ext4 filesystem being mounted at /root/syzkaller-testdir1718315053/syzkaller.veuMh2/95/file0 supports timestamps until 2038 (0x7fffffff)
[   65.130858][ T2114] fuse: Bad value for 'fd'
[   65.360826][ T1405] EXT4-fs (loop2): unmounting filesystem.
[   65.652954][ T2129] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.659846][ T2129] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.667353][ T2129] device bridge_slave_0 entered promiscuous mode
[   65.674275][ T2129] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.681828][ T2129] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.689209][ T2129] device bridge_slave_1 entered promiscuous mode
[   65.770208][ T2129] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.777090][ T2129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.784158][ T2129] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.790974][ T2129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.089194][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   66.096746][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.104919][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.126582][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.139498][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.155479][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.163967][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.171895][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.181397][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.184719][ T2147] loop3: detected capacity change from 0 to 1024
[   66.189393][ T2129] device veth0_vlan entered promiscuous mode
[   66.207909][ T2129] device veth1_macvtap entered promiscuous mode
[   66.215808][ T2147] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.227275][ T2147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   66.237761][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.253595][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.261979][   T28] kauditd_printk_skb: 4 callbacks suppressed
[   66.261991][   T28] audit: type=1400 audit(1718248233.631:373): avc:  denied  { execute } for  pid=2146 comm="syz-executor.3" path="/root/syzkaller-testdir84994831/syzkaller.9CVwRa/178/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   66.268111][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.313290][  T315] EXT4-fs (loop3): unmounting filesystem.
[   66.342367][ T2157] loop1: detected capacity change from 0 to 256
[   66.359213][ T2158] loop0: detected capacity change from 0 to 512
[   66.367215][  T362] device bridge_slave_1 left promiscuous mode
[   66.369846][ T2158] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[   66.388684][  T362] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.399635][ T2158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[   66.408766][ T2158] System zones: 1-12
[   66.410904][  T362] device bridge_slave_0 left promiscuous mode
[   66.414244][ T2158] EXT4-fs (loop0): orphan cleanup on readonly fs
[   66.430906][  T362] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.440983][  T362] device veth1_macvtap left promiscuous mode
[   66.446874][  T362] device veth0_vlan left promiscuous mode
[   66.465824][ T2158] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz-executor.0: Inode bitmap for bg 0 marked uninitialized
[   66.484933][ T2158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   66.518520][ T2158] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz-executor.0: Abort forced by user
[   66.529005][ T2158] EXT4-fs (loop0): re-mounted. Quota mode: none.
[   66.535795][ T2158] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 0 != root limit 125
[   66.547761][ T2158] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[   66.858604][ T2158] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 5: comm syz-executor.0: path /root/syzkaller-testdir2637282891/syzkaller.xXDvhj/19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   66.899845][ T1876] EXT4-fs (loop0): unmounting filesystem.
[   66.902116][ T2173] overlayfs: statfs failed on './file0'
[   66.959519][ T2168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.987487][   T28] audit: type=1400 audit(1718248234.361:374): avc:  denied  { map } for  pid=2176 comm="syz-executor.2" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   67.065512][ T2182] fuse: Unknown parameter 'grou00000000000000000000'
[   67.727086][ T2191] loop2: detected capacity change from 0 to 1024
[   67.733741][ T2191] EXT4-fs: Ignoring removed nomblk_io_submit option
[   67.746936][ T2191] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   67.789728][ T1405] EXT4-fs (loop2): unmounting filesystem.
[   68.102309][ T2205] loop2: detected capacity change from 0 to 512
[   68.106006][ T2207] syz-executor.0[2207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.108452][ T2207] syz-executor.0[2207] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   68.162878][  T311] syz-executor.4 (311) used greatest stack depth: 20424 bytes left
[   68.200576][ T2210] loop0: detected capacity change from 0 to 512
[   68.209525][ T2210] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[   68.215907][ T2205] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters
[   68.246770][ T2205] EXT4-fs (loop2): 1 orphan inode deleted
[   68.251523][ T2210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[   68.260906][ T2210] System zones: 1-12
[   68.261500][ T2205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   68.273713][ T1888] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   68.274655][ T2210] EXT4-fs (loop0): orphan cleanup on readonly fs
[   68.290021][ T2210] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz-executor.0: Inode bitmap for bg 0 marked uninitialized
[   68.290126][ T2205] ext4 filesystem being mounted at /root/syzkaller-testdir1718315053/syzkaller.veuMh2/105/file0 supports timestamps until 2038 (0x7fffffff)
[   68.319335][ T2210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   69.570989][ T1405] EXT4-fs (loop2): unmounting filesystem.
[   69.607649][ T2219] overlayfs: missing 'lowerdir'
[   69.647948][ T2210] EXT4-fs error (device loop0): __ext4_remount:6412: comm syz-executor.0: Abort forced by user
[   69.660932][ T2225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   69.666145][ T2210] EXT4-fs (loop0): re-mounted. Quota mode: none.
[   69.754399][ T2226] device bridge_slave_1 left promiscuous mode
[   69.760843][ T2226] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.848321][   T28] audit: type=1400 audit(1718248237.081:375): avc:  denied  { read } for  pid=2218 comm="syz-executor.1" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   69.894734][   T28] audit: type=1400 audit(1718248237.081:376): avc:  denied  { open } for  pid=2218 comm="syz-executor.1" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   69.919864][ T2210] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 0 != root limit 125
[   69.931969][ T2210] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[   69.945342][ T2210] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 5: comm syz-executor.0: path /root/syzkaller-testdir2637282891/syzkaller.xXDvhj/24/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   69.989047][ T1876] EXT4-fs (loop0): unmounting filesystem.
