last executing test programs: 9.996341568s ago: executing program 4 (id=366): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$eJzs282PE+UfAPDvTLfLjx/grogvvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMOFl1PNtDNsW9rClnaL9PNJBp5nXvb5fjvztM/M0wYwsqayf5KIrRHxZ0RM1KvNO0zV/7t6+ezCtctnF5KoVt/9J6ntd+Xy2YVi1+K4LXllOo1Iv0hid5t2V06fOT5fqSydyuuzqyc+ml05feaFYyfmjy4dXTq5/9ChgwfmXn5p/4t9yTOL6cquT5f37Hzrg2/ePvxVU/4tefTJVLeNT1erfW5uuLY1lJOxIQbCupQiIjtd5Vr/n4hSrJ28iXjz86EGBwxUtVqtbum8+VwVuIcl0VzX5WFUFB/02f1vsbQOAl4d3PBj6C69Vr8ByvK+mi/1LWOR5vuUW+5v+2kqIt4/d/27bInBPIcAAGjyUzb+eb7d+C+Nhxr2uy+fG5qMiPsjYntEPBAROyLiwYjavg9HxCPrbL91kuTm8U96safEblM2/nsln9tqHv8Vo7+YLOW1bbX8y8mRY5WlfflrMh3lTVl9rksbP7/xx9edtjWO/7Ila78YC+ZxXBzb1HzM4vzq/J3k3OjS+YhdY+3yT27MBCQRsTMidvXYxrFnf9jTadut8++iD/NM1e8jnqmf/3PRkn8h6T4/Ofu/qCztmy2uipv99vuFdzq1f0f590F2/v/f9vq/kf9k0jhfu7L+Ni789WXHe5per//x5L1aeTxf98n86uqpuYjx5HA96Mb1+9eOLerF/ln+03vb9//tsfZK7I6I7CJ+NCIei4jH89ifiIgnI2Jvl/x/ff2pD3vPf7Cy/BfXdf7XCuPRuqZ9oXT8lx+bGp28Kf9r3c//wVppOl9zO+9/txNXb1czAAAA/PekEbE1knTmRjlNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCajnBZPuiYanofO5bf19fr5iKh/taDYfiB/bvxtaXOtPrOwXFkcdvIw4rZ06P+Zv0vDjg4YOL/XgtGl/8Po0v9hdOn/MLra9P/Nw4gD2HjtPv8/G0IcwMZr6f+m/WCEtL3/v95USzcqFmBjef4Ho0v/h5G0sjlu/SP5roXiL/V4+D1biPJdEcbACpHeFWEoDKgw3PclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvk3AAD//9Ih4c0=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 9.678451144s ago: executing program 4 (id=369): syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x2000000, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) 7.204168088s ago: executing program 2 (id=377): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101e00, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0xf2838dc94d3b946e) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x73f, 0x0, 0x0, 0x0, 0x5f, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x1c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x1, 0x8}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x1c}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) ustat(0x2, &(0x7f0000000380)) 7.203759858s ago: executing program 2 (id=378): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001100e8e42059e0a018e7ef007b00", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000400)=""/81, 0x51}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = socket(0x10, 0x3, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb801, 0x42}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_TTL={0x5, 0x8, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x6044850) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000a00)={0x6, 0x0, [{0xffffffff, 0x1, 0x0, 0x0, @adapter={0x7, 0x4, 0x7fff, 0x1, 0x3}}, {0xb, 0x3, 0x0, 0x0, @adapter={0x7, 0x937, 0x3, 0x3, 0x80}}, {0x6, 0x4, 0x0, 0x0, @sint={0x7, 0x6}}, {0x3, 0x5, 0x1, 0x0, @sint={0x40, 0x5}}, {0x8, 0x1, 0x1, 0x0, @irqchip={0x5, 0x1}}, {0x68, 0x2, 0x1, 0x0, @msi={0x44969ae2, 0x4, 0x200, 0x7}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 7.002738474s ago: executing program 2 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x100, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "e857"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) 6.832423359s ago: executing program 1 (id=385): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030080000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) accept(r4, &(0x7f0000000380)=@ieee802154={0x24, @long}, &(0x7f00000006c0)=0x46) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) recvmsg$unix(r9, &(0x7f0000000540)={&(0x7f00000005c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/186, 0xba}], 0x3, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}, 0x2) 6.386635555s ago: executing program 4 (id=387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000200)=""/19) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x4001c00) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) listen(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r6, &(0x7f0000006b40)={0x2020}, 0x2020) (fail_nth: 8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe2, 0x9, 0xf3, 0x1b, @mcast1, @mcast1, 0x7, 0x1, 0x4, 0x1ff}}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) 6.332839809s ago: executing program 1 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r1], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000004100000000d1000000000000000000", @ANYRES32=r5, @ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='f2fs_reserve_new_blocks\x00', r7, 0x0, 0x2fec}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000e00000020000180140002007369743000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="1000028004000400080002"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) 4.594571032s ago: executing program 1 (id=390): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004ec", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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") openat(0xffffffffffffff9c, 0x0, 0x441, 0x0) socket(0x10, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f0000000e80)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@usrquota}, {@dax_inode}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@sb={'sb', 0x3d, 0x1}}, {@noload}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000900)="$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") chdir(&(0x7f00000001c0)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff0000001cbfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='.\x00', 0x511082, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="b702", 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000000)=0x14000, 0x4) sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 4.456994904s ago: executing program 0 (id=392): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1d, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = geteuid() socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRES32=r0, @ANYBLOB="0000000000000a000000010000030000850000001b000000b70000000000000095ab61598f673c7cca1d9a8ab4692f1b"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r7 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ustat(0x3, &(0x7f0000000000)) sched_setscheduler(r7, 0x2, &(0x7f0000000180)=0x7) 4.403456468s ago: executing program 4 (id=393): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0'}, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x102f) 4.290835997s ago: executing program 4 (id=395): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f00000017c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x98, 0xfeffffff, 0x98, 0x98, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x41}}, @common=@set={{0x40}, {{0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x4]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x46}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x1, 0x7, [0xe, 0x5, 0x1a, 0x26, 0xb, 0xb, 0x9, 0x3c, 0x1c, 0x12, 0x1d, 0x1, 0x32, 0x3c, 0x1b, 0x6], 0x2, 0x0, 0x10}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) llistxattr(&(0x7f00000001c0)='./bus\x00', 0x0, 0x19) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, &(0x7f0000004380)) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0xffffffff97011210, 0x10, 0x0, 0x6}}, 0x50) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x11a020, 0x0) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x0, 0x20, 0xfffffffffffffff9, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xfff7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002200)={0x10, 0x0, r8}, 0x10) 4.116060192s ago: executing program 0 (id=396): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) 4.030200869s ago: executing program 3 (id=397): io_setup(0x23, &(0x7f0000000280)=0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) 4.01474306s ago: executing program 4 (id=398): syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x2000000, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) 3.623800542s ago: executing program 3 (id=399): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="2eaa00000000000061102400000000009500"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x498, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, 0x0) 2.406268682s ago: executing program 0 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c1f8dae961ee467591ce76eba0b4a7766646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',context=staff_u,\x00']) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000013c0)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done], 0x0, 0x0, 0x0}) 2.405746662s ago: executing program 3 (id=401): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES32=r1], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000000d4e5607ed79911bd473d774736d6bdbcd031506e9c4b8d00bda4bba8077c62747bc0bcb28d80a445acbf3a8359fdbf68ce402cdf3d7b7023282c9c85603c64ec26edd2806b2bbf578de86a700"/97, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r9, 0x0, 0x11) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r9, 0x20, &(0x7f0000000000)={&(0x7f00000004c0)=""/146, 0x92, 0x0, &(0x7f0000000580)=""/100, 0x64}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000600"/20, @ANYRES32=r8, @ANYBLOB="000000b70200001400000001000101003416008500000083000000bf0900000000000055090100000000009500080006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000009d5ed56158b650d497fbc8d81f2bbccadd8b6c3358b7fa9b4db14dccd5777fdde2a80000", @ANYRESOCT=r6], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r11}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7, 0x0, 0x8000000000000}, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.363992946s ago: executing program 1 (id=402): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x496}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='fsi_master_gpio_in\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x1f2) fgetxattr(r5, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000fee000/0x2000)=nil) mlockall(0x7) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x49) openat(r6, &(0x7f0000000140)='./file0\x00', 0x109800, 0xc8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x21100, &(0x7f0000000040)="000090bee2a87e323083599ad37f8c96af000200b4fa1128f4c368687365ce50466ea64e10682cf48255b089705a8f193be85f608df8fc6d86399d130a11bd7477e9d2fd8619ee64b76c84fc5f563391ab19ef103cc27ffce106425c1971f7c9eb207384e898de3b5533c7ff5610bf50351af805c13df714256a346833e2bcd9c4b319b00690e5b37a6ddbd7e241a273076310540bdef1002cf01169e0dbae4444349daa5db393198eaa4cf1936b00"/187, 0xfffffe4f, &(0x7f0000000000), 0x0, 0x0) 2.341296818s ago: executing program 2 (id=403): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030080000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) accept(r4, &(0x7f0000000380)=@ieee802154={0x24, @long}, &(0x7f00000006c0)=0x46) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) recvmsg$unix(r9, &(0x7f0000000540)={&(0x7f00000005c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/186, 0xba}], 0x3, &(0x7f0000000a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x160}, 0x2) 2.291425041s ago: executing program 0 (id=404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$eJzs282PE+UfAPDvTLfLjx/grogvvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMOFl1PNtDNsW9rClnaL9PNJBp5nXvb5fjvztM/M0wYwsqayf5KIrRHxZ0RM1KvNO0zV/7t6+ezCtctnF5KoVt/9J6ntd+Xy2YVi1+K4LXllOo1Iv0hid5t2V06fOT5fqSydyuuzqyc+ml05feaFYyfmjy4dXTq5/9ChgwfmXn5p/4t9yTOL6cquT5f37Hzrg2/ePvxVU/4tefTJVLeNT1erfW5uuLY1lJOxIQbCupQiIjtd5Vr/n4hSrJ28iXjz86EGBwxUtVqtbum8+VwVuIcl0VzX5WFUFB/02f1vsbQOAl4d3PBj6C69Vr8ByvK+mi/1LWOR5vuUW+5v+2kqIt4/d/27bInBPIcAAGjyUzb+eb7d+C+Nhxr2uy+fG5qMiPsjYntEPBAROyLiwYjavg9HxCPrbL91kuTm8U96safEblM2/nsln9tqHv8Vo7+YLOW1bbX8y8mRY5WlfflrMh3lTVl9rksbP7/xx9edtjWO/7Ila78YC+ZxXBzb1HzM4vzq/J3k3OjS+YhdY+3yT27MBCQRsTMidvXYxrFnf9jTadut8++iD/NM1e8jnqmf/3PRkn8h6T4/Ofu/qCztmy2uipv99vuFdzq1f0f590F2/v/f9vq/kf9k0jhfu7L+Ni789WXHe5per//x5L1aeTxf98n86uqpuYjx5HA96Mb1+9eOLerF/ln+03vb9//tsfZK7I6I7CJ+NCIei4jH89ifiIgnI2Jvl/x/ff2pD3vPf7Cy/BfXdf7XCuPRuqZ9oXT8lx+bGp28Kf9r3c//wVppOl9zO+9/txNXb1czAAAA/PekEbE1knTmRjlNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCajnBZPuiYanofO5bf19fr5iKh/taDYfiB/bvxtaXOtPrOwXFkcdvIw4rZ06P+Zv0vDjg4YOL/XgtGl/8Po0v9hdOn/MLra9P/Nw4gD2HjtPv8/G0IcwMZr6f+m/WCEtL3/v95USzcqFmBjef4Ho0v/h5G0sjlu/SP5roXiL/V4+D1biPJdEcbACpHeFWEoDKgw3PclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfvk3AAD//9Ih4c0=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.165764282s ago: executing program 3 (id=405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket(0x2c, 0x3, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) 2.059814961s ago: executing program 0 (id=406): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101", @ANYRES32=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 1.649066764s ago: executing program 2 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101", @ANYRES32=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.360067218s ago: executing program 1 (id=408): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) 556.881504ms ago: executing program 0 (id=409): fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = inotify_init1(0x800) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) 354.076291ms ago: executing program 2 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) rename(0x0, 0x0) 65.940415ms ago: executing program 3 (id=411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r1, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 65.362774ms ago: executing program 1 (id=412): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={0x0, 0x0, 0x10}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.227' (ED25519) to the list of known hosts. [ 33.193190][ T30] audit: type=1400 audit(1756344038.292:64): avc: denied { mounton } for pid=272 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.195137][ T272] cgroup: Unknown subsys name 'net' [ 33.223210][ T30] audit: type=1400 audit(1756344038.292:65): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.260060][ T30] audit: type=1400 audit(1756344038.332:66): avc: denied { unmount } for pid=272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.260365][ T272] cgroup: Unknown subsys name 'devices' [ 33.414088][ T272] cgroup: Unknown subsys name 'hugetlb' [ 33.420607][ T272] cgroup: Unknown subsys name 'rlimit' [ 33.621585][ T30] audit: type=1400 audit(1756344038.722:67): avc: denied { setattr } for pid=272 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.662302][ T30] audit: type=1400 audit(1756344038.722:68): avc: denied { mounton } for pid=272 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.683867][ T274] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.699966][ T30] audit: type=1400 audit(1756344038.722:69): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.743205][ T30] audit: type=1400 audit(1756344038.812:70): avc: denied { relabelto } for pid=274 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.746475][ T272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.773087][ T30] audit: type=1400 audit(1756344038.812:71): avc: denied { write } for pid=274 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.824619][ T30] audit: type=1400 audit(1756344038.842:72): avc: denied { read } for pid=272 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.858574][ T30] audit: type=1400 audit(1756344038.842:73): avc: denied { open } for pid=272 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.103797][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.117497][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.137108][ T280] device bridge_slave_0 entered promiscuous mode [ 35.160902][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.175182][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.194113][ T280] device bridge_slave_1 entered promiscuous mode [ 35.277665][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.292700][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.304628][ T281] device bridge_slave_0 entered promiscuous mode [ 35.316763][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.328844][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.338798][ T281] device bridge_slave_1 entered promiscuous mode [ 35.461811][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.473965][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.484665][ T285] device bridge_slave_0 entered promiscuous mode [ 