last executing test programs: 3.897150837s ago: executing program 3 (id=14791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x5, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000000000000000000000000000018111e00", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.878345548s ago: executing program 3 (id=14792): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.868722169s ago: executing program 3 (id=14794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$TUNGETVNETLE(r1, 0x40047451, &(0x7f0000000180)) 3.548878815s ago: executing program 3 (id=14800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8011, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x808c20, &(0x7f0000000a40)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.582688923s ago: executing program 3 (id=14805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.49024265s ago: executing program 3 (id=14810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(r0) 2.487128521s ago: executing program 32 (id=14810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(r0) 2.352144902s ago: executing program 1 (id=14820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.224867402s ago: executing program 1 (id=14822): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001010000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) 2.201988154s ago: executing program 1 (id=14823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8011, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x808c20, &(0x7f0000000a40)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.357360751s ago: executing program 5 (id=14811): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 1.339522603s ago: executing program 5 (id=14835): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmmsg$inet(r4, 0x0, 0x0, 0x2000c044) syz_emit_ethernet(0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a820008100000086dd605f106000462f00fc00"], 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) 1.277587718s ago: executing program 1 (id=14838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 952.246894ms ago: executing program 1 (id=14849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8011, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x808c20, &(0x7f0000000a40)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 747.81388ms ago: executing program 0 (id=14861): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 703.652404ms ago: executing program 0 (id=14865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 691.631395ms ago: executing program 0 (id=14867): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 680.887586ms ago: executing program 0 (id=14868): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 672.638467ms ago: executing program 0 (id=14869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000049b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 651.528939ms ago: executing program 0 (id=14870): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 563.872905ms ago: executing program 4 (id=14880): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000049b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 535.574477ms ago: executing program 4 (id=14881): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 467.944143ms ago: executing program 4 (id=14883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 423.605277ms ago: executing program 5 (id=14886): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 413.073147ms ago: executing program 5 (id=14887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x58, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 340.672633ms ago: executing program 4 (id=14889): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 340.405443ms ago: executing program 2 (id=14890): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 340.187213ms ago: executing program 4 (id=14891): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000049b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 328.452274ms ago: executing program 2 (id=14892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 328.001054ms ago: executing program 4 (id=14893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = open(0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) creat(0x0, 0xd) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x58) pivot_root(0x0, 0x0) syz_open_procfs(0x0, 0x0) umount2(0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 305.489086ms ago: executing program 2 (id=14894): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 225.071733ms ago: executing program 2 (id=14895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 224.153642ms ago: executing program 5 (id=14896): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x19, "90737f0000fbffffffffffffff679495ffffeb"}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmmsg$inet(r4, 0x0, 0x0, 0x2000c044) syz_emit_ethernet(0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a820008100000086dd605f106000462f00fc00"], 0x0) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) 109.528382ms ago: executing program 2 (id=14897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) 108.888562ms ago: executing program 2 (id=14898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 0s ago: executing program 1 (id=14899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) kernel console output (not intermixed with test programs): ge0: port 1(bridge_slave_0) entered disabled state [ 2181.209764][T14190] device veth1_macvtap left promiscuous mode [ 2181.216182][T14190] device