[   69.990879][ T2231] loop2: detected capacity change from 0 to 512
[   70.037509][ T2223] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.044411][ T2223] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.052571][ T2223] device bridge_slave_0 entered promiscuous mode
[   70.059789][  T336] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.062026][ T2223] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.076762][ T2223] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.085583][ T2223] device bridge_slave_1 entered promiscuous mode
[   70.158506][ T1762] device bridge_slave_1 left promiscuous mode
[   70.164433][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.172064][ T1762] device bridge_slave_0 left promiscuous mode
[   70.178177][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.187103][ T1762] device veth1_macvtap left promiscuous mode
[   70.193065][ T1762] device veth0_vlan left promiscuous mode
[   70.374953][ T2223] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.381858][ T2223] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.388944][ T2223] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.395752][ T2223] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.397015][ T2251] fuse: Unknown parameter 'grou00000000000000000000'
[   70.432633][  T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   70.440528][  T335] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.455414][   T28] audit: type=1400 audit(1718248237.821:377): avc:  denied  { setattr } for  pid=2252 comm="syz-executor.3" name="comm" dev="proc" ino=24097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   70.459737][  T335] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.517783][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   70.526209][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   70.534164][    T6] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.541025][    T6] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.548525][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   70.568806][    T6] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.575660][    T6] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.582759][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   70.590613][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   70.601663][ T2223] device veth0_vlan entered promiscuous mode
[   70.610346][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   70.828297][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   70.835593][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   70.852130][ T2223] device veth1_macvtap entered promiscuous mode
[   70.854519][   T28] audit: type=1400 audit(1718248238.221:378): avc:  denied  { accept } for  pid=2260 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   70.858677][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.889993][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.898439][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.917108][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   70.925148][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   70.933547][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   70.941768][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   70.975412][ T2265] overlayfs: statfs failed on './file0'
[   71.083634][ T2275] fuse: Bad value for 'fd'
[   71.276453][ T2274] loop4: detected capacity change from 0 to 256
[   71.283042][ T2274] exfat: Deprecated parameter 'namecase'
[   71.290940][ T2274] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d)
[   71.330410][ T2281] loop0: detected capacity change from 0 to 256
[   71.481179][ T2288] loop4: detected capacity change from 0 to 512
[   71.942930][ T2299] fuse: Unknown parameter 'grou00000000000000000000'
[   71.965307][ T2301] overlayfs: statfs failed on './file0'
[   72.198927][ T2312] loop2: detected capacity change from 0 to 256
[   72.201731][ T2314] overlayfs: empty lowerdir
[   72.205405][ T2312] exfat: Deprecated parameter 'namecase'
[   72.217020][ T2312] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d)
[   72.255797][  T323] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   72.291219][ T2326] loop4: detected capacity change from 0 to 512
[   72.321131][   T28] audit: type=1400 audit(1718248239.691:379): avc:  denied  { read } for  pid=2319 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   72.326025][ T2326] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters
[   72.354979][ T2326] EXT4-fs (loop4): 1 orphan inode deleted
[   72.360659][ T2326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   72.369755][ T2326] ext4 filesystem being mounted at /root/syzkaller-testdir2127066162/syzkaller.bTGftI/6/file0 supports timestamps until 2038 (0x7fffffff)
[   72.383741][  T736] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   73.085723][  T323] usb 4-1: Using ep0 maxpacket: 32
[   73.165890][ T2223] EXT4-fs (loop4): unmounting filesystem.
[   73.255704][  T323] usb 4-1: unable to get BOS descriptor or descriptor too short
[   73.585211][  T323] usb 4-1: config 0 has no interfaces?
[   73.772087][ T2349] loop2: detected capacity change from 0 to 512
[   73.784851][ T2349] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[   73.796004][ T2349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[   73.803796][ T2349] System zones: 1-12
[   73.808388][ T2349] EXT4-fs (loop2): orphan cleanup on readonly fs
[   73.814576][ T2349] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz-executor.2: Inode bitmap for bg 0 marked uninitialized
[   73.827453][  T323] usb 4-1: language id specifier not provided by device, defaulting to English
[   73.836506][ T2349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   73.869307][ T2349] EXT4-fs error (device loop2): __ext4_remount:6412: comm syz-executor.2: Abort forced by user
[   73.879805][ T2349] EXT4-fs (loop2): re-mounted. Quota mode: none.
[   73.887611][ T2349] EXT4-fs warning (device loop2): dx_probe:892: inode #2: comm syz-executor.2: dx entry: limit 0 != root limit 125
[   73.899740][ T2349] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended
[   73.912983][ T2349] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 5: comm syz-executor.2: path /root/syzkaller-testdir1718315053/syzkaller.veuMh2/120/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   73.944471][ T1405] EXT4-fs (loop2): unmounting filesystem.
[   73.956581][  T323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.973770][  T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.985949][ T2352] loop2: detected capacity change from 0 to 128
[   73.992053][  T323] usb 4-1: Product: syz
[   74.002146][  T323] usb 4-1: Manufacturer: syz
[   74.006767][  T323] usb 4-1: SerialNumber: syz
[   74.025415][  T323] usb 4-1: config 0 descriptor??
[   74.040735][ T2352] syz-executor.2: attempt to access beyond end of device
[   74.040735][ T2352] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128
[   74.080353][ T2351] syz-executor.2: attempt to access beyond end of device
[   74.080353][ T2351] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128
[   74.103656][ T2352] syz-executor.2: attempt to access beyond end of device
[   74.103656][ T2352] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[   74.117795][ T2352] syz-executor.2: attempt to access beyond end of device
[   74.117795][ T2352] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[   74.131986][ T2352] syz-executor.2: attempt to access beyond end of device
[   74.131986][ T2352] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[   74.145724][ T2352] syz-executor.2: attempt to access beyond end of device
[   74.145724][ T2352] loop2: rw=0, sector=209, nr_sectors = 8 limit=128
[   74.217044][   T28] audit: type=1400 audit(1718248241.591:380): avc:  denied  { create } for  pid=2362 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   74.254322][ T2365] loop2: detected capacity change from 0 to 512
[   74.358179][  T323] usb 4-1: USB disconnect, device number 5
[   74.890939][ T2375] loop3: detected capacity change from 0 to 512
[   74.908408][ T2375] EXT4-fs (loop3): 1 orphan inode deleted
[   74.914025][ T2375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   74.923069][ T2375] ext4 filesystem being mounted at /root/syzkaller-testdir84994831/syzkaller.9CVwRa/192/file1 supports timestamps until 2038 (0x7fffffff)
[   75.145959][ T2383] syz-executor.3[2383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.146070][ T2383] syz-executor.3[2383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   75.959376][  T315] EXT4-fs (loop3): unmounting filesystem.