35.515196][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.525581][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.543164][ T285] device bridge_slave_1 entered promiscuous mode [ 35.563516][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.577258][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.591161][ T282] device bridge_slave_0 entered promiscuous mode [ 35.602530][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.614938][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.628139][ T283] device bridge_slave_0 entered promiscuous mode [ 35.647896][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.660809][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.675933][ T282] device bridge_slave_1 entered promiscuous mode [ 35.696727][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.707914][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.720368][ T283] device bridge_slave_1 entered promiscuous mode [ 35.824321][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.833307][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.846526][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.854969][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.895977][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.906474][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.917708][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.927803][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.037513][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.047839][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.060596][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.071266][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.103711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.116182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.126078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.139081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.161103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.171455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.184492][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.194622][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.206323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.218697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.231916][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.245623][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.257365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.271856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.284900][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.297182][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.319656][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.329309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.363783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.374764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.390917][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.399809][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.413269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.425819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.436132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.447245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.459844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.472871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.485730][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.497014][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.506612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.530085][ T280] device veth0_vlan entered promiscuous mode [ 36.544330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.558004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.573374][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.584172][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.599000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.613349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.624795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.637458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.647672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.660904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.673985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.684891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.697381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.707884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.731315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.743687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.758724][ T281] device veth0_vlan entered promiscuous mode [ 36.773985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.787142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.797665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.810706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.821504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.830799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.839138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.847662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.868137][ T280] device veth1_macvtap entered promiscuous mode [ 36.882000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.897539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.909033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.919917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.932387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.945626][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.955657][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.968954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.983897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.002891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.034421][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.044418][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.060359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.073874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.096444][ T281] device veth1_macvtap entered promiscuous mode [ 37.106523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.122636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.141994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.159996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.174810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.186551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.196538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.209655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.221811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.231450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.243881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.257937][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.268663][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.280001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.292284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.304608][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.315253][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.325958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.344905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.354603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.381939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.392716][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 37.393817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.415688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.427935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.441469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.453350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.466716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.475971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.487900][ T285] device veth0_vlan entered promiscuous mode [ 37.495928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.506586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.535359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.544963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.581401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.596278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.605598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.617838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.627996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.638370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.648677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.659873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.681605][ T285] device veth1_macvtap entered promiscuous mode [ 37.692419][ T283] device veth0_vlan entered promiscuous mode [ 37.721333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.735072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.748657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.760805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.771335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.782106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.792757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.808400][ T282] device veth0_vlan entered promiscuous mode [ 37.822289][ T343] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4'. [ 37.842853][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.861340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.889027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.909400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.934152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.944253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.959510][ T283] device veth1_macvtap entered promiscuous mode [ 37.973672][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.983200][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.992568][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.068764][ T350] binder: 346:350 unknown command 0 [ 38.076776][ T350] binder: 346:350 ioctl c0306201 200000000080 returned -22 [ 38.091549][ T350] binder: BINDER_SET_CONTEXT_MGR already set [ 38.100151][ T350] binder: 346:350 ioctl 4018620d 200000000040 returned -16 [ 38.221369][ T350] loop2: detected capacity change from 0 to 4096 [ 38.268842][ T350] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 38.282324][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 38.282374][ T30] audit: type=1400 audit(1756344043.162:111): avc: denied { open } for pid=346 comm="syz.2.6" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.390660][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.450261][ T350] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.515441][ T350] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 38.577857][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.704517][ T282] device veth1_macvtap entered promiscuous mode [ 38.903489][ T30] audit: type=1400 audit(1756344043.162:112): avc: denied { ioctl } for pid=346 comm="syz.2.6" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.951377][ T30] audit: type=1400 audit(1756344043.162:113): avc: denied { set_context_mgr } for pid=346 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.360878][ T30] audit: type=1400 audit(1756344043.182:114): avc: denied { write } for pid=346 comm="syz.2.6" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.409034][ T361] loop3: detected capacity change from 0 to 512 [ 39.421293][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.450398][ T30] audit: type=1400 audit(1756344043.182:115): avc: denied { map } for pid=346 comm="syz.2.6" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.459414][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.485011][ T30] audit: type=1400 audit(1756344043.212:116): avc: denied { unlink } for pid=346 comm="syz.2.6" name="#1" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.500399][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.525857][ T30] audit: type=1400 audit(1756344043.222:117): avc: denied { mount } for pid=346 comm="syz.2.6" name="/" dev="overlay" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.534165][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.566410][ T30] audit: type=1400 audit(1756344044.142:118): avc: denied { create } for pid=355 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.602186][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.614467][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.627309][ T361] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 39.641271][ T30] audit: type=1400 audit(1756344044.162:119): avc: denied { prog_run } for pid=355 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.651660][ T363] loop1: detected capacity change from 0 to 8192 [ 39.666285][ T361] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.695973][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.716490][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.757555][ T30] audit: type=1400 audit(1756344044.802:120): avc: denied { create } for pid=360 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.795058][ T363] loop1: p1 < > p3 p4 < > [ 39.810085][ T363] loop1: p3 size 16744448 extends beyond EOD, truncated [ 40.331121][ T363] syz.1.2 (363) used greatest stack depth: 22048 bytes left [ 40.371365][ T368] loop2: detected capacity change from 0 to 40427 [ 40.383810][ T380] loop1: detected capacity change from 0 to 512 [ 40.409791][ T385] loop0: detected capacity change from 0 to 256 [ 40.431563][ T380] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.447775][ T368] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(3330) root(3) [ 40.457058][ T385] ======================================================= [ 40.457058][ T385] WARNING: The mand mount option has been deprecated and [ 40.457058][ T385] and is ignored by this kernel. Remove the mand [ 40.457058][ T385] option from the mount to silence this warning. [ 40.457058][ T385] ======================================================= [ 40.501638][ T368] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 40.519546][ T368] F2FS-fs (loop2): invalid crc value [ 40.528199][ T369] udevd[369]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.544055][ T372] udevd[372]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 40.561783][ T339] udevd[339]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.566485][ T385] FAT-fs (loop0): Directory bread(block 64) failed [ 40.592443][ T368] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.608866][ T380] EXT4-fs (loop1): 1 orphan inode deleted [ 40.625710][ T390] loop4: detected capacity change from 0 to 16 [ 40.639223][ T385] FAT-fs (loop0): Directory bread(block 65) failed [ 40.642082][ T390] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 40.654020][ T385] FAT-fs (loop0): Directory bread(block 66) failed [ 40.677092][ T385] FAT-fs (loop0): Directory bread(block 67) failed [ 40.684030][ T380] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.685814][ T385] FAT-fs (loop0): Directory bread(block 68) failed [ 40.708148][ T385] FAT-fs (loop0): Directory bread(block 69) failed [ 40.718157][ T385] FAT-fs (loop0): Directory bread(block 70) failed [ 40.728072][ T385] FAT-fs (loop0): Directory bread(block 71) failed [ 40.735940][ T385] FAT-fs (loop0): Directory bread(block 72) failed [ 40.745303][ T385] FAT-fs (loop0): Directory bread(block 73) failed [ 40.767451][ T380] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.808653][ T385] attempt to access beyond end of device [ 40.808653][ T385] loop0: rw=2051, want=1256, limit=256 [ 40.858905][ T368] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 40.882707][ T368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 40.884378][ T385] attempt to access beyond end of device [ 40.884378][ T385] loop0: rw=2051, want=1384, limit=256 [ 40.961632][ T385] futex_wake_op: syz.0.12 tries to shift op by 32; fix this program [ 41.043284][ T10] attempt to access beyond end of device [ 41.043284][ T10] loop0: rw=1, want=1260, limit=256 [ 41.070566][ T383] loop3: detected capacity change from 0 to 40427 [ 41.104669][ T383] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 41.141052][ T383] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.169768][ T383] F2FS-fs (loop3): invalid crc value [ 41.177570][ T405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 