veth0_vlan left promiscuous mode [ 2182.924959][ T4847] loop1: detected capacity change from 0 to 512 [ 2182.955417][ T4847] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.11995: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2182.973605][ T4847] EXT4-fs error (device loop1): ext4_quota_enable:7012: comm syz.1.11995: Bad quota inode: 3, type: 0 [ 2182.985731][ T4847] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2183.001362][ T4847] EXT4-fs (loop1): mount failed [ 2183.059023][ T4861] xt_socket: unknown flags 0x50 [ 2183.797604][ T4880] incfs_lookup_dentry err:-5 [ 2183.802452][ T4880] incfs: Can't find or create .index dir in ./file0 [ 2183.811186][ T4880] incfs: mount failed -5 [ 2185.272234][ T4909] incfs_lookup_dentry err:-5 [ 2185.276971][ T4909] incfs: Can't find or create .index dir in ./file0 [ 2185.284749][ T4909] incfs: mount failed -5 [ 2185.342841][ T4911] syz.1.12017[4911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2185.342915][ T4911] syz.1.12017[4911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2185.384625][ T3173] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2185.764810][ T3173] usb 3-1: Using ep0 maxpacket: 8 [ 2185.771041][ T3173] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.782005][ T3173] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.791839][ T3173] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2185.798576][ T3173] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2185.807655][ T3173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.816371][ T3173] usb 3-1: config 0 descriptor?? [ 2186.252079][ T3173] ntrig 0003:1B96:0004.003C: unknown main item tag 0x0 [ 2186.259216][ T3173] ntrig 0003:1B96:0004.003C: unknown main item tag 0x0 [ 2186.266177][ T3173] ntrig 0003:1B96:0004.003C: unknown main item tag 0x0 [ 2186.273265][ T3173] ntrig 0003:1B96:0004.003C: unknown main item tag 0x0 [ 2186.280298][ T3173] ntrig 0003:1B96:0004.003C: unknown main item tag 0x0 [ 2186.348551][ T4944] overlayfs: failed to resolve './bus': -2 [ 2187.678590][ T3173] ntrig 0003:1B96:0004.003C: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 2187.945902][ T4953] device veth0 entered promiscuous mode [ 2187.953493][ T4953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12033'. [ 2187.979636][ T3173] usb 3-1: USB disconnect, device number 75 [ 2188.005647][ T4955] fido_id[4955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:0004.003C/report_descriptor': No such file or directory [ 2189.393061][ T4996] overlayfs: failed to resolve './bus': -2 [ 2192.256705][ T5019] overlayfs: failed to resolve './bus': -2 [ 2192.578039][ T5028] loop1: detected capacity change from 0 to 4096 [ 2192.584973][ T5028] EXT4-fs: Ignoring removed mblk_io_submit option [ 2192.592327][ T5028] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2192.606436][ T5028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2193.407514][T27805] EXT4-fs (loop1): unmounting filesystem. [ 2193.511985][ T5047] loop1: detected capacity change from 0 to 40427 [ 2193.521417][ T5047] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2193.529590][ T5047] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2193.588057][ T5047] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2193.633358][ T5047] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2193.640571][ T5047] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2193.707120][ T5055] syz.4.12066[5055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2193.707128][ T28] audit: type=1400 audit(2104.290:3304): avc: denied { create } for pid=5046 comm="syz.1.12064" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2193.761063][ T5055] syz.4.12066[5055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2194.406333][ T5069] loop3: detected capacity change from 0 to 512 [ 2194.597041][ T5069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2194.622334][ T5069] virtiofs: Unknown parameter 'always' [ 2194.906649][ T5080] incfs_lookup_dentry err:-5 [ 2194.911383][ T5080] incfs: Can't find or create .index dir in ./file0 [ 2194.918372][ T5080] incfs: mount failed -5 [ 2195.420062][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2196.351736][ T5100] syz.3.12081[5100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2196.351811][ T5100] syz.3.12081[5100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2197.281425][ T5132] loop3: detected capacity change from 0 to 512 [ 2200.115535][ T5132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2200.636304][ T5132] virtiofs: Unknown parameter 'always' [ 2201.377975][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2201.581354][ T5183] loop3: detected capacity change from 0 to 512 [ 2201.634219][ T5181] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2201.652357][ T5183] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.12105: iget: bad extended attribute block 1 [ 2201.679787][ T5183] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.12105: couldn't read orphan inode 15 (err -117) [ 2201.692321][ T5183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2201.728176][ T28] audit: type=1400 audit(2111.802:3305): avc: denied { unlink } for pid=5182 comm="syz.3.12105" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2202.155451][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2203.797997][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12115'. [ 2203.879931][ T5230] incfs_lookup_dentry err:-5 [ 2203.884647][ T5230] incfs: Can't find or create .index dir in ./file0 [ 2203.891399][ T5230] incfs: mount failed -5 [ 2203.928240][ T5228] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2203.946693][ T5233] syz.2.12122[5233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2203.946766][ T5233] syz.2.12122[5233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2203.959479][ T28] audit: type=1326 audit(2113.897:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2203.995162][ T28] audit: type=1326 audit(2113.897:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2204.018770][ T28] audit: type=1326 audit(2113.897:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbe1d90b07 code=0x7ffc0000 [ 2204.042403][ T28] audit: type=1326 audit(2113.897:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2204.066047][ T28] audit: type=1326 audit(2113.897:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2204.090112][ T28] audit: type=1326 audit(2113.925:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2204.113362][ T28] audit: type=1326 audit(2113.925:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2204.136555][ T28] audit: type=1326 audit(2113.925:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2204.159714][ T28] audit: type=1326 audit(2113.925:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5232 comm="syz.2.12122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fcbe1d8ebe9 code=0x7ffc0000 [ 2204.291655][ T39] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2204.601663][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 2204.608338][ T39] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.619374][ T39] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.629574][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2204.636386][ T39] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2204.645629][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.655194][ T39] usb 4-1: config 0 descriptor?? [ 2205.100842][ T39] ntrig 0003:1B96:0004.003D: unknown main item tag 0x0 [ 2205.108359][ T39] ntrig 0003:1B96:0004.003D: unknown main item tag 0x0 [ 2205.115593][ T39] ntrig 0003:1B96:0004.003D: unknown main item tag 0x0 [ 2205.123024][ T39] ntrig 0003:1B96:0004.003D: unknown main item tag 0x0 [ 2205.135440][ T39] ntrig 0003:1B96:0004.003D: unknown main item tag 0x0 [ 2205.148492][ T39] ntrig 0003:1B96:0004.003D: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 2205.592196][ T39] usb 4-1: USB disconnect, device number 69 [ 2205.815518][ T5258] fido_id[5258]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2205.939138][ T5265] incfs_lookup_dentry err:-5 [ 2205.944004][ T5265] incfs: Can't find or create .index dir in ./file0 [ 2205.951055][ T5265] incfs: mount failed -5 [ 2207.274097][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12131'. [ 2208.619862][ T5309] incfs: Can't find or create .index dir in ./file0 [ 2208.642816][ T5309] incfs: mount failed -14 [ 2208.703526][ T5316] loop3: detected capacity change from 0 to 256 [ 2208.719075][ T5316] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 2208.745553][ T5320] loop1: detected capacity change from 0 to 256 [ 2208.771426][ T5320] exfat: Deprecated parameter 'namecase' [ 2208.796038][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2208.796052][ T28] audit: type=1400 audit(2118.415:3317): avc: denied { map } for pid=5315 comm="syz.3.12149" path="/78/file0/memory.events" dev="loop3" ino=1048921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2208.867123][ T5320] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 2208.877776][ T5320] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 2209.629204][ T5333] loop1: detected capacity change from 0 to 256 [ 2209.669599][ T5334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12152'. [ 2209.712807][T14154] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2209.929454][ T5347] loop1: detected capacity change from 0 to 128 [ 2209.975092][ T5347] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2210.352545][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2211.064787][ T5353] incfs_lookup_dentry err:-5 [ 2211.073641][T27805] EXT4-fs (loop1): unmounting filesystem. [ 2211.084068][ T5353] incfs: Can't find or create .index dir in ./file0 [ 2211.090723][ T5353] incfs: mount failed -5 [ 2211.360239][ T5368] xt_socket: unknown flags 0x50 [ 2211.919127][ T5364] loop3: detected capacity change from 0 to 40427 [ 2211.934045][ T5364] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 2211.949086][ T5364] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2211.957651][ T5364] F2FS-fs (loop3): fault_injection options not supported [ 2211.965829][ T5364] F2FS-fs (loop3): fault_type options not supported [ 2211.974296][ T5364] F2FS-fs (loop3): invalid crc value [ 2212.002321][ T5364] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2212.023410][ T5374] incfs: Can't find or create .index dir in ./file0 [ 2212.030097][ T5374] incfs: mount failed -14 [ 2212.086450][ T5364] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2212.093768][ T5364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2212.132806][ T28] audit: type=1400 audit(2121.539:3318): avc: denied { ioctl } for pid=5361 comm="syz.3.12164" path="/81/file2/file1" dev="loop3" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2212.178700][ T4009] syz-executor: attempt to access beyond end of device [ 2212.178700][ T4009] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2212.575926][ T5391] serio: Serial port ptm0 [ 2212.600097][ T5395] bridge0: port 3(gretap0) entered blocking state [ 2212.606738][ T5395] bridge0: port 