[   75.985581][ T2391] loop4: detected capacity change from 0 to 128
[   76.032538][ T2391] syz-executor.4: attempt to access beyond end of device
[   76.032538][ T2391] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128
[   76.070590][ T2390] syz-executor.4: attempt to access beyond end of device
[   76.070590][ T2390] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128
[   76.107281][ T2391] syz-executor.4: attempt to access beyond end of device
[   76.107281][ T2391] loop4: rw=0, sector=209, nr_sectors = 8 limit=128
[   76.139008][ T2391] syz-executor.4: attempt to access beyond end of device
[   76.139008][ T2391] loop4: rw=0, sector=209, nr_sectors = 8 limit=128
[   76.232173][   T28] audit: type=1326 audit(1718248243.601:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[   76.313709][   T28] audit: type=1326 audit(1718248243.601:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[   76.343846][   T28] audit: type=1326 audit(1718248243.631:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[   76.373259][   T28] audit: type=1326 audit(1718248243.631:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[   76.397085][   T28] audit: type=1326 audit(1718248243.631:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[   76.423381][ T2422] loop2: detected capacity change from 0 to 256
[   76.430662][   T28] audit: type=1326 audit(1718248243.631:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[   76.454347][   T28] audit: type=1326 audit(1718248243.631:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2418 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[   76.478213][ T2424] loop4: detected capacity change from 0 to 256
[   76.485830][  T333] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   76.765686][  T333] usb 4-1: Using ep0 maxpacket: 32
[   76.945712][  T333] usb 4-1: unable to get BOS descriptor or descriptor too short
[   76.946766][ T2436] loop2: detected capacity change from 0 to 128
[   77.025703][  T333] usb 4-1: config 0 has no interfaces?
[   77.265761][  T333] usb 4-1: language id specifier not provided by device, defaulting to English
[   77.331694][ T2445] serio: Serial port pts0
[   77.415752][  T333] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   77.426096][  T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.433961][  T333] usb 4-1: Product: syz
[   77.438079][  T333] usb 4-1: Manufacturer: syz
[   77.442483][  T333] usb 4-1: SerialNumber: syz
[   77.447538][  T333] usb 4-1: config 0 descriptor??
[   77.595719][    T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   77.688557][  T333] usb 4-1: USB disconnect, device number 6
[   77.835711][    T6] usb 3-1: Using ep0 maxpacket: 32
[   77.956051][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.967297][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.977163][    T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   77.986181][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.004287][    T6] usb 3-1: config 0 descriptor??
[   78.046061][    T6] hub 3-1:0.0: USB hub found
[   78.265712][    T6] hub 3-1:0.0: 1 port detected
[   78.332461][ T2457] loop3: detected capacity change from 0 to 2048
[   78.347815][ T2457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   78.597382][   T28] kauditd_printk_skb: 36 callbacks suppressed
[   78.597428][   T28] audit: type=1400 audit(1718248245.931:424): avc:  denied  { ioctl } for  pid=2456 comm="syz-executor.3" path="socket:[24454]" dev="sockfs" ino=24454 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[   79.045685][    T6] hub 3-1:0.0: activate --> -90
[   79.201790][  T315] EXT4-fs (loop3): unmounting filesystem.
[   79.265693][    T6] usb 3-1-port1: config error
[   79.490103][   T24] usb 3-1: USB disconnect, device number 5
[   80.014489][ T2480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[   80.782940][ T2502] loop2: detected capacity change from 0 to 256
[   80.794835][ T2502] FAT-fs (loop2): Directory bread(block 64) failed
[   80.801778][ T2502] FAT-fs (loop2): Directory bread(block 65) failed
[   80.808320][ T2502] FAT-fs (loop2): Directory bread(block 66) failed
[   80.814802][ T2502] FAT-fs (loop2): Directory bread(block 67) failed
[   80.822017][ T2502] FAT-fs (loop2): Directory bread(block 68) failed
[   80.828648][ T2502] FAT-fs (loop2): Directory bread(block 69) failed
[   80.836577][ T2502] FAT-fs (loop2): Directory bread(block 70) failed
[   80.843232][ T2502] FAT-fs (loop2): Directory bread(block 71) failed
[   80.851291][ T2502] FAT-fs (loop2): Directory bread(block 72) failed
[   80.857824][ T2502] FAT-fs (loop2): Directory bread(block 73) failed
[   81.049225][ T2517] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[   81.165674][   T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   81.435681][   T39] usb 4-1: Using ep0 maxpacket: 32
[   81.555811][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.566569][   T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.584190][   T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   81.594694][   T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.603675][   T39] usb 4-1: config 0 descriptor??
[   81.656247][   T39] hub 4-1:0.0: USB hub found
[   81.760857][ T2532] loop4: detected capacity change from 0 to 256
[   81.772704][ T2532] FAT-fs (loop4): Directory bread(block 64) failed
[   81.779619][ T2532] FAT-fs (loop4): Directory bread(block 65) failed
[   81.786637][ T2532] FAT-fs (loop4): Directory bread(block 66) failed
[   81.793184][ T2532] FAT-fs (loop4): Directory bread(block 67) failed
[   81.800143][ T2532] FAT-fs (loop4): Directory bread(block 68) failed
[   81.806999][ T2532] FAT-fs (loop4): Directory bread(block 69) failed
[   81.813353][ T2532] FAT-fs (loop4): Directory bread(block 70) failed
[   81.819876][ T2532] FAT-fs (loop4): Directory bread(block 71) failed
[   81.826344][ T2532] FAT-fs (loop4): Directory bread(block 72) failed
[   81.832724][ T2532] FAT-fs (loop4): Directory bread(block 73) failed
[   81.876989][   T39] hub 4-1:0.0: 1 port detected
[   82.021388][ T2547] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[   82.991110][   T39] hub 4-1:0.0: activate --> -90
[   83.215684][   T39] usb 4-1-port1: config error
[   83.385693][ T2336] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   83.416191][  T335] usb 4-1: USB disconnect, device number 7
[   83.673574][ T2574] loop2: detected capacity change from 0 to 256
[   83.684277][ T2574] FAT-fs (loop2): Directory bread(block 64) failed
[   83.690687][ T2574] FAT-fs (loop2): Directory bread(block 65) failed
[   83.697291][ T2574] FAT-fs (loop2): Directory bread(block 66) failed
[   83.703660][ T2574] FAT-fs (loop2): Directory bread(block 67) failed
[   83.710011][ T2574] FAT-fs (loop2): Directory bread(block 68) failed
[   83.716364][ T2574] FAT-fs (loop2): Directory bread(block 69) failed
[   83.722679][ T2574] FAT-fs (loop2): Directory bread(block 70) failed
[   83.729012][ T2574] FAT-fs (loop2): Directory bread(block 71) failed
[   83.735346][ T2574] FAT-fs (loop2): Directory bread(block 72) failed
[   83.741727][ T2574] FAT-fs (loop2): Directory bread(block 73) failed
[   83.755704][ T2336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.767441][ T2336] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   83.780313][ T2336] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   83.789840][ T2336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.799011][ T2336] usb 5-1: config 0 descriptor??