41.211060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 41.224890][ T383] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.244122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.274381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 41.307321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.329770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.347117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.360213][ T383] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.361067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.380467][ T383] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.392126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.424672][ T410] attempt to access beyond end of device [ 41.424672][ T410] loop2: rw=10241, want=45104, limit=40427 [ 41.513398][ T281] attempt to access beyond end of device [ 41.513398][ T281] loop3: rw=2049, want=40968, limit=40427 [ 41.549938][ T335] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 41.565712][ T335] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 41.587585][ T403] loop0: detected capacity change from 0 to 40427 [ 41.628783][ T403] F2FS-fs (loop0): invalid crc value [ 41.642688][ T403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.669764][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.747363][ T403] F2FS-fs (loop0): Start checkpoint disabled! [ 41.911126][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 41.965122][ T403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 42.051538][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.148817][ T26] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 42.162811][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.179890][ T280] attempt to access beyond end of device [ 42.179890][ T280] loop2: rw=2049, want=45112, limit=40427 [ 42.214370][ T26] usb 5-1: config 0 descriptor?? [ 42.258166][ T10] attempt to access beyond end of device [ 42.258166][ T10] loop0: rw=2049, want=45104, limit=40427 [ 42.325892][ T422] loop3: detected capacity change from 0 to 1024 [ 42.353046][ T422] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.421863][ T422] EXT4-fs (loop3): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 42.421863][ T422] ‘Þa( ¨0Ü÷%" or missing value [ 42.499885][ T429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 42.580504][ T436] xt_bpf: check failed: parse error [ 42.753172][ T26] cypress 0003:04B4:ED81.0001: unknown main item tag 0x0 [ 42.761632][ T26] cypress 0003:04B4:ED81.0001: item fetching failed at offset 3/5 [ 42.771363][ T26] cypress 0003:04B4:ED81.0001: parse failed [ 42.779189][ T26] cypress: probe of 0003:04B4:ED81.0001 failed with error -22 [ 42.810988][ T334] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.962415][ T330] usb 5-1: USB disconnect, device number 2 [ 43.024403][ T448] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 43.081060][ T334] usb 3-1: Using ep0 maxpacket: 32 [ 43.211399][ T334] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.260474][ T334] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 43.345786][ T334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 43.388790][ T334] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 43.441769][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.516983][ T334] usb 3-1: config 0 descriptor?? [ 43.701525][ T453] loop3: detected capacity change from 0 to 512 [ 43.797883][ T453] EXT4-fs (loop3): 1 orphan inode deleted [ 43.817172][ T453] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.832433][ T453] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.870211][ T457] xt_bpf: check failed: parse error [ 44.059611][ T334] wacom 0003:056A:0094.0002: Using device in hidraw-only mode [ 44.083924][ T334] wacom 0003:056A:0094.0002: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 44.256603][ T334] usb 3-1: USB disconnect, device number 2 [ 44.842141][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 44.842337][ T30] audit: type=1400 audit(1756344049.662:152): avc: denied { mount } for pid=476 comm="syz.3.35" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 44.980599][ T470] loop4: detected capacity change from 0 to 40427 [ 44.981379][ T30] audit: type=1400 audit(1756344049.662:153): avc: denied { setopt } for pid=476 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.027466][ T470] F2FS-fs (loop4): invalid crc value [ 45.060007][ T470] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.148384][ T483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'. [ 45.193808][ T470] F2FS-fs (loop4): Start checkpoint disabled! [ 45.207274][ T485] loop2: detected capacity change from 0 to 1024 [ 45.236586][ T485] EXT4-fs (loop2): Ignoring removed nobh option [ 45.239334][ T30] audit: type=1400 audit(1756344050.332:154): avc: denied { mounton } for pid=484 comm="syz.2.37" path="/5/file1" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.260869][ T470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 45.281362][ T485] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.320174][ T30] audit: type=1400 audit(1756344050.402:155): avc: denied { create } for pid=487 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.372329][ T485] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,grpid,barrier=0x0000000000000001,i_version,nouid32,max_dir_size_kb=0x00000000004007b1,abort,nodelalloc,nobh,user_xattr,dioread_lock,dioread_nolock,,errors=continue. Quota mode: none. [ 45.439945][ T30] audit: type=1400 audit(1756344050.452:156): avc: denied { connect } for pid=487 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.487967][ T30] audit: type=1400 audit(1756344050.452:157): avc: denied { create } for pid=487 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.574279][ T10] attempt to access beyond end of device [ 45.574279][ T10] loop4: rw=2049, want=40968, limit=40427 [ 45.601024][ T30] audit: type=1400 audit(1756344050.562:158): avc: denied { mount } for pid=484 comm="syz.2.37" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.657588][ T10] attempt to access beyond end of device [ 45.657588][ T10] loop4: rw=2049, want=41000, limit=40427 [ 45.673776][ T30] audit: type=1400 audit(1756344050.632:159): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.699503][ T30] audit: type=1400 audit(1756344050.752:160): avc: denied { name_bind } for pid=494 comm="syz.3.40" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.731127][ T30] audit: type=1400 audit(1756344050.752:161): avc: denied { node_bind } for pid=494 comm="syz.3.40" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 45.781199][ T291] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 46.067297][ T505] loop4: detected capacity change from 0 to 1024 [ 46.118096][ T505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.203202][ T505] EXT4-fs (loop4): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 46.203202][ T505] ‘Þa( ¨0Ü÷%" or missing value [ 46.311560][ T511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'. [ 46.350215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 46.370298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.400383][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 46.415238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.424915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.440556][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.463888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.482375][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.681083][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 46.881071][ T330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.931138][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 47.071240][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.088046][ T20] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 47.097455][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.122129][ T20] usb 2-1: config 0 descriptor?? [ 47.131005][ T330] usb 3-1: Using ep0 maxpacket: 32 [ 47.175778][ T527] loop3: detected capacity change from 0 to 40427 [ 47.251165][ T330] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.267296][ T330] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 47.277550][ T527] F2FS-fs (loop3): invalid crc value [ 47.283199][ T330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.300087][ T330] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 47.315072][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.315388][ T527] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.327123][ T330] usb 3-1: config 0 descriptor?? [ 47.368111][ T527] F2FS-fs (loop3): Start checkpoint disabled! [ 47.377577][ T527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 47.440761][ T10] attempt to access beyond end of device [ 47.440761][ T10] loop3: rw=2049, want=40968, limit=40427 [ 47.456653][ T10] attempt to access beyond end of device [ 47.456653][ T10] loop3: rw=2049, want=41008, limit=40427 [ 47.592313][ T20] cypress 0003:04B4:ED81.0003: unknown main item tag 0x0 [ 47.602621][ T20] cypress 0003:04B4:ED81.0003: item fetching failed at offset 3/5 [ 47.611372][ T20] cypress 0003:04B4:ED81.0003: parse failed [ 47.618209][ T20] cypress: probe of 0003:04B4:ED81.0003 failed with error -22 [ 47.621174][ T534] loop3: detected capacity change from 0 to 256 [ 47.635853][ T534] exfat: Deprecated parameter 'utf8' [ 47.645082][ T534] exfat: Bad value for 'dmask' [ 47.810335][ T20] usb 2-1: USB disconnect, device number 2 [ 47.826911][ T330] wacom 0003:056A:0094.0004: Using device in hidraw-only mode [ 47.841594][ T330] wacom 0003:056A:0094.0004: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 48.026523][ T6] usb 3-1: USB disconnect, device number 3 [ 48.481478][ T511] syz.1.42 (511) used greatest stack depth: 21952 bytes left [ 48.519522][ T546] SELinux: failed to load policy [ 48.704869][ T558] loop2: detected capacity change from 0 to 1024 [ 48.767195][ T558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.901297][ T558] EXT4-fs (loop2): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 48.901297][ T558] ‘Þa( ¨0Ü÷%" or missing value [ 48.958831][ T548] loop1: detected capacity change from 0 to 40427 [ 48.975737][ T548] F2FS-fs (loop1): invalid crc value [ 49.012276][ T548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.066957][ T571] loop3: detected capacity change from 0 to 512 [ 49.087315][ T548] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 49.094581][ T571] EXT4-fs (loop3): quotafile must be on filesystem root [ 49.102161][ T548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 49.182719][ T334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.729524][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 49.742932][ T334] usb 5-1: Using ep0 maxpacket: 32 [ 49.759910][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 49.768905][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.778243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 49.788529][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.797806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.806931][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.819422][ T587] loop1: detected capacity change from 0 to 256 [ 49.821151][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.838337][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.871197][ T334] usb 5-1: config 0 has an invalid interface number: 73 but max is 0 [ 49.880808][ T334] usb 5-1: config 0 has no interface number 0 [ 49.887534][ T334] usb 5-1: too many endpoints for config 0 interface 73 altsetting 118: 194, using maximum allowed: 30 [ 49.903137][ T334] usb 5-1: config 0 interface 73 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 194 [ 49.918968][ T334] usb 5-1: config 0 interface 73 has no altsetting 0 [ 50.081034][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.101120][ T334] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 50.121566][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 50.121582][ T30] audit: type=1400 audit(1756344055.222:181): avc: denied { read } for pid=590 comm="syz.3.68" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.183599][ T334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.187960][ T591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 50.203592][ T334] usb 5-1: Product: syz [ 50.215664][ T30] audit: type=1400 audit(1756344055.222:182): avc: denied { open } for pid=590 comm="syz.3.68" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.221287][ T334] usb 5-1: Manufacturer: syz [ 50.249716][ T592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 50.258220][ T334] usb 5-1: SerialNumber: syz [ 50.270608][ T30] audit: type=1400 audit(1756344055.222:183): avc: denied { ioctl } for pid=590 comm="syz.3.68" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.283281][ T334] usb 5-1: config 0 descriptor?? [ 50.314345][ T30] audit: type=1400 audit(1756344055.282:184): avc: denied { write } for pid=590 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.391079][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 50.467796][ T596] loop3: detected capacity change from 0 to 1024 [ 50.483921][ T598] loop0: detected capacity change from 0 to 256 [ 50.494582][ T596] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 50.515043][ T596] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.515085][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.532395][ T30] audit: type=1400 audit(1756344055.622:185): avc: denied { read write } for pid=595 comm="syz.3.70" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.546025][ T6] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 50.580607][ T596] device bridge1 entered promiscuous mode [ 50.586521][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.587662][ T30] audit: type=1400 audit(1756344055.672:186): avc: denied { open } for pid=595 comm="syz.3.70" path="/17/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.605082][ T598] FAT-fs (loop0): bogus number of FAT sectors [ 50.637762][ T6] usb 3-1: config 0 descriptor?? [ 50.656590][ T598] FAT-fs (loop0): Can't find a valid FAT filesystem [ 50.681116][ T30] audit: type=1400 audit(1756344055.672:187): avc: denied { map } for pid=595 comm="syz.3.70" path="/17/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.719080][ T30] audit: type=1400 audit(1756344055.672:188): avc: denied { execute } for pid=595 comm="syz.3.70" path="/17/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.760450][ T605] loop0: detected capacity change from 0 to 256 [ 50.768633][ T603] loop1: detected capacity change from 0 to 1024 [ 50.813165][ T605] FAT-fs (loop0): Directory bread(block 64) failed [ 50.820834][ T603] EXT4-fs (loop1): Ignoring removed orlov option [ 50.828525][ T605] FAT-fs (loop0): Directory bread(block 65) failed [ 50.838360][ T30] audit: type=1400 audit(1756344055.932:189): avc: denied { create } for pid=606 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 50.865462][ T334] usb 5-1: USB disconnect, device number 3 [ 50.869183][ T605] FAT-fs (loop0): Directory bread(block 66) failed [ 50.885168][ T605] FAT-fs (loop0): Directory bread(block 67) failed [ 50.896382][ T605] FAT-fs (loop0): Directory bread(block 68) failed [ 50.907198][ T603] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 50.933758][ T605] FAT-fs (loop0): Directory bread(block 69) failed [ 50.937679][ T30] audit: type=1400 audit(1756344056.032:190): avc: denied { bind } for pid=606 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.942608][ T605] FAT-fs (loop0): Directory bread(block 70) failed [ 50.974887][ T605] FAT-fs (loop0): Directory bread(block 71) failed [ 50.982601][ T605] FAT-fs (loop0): Directory bread(block 72) failed [ 50.990557][ T605] FAT-fs (loop0): Directory bread(block 73) failed [ 51.084992][ T605] attempt to access beyond end of device [ 51.084992][ T605] loop0: rw=2051, want=1256, limit=256 [ 51.240177][ T614] overlayfs: './file1' not a directory [ 51.614385][ T6] cypress 0003:04B4:ED81.0005: unknown main item tag 0x0 [ 51.626873][ T6] cypress 0003:04B4:ED81.0005: item fetching failed at offset 3/5 [ 51.638943][ T6] cypress 0003:04B4:ED81.0005: parse failed [ 51.646735][ T6] cypress: probe of 0003:04B4:ED81.0005 failed with error -22 [ 51.658217][ T6] usb 3-1: USB disconnect, device number 4 [ 52.257009][ T635] loop3: detected capacity change from 0 to 8192 [ 52.467459][ T638] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 52.970428][ T647] loop2: detected capacity change from 0 to 40427 [ 53.080203][ T647] F2FS-fs (loop2): invalid crc value [ 53.112670][ T652] loop1: detected capacity change from 0 to 256 [ 53.123534][ T647] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.157506][ T652] FAT-fs (loop1): Directory bread(block 64) failed [ 53.181582][ T652] FAT-fs (loop1): Directory bread(block 65) failed [ 53.188379][ T647] F2FS-fs (loop2): Start checkpoint disabled! [ 53.191387][ T652] FAT-fs (loop1): Directory bread(block 66) failed [ 53.205282][ T647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 53.221251][ T652] FAT-fs (loop1): Directory bread(block 67) failed [ 53.241046][ T652] FAT-fs (loop1): Directory bread(block 68) failed [ 53.259352][ T652] FAT-fs (loop1): Directory bread(block 69) failed [ 53.297750][ T652] FAT-fs (loop1): Directory bread(block 70) failed [ 53.307517][ T652] FAT-fs (loop1): Directory bread(block 71) failed [ 53.315839][ T652] FAT-fs (loop1): Directory bread(block 72) failed [ 53.323671][ T652] FAT-fs (loop1): Directory bread(block 73) failed [ 53.565787][ T665] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.651211][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.763177][ T333] attempt to access beyond end of device [ 53.763177][ T333] loop2: rw=2049, want=40968, limit=40427 [ 53.777117][ T333] attempt to access beyond end of device [ 53.777117][ T333] loop2: rw=2049, want=40992, limit=40427 [ 53.870538][ T670] loop4: detected capacity change from 0 to 512 [ 53.981023][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 54.003241][ T670] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 54.027825][ T670] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 54.089355][ T670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 54.111215][ T26] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.151783][ T26] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 54.159322][ T670] System zones: 1-12 [ 54.203346][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 54.213788][ T670] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.94: corrupted in-inode xattr [ 54.229329][ T26] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 54.268930][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.294588][ T670] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.94: couldn't read orphan inode 15 (err -117) [ 54.308464][ T26] usb 4-1: config 0 descriptor?? [ 54.365525][ T670] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 54.774424][ T682] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 55.020364][ T26] wacom 0003:056A:0094.0006: Using device in hidraw-only mode [ 55.080092][ T26] wacom 0003:056A:0094.0006: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 55.110794][ T678] loop2: detected capacity change from 0 to 40427 [ 55.180741][ T26] usb 4-1: USB disconnect, device number 2 [ 55.221655][ T678] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 55.252444][ T678] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 55.300867][ T684] fido_id[684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 55.322017][ T678] F2FS-fs (loop2): invalid crc value [ 55.347397][ T678] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.495711][ T678] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 55.508854][ T678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.603744][ T280] attempt to access beyond end of device [ 55.603744][ T280] loop2: rw=2049, want=40968, limit=40427 [ 55.630615][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 55.693628][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 55.744788][ T692] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 56.335022][ T543] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.402403][ T699] loop1: detected capacity change from 0 to 256 [ 56.442351][ T699] FAT-fs (loop1): Directory bread(block 64) failed [ 56.461025][ T699] FAT-fs (loop1): Directory bread(block 65) failed [ 56.470073][ T699] FAT-fs (loop1): Directory bread(block 66) failed [ 56.509032][ T699] FAT-fs (loop1): Directory bread(block 67) failed [ 56.519155][ T699] FAT-fs (loop1): Directory bread(block 68) failed [ 56.538166][ T699] FAT-fs (loop1): Directory bread(block 69) failed [ 56.555697][ T699] FAT-fs (loop1): Directory bread(block 70) failed [ 56.567605][ T699] FAT-fs (loop1): Directory bread(block 71) failed [ 56.576367][ T699] FAT-fs (loop1): Directory bread(block 72) failed [ 56.586790][ T699] FAT-fs (loop1): Directory bread(block 73) failed [ 56.713297][ T543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.841143][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 56.841195][ T30] audit: type=1404 audit(1756344061.892:224): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 57.020726][ T30] audit: type=1404 audit(1756344061.892:225): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 57.366371][ T30] audit: type=1400 audit(1756344061.912:226): avc: denied { ioctl } for pid=705 comm="syz.1.105" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 57.596074][ T712] loop2: detected capacity change from 0 to 512 [ 57.612555][ T30] audit: type=1400 audit(1756344062.352:227): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.712423][ T30] audit: type=1400 audit(1756344062.352:228): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.753522][ T712] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 57.757456][ T543] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.776289][ T543] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.792872][ T543] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.805912][ T543] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.816987][ T712] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.107: bg 0: block 104: invalid block bitmap [ 57.817897][ T543] usb 4-1: config 0 descriptor?? [ 57.844060][ T716] loop4: detected capacity change from 0 to 1024 [ 57.854879][ T30] audit: type=1400 audit(1756344062.372:229): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.871469][ T712] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 57.911324][ T712] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.107: invalid indirect mapped block 1 (level 1) [ 57.924814][ T30] audit: type=1400 audit(1756344062.612:230): avc: denied { map_create } for pid=710 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.955777][ T30] audit: type=1400 audit(1756344062.612:231): avc: denied { bpf } for pid=710 comm="syz.1.106" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.986965][ T712] EXT4-fs (loop2): 1 truncate cleaned up [ 57.994330][ T30] audit: type=1400 audit(1756344062.622:232): avc: denied { map_read } for pid=710 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.994362][ T30] audit: type=1400 audit(1756344062.622:233): avc: denied { prog_load } for pid=710 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.061135][ T712] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.112114][ T716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.143207][ T712] process 'syz.2.107' launched './file1' with NULL argv: empty string added [ 58.173089][ T716] EXT4-fs (loop4): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 58.173089][ T716] ‘Þa( ¨0Ü÷%" or missing value [ 58.324517][ T734] loop4: detected capacity change from 0 to 256 [ 58.386818][ T736] syz.2.113[736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.386899][ T736] syz.2.113[736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.402958][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 58.411113][ T291] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 58.446971][ T736] device sit1 entered promiscuous mode [ 58.494737][ T736] syz.2.113 (736) used greatest stack depth: 20928 bytes left [ 58.789190][ T734] FAT-fs (loop4): Directory bread(block 64) failed [ 58.802768][ T543] usbhid 4-1:0.0: can't add hid device: -71 [ 58.810299][ T543] usbhid: probe of 4-1:0.0 failed with error -71 [ 58.819102][ T734] FAT-fs (loop4): Directory bread(block 65) failed [ 58.830732][ T734] FAT-fs (loop4): Directory bread(block 66) failed [ 58.839898][ T543] usb 4-1: USB disconnect, device number 3 [ 58.848886][ T734] FAT-fs (loop4): Directory bread(block 67) failed [ 58.860299][ T734] FAT-fs (loop4): Directory bread(block 68) failed [ 58.878031][ T734] FAT-fs (loop4): Directory bread(block 69) failed [ 58.889159][ T734] FAT-fs (loop4): Directory bread(block 70) failed [ 58.899306][ T734] FAT-fs (loop4): Directory bread(block 71) failed [ 58.909617][ T734] FAT-fs (loop4): Directory bread(block 72) failed [ 58.921718][ T734] FAT-fs (loop4): Directory bread(block 73) failed [ 59.011096][ T291] usb 1-1: Using ep0 maxpacket: 32 [ 59.093853][ T749] loop1: detected capacity change from 0 to 512 [ 59.127979][ T749] EXT4-fs (loop1): Unrecognized mount option "fsname=GPL" or missing value [ 59.143872][ T291] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.167182][ T291] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.186664][ T291] usb 1-1: config 0 interface 0 has no altsetting 0 [ 59.199851][ T291] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 59.218986][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.233189][ T291] usb 1-1: config 0 descriptor?? [ 59.428110][ T759] overlayfs: missing 'lowerdir' [ 59.438610][ T757] loop4: detected capacity change from 0 to 512 [ 59.726522][ T757] EXT4-fs (loop4): Ignoring removed oldalloc option [ 59.809685][ T757] EXT4-fs (loop4): 1 truncate cleaned up [ 59.837513][ T757] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 59.872266][ T770] binder: 769:770 ioctl c0046686 200000000280 returned -22 [ 59.876520][ T757] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.122: invalid indirect mapped block 234881024 (level 0) [ 59.904330][ T757] EXT4-fs (loop4): Remounting filesystem read-only [ 59.962805][ T291] wacom 0003:056A:0094.0007: Using device in hidraw-only mode [ 59.990114][ T291] wacom 0003:056A:0094.0007: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 60.170539][ T778] loop4: detected capacity change from 0 to 256 [ 60.178714][ T26] usb 1-1: USB disconnect, device number 3 [ 60.231367][ T778] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 60.251005][ T778] SELinux: duplicate or incompatible mount options [ 60.328470][ T774] syz.1.121 (774) used greatest stack depth: 20832 bytes left [ 60.600977][ T788] overlayfs: failed to resolve './file0': -2 [ 60.692546][ T434] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.913446][ T796] loop0: detected capacity change from 0 to 256 [ 60.951059][ T434] usb 3-1: Using ep0 maxpacket: 32 [ 61.086594][ T797] overlayfs: failed to resolve './file0': -2 [ 61.265759][ T796] FAT-fs (loop0): bogus number of FAT sectors [ 61.275301][ T796] FAT-fs (loop0): Can't find a valid FAT filesystem [ 61.442035][ T434] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.456485][ T434] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 61.473638][ T434] usb 3-1: config 0 interface 0 has no altsetting 0 [ 61.482875][ T434] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 61.493141][ T434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.503414][ T434] usb 3-1: config 0 descriptor?? [ 62.277614][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 62.277634][ T30] audit: type=1400 audit(1756344066.942:311): avc: denied { watch } for pid=802 comm="syz.0.133" path="/22/control" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.576694][ T814] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 62.724608][ T434] wacom 0003:056A:0094.0008: Using device in hidraw-only mode [ 62.883764][ T434] wacom 0003:056A:0094.0008: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 63.098142][ T817] loop0: detected capacity change from 0 to 1024 [ 63.155096][ T434] usb 3-1: USB disconnect, device number 5 [ 63.537312][ T817] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.651082][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 63.840935][ C0] sched: RT throttling activated [ 63.847674][ T825] fido_id[825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 63.853216][ T816] EXT4-fs (loop0): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 63.853216][ T816] ‘Þa( ¨0Ü÷%" or missing value [ 64.081542][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.126976][ T30] audit: type=1400 audit(1756344069.222:312): avc: denied { mount } for pid=810 comm="syz.3.135" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.248503][ T829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'. [ 64.263072][ T829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 65.496644][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.518693][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.646421][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.665596][ T30] audit: type=1400 audit(1756344069.302:313): avc: denied { write } for pid=826 comm="syz.2.139" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 65.766936][ T833] loop2: detected capacity change from 0 to 256 [ 65.964915][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.176892][ T26] usb 2-1: config 0 descriptor?? [ 66.311360][ T26] usb 2-1: can't set config #0, error -71 [ 66.498748][ T30] audit: type=1400 audit(1756344069.322:314): avc: denied { map } for pid=826 comm="syz.2.139" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.545803][ T26] usb 2-1: USB disconnect, device number 3 [ 66.575108][ T840] loop1: detected capacity change from 0 to 256 [ 66.721864][ T840] FAT-fs (loop1): bogus number of FAT sectors [ 66.740618][ T840] FAT-fs (loop1): Can't find a valid FAT filesystem [ 66.759759][ T30] audit: type=1400 audit(1756344070.962:315): avc: denied { mount } for pid=830 comm="syz.2.140" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.496784][ T844] overlayfs: failed to resolve './file0': -2 [ 67.650047][ T30] audit: type=1400 audit(1756344072.722:316): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.883046][ T835] loop4: detected capacity change from 0 to 40427 [ 67.903173][ T30] audit: type=1400 audit(1756344073.002:317): avc: denied { nlmsg_write } for pid=852 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 68.017217][ T835] F2FS-fs (loop4): invalid crc value [ 68.050856][ T835] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.362344][ T835] F2FS-fs (loop4): Start checkpoint disabled! [ 68.372659][ T835] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 68.444911][ T30] audit: type=1400 audit(1756344073.522:318): avc: denied { create } for pid=834 comm="syz.4.141" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.460235][ T8] attempt to access beyond end of device [ 68.460235][ T8] loop4: rw=1, want=45112, limit=40427 [ 68.474015][ T30] audit: type=1400 audit(1756344073.522:319): avc: denied { read write open } for pid=834 comm="syz.4.141" path="/25/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.490103][ T8] attempt to access beyond end of device [ 68.490103][ T8] loop4: rw=2049, want=40984, limit=40427 [ 68.523473][ T30] audit: type=1400 audit(1756344073.522:320): avc: denied { write } for pid=834 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.576601][ T30] audit: type=1400 audit(1756344073.522:321): avc: denied { read } for pid=834 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.620000][ T872] overlayfs: overlapping lowerdir path [ 68.645262][ T872] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 68.857859][ T513] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 69.136804][ T879] overlayfs: overlapping lowerdir path [ 69.182897][ T879] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 69.401061][ T513] usb 2-1: Using ep0 maxpacket: 32 [ 69.521043][ T513] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.535487][ T513] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.551562][ T513] usb 2-1: config 0 interface 0 has no altsetting 0 [ 69.559206][ T513] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 69.580274][ T513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.603466][ T513] usb 2-1: config 0 descriptor?? [ 69.726371][ T887] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 69.735224][ T30] audit: type=1400 audit(1756344074.832:322): avc: denied { mount } for pid=876 comm="syz.0.154" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.857371][ T888] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 69.885585][ T890] loop3: detected capacity change from 0 to 1024 [ 69.890300][ T30] audit: type=1400 audit(1756344074.952:323): avc: denied { mounton } for pid=876 comm="syz.0.154" path="/27/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.993113][ T890] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.072588][ T890] EXT4-fs (loop3): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 70.072588][ T890] ‘Þa( ¨0Ü÷%" or missing value [ 70.108534][ T513] wacom 0003:056A:0094.0009: Using device in hidraw-only mode [ 70.128104][ T513] wacom 0003:056A:0094.0009: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 70.288974][ T30] audit: type=1400 audit(1756344075.382:324): avc: denied { create } for pid=896 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.336928][ T291] usb 2-1: USB disconnect, device number 4 [ 70.348318][ T902] device veth0 entered promiscuous mode [ 70.364557][ T30] audit: type=1400 audit(1756344075.442:325): avc: denied { setopt } for pid=901 comm="syz.3.