3(gretap0) entered disabled state [ 2212.613750][ T5395] device gretap0 entered promiscuous mode [ 2212.620471][ T5395] bridge0: port 3(gretap0) entered blocking state [ 2212.627021][ T5395] bridge0: port 3(gretap0) entered forwarding state [ 2212.635077][ T5395] device gretap0 left promiscuous mode [ 2212.640682][ T5395] bridge0: port 3(gretap0) entered disabled state [ 2212.665977][ T5398] loop3: detected capacity change from 0 to 256 [ 2212.907803][ T5402] loop3: detected capacity change from 0 to 128 [ 2212.918082][ T5402] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2213.134310][ T5402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2213.640052][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12173'. [ 2213.758627][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2213.816084][ T5416] device syzkaller0 entered promiscuous mode [ 2213.837655][ T5417] incfs: Can't find or create .index dir in ./file0 [ 2214.344476][ T5424] 9pnet_fd: Insufficient options for proto=fd [ 2214.540473][ T5426] loop3: detected capacity change from 0 to 256 [ 2214.703189][ T5426] FAT-fs (loop3): Directory bread(block 64) failed [ 2214.710608][ T5426] FAT-fs (loop3): Directory bread(block 65) failed [ 2214.725897][ T5426] FAT-fs (loop3): Directory bread(block 66) failed [ 2214.747345][ T5426] FAT-fs (loop3): Directory bread(block 67) failed [ 2214.757961][ T5426] FAT-fs (loop3): Directory bread(block 68) failed [ 2214.764808][ T5426] FAT-fs (loop3): Directory bread(block 69) failed [ 2214.789875][ T5426] FAT-fs (loop3): Directory bread(block 70) failed [ 2214.797042][ T5417] incfs: mount failed -14 [ 2214.807794][ T5426] FAT-fs (loop3): Directory bread(block 71) failed [ 2214.821923][ T5426] FAT-fs (loop3): Directory bread(block 72) failed [ 2214.828602][ T5426] FAT-fs (loop3): Directory bread(block 73) failed [ 2214.858594][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12176'. [ 2215.374944][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12185'. [ 2215.375808][ T5449] loop1: detected capacity change from 0 to 256 [ 2215.619781][ T5456] loop1: detected capacity change from 0 to 128 [ 2215.629669][ T5456] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2215.696193][ T5456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2216.416402][ T5462] syz.4.12190[5462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2216.416480][ T5462] syz.4.12190[5462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2216.446734][ T5460] loop3: detected capacity change from 0 to 8192 [ 2216.482937][ T5460] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2216.520818][T27805] EXT4-fs (loop1): unmounting filesystem. [ 2216.775211][ T5471] loop1: detected capacity change from 0 to 256 [ 2216.900811][ T5472] incfs: Can't find or create .index dir in ./file0 [ 2216.912217][ T5472] incfs: mount failed -14 [ 2218.022267][ T5485] loop1: detected capacity change from 0 to 4096 [ 2218.064192][ T5485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2218.107384][ T28] audit: type=1400 audit(2127.124:3319): avc: denied { read } for pid=5484 comm="syz.1.12198" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2218.144396][T27805] EXT4-fs (loop1): unmounting filesystem. [ 2218.152152][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12206'. [ 2218.171621][ T5506] incfs: Can't find or create .index dir in ./file0 [ 2218.178426][ T5506] incfs: mount failed -14 [ 2218.251455][ T5510] syz.4.12203[5510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2218.251739][ T5510] syz.4.12203[5510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2219.407643][ T5538] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 2219.429731][ T5538] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2219.438311][ T5538] overlayfs: missing 'lowerdir' [ 2219.813378][ T5540] incfs: Can't find or create .index dir in ./file0 [ 2219.820699][ T5540] incfs: mount failed -14 [ 2220.546425][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12219'. [ 2220.638589][ T5554] loop1: detected capacity change from 0 to 128 [ 2220.666097][ T5554] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2220.678406][ T5554] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2220.698464][ T5555] loop3: detected capacity change from 0 to 1024 [ 2220.725994][ T5555] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2220.772307][ T5555] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.12224: Freeing blocks not in datazone - block = 0, count = 16 [ 2220.804756][ T5559] syz.4.12225[5559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2220.805038][ T5559] syz.4.12225[5559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2221.026366][ T393] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 2221.122684][ T393] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 2221.184097][ T393] EXT4-fs (loop3): This should not happen!! Data will be lost [ 2221.184097][ T393] [ 2221.296432][ T393] EXT4-fs (loop3): Total free blocks count 0 [ 2221.341149][ T393] EXT4-fs (loop3): Free/Dirty block details [ 2221.376544][ T393] EXT4-fs (loop3): free_blocks=4293918736 [ 2221.398344][ T393] EXT4-fs (loop3): dirty_blocks=16 [ 2221.403914][ T393] EXT4-fs (loop3): Block reservation details [ 2221.412329][ T393] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 2221.424279][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2223.042363][ T5585] tipc: Enabled bearer , priority 0 [ 2223.058996][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12235'. [ 2223.080595][ T5585] tipc: Resetting bearer [ 2223.090585][ T5584] tipc: Disabling bearer [ 2223.131512][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.138765][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 2223.175799][ T5586] device bridge_slave_0 entered promiscuous mode [ 2223.184597][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.191643][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 2223.199671][ T5594] loop3: detected capacity change from 0 to 16 [ 2223.218496][ T5594] erofs: (device loop3): mounted with root inode @ nid 36. [ 2223.226559][ T5586] device bridge_slave_1 entered promiscuous mode [ 2223.280928][ T5597] loop3: detected capacity change from 0 to 256 [ 2223.356430][T14154] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2223.432568][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12233'. [ 2223.446153][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.453362][ T5586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.460966][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.468200][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2223.483162][ T5611] loop3: detected capacity change from 0 to 128 [ 2223.493263][ T5611] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2223.500620][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 2223.511012][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2223.519881][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 2223.528215][ T5611] hub 8-0:1.0: USB hub found [ 2223.533103][ T5611] hub 8-0:1.0: 1 port detected [ 2223.538766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2223.547339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2223.558032][T14190] tipc: Left network mode [ 2223.562851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2223.571615][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.578686][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2223.586660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2223.595121][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.602228][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.625383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2223.634019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2223.642477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2223.656332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2223.664571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2223.672834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2223.681233][ T5586] device veth0_vlan entered promiscuous mode [ 2223.692093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2223.703483][ T5586] device veth1_macvtap entered promiscuous mode [ 2223.785022][ T5618] virtiofs: Unknown parameter 'always' [ 2223.797622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2223.808092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2225.108217][ T5620] loop1: detected capacity change from 0 to 40427 [ 2225.125956][ T5620] F2FS-fs (loop1): heap/no_heap options were deprecated [ 2225.139480][ T5620] F2FS-fs (loop1): fault_injection options not supported [ 2225.159345][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2225.176018][ T5620] F2FS-fs (loop1): fault_type options not supported [ 2225.191222][ T5620] F2FS-fs (loop1): invalid crc value [ 2225.274808][ T5645] fuse: Bad value for 'fd' [ 2225.282798][ T5620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2225.310252][T14190] device bridge_slave_1 left promiscuous mode [ 2225.317777][T14190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.334669][T14190] device bridge_slave_0 left promiscuous mode [ 2225.358538][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.440456][T14190] device veth1_macvtap left promiscuous mode [ 2225.462990][T14190] device veth0_vlan left promiscuous mode [ 2225.554507][ T5654] xt_socket: unknown flags 0x50 [ 2225.570201][ T5620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2225.924513][ T5586] syz-executor: attempt to access beyond end of device [ 2225.924513][ T5586] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2226.210232][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12249'. [ 2227.519901][ T5693] bridge0: port 3(gretap0) entered blocking state [ 2227.526607][ T5693] bridge0: port 3(gretap0) entered disabled state [ 2227.536160][ T5693] device gretap0 entered promiscuous mode [ 2227.547021][ T5693] device gretap0 left promiscuous mode [ 2227.552705][ T5693] bridge0: port 3(gretap0) entered disabled state [ 2227.578640][ T5696] fuse: Bad value for 'fd' [ 2227.628043][ T28] audit: type=1400 audit(2136.029:3320): avc: denied { mount } for pid=5699 comm="syz.2.12265" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2227.884460][ T5705] xt_socket: unknown flags 0x50 [ 2228.976700][ T5716] syz.1.12267[5716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2228.977632][ T5716] syz.1.12267[5716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2229.587848][ T28] audit: type=1400 audit(2137.862:3321): avc: denied { unmount } for pid=4208 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2230.152121][ T5745] incfs_lookup_dentry err:-5 [ 2230.156856][ T5745] incfs: Can't find or create .index dir in ./file0 [ 2230.170950][ T5745] incfs: mount failed -5 [ 2233.849191][ T5805] serio: Serial port ptm0 [ 2233.988368][ T5785] loop1: detected capacity change from 0 to 131072 [ 2234.127536][ T5785] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2234.295721][ T5785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2234.867625][ T5819] loop3: detected capacity change from 0 to 256 [ 