[   84.027250][   T28] audit: type=1400 audit(1718248251.401:425): avc:  denied  { shutdown } for  pid=2589 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   84.136917][   T28] audit: type=1400 audit(1718248251.511:426): avc:  denied  { ioctl } for  pid=2603 comm="syz-executor.2" path="/root/syzkaller-testdir1718315053/syzkaller.veuMh2/164/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   84.175398][ T2606] loop2: detected capacity change from 0 to 512
[   84.237100][ T2606] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   84.255711][ T2606] ext4 filesystem being mounted at /root/syzkaller-testdir1718315053/syzkaller.veuMh2/165/file1 supports timestamps until 2038 (0x7fffffff)
[   84.286480][ T2336] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   84.292154][ T2601] loop3: detected capacity change from 0 to 40427
[   84.296579][ T2336] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[   84.307221][ T2601] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[   84.307442][ T2336] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[   84.323030][ T1405] EXT4-fs (loop2): unmounting filesystem.
[   84.328783][ T2336] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   84.335090][ T2601] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   84.361847][ T2601] F2FS-fs (loop3): Found nat_bits in checkpoint
[   84.402411][ T2601] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   84.409769][ T2601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   84.463312][  T315] bio_check_eod: 8 callbacks suppressed
[   84.463329][  T315] syz-executor.3: attempt to access beyond end of device
[   84.463329][  T315] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   84.577018][   T24] usb 5-1: USB disconnect, device number 7
[   85.014229][ T2619] loop2: detected capacity change from 0 to 131072
[   85.021868][ T2619] F2FS-fs (loop2): invalid crc value
[   85.028691][ T2619] F2FS-fs (loop2): Found nat_bits in checkpoint
[   85.101373][ T2640] overlayfs: missing 'lowerdir'
[   85.306661][ T2619] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   85.866410][   T28] audit: type=1400 audit(1718248253.241:427): avc:  denied  { mounton } for  pid=2649 comm="syz-executor.4" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   85.983822][ T2649] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.002392][ T2649] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.017076][ T2649] device bridge_slave_0 entered promiscuous mode
[   86.053115][   T28] audit: type=1400 audit(1718248253.421:428): avc:  denied  { relabelfrom } for  pid=2655 comm="syz-executor.2" name="" dev="pipefs" ino=25811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   86.075838][ T2649] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.082666][ T2649] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.090661][ T2649] device bridge_slave_1 entered promiscuous mode
[   86.156949][  T362] device bridge_slave_1 left promiscuous mode
[   86.163532][  T362] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.171071][  T362] device bridge_slave_0 left promiscuous mode
[   86.177041][  T362] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.184788][  T362] device veth1_macvtap left promiscuous mode
[   86.191048][  T362] device veth0_vlan left promiscuous mode
[   86.273711][ T2654] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.280648][ T2654] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.288087][ T2654] device bridge_slave_0 entered promiscuous mode
[   86.305060][ T2654] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.315827][ T2654] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.323080][ T2654] device bridge_slave_1 entered promiscuous mode
[   86.407831][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.415049][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.415656][  T335] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.445953][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.454059][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.463069][  T333] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.469926][  T333] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.477117][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.485208][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.493215][  T333] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.500061][  T333] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.507278][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   86.515088][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.522868][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   86.530738][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.555692][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.563213][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   86.571993][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.580098][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   86.587799][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.595902][ T2649] device veth0_vlan entered promiscuous mode
[   86.607935][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.615152][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.625563][ T2649] device veth1_macvtap entered promiscuous mode
[   86.632252][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   86.641020][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.666325][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.674361][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.682832][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.692007][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.715581][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   86.729688][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   86.749590][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.758514][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.767303][   T24] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.774137][   T24] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.781944][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.785712][  T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.800704][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.808978][   T24] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.815829][   T24] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.820717][  T335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   86.839731][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   86.848965][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.849255][  T335] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   86.856612][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.872929][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.885253][  T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.885282][ T2654] device veth0_vlan entered promiscuous mode
[   86.903410][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   86.911255][  T335] usb 3-1: config 0 descriptor??
[   86.911646][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   86.923393][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   86.939547][ T2654] device veth1_macvtap entered promiscuous mode
[   86.948685][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   86.964333][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.972921][   T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   87.154905][ T2679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[   87.166219][  T333] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   87.173918][  T362] device bridge_slave_0 left promiscuous mode
[   87.181908][  T362] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.240155][  T362] device veth1_macvtap left promiscuous mode
[   87.246354][  T362] device veth0_vlan left promiscuous mode
[   87.379662][ T2684] overlayfs: failed to resolve './file1': -2
[   87.398348][  T335] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   87.405684][  T335] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   87.413602][  T335] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[   87.425820][  T335] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   87.595904][  T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.606776][  T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.625206][  T333] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   87.634794][  T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.645182][  T333] usb 5-1: config 0 descriptor??
[   87.687004][    T6] usb 3-1: USB disconnect, device number 6
[   88.146341][  T333] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[   88.157255][  T333] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input4
[   88.258254][ T2688] overlayfs: missing 'lowerdir'
[   88.288292][   T28] audit: type=1400 audit(1718248255.661:429): avc:  denied  { read } for  pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=489 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   88.314986][  T333] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[   88.446102][   T28] audit: type=1400 audit(1718248255.681:430): avc:  denied  { open } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=489 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   88.461835][  T333] usb 5-1: USB disconnect, device number 8
[   88.469193][   T28] audit: type=1400 audit(1718248255.681:431): avc:  denied  { ioctl } for  pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=489 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   88.628225][ T2691] loop2: detected capacity change from 0 to 40427
[   88.635155][ T2691] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[   88.642191][ T2691] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   88.652322][ T2691] F2FS-fs (loop2): Found nat_bits in checkpoint
[   88.689960][ T2691] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   88.696918][ T2691] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   88.726037][ T1405] syz-executor.2: attempt to access beyond end of device
[   88.726037][ T1405] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.136971][ T2708] device bridge_slave_1 left promiscuous mode
[   89.143221][ T2708] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.478961][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.485967][ T2713] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.493240][ T2713] device bridge_slave_0 entered promiscuous mode
[   89.502882][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.509950][ T2713] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.517327][ T2713] device bridge_slave_1 entered promiscuous mode
[   89.584742][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.591608][ T2713] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.598703][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.605473][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.634096][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.635707][    T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   89.649638][  T340] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.656763][  T340] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.672810][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   89.681794][  T340] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.688646][  T340] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.696339][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   89.704337][  T340] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.711195][  T340] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.718969][  T339] device bridge_slave_1 left promiscuous mode
[   89.725178][  T339] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.732747][  T339] device bridge_slave_0 left promiscuous mode
[   89.738771][  T339] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.746813][  T339] device veth1_macvtap left promiscuous mode
[   89.752670][  T339] device veth0_vlan left promiscuous mode
[   89.885662][    T6] usb 3-1: Using ep0 maxpacket: 16
[   89.967445][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.975210][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.998557][ T2713] device veth0_vlan entered promiscuous mode
[   90.005716][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   90.006251][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   90.024472][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   90.031892][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.036682][    T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   90.040335][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   90.065671][    T6] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   90.081679][ T2713] device veth1_macvtap entered promiscuous mode
[   90.084655][    T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.097875][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.107002][    T6] usb 3-1: config 0 descriptor??