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.423531][ T901] device veth0 left promiscuous mode [ 70.441908][ T906] loop0: detected capacity change from 0 to 256 [ 70.493055][ T906] FAT-fs (loop0): bogus number of FAT sectors [ 70.516192][ T906] FAT-fs (loop0): Can't find a valid FAT filesystem [ 70.558654][ T911] kvm [910]: vcpu1, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x200000000200 [ 71.378301][ T923] overlayfs: overlapping lowerdir path [ 71.452469][ T923] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 71.660980][ T513] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.939022][ T513] usb 3-1: Using ep0 maxpacket: 32 [ 71.962888][ T931] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 72.395994][ T932] overlayfs: overlapping lowerdir path [ 72.731187][ T513] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.762202][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 72.762229][ T30] audit: type=1400 audit(1756344077.862:337): avc: denied { ioctl } for pid=934 comm="syz.1.168" path="socket:[17192]" dev="sockfs" ino=17192 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.821325][ T513] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 72.880278][ T513] usb 3-1: config 0 interface 0 has no altsetting 0 [ 72.910353][ T513] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 72.941380][ T513] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.974369][ T513] usb 3-1: config 0 descriptor?? [ 73.030790][ T935] loop1: detected capacity change from 0 to 40427 [ 73.103925][ T935] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 73.115201][ T935] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 73.142051][ T935] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 73.224357][ T943] loop4: detected capacity change from 0 to 512 [ 73.236261][ T30] audit: type=1400 audit(1756344078.332:338): avc: denied { create } for pid=944 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.266905][ T945] Zero length message leads to an empty skb [ 73.266963][ T943] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 73.283674][ T943] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.306569][ T943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 73.334870][ T943] System zones: 1-12 [ 73.346850][ T943] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.404501][ T943] EXT4-fs (loop4): 1 truncate cleaned up [ 73.412834][ T943] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue. Quota mode: writeback. [ 73.452691][ T30] audit: type=1400 audit(1756344078.552:339): avc: denied { create } for pid=949 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.477288][ T513] wacom 0003:056A:0094.000A: Using device in hidraw-only mode [ 73.497259][ T513] wacom 0003:056A:0094.000A: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 73.531268][ T30] audit: type=1400 audit(1756344078.592:340): avc: denied { create } for pid=949 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.589736][ T30] audit: type=1400 audit(1756344078.612:341): avc: denied { setattr } for pid=951 comm="syz.1.174" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 73.620633][ T958] FAULT_INJECTION: forcing a failure. [ 73.620633][ T958] name failslab, interval 1, probability 0, space 0, times 1 [ 73.669403][ T958] CPU: 0 PID: 958 Comm: syz.1.175 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 73.683530][ T958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.700324][ T958] Call Trace: [ 73.704542][ T958] [ 73.707958][ T958] __dump_stack+0x21/0x30 [ 73.715972][ T958] dump_stack_lvl+0xee/0x150 [ 73.721699][ T958] ? show_regs_print_info+0x20/0x20 [ 73.732045][ T958] ? bust_spinlocks+0xe0/0xe0 [ 73.738503][ T958] dump_stack+0x15/0x20 [ 73.743764][ T958] should_fail+0x3c1/0x510 [ 73.749737][ T958] __should_failslab+0xa4/0xe0 [ 73.755586][ T958] should_failslab+0x9/0x20 [ 73.761515][ T958] slab_pre_alloc_hook+0x3b/0xe0 [ 73.766967][ T958] ? mm_alloc+0x23/0xb0 [ 73.772201][ T958] kmem_cache_alloc+0x44/0x260 [ 73.778019][ T958] mm_alloc+0x23/0xb0 [ 73.783040][ T958] alloc_bprm+0x1cb/0x740 [ 73.791268][ T958] ? __check_object_size+0x2f4/0x3c0 [ 73.797566][ T958] do_execveat_common+0x1ab/0xa80 [ 73.803850][ T958] ? getname_flags+0x206/0x500 [ 73.812903][ T958] __x64_sys_execveat+0xce/0xf0 [ 73.819100][ T958] x64_sys_call+0x5c3/0x9a0 [ 73.825323][ T958] do_syscall_64+0x4c/0xa0 [ 73.831942][ T958] ? clear_bhb_loop+0x50/0xa0 [ 73.838332][ T958] ? clear_bhb_loop+0x50/0xa0 [ 73.844764][ T958] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.852603][ T958] RIP: 0033:0x7f6103cd9be9 [ 73.859236][ T958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.888819][ T958] RSP: 002b:00007f6102742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 73.901628][ T958] RAX: ffffffffffffffda RBX: 00007f6103f00fa0 RCX: 00007f6103cd9be9 [ 73.914886][ T958] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 73.927927][ T958] RBP: 00007f6102742090 R08: 0000000000001000 R09: 0000000000000000 [ 73.941394][ T958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.952994][ T958] R13: 00007f6103f01038 R14: 00007f6103f00fa0 R15: 00007ffd76f30158 [ 73.963027][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 73.963704][ T958] [ 73.974566][ T291] usb 3-1: USB disconnect, device number 6 [ 74.032755][ T30] audit: type=1400 audit(1756344079.122:342): avc: denied { connect } for pid=942 comm="syz.4.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.239919][ T822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 74.318459][ T967] loop1: detected capacity change from 0 to 1024 [ 74.352873][ T967] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.367618][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 74.395614][ T967] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: none. [ 74.491168][ T26] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.504134][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 74.510611][ T26] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.526344][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.534199][ T26] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 74.545189][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.559237][ T26] usb 4-1: config 0 descriptor?? [ 74.621078][ T822] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.635690][ T822] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.652166][ T822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 74.669528][ T822] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 74.692483][ T971] futex_wake_op: syz.2.179 tries to shift op by 32; fix this program [ 74.701656][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.723493][ T822] usb 1-1: config 0 descriptor?? [ 75.083944][ T975] overlayfs: overlapping lowerdir path [ 75.134575][ T975] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 75.270274][ T26] wacom 0003:056A:0094.000B: Using device in hidraw-only mode [ 75.289580][ T26] wacom 0003:056A:0094.000B: hidraw1: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 75.501353][ T822] wacom 0003:056A:0094.000C: Using device in hidraw-only mode [ 75.605046][ T543] usb 4-1: USB disconnect, device number 4 [ 75.684441][ T822] wacom 0003:056A:0094.000C: hidraw2: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 75.705951][ T822] usb 1-1: USB disconnect, device number 4 [ 75.723580][ T30] audit: type=1400 audit(1756344080.822:343): avc: denied { create } for pid=978 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.782343][ T981] fido_id[981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 75.791013][ T30] audit: type=1400 audit(1756344080.872:344): avc: denied { write } for pid=978 comm="syz.2.183" path="socket:[17246]" dev="sockfs" ino=17246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 75.832568][ T30] audit: type=1400 audit(1756344080.872:345): avc: denied { ioctl } for pid=978 comm="syz.2.183" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.864883][ T30] audit: type=1400 audit(1756344080.872:346): avc: denied { name_bind } for pid=978 comm="syz.2.183" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.000067][ T987] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.296862][ T993] loop0: detected capacity change from 0 to 1024 [ 76.672472][ T993] EXT4-fs (loop0): Ignoring removed nobh option [ 76.733615][ T993] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,jqfmt=vfsold,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,init_itable,,errors=continue. Quota mode: writeback. [ 77.922681][ T1024] loop3: detected capacity change from 0 to 128 [ 77.939403][ T1026] loop4: detected capacity change from 0 to 256 [ 77.954798][ T1026] FAT-fs (loop4): bogus number of FAT sectors [ 77.961567][ T1026] FAT-fs (loop4): Can't find a valid FAT filesystem [ 78.001666][ T1024] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0000000000000000000001777777777777777777777¬‚ú=¨ËdÌž¬· Y ýS«38`¿·˜›‚" or missing value [ 78.561445][ T1036] overlayfs: overlapping lowerdir path [ 78.672848][ T1036] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 79.145142][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 79.145159][ T30] audit: type=1400 audit(1756344084.242:355): avc: denied { nlmsg_write } for pid=1040 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.146699][ T1042] netlink: 104 bytes leftover after parsing attributes in process `syz.4.200'. [ 79.190987][ T291] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 79.213705][ T30] audit: type=1400 audit(1756344084.312:356): avc: denied { create } for pid=1044 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.245093][ T1049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 79.273300][ T30] audit: type=1400 audit(1756344084.312:357): avc: denied { setopt } for pid=1044 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.466933][ T30] audit: type=1400 audit(1756344084.362:358): avc: denied { ioctl } for pid=1044 comm="syz.0.201" path="socket:[17821]" dev="sockfs" ino=17821 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 80.222830][ T1056] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 80.403397][ T30] audit: type=1326 audit(1756344085.502:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1057 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 80.435205][ T1063] loop1: detected capacity change from 0 to 1024 [ 80.455536][ T30] audit: type=1326 audit(1756344085.522:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1057 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 80.484948][ T30] audit: type=1326 audit(1756344085.522:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1057 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 80.511999][ T30] audit: type=1326 audit(1756344085.522:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1057 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 80.541641][ T30] audit: type=1326 audit(1756344085.522:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1057 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6103cd9c23 code=0x7ffc0000 [ 80.571477][ T30] audit: type=1326 audit(1756344085.532:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1057 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6103cd869f code=0x7ffc0000 [ 80.790966][ T291] usb 3-1: Using ep0 maxpacket: 32 [ 80.801782][ T1069] loop1: detected capacity change from 0 to 256 [ 80.809877][ T1069] FAT-fs (loop1): bogus number of FAT sectors [ 80.816621][ T1069] FAT-fs (loop1): Can't find a valid FAT filesystem [ 80.846315][ T1070] loop3: detected capacity change from 0 to 4096 [ 80.881878][ T1070] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 80.889727][ T1070] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.911072][ T291] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.951218][ T1070] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 80.987254][ T291] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 81.030067][ T291] usb 3-1: config 0 interface 0 has no altsetting 0 [ 81.048259][ T291] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 81.060662][ T291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.154295][ T1078] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 81.369053][ T291] usb 3-1: config 0 descriptor?? [ 81.396385][ T291] usb 3-1: can't set config #0, error -71 [ 81.406885][ T1081] syz.2.209[1081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.406977][ T1081] syz.2.209[1081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.423208][ T291] usb 3-1: USB disconnect, device number 7 [ 81.709995][ T1093] loop3: detected capacity change from 0 to 512 [ 81.759088][ T1093] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 81.790213][ T1093] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.829640][ T1093] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 81.851812][ T1090] loop1: detected capacity change from 0 to 40427 [ 81.916966][ T1090] F2FS-fs (loop1): fault_injection options not supported [ 81.932400][ T1090] F2FS-fs (loop1): invalid crc value [ 81.941641][ T1090] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.018321][ T1105] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 82.061340][ T1090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.169164][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.218600][ T282] attempt to access beyond end of device [ 82.218600][ T282] loop1: rw=2049, want=45112, limit=40427 [ 82.851612][ T1116] loop0: detected capacity change from 0 to 256 [ 82.895619][ T1121] loop3: detected capacity change from 0 to 256 [ 82.911806][ T1116] FAT-fs (loop0): Unrecognized mount option "rodir.shortname=mixed" or missing value [ 82.955372][ T1121] FAT-fs (loop3): bogus number of FAT sectors [ 82.965957][ T1121] FAT-fs (loop3): Can't find a valid FAT filesystem [ 83.121126][ T822] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.240968][ T1138] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 83.451288][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 83.601691][ T822] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.623686][ T822] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 83.648285][ T822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 83.657712][ T822] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 83.673759][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.741052][ T822] usb 5-1: config 0 descriptor?? [ 83.972754][ T1147] loop1: detected capacity change from 0 to 256 [ 84.732009][ T1147] FAT-fs (loop1): Directory bread(block 64) failed [ 84.741858][ T1147] FAT-fs (loop1): Directory bread(block 65) failed [ 84.751901][ T1147] FAT-fs (loop1): Directory bread(block 66) failed [ 84.760677][ T1147] FAT-fs (loop1): Directory bread(block 67) failed [ 84.770203][ T1147] FAT-fs (loop1): Directory bread(block 68) failed [ 84.778912][ T1147] FAT-fs (loop1): Directory bread(block 69) failed [ 84.790728][ T1147] FAT-fs (loop1): Directory bread(block 70) failed [ 84.799266][ T1147] FAT-fs (loop1): Directory bread(block 71) failed [ 84.817459][ T1147] FAT-fs (loop1): Directory bread(block 72) failed [ 84.827401][ T1147] FAT-fs (loop1): Directory bread(block 73) failed [ 84.943339][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 84.943388][ T30] audit: type=1400 audit(1756344090.012:384): avc: denied { connect } for pid=1144 comm="syz.1.228" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.037180][ T822] wacom 0003:056A:0094.000D: Using device in hidraw-only mode [ 85.311384][ T822] wacom 0003:056A:0094.000D: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 85.363963][ T822] usb 5-1: USB disconnect, device number 4 [ 85.424777][ T1154] syz.1.230 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.541922][ T1141] loop3: detected capacity change from 0 to 40427 [ 85.560705][ T1141] F2FS-fs (loop3): fault_injection options not supported [ 85.572883][ T1141] F2FS-fs (loop3): invalid crc value [ 85.581939][ T1141] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.654042][ T1161] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 85.719768][ T1141] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.923908][ T30] audit: type=1400 audit(1756344091.022:385): avc: denied { setattr } for pid=1140 comm="syz.3.227" path="/55/file1/file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.966821][ T30] audit: type=1400 audit(1756344091.062:386): avc: denied { getopt } for pid=1163 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.995168][ T30] audit: type=1400 audit(1756344091.062:387): avc: denied { getopt } for pid=1163 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.150872][ T281] attempt to access beyond end of device [ 86.150872][ T281] loop3: rw=2049, want=45104, limit=40427 [ 86.922411][ T1182] loop2: detected capacity change from 0 to 512 [ 87.040771][ T30] audit: type=1400 audit(1756344092.132:388): avc: denied { name_bind } for pid=1184 comm="syz.0.240" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 87.073709][ T1182] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.101513][ T1182] EXT4-fs (loop2): 1 truncate cleaned up [ 87.108034][ T1182] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 87.133343][ T1179] EXT4-fs (loop2): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 87.133343][ T1179] ‘Þa( ¨0Ü÷%" or missing value [ 87.295308][ T1191] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 88.030685][ T1187] loop3: detected capacity change from 0 to 256 [ 88.048051][ T1202] loop2: detected capacity change from 0 to 128 [ 88.053762][ T1200] loop4: detected capacity change from 0 to 256 [ 88.078106][ T1187] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 88.081141][ T291] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 88.095826][ T1200] FAT-fs (loop4): bogus number of FAT sectors [ 88.121366][ T1200] FAT-fs (loop4): Can't find a valid FAT filesystem [ 88.142859][ T1202] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 88.158437][ T1202] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.179821][ T30] audit: type=1400 audit(1756344093.272:389): avc: denied { ioctl } for pid=1201 comm="syz.2.243" path="/43/file1/file1" dev="loop2" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.535261][ T1215] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 88.783304][ T291] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 88.792572][ T1214] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 88.795407][ T291] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.824814][ T291] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 88.921039][ T291] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.940971][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.950763][ T291] usb 1-1: SerialNumber: syz [ 89.244615][ T30] audit: type=1400 audit(1756344094.342:390): avc: denied { write } for pid=1184 comm="syz.0.240" name="tcp" dev="proc" ino=4026532586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 89.363836][ T1225] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 89.590991][ T30] audit: type=1400 audit(1756344094.682:391): avc: granted { setsecparam } for pid=1226 comm="syz.3.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 89.615556][ T30] audit: type=1400 audit(1756344094.712:392): avc: denied { create } for pid=1184 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=socket permissive=1 [ 89.729649][ T30] audit: type=1326 audit(1756344094.772:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1184 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 89.737476][ T291] rndis_host 1-1:253.0: RNDIS init failed, -71 [ 89.780446][ T291] rndis_host: probe of 1-1:253.0 failed with error -71 [ 89.800797][ T291] usb 1-1: USB disconnect, device number 5 [ 89.915115][ T1229] loop1: detected capacity change from 0 to 4096 [ 90.195089][ T1235] loop4: detected capacity change from 0 to 512 [ 90.263898][ T1235] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.282506][ T1235] EXT4-fs (loop4): 1 truncate cleaned up [ 90.290773][ T1235] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 90.317268][ T1237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.320168][ T1235] EXT4-fs (loop4): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 90.320168][ T1235] ‘Þa( ¨0Ü÷%" or missing value [ 90.488986][ T1242] FAULT_INJECTION: forcing a failure. [ 90.488986][ T1242] name failslab, interval 1, probability 0, space 0, times 0 [ 90.543187][ T1242] CPU: 0 PID: 1242 Comm: syz.3.256 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 90.554947][ T1242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.566338][ T1242] Call Trace: [ 90.570157][ T1242] [ 90.573945][ T1242] __dump_stack+0x21/0x30 [ 90.579719][ T1242] dump_stack_lvl+0xee/0x150 [ 90.587242][ T1242] ? show_regs_print_info+0x20/0x20 [ 90.594658][ T1242] ? __kasan_check_write+0x14/0x20 [ 90.600544][ T1242] dump_stack+0x15/0x20 [ 90.609339][ T1242] should_fail+0x3c1/0x510 [ 90.615200][ T1242] __should_failslab+0xa4/0xe0 [ 90.621782][ T1242] should_failslab+0x9/0x20 [ 90.627834][ T1242] slab_pre_alloc_hook+0x3b/0xe0 [ 90.635165][ T1242] ? __alloc_file+0x28/0x2a0 [ 90.642350][ T1242] kmem_cache_alloc+0x44/0x260 [ 90.650040][ T1242] __alloc_file+0x28/0x2a0 [ 90.656748][ T1242] alloc_empty_file+0x97/0x180 [ 90.662464][ T1242] alloc_file+0x59/0x540 [ 90.667356][ T1242] alloc_file_pseudo+0x17a/0x1f0 [ 90.675082][ T1242] ? alloc_empty_file_noaccount+0x80/0x80 [ 90.681277][ T1242] ? __kasan_check_write+0x14/0x20 [ 90.687946][ T1242] ? clear_nlink+0x8a/0xe0 [ 90.694147][ T1242] __shmem_file_setup+0x1df/0x2b0 [ 90.700277][ T1242] shmem_file_setup+0x2f/0x40 [ 90.706649][ T1242] __se_sys_memfd_create+0x1e6/0x3b0 [ 90.713156][ T1242] __x64_sys_memfd_create+0x5b/0x70 [ 90.719151][ T1242] x64_sys_call+0x473/0x9a0 [ 90.725343][ T1242] do_syscall_64+0x4c/0xa0 [ 90.730309][ T1242] ? clear_bhb_loop+0x50/0xa0 [ 90.736568][ T1242] ? clear_bhb_loop+0x50/0xa0 [ 90.744400][ T1242] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.751971][ T1242] RIP: 0033:0x7fbb26f67be9 [ 90.758427][ T1242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.790393][ T1242] RSP: 002b:00007fbb259cfe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 90.803127][ T1242] RAX: ffffffffffffffda RBX: 000000000000550e RCX: 00007fbb26f67be9 [ 90.813217][ T1242] RDX: 00007fbb259cfef0 RSI: 0000000000000000 RDI: 00007fbb26feb7e8 [ 90.823269][ T1242] RBP: 0000200000006b80 R08: 00007fbb259cfbb7 R09: 00007fbb259cfe40 [ 90.834105][ T1242] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 90.846820][ T1242] R13: 00007fbb259cfef0 R14: 00007fbb259cfeb0 R15: 00002000000004c0 [ 90.857329][ T1242] [ 91.217121][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 91.217136][ T30] audit: type=1326 audit(1756344096.312:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.342322][ T1272] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 91.368543][ T1274] loop1: detected capacity change from 0 to 512 [ 91.371085][ T30] audit: type=1326 audit(1756344096.322:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.462260][ T1274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.486319][ T30] audit: type=1326 audit(1756344096.372:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.521820][ T1274] EXT4-fs (loop1): 1 truncate cleaned up [ 91.530102][ T1274] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 91.571545][ T1274] EXT4-fs (loop1): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 91.571545][ T1274] ‘Þa( ¨0Ü÷%" or missing value [ 91.600182][ T30] audit: type=1326 audit(1756344096.372:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.711186][ T30] audit: type=1326 audit(1756344096.372:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.742476][ T30] audit: type=1326 audit(1756344096.372:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.775370][ T30] audit: type=1326 audit(1756344096.372:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.810755][ T1281] loop1: detected capacity change from 0 to 256 [ 91.820991][ T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.829453][ T1281] exfat: Deprecated parameter 'namecase' [ 91.852774][ T30] audit: type=1326 audit(1756344096.372:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.915413][ T1281] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 91.953375][ T30] audit: type=1326 audit(1756344096.372:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 91.982960][ T30] audit: type=1326 audit(1756344096.372:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1264 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa531288be9 code=0x7ffc0000 [ 92.230974][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 92.642907][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.656120][ T20] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 92.667552][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 92.678400][ T20] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 92.771056][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.782394][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.791944][ T20] usb 1-1: SerialNumber: syz [ 92.851677][ T1265] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.901302][ T1312] loop4: detected capacity change from 0 to 1024 [ 93.383721][ T1315] device ip6gretap0 entered promiscuous mode [ 93.745848][ T20] usb 1-1: USB disconnect, device number 6 [ 93.767973][ T1298] loop1: detected capacity change from 0 to 40427 [ 93.796994][ T1312] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.818738][ T1298] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 93.860203][ T1298] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 93.870041][ T1298] F2FS-fs (loop1): Unrecognized mount option "¾žàDÄUæX‡öúÉë¦×‡ÃhJƒo#Ûø­=Õ“´Ø½ç謻ó¿3&òú¥•*3*ÒÎÔ ˜¢¯ú-­Mb?Ÿóÿ¨E UH«b" or missing value [ 93.879063][ T1312] EXT4-fs (loop4): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 93.879063][ T1312] ‘Þa( ¨0Ü÷%" or missing value [ 93.957614][ T1325] loop4: detected capacity change from 0 to 512 [ 93.979350][ T1325] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 93.998579][ T1325] EXT4-fs (loop4): Test dummy encryption mode enabled [ 94.017219][ T1325] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 94.025350][ T1325] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.049028][ T1325] EXT4-fs (loop4): 1 truncate cleaned up [ 94.057733][ T1325] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 94.184549][ T1336] loop4: detected capacity change from 0 to 512 [ 94.192632][ T845] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 94.225934][ T1338] loop2: detected capacity change from 0 to 1024 [ 94.340201][ T1338] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 94.369637][ T1350] loop4: detected capacity change from 0 to 256 [ 94.369730][ T1338] EXT4-fs (loop2): mount failed [ 94.417030][ T1352] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 94.441011][ T845] usb 4-1: Using ep0 maxpacket: 16 [ 94.451164][ T1350] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.476336][ T1350] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 94.502561][ T1350] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 94.571579][ T845] usb 4-1: config 9 has an invalid interface number: 4 but max is 0 [ 94.591101][ T845] usb 4-1: config 9 has no interface number 0 [ 94.599878][ T845] usb 4-1: config 9 interface 4 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 94.627793][ T845] usb 4-1: config 9 interface 4 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 95.122107][ T1362] loop2: detected capacity change from 0 to 2048 [ 95.172944][ T1360] loop4: detected capacity change from 0 to 40427 [ 95.180604][ T845] usb 4-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 95.190950][ T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.199905][ T845] usb 4-1: Product: syz [ 95.201526][ T369] loop2: p1 < > p3 [ 95.204369][ T845] usb 4-1: Manufacturer: syz [ 95.213906][ T845] usb 4-1: SerialNumber: syz [ 95.219419][ T369] loop2: p3 size 134217728 extends beyond EOD, truncated [ 95.235251][ T1362] loop2: p1 < > p3 [ 95.241598][ T1362] loop2: p3 size 134217728 extends beyond EOD, truncated [ 95.307964][ T845] usb 4-1: invalid MIDI in EP 0 [ 95.314929][ T845] snd-usb-audio: probe of 4-1:9.4 failed with error -22 [ 95.325125][ T100] loop2: p1 < > p3 [ 95.353146][ T100] loop2: p3 size 134217728 extends beyond EOD, truncated [ 95.436968][ T1364] loop2: detected capacity change from 0 to 1024 [ 95.466529][ T20] usb 4-1: USB disconnect, device number 5 [ 95.508933][ T372] udevd[372]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 95.520600][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 95.551708][ T1364] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.594046][ T1364] EXT4-fs (loop2): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 95.594046][ T1364] ‘Þa( ¨0Ü÷%" or missing value [ 95.679440][ T397] udevd[397]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 96.535094][ T1374] overlayfs: missing 'lowerdir' [ 96.631552][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 96.631922][ T30] audit: type=1400 audit(1756344101.592:546): avc: denied { accept } for pid=1367 comm="syz.4.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.704875][ T369] udevd[369]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 97.137778][ T1370] loop1: detected capacity change from 0 to 40427 [ 97.241649][ T1370] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 97.286517][ T1370] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 97.394909][ T1396] overlayfs: missing 'lowerdir' [ 97.411300][ T1370] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 97.450646][ T30] audit: type=1400 audit(1756344102.542:547): avc: denied { mount } for pid=1391 comm="syz.0.303" name="/" dev="ramfs" ino=18295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 97.867408][ T1393] overlayfs: missing 'lowerdir' [ 97.874697][ T1393] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 97.960999][ T20] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.995269][ T1406] loop1: detected capacity change from 0 to 256 [ 98.026337][ T1406] FAT-fs (loop1): bogus number of FAT sectors [ 98.039671][ T1406] FAT-fs (loop1): Can't find a valid FAT filesystem [ 98.100984][ T1409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.128137][ T30] audit: type=1400 audit(1756344103.222:548): avc: denied { read } for pid=1407 comm="syz.4.308" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.231200][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 98.246473][ T30] audit: type=1400 audit(1756344103.222:549): avc: denied { open } for pid=1407 comm="syz.4.308" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.391095][ T20] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.422344][ T20] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.466957][ T20] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.489259][ T20] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 98.521064][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.560223][ T20] usb 1-1: config 0 descriptor?? [ 98.817785][ T1414] loop1: detected capacity change from 0 to 1024 [ 98.877037][ T1417] FAULT_INJECTION: forcing a failure. [ 98.877037][ T1417] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.893392][ T1417] CPU: 1 PID: 1417 Comm: syz.4.310 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 98.901426][ T1414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.908940][ T1417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.908971][ T1417] Call Trace: [ 98.908979][ T1417] [ 98.908987][ T1417] __dump_stack+0x21/0x30 [ 98.945547][ T1417] dump_stack_lvl+0xee/0x150 [ 98.950678][ T1417] ? show_regs_print_info+0x20/0x20 [ 98.956000][ T1417] dump_stack+0x15/0x20 [ 98.961121][ T1417] should_fail+0x3c1/0x510 [ 98.964369][ T1414] EXT4-fs (loop1): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 98.964369][ T1414] ‘Þa( ¨0Ü÷%" or missing value [ 98.965778][ T1417] should_fail_usercopy+0x1a/0x20 [ 98.965806][ T1417] _copy_to_user+0x20/0x90 [ 99.006605][ T1417] simple_read_from_buffer+0xe9/0x160 [ 99.013216][ T1417] proc_fail_nth_read+0x19a/0x210 [ 99.019007][ T1417] ? proc_fault_inject_write+0x2f0/0x2f0 [ 99.026217][ T1417] ? security_file_permission+0x83/0xa0 [ 99.033738][ T1417] ? proc_fault_inject_write+0x2f0/0x2f0 [ 99.041688][ T1417] vfs_read+0x282/0xbe0 [ 99.047215][ T1417] ? kernel_read+0x1f0/0x1f0 [ 99.053321][ T1417] ? do_fcntl+0xd0f/0x1150 [ 99.061734][ T1417] ? match_file+0x130/0x130 [ 99.067803][ T1417] ? kill_fasync+0x210/0x210 [ 99.073464][ T20] wacom 0003:056A:0094.000E: Using device in hidraw-only mode [ 99.074148][ T1417] ? __kasan_check_read+0x11/0x20 [ 99.074178][ T1417] ? __fdget_pos+0x2d9/0x380 [ 99.084539][ T20] wacom 0003:056A:0094.000E: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 99.089587][ T1417] ksys_read+0x140/0x240 [ 99.089620][ T1417] ? vfs_write+0xf70/0xf70 [ 99.120795][ T1417] ? debug_smp_processor_id+0x17/0x20 [ 99.126752][ T1417] __x64_sys_read+0x7b/0x90 [ 99.131644][ T1417] x64_sys_call+0x96d/0x9a0 [ 99.138329][ T1417] do_syscall_64+0x4c/0xa0 [ 99.145650][ T1417] ? clear_bhb_loop+0x50/0xa0 [ 99.152855][ T1417] ? clear_bhb_loop+0x50/0xa0 [ 99.159295][ T1417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.170555][ T1417] RIP: 0033:0x7f992f4bf5fc [ 99.178349][ T1417] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.209190][ T1417] RSP: 002b:00007f992df29030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.221732][ T1417] RAX: ffffffffffffffda RBX: 00007f992f6e7fa0 RCX: 00007f992f4bf5fc [ 99.234345][ T1417] RDX: 000000000000000f RSI: 00007f992df290a0 RDI: 0000000000000004 [ 99.245638][ T1417] RBP: 00007f992df29090 R08: 0000000000000000 R09: 0000000000000000 [ 99.256881][ T1417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.267926][ T1417] R13: 00007f992f6e8038 R14: 00007f992f6e7fa0 R15: 00007fff3a12f348 [ 99.277571][ T1417] [ 99.290331][ T822] usb 1-1: USB disconnect, device number 7 [ 99.414441][ T1440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.317'. [ 99.463424][ T1448] loop1: detected capacity change from 0 to 256 [ 99.474992][ T1443] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.487015][ T1443] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 99.487520][ T1448] FAT-fs (loop1): bogus number of FAT sectors [ 99.505386][ T1448] FAT-fs (loop1): Can't find a valid FAT filesystem [ 99.538307][ T30] audit: type=1400 audit(1756344104.632:550): avc: denied { ioctl } for pid=1442 comm="syz.2.318" path="socket:[18401]" dev="sockfs" ino=18401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.538413][ T1445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 99.705641][ T1457] loop2: detected capacity change from 0 to 1024 [ 99.744556][ T1457] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.911379][ T30] audit: type=1400 audit(1756344104.932:551): avc: denied { watch_reads } for pid=1452 comm="syz.4.321" path="/67" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.001732][ T1457] EXT4-fs (loop2): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 100.001732][ T1457] ‘Þa( ¨0Ü÷%" or missing value [ 100.185511][ T1462] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 100.659009][ T30] audit: type=1400 audit(1756344105.732:552): avc: denied { create } for pid=1475 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 101.867868][ T1489] loop4: detected capacity change from 0 to 256 [ 102.469455][ T1494] loop1: detected capacity change from 0 to 512 [ 102.856571][ T1494] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.330: casefold flag without casefold feature [ 102.873464][ T1494] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.330: couldn't read orphan inode 15 (err -117) [ 102.887413][ T1494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.602826][ T30] audit: type=1400 audit(1756344108.642:553): avc: denied { append } for pid=1503 comm="syz.3.335" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 103.639340][ T1507] loop2: detected capacity change from 0 to 512 [ 103.701229][ T1500] loop4: detected capacity change from 0 to 40427 [ 103.713014][ T30] audit: type=1400 audit(1756344108.812:554): avc: denied { map } for pid=1503 comm="syz.3.335" path="socket:[19256]" dev="sockfs" ino=19256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.741886][ T30] audit: type=1400 audit(1756344108.812:555): avc: denied { read } for pid=1503 comm="syz.3.335" path="socket:[19256]" dev="sockfs" ino=19256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.768690][ T1513] loop1: detected capacity change from 0 to 256 [ 103.793758][ T1500] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.821874][ T1513] FAT-fs (loop1): bogus number of FAT sectors [ 103.840007][ T1513] FAT-fs (loop1): Can't find a valid FAT filesystem [ 103.861339][ T1500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.880016][ T1500] attempt to access beyond end of device [ 103.880016][ T1500] loop4: rw=2049, want=45104, limit=40427 [ 103.884855][ T30] audit: type=1400 audit(1756344108.972:556): avc: denied { create } for pid=1496 comm="syz.4.334" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 103.933770][ T285] attempt to access beyond end of device [ 103.933770][ T285] loop4: rw=2049, want=45112, limit=40427 [ 104.051077][ T1516] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 104.227582][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.036734][ T1532] overlayfs: missing 'lowerdir' [ 105.071379][ T1532] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 105.276787][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 105.314760][ T30] audit: type=1326 audit(1756344110.412:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5789bdbe9 code=0x7ffc0000 [ 105.342716][ T1533] loop1: detected capacity change from 0 to 1024 [ 105.359134][ T30] audit: type=1326 audit(1756344110.442:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5789bdbe9 code=0x7ffc0000 [ 105.392520][ T30] audit: type=1326 audit(1756344110.452:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5789bdbe9 code=0x7ffc0000 [ 105.405008][ T845] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 105.421258][ T1533] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 105.438489][ T30] audit: type=1326 audit(1756344110.452:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5789bdbe9 code=0x7ffc0000 [ 105.465989][ T30] audit: type=1326 audit(1756344110.452:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5789bdbe9 code=0x7ffc0000 [ 105.493781][ T30] audit: type=1326 audit(1756344110.452:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1534 comm="syz.2.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff5789bdbe9 code=0x7ffc0000 [ 105.531432][ T1533] EXT4-fs (loop1): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 105.531432][ T1533] ‘Þa( ¨0Ü÷%" or missing value [ 105.571061][ T26] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 105.588362][ T26] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 105.600046][ T26] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 105.610511][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.622112][ T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.633897][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 105.650117][ T26] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 105.661203][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.676969][ T26] usb 1-1: config 0 descriptor?? [ 105.704066][ T1541] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.713385][ T845] usb 5-1: Using ep0 maxpacket: 32 [ 105.831054][ T845] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.956900][ T845] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 105.973957][ T26] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 105.999040][ T26] usb 1-1: USB disconnect, device number 8 [ 106.254141][ T1545] overlayfs: unrecognized mount option "/" or missing value [ 106.284968][ T1545] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 106.378664][ T845] usb 5-1: config 0 interface 0 has no altsetting 0 [ 106.407814][ T543] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.412968][ T26] usblp0: removed [ 106.433376][ T845] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 106.504678][ T845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.540115][ T845] usb 5-1: config 0 descriptor?? [ 106.700965][ T543] usb 3-1: Using ep0 maxpacket: 32 [ 106.851050][ T543] usb 3-1: config 0 has an invalid interface number: 228 but max is 0 [ 106.859883][ T543] usb 3-1: config 0 has no interface number 0 [ 106.866620][ T543] usb 3-1: config 0 interface 228 has no altsetting 0 [ 106.910980][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 107.022430][ T845] wacom 0003:056A:0094.000F: Using device in hidraw-only mode [ 107.031919][ T845] wacom 0003:056A:0094.000F: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 107.061058][ T543] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02 [ 107.070562][ T543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.079981][ T543] usb 3-1: Product: syz [ 107.084797][ T543] usb 3-1: Manufacturer: syz [ 107.089705][ T543] usb 3-1: SerialNumber: syz [ 107.095737][ T543] usb 3-1: config 0 descriptor?? [ 107.161015][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 107.232310][ T845] usb 5-1: USB disconnect, device number 5 [ 107.281159][ T26] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.290532][ T26] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.299988][ T26] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.309554][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.320424][ T26] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.330857][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.345447][ T26] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.356829][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.365993][ T543] net1080 3-1:0.228 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 5a:59:a0:f9:b3:0b [ 107.366344][ T26] usb 1-1: config 0 descriptor?? [ 107.549635][ T1567] loop0: detected capacity change from 0 to 512 [ 107.561937][ T26] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.584699][ T1567] FAT-fs (loop0): Unrecognized mount option "shortname=miŸed" or missing value [ 107.589190][ T26] usb 1-1: USB disconnect, device number 9 [ 107.628331][ T26] usblp0: removed [ 107.780382][ T1579] loop4: detected capacity change from 0 to 1024 [ 107.805896][ T1579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.810832][ T513] usb 3-1: USB disconnect, device number 8 [ 107.837245][ T513] net1080 3-1:0.228 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 107.871074][ T1579] EXT4-fs (loop4): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 107.871074][ T1579] ‘Þa( ¨0Ü÷%" or missing value [ 107.946990][ T1574] loop0: detected capacity change from 0 to 40427 [ 108.081076][ T1574] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 108.119166][ T1574] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 108.200160][ T1603] overlayfs: unrecognized mount option "/" or missing value [ 108.239748][ T1603] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 108.398816][ T1574] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.482935][ T1574] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.543003][ T1601] loop1: detected capacity change from 0 to 40427 [ 108.543289][ T1574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.574894][ T1574] attempt to access beyond end of device [ 108.574894][ T1574] loop0: rw=2049, want=45104, limit=40427 [ 108.591099][ T1601] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(3330) root(3) [ 108.626046][ T1601] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 108.652836][ T1601] F2FS-fs (loop1): invalid crc value [ 108.661637][ T1601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.729847][ T1617] loop2: detected capacity change from 0 to 128 [ 108.745365][ T1601] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 108.753229][ T1601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.119569][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 109.119590][ T30] audit: type=1400 audit(1756344113.962:631): avc: denied { name_bind } for pid=1610 comm="syz.3.359" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 109.173570][ T1626] loop4: detected capacity change from 0 to 512 [ 109.192000][ T1617] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.203661][ T1617] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.214898][ T822] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.300452][ T1638] loop4: detected capacity change from 0 to 1024 [ 110.446748][ T1638] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.531792][ T1638] EXT4-fs (loop4): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 110.531792][ T1638] ‘Þa( ¨0Ü÷%" or missing value [ 110.611020][ T822] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 110.625808][ T822] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 110.659733][ T822] usb 4-1: config 0 has no interface number 1 [ 110.671000][ T845] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 110.692718][ T822] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.717789][ T822] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 110.719387][ T1644] loop2: detected capacity change from 0 to 256 [ 110.847544][ T1644] FAT-fs (loop2): bogus number of FAT sectors [ 110.860099][ T1644] FAT-fs (loop2): Can't find a valid FAT filesystem [ 110.891012][ T822] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 110.904198][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.914952][ T822] usb 4-1: Product: syz [ 110.920310][ T822] usb 4-1: Manufacturer: syz [ 110.926943][ T822] usb 4-1: SerialNumber: syz [ 110.933434][ T845] usb 1-1: Using ep0 maxpacket: 32 [ 110.945023][ T822] usb 4-1: config 0 descriptor?? [ 110.991741][ T822] usb-storage 4-1:0.127: USB Mass Storage device detected [ 111.027570][ T1654] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.051047][ T30] audit: type=1400 audit(1756344116.132:632): avc: denied { write } for pid=1643 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.075753][ T845] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.116623][ T845] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.171742][ T30] audit: type=1326 audit(1756344116.132:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1643 comm="syz.2.368" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5789bdbe9 code=0x0 [ 111.203794][ T1632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1632 comm=syz.3.364 [ 111.235333][ T845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.259728][ T845] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 111.283959][ T822] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 111.305564][ T1660] loop1: detected capacity change from 0 to 512 [ 111.336511][ T845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.353605][ T822] usb-storage 4-1:0.0: USB Mass Storage device detected [ 111.402438][ T1660] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.431682][ T845] usb 1-1: config 0 descriptor?? [ 111.450826][ T822] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 111.497852][ T1660] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.960239][ T1667] loop2: detected capacity change from 0 to 40427 [ 112.085461][ T1667] F2FS-fs (loop2): invalid crc value [ 112.110256][ T30] audit: type=1326 audit(1756344117.202:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 112.151824][ T1667] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.175114][ T30] audit: type=1326 audit(1756344117.202:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 112.197927][ T1667] F2FS-fs (loop2): Start checkpoint disabled! [ 112.206128][ T30] audit: type=1326 audit(1756344117.202:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 112.240212][ T1667] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 112.240448][ T30] audit: type=1326 audit(1756344117.202:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 112.272911][ T845] wacom 0003:056A:0094.0010: Using device in hidraw-only mode [ 112.301955][ T845] wacom 