[   90.117361][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.125380][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.145893][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.153902][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.337419][ T2726] serio: Serial port pts0
[   90.418496][ T2718] loop4: detected capacity change from 0 to 131072
[   90.427182][ T2718] F2FS-fs (loop4): invalid crc value
[   90.433747][ T2718] F2FS-fs (loop4): Found nat_bits in checkpoint
[   90.471263][ T2718] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   91.055715][    T6] usbhid 3-1:0.0: can't add hid device: -71
[   91.061465][    T6] usbhid: probe of 3-1:0.0 failed with error -71
[   91.086461][    T6] usb 3-1: USB disconnect, device number 7
[   91.319623][ T2754] loop4: detected capacity change from 0 to 1024
[   91.328108][ T2754] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   91.339139][ T2754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   91.356109][ T2649] EXT4-fs (loop4): unmounting filesystem.
[   91.736674][ T2778] loop4: detected capacity change from 0 to 40427
[   91.743569][ T2778] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   91.753399][ T2778] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   91.767187][ T2778] F2FS-fs (loop4): invalid crc value
[   91.808072][ T2778] F2FS-fs (loop4): Invalid segment type: 16, segno: 3
[   91.818141][ T2778] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[   92.085684][  T333] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   92.315753][   T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   92.345811][  T333] usb 3-1: Using ep0 maxpacket: 16
[   92.475737][  T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   92.487233][  T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   92.497077][  T333] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   92.506076][  T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.524205][  T333] usb 3-1: config 0 descriptor??
[   92.725728][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.738455][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.748953][   T39] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[   92.758101][   T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.767634][   T39] usb 5-1: config 0 descriptor??
[   93.125693][  T333] usbhid 3-1:0.0: can't add hid device: -71
[   93.131456][  T333] usbhid: probe of 3-1:0.0 failed with error -71
[   93.138438][  T333] usb 3-1: USB disconnect, device number 8
[   93.236537][   T39] hid-thrustmaster 0003:044F:B65D.0007: unbalanced collection at end of report description
[   93.246599][   T39] hid-thrustmaster 0003:044F:B65D.0007: parse failed with error -22
[   93.254400][   T39] hid-thrustmaster: probe of 0003:044F:B65D.0007 failed with error -22
[   93.344279][ T2812] 9pnet: p9_errstr2errno: server reported unknown error �@íËrHÿ
[   93.440255][  T323] usb 5-1: USB disconnect, device number 9
[   93.785697][  T333] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   94.215913][  T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.227381][  T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.259567][  T333] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   94.299901][  T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.342464][  T333] usb 4-1: config 0 descriptor??
[   94.405672][  T323] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   94.765714][  T323] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.778634][  T323] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   94.826247][  T333] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[   94.836738][  T333] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input5
[   94.927609][  T333] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[   94.945764][  T323] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   94.954680][  T323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.962602][  T323] usb 3-1: Product: syz
[   94.966767][  T323] usb 3-1: Manufacturer: syz
[   94.971166][  T323] usb 3-1: SerialNumber: syz
[   95.045068][    T6] usb 4-1: USB disconnect, device number 8
[   95.211375][ T2129] syz-executor.1 (2129) used greatest stack depth: 19864 bytes left
[   95.305819][  T323] usb 3-1: 0:2 : does not exist
[   95.311997][  T323] usb 3-1: USB disconnect, device number 9
[   95.339546][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.347144][ T2848] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.357183][ T2848] device bridge_slave_0 entered promiscuous mode
[   95.366108][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.372943][ T2848] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.380376][ T2848] device bridge_slave_1 entered promiscuous mode
[   95.443127][ T2848] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.449987][ T2848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.457092][ T2848] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.463858][ T2848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.492093][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.500730][  T333] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.508291][  T333] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.527571][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.535537][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.542388][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.549940][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.557923][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.564748][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.573021][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.582824][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.604238][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   95.616648][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.624510][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.632061][  T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.639742][ T2848] device veth0_vlan entered promiscuous mode
[   95.654637][ T2848] device veth1_macvtap entered promiscuous mode
[   95.665960][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.681361][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.689789][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.806722][  T736] device bridge_slave_1 left promiscuous mode
[   95.812664][  T736] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.830378][  T736] device bridge_slave_0 left promiscuous mode
[   95.836360][  T736] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.854234][  T736] device veth1_macvtap left promiscuous mode
[   95.860112][  T736] device veth0_vlan left promiscuous mode
[   95.865794][  T323] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   96.083786][ T2871] loop1: detected capacity change from 0 to 40427
[   96.105658][  T323] usb 4-1: Using ep0 maxpacket: 16
[   96.125204][ T2876] loop2: detected capacity change from 0 to 16
[   96.132958][ T2871] F2FS-fs (loop1): Found nat_bits in checkpoint
[   96.145776][ T2876] erofs: (device loop2): mounted with root inode @ nid 36.
[   96.163812][   T28] audit: type=1400 audit(1718248263.531:432): avc:  denied  { watch } for  pid=2875 comm="syz-executor.2" path="/root/syzkaller-testdir1718315053/syzkaller.veuMh2/199/file0/file0" dev="loop2" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   96.195916][ T1515] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   96.224917][ T2871] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   96.245799][  T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   96.279198][  T323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   96.299117][  T323] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   96.318099][  T323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.330147][ T2888] 9pnet_virtio: no channels available for device syz
[   96.336313][  T323] usb 4-1: config 0 descriptor??
[   96.368045][ T2892] binder: 2891:2892 ioctl 400c620e 0 returned -14
[   96.392670][ T2892] loop4: detected capacity change from 0 to 512
[   96.426260][ T2892] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz-executor.4: Invalid inode bitmap blk 4 in block_group 0
[   96.454850][ T2892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   96.499800][ T2649] EXT4-fs (loop4): unmounting filesystem.
[   96.644694][ T2848] syz-executor.1: attempt to access beyond end of device
[   96.644694][ T2848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.315786][  T323] usbhid 4-1:0.0: can't add hid device: -71
[   97.321706][  T323] usbhid: probe of 4-1:0.0 failed with error -71
[   97.342999][  T323] usb 4-1: USB disconnect, device number 9
[   97.686042][ T2943] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use)
[   97.862866][ T2969] binder: 2967:2969 ioctl 400c620e 0 returned -14
[   97.878472][ T2969] loop3: detected capacity change from 0 to 512
[   97.894766][ T2969] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0
[   97.910837][ T2969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   97.942321][ T2713] EXT4-fs (loop3): unmounting filesystem.
[   98.362665][ T3011] loop1: detected capacity change from 0 to 256
[   98.424224][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.431219][ T3014] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.438782][ T3014] device bridge_slave_0 entered promiscuous mode
[   98.447766][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.454641][ T3014] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.462175][ T3014] device bridge_slave_1 entered promiscuous mode
[   98.529035][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.535911][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.542970][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.549787][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.576940][ T1958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   98.584479][ T1958] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.592081][ T1958] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.610146][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   98.618309][  T333] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.625136][  T333] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.632782][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.640802][  T333] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.647658][  T333] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.668080][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   98.676812][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.684897][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.700297][ T3014] device veth0_vlan entered promiscuous mode
[   98.710403][ T1958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   98.726021][ T1958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   98.733305][ T1958] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   98.752434][ T3014] device veth1_macvtap entered promiscuous mode
[   98.764571][ T1958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.777216][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.789521][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   98.810417][ T3034] loop3: detected capacity change from 0 to 512
[   98.827291][ T3034] EXT4-fs error (device loop3): __ext4_iget:5046: inode #14: block 1886221359: comm syz-executor.3: invalid block
[   98.839741][ T3034] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 14 (err -117)
[   98.851903][ T3034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   98.860775][ T3034] ext4 filesystem being mounted at /root/syzkaller-testdir345733733/syzkaller.oanbGu/25/file1 supports timestamps until 2038 (0x7fffffff)
[   98.876306][  T339] device bridge_slave_1 left promiscuous mode
[   98.883323][  T339] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.890706][  T339] device bridge_slave_0 left promiscuous mode
[   98.896707][  T339] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.904241][  T339] device veth1_macvtap left promiscuous mode
[   98.910320][  T339] device veth0_vlan left promiscuous mode
[   98.925727][ T1515] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   98.981919][ T2713] EXT4-fs (loop3): unmounting filesystem.
[   99.018322][ T3063] syz-executor.4 (3063): /proc/3062/oom_adj is deprecated, please use /proc/3062/oom_score_adj instead.
[   99.643417][ T3087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3087 comm=syz-executor.4
[   99.656275][ T3087] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[   99.679692][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.692929][ T3087] device bridge_slave_0 left promiscuous mode
[   99.699140][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.276160][ T3143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3143 comm=syz-executor.4
[  101.170693][ T3174] loop4: detected capacity change from 0 to 512
[  101.200498][ T3183] 9pnet_fd: Insufficient options for proto=fd
[  101.224014][ T3174] EXT4-fs error (device loop4): __ext4_iget:5046: inode #14: block 1886221359: comm syz-executor.4: invalid block
[  101.246037][ T3174] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 14 (err -117)
[  101.270807][ T3174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  101.287342][ T3174] ext4 filesystem being mounted at /root/syzkaller-testdir2140037320/syzkaller.ymKvFE/47/file1 supports timestamps until 2038 (0x7fffffff)
[  101.392668][ T2649] EXT4-fs (loop4): unmounting filesystem.
[  101.477175][   T45] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  101.602006][ T3218] loop4: detected capacity change from 0 to 40427
[  101.623140][ T3232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3232 comm=syz-executor.2
[  101.636131][ T3232] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  101.650312][ T3218] F2FS-fs (loop4): Found nat_bits in checkpoint
[  101.677200][ T3232] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.684197][ T3232] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.703667][ T3218] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  101.728497][ T3232] device bridge_slave_0 left promiscuous mode
[  101.734494][ T3232] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.746029][ T3232] device bridge_slave_1 left promiscuous mode
[  101.752001][ T3232] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.765712][ T2336] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.225666][ T2336] usb 2-1: Using ep0 maxpacket: 8
[  102.298878][   T28] audit: type=1400 audit(2000000003.280:433): avc:  denied  { lock } for  pid=3259 comm="syz-executor.0" path="socket:[28687]" dev="sockfs" ino=28687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  102.324403][ T2649] syz-executor.4: attempt to access beyond end of device
[  102.324403][ T2649] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  102.355838][ T2336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.366603][ T2336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.376253][ T2336] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  102.385141][ T2336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.393527][ T2336] usb 2-1: config 0 descriptor??
[  102.427491][ T3262] loop0: detected capacity change from 0 to 512
[  102.444334][ T3262] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  102.470040][ T3262] EXT4-fs (loop0): 1 truncate cleaned up
[  102.475584][ T3262] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  102.499275][ T3014] EXT4-fs (loop0): unmounting filesystem.
[  102.527030][ T3271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3271 comm=syz-executor.0
[  102.539992][ T3271] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  102.568521][ T3275] loop3: detected capacity change from 0 to 1024
[  102.577056][ T3275] EXT4-fs: Ignoring removed orlov option
[  102.582783][ T3275] EXT4-fs: Ignoring removed oldalloc option
[  102.588845][ T3275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  102.597308][ T3275] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  102.608312][ T3275] EXT4-fs (loop3): group descriptors corrupted!