0003:056A:0094.0010: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 112.327803][ T30] audit: type=1326 audit(1756344117.202:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 112.358459][ T30] audit: type=1326 audit(1756344117.202:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 112.387281][ T30] audit: type=1326 audit(1756344117.202:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1659 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 112.576630][ T543] usb 1-1: USB disconnect, device number 10 [ 112.869076][ T335] attempt to access beyond end of device [ 112.869076][ T335] loop2: rw=2049, want=45104, limit=40427 [ 113.139145][ T1687] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1687 comm=syz.2.378 [ 113.140449][ T1689] loop0: detected capacity change from 0 to 1024 [ 113.170308][ T1687] device syzkaller0 entered promiscuous mode [ 113.184966][ T1689] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.210250][ T1689] EXT4-fs (loop0): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 113.210250][ T1689] ‘Þa( ¨0Ü÷%" or missing value [ 113.327489][ T291] usb 4-1: USB disconnect, device number 6 [ 113.443726][ T1704] loop1: detected capacity change from 0 to 256 [ 113.554226][ T1704] FAT-fs (loop1): bogus number of FAT sectors [ 113.614093][ T1704] FAT-fs (loop1): Can't find a valid FAT filesystem [ 113.629409][ T1706] capability: warning: `syz.3.384' uses 32-bit capabilities (legacy support in use) [ 113.763088][ T1708] binfmt_misc: register: failed to install interpreter file ./file1 [ 113.780983][ T543] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.899857][ T1714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.387'. [ 113.912222][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 113.920097][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 113.928628][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 113.937379][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 113.946685][ T1714] FAULT_INJECTION: forcing a failure. [ 113.946685][ T1714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.195568][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 115.195588][ T30] audit: type=1400 audit(1756344119.332:652): avc: denied { mounton } for pid=1710 comm="syz.3.386" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.234707][ T1714] CPU: 0 PID: 1714 Comm: syz.4.387 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 115.238374][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.247134][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.247154][ T1714] Call Trace: [ 115.247161][ T1714] [ 115.247169][ T1714] __dump_stack+0x21/0x30 [ 115.247196][ T1714] dump_stack_lvl+0xee/0x150 [ 115.264949][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.266532][ T1714] ? show_regs_print_info+0x20/0x20 [ 115.274191][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.277958][ T1714] ? _raw_spin_lock_irq+0x8f/0xe0 [ 115.278004][ T1714] ? _raw_spin_lock_irqsave+0x110/0x110 [ 115.284160][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.292516][ T1714] dump_stack+0x15/0x20 [ 115.292552][ T1714] should_fail+0x3c1/0x510 [ 115.292572][ T1714] should_fail_usercopy+0x1a/0x20 [ 115.292591][ T1714] _copy_from_user+0x20/0xd0 [ 115.298546][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.305617][ T1714] __ia32_sys_rt_sigreturn+0x1b0/0x6c0 [ 115.305659][ T1714] ? load_gs_index+0xb0/0xb0 [ 115.305688][ T1714] ? vfs_write+0xf70/0xf70 [ 115.305708][ T1714] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 115.311400][ T30] audit: type=1326 audit(1756344120.282:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.316567][ T1714] x64_sys_call+0x4ab/0x9a0 [ 115.316598][ T1714] do_syscall_64+0x4c/0xa0 [ 115.324720][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.328527][ T1714] ? clear_bhb_loop+0x50/0xa0 [ 115.333470][ T30] audit: type=1326 audit(1756344120.282:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.338413][ T1714] ? clear_bhb_loop+0x50/0xa0 [ 115.338443][ T1714] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.343870][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.351057][ T1714] RIP: 0033:0x7f992f45cde9 [ 115.351080][ T1714] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 115.351097][ T1714] RSP: 002b:00007f992df28a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 115.357711][ T30] audit: type=1326 audit(1756344120.282:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.362161][ T1714] RAX: ffffffffffffffda RBX: 00007f992f6e7fa0 RCX: 00007f992f45cde9 [ 115.362180][ T1714] RDX: 00007f992df28a80 RSI: 00007f992df28bb0 RDI: 0000000000000021 [ 115.362194][ T1714] RBP: 00007f992df29090 R08: 0000000000000000 R09: 0000000000000000 [ 115.362207][ T1714] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 115.362218][ T1714] R13: 00007f992f6e8038 R14: 00007f992f6e7fa0 R15: 00007fff3a12f348 [ 115.362236][ T1714] [ 115.362934][ T543] usb 3-1: Using ep0 maxpacket: 32 [ 115.367888][ T30] audit: type=1326 audit(1756344120.282:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.551226][ T543] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.609344][ T845] hid-generic 0006:0004:0009.0011: unknown main item tag 0x0 [ 115.611938][ T543] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 115.650507][ T30] audit: type=1326 audit(1756344120.282:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.658506][ T543] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.674466][ T845] hid-generic 0006:0004:0009.0011: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 115.699527][ T543] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 115.741551][ T30] audit: type=1326 audit(1756344120.282:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.776238][ T30] audit: type=1326 audit(1756344120.282:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.854169][ T543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.857952][ T1727] fido_id[1727]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.896194][ T543] usb 3-1: config 0 descriptor?? [ 115.903699][ T1734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.394'. [ 115.913772][ T30] audit: type=1326 audit(1756344120.282:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 115.941441][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 115.950219][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 115.961244][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 115.968875][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 115.977313][ T30] audit: type=1326 audit(1756344120.282:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6103cd9be9 code=0x7ffc0000 [ 116.002006][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.009789][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.018148][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.027119][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.035463][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.110961][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.119883][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.131797][ T845] hid-generic 0006:0004:0009.0012: unknown main item tag 0x0 [ 116.147578][ T1724] loop1: detected capacity change from 0 to 40427 [ 116.194402][ T845] hid-generic 0006:0004:0009.0012: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 116.266264][ T1724] F2FS-fs (loop1): invalid crc value [ 116.593273][ T1724] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.605672][ T543] wacom 0003:056A:0094.0013: Using device in hidraw-only mode [ 116.615430][ T543] wacom 0003:056A:0094.0013: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 116.669154][ T292] usb 3-1: USB disconnect, device number 9 [ 116.680466][ T1749] fido_id[1749]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.700269][ T1724] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 116.723161][ T1724] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 116.724059][ T1753] fido_id[1753]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 117.864979][ T282] attempt to access beyond end of device [ 117.864979][ T282] loop1: rw=2049, want=45104, limit=40427 [ 117.875137][ T1761] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 117.901074][ T1761] 9pnet: Insufficient options for proto=fd [ 117.916387][ T1764] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.956645][ T1766] loop2: detected capacity change from 0 to 256 [ 117.990370][ T1763] syz.3.401[1763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.995925][ T1768] loop0: detected capacity change from 0 to 1024 [ 118.001150][ T1763] device wg2 entered promiscuous mode [ 118.072650][ T1766] FAT-fs (loop2): bogus number of FAT sectors [ 118.077627][ T1768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.081897][ T1766] FAT-fs (loop2): Can't find a valid FAT filesystem [ 118.162446][ T1768] EXT4-fs (loop0): Unrecognized mount option "VŸ;²üñÉÅúo&£œOº&ž‡Îå·õõúùˆ¨µ Ø~ nümis­>³°\Yvò0â¶tèÿ™¿KÃŽ8¿×‚Ñ¥ÿÃèÒÿatéÿ0ºÚôÿÍÈØxí>ÿ?BÀÆkéÿ¦ý`„´½ÿ¿ÞTK7*`cyþ£Kÿ‡‘´²9ný#ù®…â/õxø=[ˆò]ÆÀ [ 118.162446][ T1768] ‘Þa( ¨0Ü÷%" or missing value [ 118.251899][ T1773] loop1: detected capacity change from 0 to 512 [ 118.348112][ T1773] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.381158][ T1773] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.666172][ T1798] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 220.290857][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 220.297867][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1811/1:b..l [ 220.305816][ C0] (detected by 0, t=10003 jiffies, g=10509, q=316) [ 220.312448][ C0] task:syz.3.413 state:R running task stack:27736 pid: 1811 ppid: 281 flags:0x00004000 [ 220.323609][ C0] Call Trace: [ 220.326932][ C0] [ 220.329898][ C0] __schedule+0xb6e/0x14c0 [ 220.334361][ C0] ? release_firmware_map_entry+0x190/0x190 [ 220.340280][ C0] ? preempt_schedule+0xa7/0xb0 [ 220.345158][ C0] preempt_schedule_common+0x9b/0xf0 [ 220.350467][ C0] preempt_schedule+0xa7/0xb0 [ 220.355186][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 220.360849][ C0] ? next_uptodate_page+0x293/0xa40 [ 220.366074][ C0] ? next_uptodate_page+0xa12/0xa40 [ 220.371320][ C0] preempt_schedule_thunk+0x16/0x18 [ 220.376843][ C0] _raw_spin_unlock+0x60/0x70 [ 220.381651][ C0] filemap_map_pages+0xbf4/0x15d0 [ 220.386809][ C0] ? filemap_read_page+0x340/0x340 [ 220.392036][ C0] ? enqueue_task_fair+0xaa7/0x2120 [ 220.397276][ C0] handle_pte_fault+0x1a13/0x2680 [ 220.402422][ C0] ? do_futex+0xcb2/0x2620 [ 220.406976][ C0] ? fault_around_bytes_set+0xc0/0xc0 [ 220.412559][ C0] ? memcpy+0x56/0x70 [ 220.416664][ C0] do_handle_mm_fault+0x1a6d/0x1d50 [ 220.421892][ C0] ? futex_exit_release+0x1d0/0x1d0 [ 220.427250][ C0] ? numa_migrate_prep+0xd0/0xd0 [ 220.432218][ C0] ? __switch_to+0x51d/0xe20 [ 220.436870][ C0] ? find_vma_from_tree+0xfd/0x110 [ 220.442011][ C0] ? access_error+0x152/0x260 [ 220.446832][ C0] do_user_addr_fault+0x554/0x1180 [ 220.452058][ C0] ? do_kern_addr_fault+0x80/0x80 [ 220.457142][ C0] ? __kasan_check_write+0x14/0x20 [ 220.462271][ C0] ? switch_fpu_return+0x15d/0x2c0 [ 220.467487][ C0] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 220.473147][ C0] exc_page_fault+0x51/0xb0 [ 220.477683][ C0] asm_exc_page_fault+0x27/0x30 [ 220.482574][ C0] RIP: 0033:0x7fbb26e47f3d [ 220.487135][ C0] RSP: 002b:00007fff8daec530 EFLAGS: 00010202 [ 220.493223][ C0] RAX: 000000110c2dc000 RBX: 00007fbb27cbe720 RCX: 0000000000000007 [ 220.501222][ C0] RDX: 00000000000007ba RSI: 000000000000011e RDI: 0000000000000080 [ 220.509219][ C0] RBP: ffffffff827047ba R08: 00007fbb2718f038 R09: 00007fbb2717b000 [ 220.517218][ C0] R10: 00007fbb269d8008 R11: 0000000000000004 R12: 0000000000000004 [ 220.525211][ C0] R13: 0000000000000000 R14: ffffffff827047a2 R15: 0000000000000317 [ 220.533303][ C0] ? insn_decode+0x22/0x520 [ 220.537916][ C0] ? insn_decode+0x3a/0x520 [ 220.542462][ C0] [ 220.545504][ C0] rcu: rcu_preempt kthread starved for 10027 jiffies! g10509 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 220.556721][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 220.566795][ C0] rcu: RCU grace-period kthread stack dump: [ 220.572694][ C0] task:rcu_preempt state:R running task stack:28488 pid: 14 ppid: 2 flags:0x00004000 [ 220.583518][ C0] Call Trace: [ 220.586807][ C0] [ 220.589748][ C0] __schedule+0xb6e/0x14c0 [ 220.594191][ C0] ? release_firmware_map_entry+0x190/0x190 [ 220.600125][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 220.605950][ C0] ? __mod_timer+0x7ae/0xb30 [ 220.610578][ C0] schedule+0x11e/0x1e0 [ 220.614783][ C0] schedule_timeout+0x12c/0x2e0 [ 220.619651][ C0] ? console_conditional_schedule+0x30/0x30 [ 220.625651][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 220.631129][ C0] ? update_process_times+0x200/0x200 [ 220.636520][ C0] ? prepare_to_swait_event+0x308/0x320 [ 220.642096][ C0] rcu_gp_fqs_loop+0x293/0xf60 [ 220.646890][ C0] ? debug_smp_processor_id+0x17/0x20 [ 220.652285][ C0] ? __note_gp_changes+0x4e2/0x9e0 [ 220.657455][ C0] ? rcu_gp_init+0xc00/0xc00 [ 220.662159][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 220.667395][ C0] ? rcu_gp_init+0x9a7/0xc00 [ 220.672502][ C0] rcu_gp_kthread+0x98/0x330 [ 220.677126][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 220.681832][ C0] ? __kasan_check_read+0x11/0x20 [ 220.686882][ C0] ? __kthread_parkme+0xac/0x200 [ 220.691864][ C0] ? preempt_count_add+0x90/0x1b0 [ 220.696910][ C0] kthread+0x411/0x500 [ 220.701088][ C0] ? wake_nocb_gp+0x1d0/0x1d0 [ 220.705869][ C0] ? kthread_blkcg+0xd0/0xd0 [ 220.710481][ C0] ret_from_fork+0x1f/0x30 [ 220.714922][ C0] [ 220.717961][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 220.724310][ C0] Sending NMI from CPU 0 to CPUs 1: [ 220.729532][ C1] NMI backtrace for cpu 1 [ 220.729550][ C1] CPU: 1 PID: 1804 Comm: syz.2.410 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 220.729569][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.729578][ C1] RIP: 0010:__dequeue_signal+0x4a8/0x5c0 [ 220.729601][ C1] Code: 74 08 4c 89 ff e8 78 d4 66 00 49 c7 07 00 00 00 00 eb 0c e8 ea 58 28 00 eb 15 e8 e3 58 28 00 48 8b 75 d0 48 8b 3d 88 bb cb 05 73 1a 66 00 89 d8 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 [ 220.729616][ C1] RSP: 0018:ffffc90000b47ae8 EFLAGS: 00000046 [ 220.729631][ C1] RAX: ffffffff81463972 RBX: 0000000000000011 RCX: 0000000000080000 [ 220.729643][ C1] RDX: ffffc90001f3e000 RSI: ffff88815f38b850 RDI: ffff8881001c4a80 [ 220.729656][ C1] RBP: ffffc90000b47b40 R08: dffffc0000000000 R09: fffffbfff0cdf5b9 [ 220.729669][ C1] R10: fffffbfff0cdf5b9 R11: 1ffffffff0cdf5b8 R12: 1ffff1102be71713 [ 220.729681][ C1] R13: dffffc0000000000 R14: ffffffff866fad40 R15: ffff88815f38b898 [ 220.729694][ C1] FS: 00007ff5774056c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 220.729709][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 220.729721][ C1] CR2: 000000110c2de199 CR3: 0000000136c5a000 CR4: 00000000003506a0 [ 220.729736][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 220.729746][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 220.729756][ C1] Call Trace: [ 220.729761][ C1] [ 220.729768][ C1] dequeue_signal+0xa0/0x440 [ 220.729785][ C1] get_signal+0x696/0x1480 [ 220.729806][ C1] arch_do_signal_or_restart+0xc1/0x10f0 [ 220.729826][ C1] ? load_gs_index+0xb0/0xb0 [ 220.729841][ C1] ? get_sigframe_size+0x10/0x10 [ 220.729859][ C1] ? sched_clock+0x9/0x10 [ 220.729874][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 220.729892][ C1] exit_to_user_mode_loop+0xa7/0xe0 [ 220.729908][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 220.729923][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 220.729943][ C1] do_syscall_64+0x58/0xa0 [ 220.729965][ C1] ? clear_bhb_loop+0x50/0xa0 [ 220.729982][ C1] ? clear_bhb_loop+0x50/0xa0 [ 220.730000][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.730017][ C1] RIP: 0033:0x7ff5789bdbe9 [ 220.730039][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.730053][ C1] RSP: 002b:00007ff5774050e8 EFLAGS: 00000246 [ 220.730066][ C1] RAX: fffffffffffffffc RBX: 00007ff578be5098 RCX: 00007ff5789bdbe9 [ 220.730078][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff578be5098 [ 220.730088][ C1] RBP: 00007ff578be5090 R08: 0000000000000000 R09: 0000000000000000 [ 220.730099][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.730108][ C1] R13: 00007ff578be5128 R14: 00007ffe0cdaf530 R15: 00007ffe0cdaf618 [ 220.730124][ C1]