[  102.616125][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.623056][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.634771][ T3271] device bridge_slave_0 left promiscuous mode
[  102.640921][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.650529][ T3271] device bridge_slave_1 left promiscuous mode
[  102.656517][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.844090][ T3294] loop0: detected capacity change from 0 to 8192
[  102.851455][ T3294] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.863053][   T28] audit: type=1400 audit(2000000003.850:434): avc:  denied  { mounton } for  pid=3292 comm="syz-executor.0" path="/root/syzkaller-testdir2028987426/syzkaller.4DaFHR/18/file2/file0" dev="loop0" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  102.894450][ T2336] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0
[  102.902171][ T2336] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0
[  102.914729][   T28] audit: type=1400 audit(2000000003.850:435): avc:  denied  { remount } for  pid=3292 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  102.975789][ T2336] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found
[  102.983327][ T2336] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found
[  103.156718][ T3326] gretap0: refused to change device tx_queue_len
[  103.162889][ T3326] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  103.217499][ T3328] overlayfs: failed to resolve './file0': -2
[  103.229055][ T2336] usb 2-1: USB disconnect, device number 5
[  103.271830][ T3334] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  103.359257][   T28] audit: type=1400 audit(2000000004.340:436): avc:  denied  { getopt } for  pid=3343 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  103.423830][ T3352] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups)
[  103.503478][ T3355] loop3: detected capacity change from 0 to 1024
[  103.554767][ T3355] EXT4-fs: Ignoring removed orlov option
[  103.575975][ T3355] EXT4-fs (loop3): Test dummy encryption mode enabled
[  103.622769][ T3355] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  103.664329][ T3355] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  103.690719][ T3355] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  103.720926][ T2713] EXT4-fs (loop3): unmounting filesystem.
[  103.732997][   T28] audit: type=1400 audit(2000000004.710:437): avc:  denied  { bind } for  pid=3364 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  103.755673][   T28] audit: type=1400 audit(2000000004.710:438): avc:  denied  { listen } for  pid=3364 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  103.816201][   T28] audit: type=1326 audit(2000000004.800:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[  103.855053][   T28] audit: type=1326 audit(2000000004.800:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[  103.896262][   T28] audit: type=1326 audit(2000000004.830:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[  103.937634][   T28] audit: type=1326 audit(2000000004.870:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3379 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6f27cea9 code=0x7ffc0000
[  104.064171][ T3392] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  104.084629][ T3404] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  104.171519][ T3405] loop3: detected capacity change from 0 to 256
[  104.471507][ T3426] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  104.495701][  T346] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  104.503149][  T323] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  104.728475][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.735330][ T3440] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.742451][ T3440] device bridge_slave_0 entered promiscuous mode
[  104.748935][  T323] usb 2-1: Using ep0 maxpacket: 8
[  104.749475][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.760699][ T3440] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.767829][ T3440] device bridge_slave_1 entered promiscuous mode
[  104.812547][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.819423][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.826523][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.833392][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.858790][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.866630][  T346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.877383][  T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.888818][  T346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.888885][ T2336] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.905317][  T346] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  104.914559][  T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.924120][  T346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.932036][  T323] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  104.941052][ T2336] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.948533][  T346] usb 5-1: config 0 descriptor??
[  104.953362][  T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.963219][  T323] usb 2-1: config 0 descriptor??
[  104.969496][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.977938][  T333] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.984795][  T333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.992470][  T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.000899][  T333] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.007770][  T333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.026145][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.033942][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.041727][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.049486][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.060522][ T3440] device veth0_vlan entered promiscuous mode
[  105.066571][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.074658][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.083535][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.091307][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.099734][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.106973][  T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.129818][ T3440] device veth1_macvtap entered promiscuous mode
[  105.143358][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.151579][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.162458][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.170313][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.178889][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.187667][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.196364][    T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.256653][ T3471] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups)
[  105.446196][  T323] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0
[  105.453460][  T323] hid-picolcd 0003:04D8:F002.000B: unknown main item tag 0x0
[  105.717417][  T323] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf3 found
[  105.724882][  T323] hid-picolcd 0003:04D8:F002.000B: No report with id 0xf4 found
[  105.742430][ T3498] loop0: detected capacity change from 0 to 256
[  105.772831][  T323] usb 2-1: USB disconnect, device number 6
[  105.787940][ T2336] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  105.795136][ T2336] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  105.802831][ T2336] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  105.995747][  T346] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71
[  106.004439][  T346] uclogic 0003:256C:006D.000A: failed probing parameters: -71
[  106.011650][  T346] uclogic: probe of 0003:256C:006D.000A failed with error -71
[  106.019536][  T346] usb 5-1: USB disconnect, device number 10
[  106.585654][  T346] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  106.712697][ T3534] incfs: Options parsing error. -22
[  106.784622][ T3534] incfs: mount failed -22
[  106.891670][ T3536] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  107.125692][  T346] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  107.138393][  T346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.157817][  T346] usb 2-1: config 0 descriptor??
[  108.094131][ T3570] loop2: detected capacity change from 0 to 1024
[  108.104433][ T3566] incfs: Options parsing error. -22
[  108.111529][ T3566] incfs: mount failed -22
[  108.117474][ T3572] loop3: detected capacity change from 0 to 256
[  108.127319][ T3570] EXT4-fs: Ignoring removed orlov option
[  108.133070][ T3570] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.143030][ T3572] exfat: Deprecated parameter 'namecase'
[  108.151127][ T3572] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  108.163541][  T346] usb 2-1: Cannot set MAC address
[  108.168696][  T346] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  108.178064][  T346] usb 2-1: USB disconnect, device number 7
[  108.184246][ T3570] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  108.201439][   T28] kauditd_printk_skb: 78 callbacks suppressed
[  108.201452][   T28] audit: type=1400 audit(2000000009.180:521): avc:  denied  { mounton } for  pid=3569 comm="syz-executor.2" path="/root/syzkaller-testdir253143644/syzkaller.0d9Psm/15/file1/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  108.214042][ T3570] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.2: corrupt xattr in inline inode
[  108.235189][   T28] audit: type=1400 audit(2000000009.180:522): avc:  denied  { map } for  pid=3569 comm="syz-executor.2" path="/root/syzkaller-testdir253143644/syzkaller.0d9Psm/15/file1/file0/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.277610][ T3568] loop0: detected capacity change from 0 to 40427
[  108.283946][ T3570] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.2: corrupted in-inode xattr
[  108.286309][ T3568] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  108.304329][ T3568] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  108.314235][   T28] audit: type=1400 audit(2000000009.300:523): avc:  denied  { rmdir } for  pid=3440 comm="syz-executor.2" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  108.337863][ T3568] F2FS-fs (loop0): invalid crc value
[  108.337941][ T3440] ==================================================================
[  108.343117][   T28] audit: type=1400 audit(2000000009.320:524): avc:  denied  { unlink } for  pid=3440 comm="syz-executor.2" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  108.350864][ T3440] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0
[  108.350897][ T3440] Read of size 4 at addr ffff888138aba000 by task syz-executor.2/3440
[  108.350911][ T3440] 
[  108.350917][ T3440] CPU: 0 PID: 3440 Comm: syz-executor.2 Tainted: G        W          6.1.78-syzkaller-00006-gb22d7c4ca0d3 #0
[  108.402857][ T3440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  108.412752][ T3440] Call Trace:
[  108.415880][ T3440]  <TASK>
[  108.418653][ T3440]  dump_stack_lvl+0x151/0x1b7
[  108.423163][ T3440]  ? nf_tcp_handle_invalid+0x3f1/0x3f1
[  108.428462][ T3440]  ? _printk+0xd1/0x111
[  108.432451][ T3440]  ? __virt_addr_valid+0x242/0x2f0
[  108.437395][ T3440]  print_report+0x158/0x4e0
[  108.441737][ T3440]  ? __virt_addr_valid+0x242/0x2f0
[  108.446683][ T3440]  ? kasan_addr_to_slab+0xd/0x80
[  108.451457][ T3440]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  108.456925][ T3440]  kasan_report+0x13c/0x170
[  108.461264][ T3440]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  108.466732][ T3440]  __asan_report_load4_noabort+0x14/0x20
[  108.472200][ T3440]  ext4_xattr_delete_inode+0xcd0/0xce0
[  108.477494][ T3440]  ? sb_end_intwrite+0x130/0x130
[  108.482269][ T3440]  ? ext4_expand_extra_isize_ea+0x1c40/0x1c40
[  108.488170][ T3440]  ? __kasan_check_read+0x11/0x20
[  108.493030][ T3440]  ? ext4_inode_is_fast_symlink+0x295/0x3d0
[  108.498756][ T3440]  ? ext4_evict_inode+0xbc2/0x1550
[  108.503706][ T3440]  ext4_evict_inode+0xef9/0x1550
[  108.508476][ T3440]  ? _raw_spin_unlock+0x4c/0x70
[  108.513165][ T3440]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[  108.518893][ T3440]  ? _raw_spin_unlock+0x4c/0x70
[  108.523581][ T3440]  ? inode_io_list_del+0x18b/0x1a0
[  108.528526][ T3440]  ? ext4_inode_is_fast_symlink+0x3d0/0x3d0
[  108.534256][ T3440]  evict+0x2a3/0x630
[  108.537995][ T3440]  iput+0x642/0x870
[  108.541633][ T3440]  vfs_rmdir+0x3c2/0x500
[  108.545713][ T3440]  do_rmdir+0x3ab/0x630
[  108.549704][ T3440]  ? d_delete_notify+0x160/0x160
[  108.554480][ T3440]  __x64_sys_unlinkat+0xdf/0xf0
[  108.559165][ T3440]  do_syscall_64+0x3d/0xb0
[  108.563416][ T3440]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  108.569149][ T3440] RIP: 0033:0x7f37a827c687
[  108.573397][ T3440] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  108.592838][ T3440] RSP: 002b:00007ffd9b6622d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  108.601085][ T3440] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f37a827c687
[  108.608894][ T3440] RDX: 0000000000000200 RSI: 00007ffd9b663480 RDI: 00000000ffffff9c
[  108.616705][ T3440] RBP: 00007f37a82d9636 R08: 0000000000000000 R09: 0000000000000000
[  108.624516][ T3440] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd9b663480
[  108.632329][ T3440] R13: 00007f37a82d9636 R14: 000000000001a622 R15: 0000000000000007
[  108.640143][ T3440]  </TASK>
[  108.643003][ T3440] 
[  108.645173][ T3440] The buggy address belongs to the physical page:
[  108.651438][ T3440] page:ffffea0004e2ae80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x138aba
[  108.661489][ T3440] flags: 0x4000000000000000(zone=1)
[  108.666529][ T3440] raw: 4000000000000000 ffffea0004de70c8 ffffea0004973fc8 0000000000000000
[  108.674946][ T3440] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  108.683362][ T3440] page dumped because: kasan: bad access detected
[  108.689616][ T3440] page_owner tracks the page as freed
[  108.694817][ T3440] page last allocated via order 0, migratetype Movable, gfp_mask 0x8140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO|__GFP_CMA), pid 3569, tgid 3569 (syz-executor.2), ts 108195939086, free_ts 108312767100
[  108.714607][ T3440]  post_alloc_hook+0x213/0x220
[  108.719206][ T3440]  prep_new_page+0x1b/0x110
[  108.723545][ T3440]  get_page_from_freelist+0x27ea/0x2870
[  108.728926][ T3440]  __alloc_pages+0x3a1/0x780
[  108.733353][ T3440]  __folio_alloc+0x15/0x40
[  108.737605][ T3440]  wp_page_copy+0x23b/0x1690
[  108.742031][ T3440]  do_wp_page+0xc25/0xdf0
[  108.746199][ T3440]  handle_mm_fault+0x15a2/0x2f40
[  108.750971][ T3440]  exc_page_fault+0x3b3/0x700
[  108.755483][ T3440]  asm_exc_page_fault+0x27/0x30
[  108.760171][ T3440] page last free stack trace:
[  108.764685][ T3440]  free_unref_page_prepare+0x83d/0x850
[  108.769977][ T3440]  free_unref_page_list+0xf1/0x7b0
[  108.774925][ T3440]  release_pages+0xf7f/0xfe0
[  108.779352][ T3440]  free_pages_and_swap_cache+0x8a/0xa0
[  108.784645][ T3440]  tlb_finish_mmu+0x1e0/0x3f0
[  108.789160][ T3440]  exit_mmap+0x421/0x940
[  108.793239][ T3440]  __mmput+0x95/0x310
[  108.797058][ T3440]  mmput+0x56/0x170
[  108.800773][ T3440]  do_exit+0xb29/0x2b80
[  108.804695][ T3440]  do_group_exit+0x21a/0x2d0
[  108.809124][ T3440]  __x64_sys_exit_group+0x3f/0x40
[  108.813980][ T3440]  do_syscall_64+0x3d/0xb0
[  108.818236][ T3440]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  108.823963][ T3440] 
[  108.826131][ T3440] Memory state around the buggy address:
[  108.831609][ T3440]  ffff888138ab9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  108.839501][ T3440]  ffff888138ab9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
2033/05/18 03:33:29 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  108.847487][ T3440] >ffff888138aba000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  108.855383][ T3440]                    ^
[  108.859288][ T3440]  ffff888138aba080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  108.867187][ T3440]  ffff888138aba100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  108.875081][ T3440] ==================================================================
[  108.897170][ T3440] Disabling lock debugging due to kernel taint
[  108.909712][ T3568] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4)
[  108.922397][ T3440] EXT4-fs (loop2): unmounting filesystem.