2235.068484][ T5830] input: syz0 as /devices/virtual/input/input147 [ 2235.136735][ T5845] loop3: detected capacity change from 0 to 256 [ 2235.292888][ T5849] syz.3.12314[5849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2235.292967][ T5849] syz.3.12314[5849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2235.306107][ T5849] loop3: detected capacity change from 0 to 128 [ 2235.325153][ T5849] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2235.338418][ T5849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2235.349320][ T5849] hub 8-0:1.0: USB hub found [ 2235.354247][ T5849] hub 8-0:1.0: 1 port detected [ 2235.893580][ T5857] tipc: Enabled bearer , priority 0 [ 2235.901349][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12316'. [ 2235.911261][ T5857] tipc: Resetting bearer [ 2235.917955][ T5856] tipc: Disabling bearer [ 2235.927214][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12315'. [ 2235.959551][ T28] audit: type=1400 audit(2143.820:3322): avc: denied { associate } for pid=5860 comm="syz.0.12317" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2236.055635][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2236.136644][ T5881] loop1: detected capacity change from 0 to 512 [ 2236.220079][ T5881] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2236.388824][ T5885] tipc: Enabling of bearer rejected, failed to enable media [ 2236.498140][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12328'. [ 2236.575053][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2237.187798][ T5897] syz.3.12331[5897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2237.187873][ T5897] syz.3.12331[5897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2237.945361][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12333'. [ 2237.975051][ T5906] syz.2.12334[5906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2237.975122][ T5906] syz.2.12334[5906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2238.001976][ T5906] hub 8-0:1.0: USB hub found [ 2238.003760][ T5909] loop1: detected capacity change from 0 to 2048 [ 2238.013844][ T5906] hub 8-0:1.0: 1 port detected [ 2238.058969][ T5909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2238.177956][ T5909] fs-verity: sha512 using implementation "sha512-avx2" [ 2238.201722][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2238.318328][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.325848][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 2238.334021][ T5917] device bridge_slave_0 entered promiscuous mode [ 2238.341148][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.348260][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 2238.355822][ T5917] device bridge_slave_1 entered promiscuous mode [ 2238.436669][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.443766][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2238.451070][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.458181][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2238.499223][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 2238.507829][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 2238.517836][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2238.526777][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2238.547430][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2238.557237][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.564300][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2238.572472][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2238.581188][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2238.588270][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2238.599679][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2238.609801][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2238.623981][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2238.635404][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2238.643849][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2238.651733][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2238.660622][ T5917] device veth0_vlan entered promiscuous mode [ 2238.671429][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2238.681114][ T5917] device veth1_macvtap entered promiscuous mode [ 2238.691012][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2238.702081][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2238.823133][ T3572] tipc: Left network mode [ 2239.646059][ T3572] device bridge_slave_1 left promiscuous mode [ 2239.653684][ T3572] bridge0: port 2(bridge_slave_1) entered disabled state [ 2239.667537][ T3572] device bridge_slave_0 left promiscuous mode [ 2239.675468][ T3572] bridge0: port 1(bridge_slave_0) entered disabled state [ 2239.902941][ T5970] overlayfs: failed to resolve './bus': -2 [ 2240.928442][ T5983] xt_socket: unknown flags 0x50 [ 2242.807290][ T6008] loop1: detected capacity change from 0 to 1024 [ 2242.838049][ T6008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2242.864230][ T28] audit: type=1400 audit(2150.275:3323): avc: denied { read } for pid=6007 comm="syz.1.12364" name=2E02 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 2242.895588][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2243.260907][ T6020] loop1: detected capacity change from 0 to 40427 [ 2243.276747][ T6020] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 2243.292580][ T6020] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2243.300964][ T6020] F2FS-fs (loop1): fault_injection options not supported [ 2243.308291][ T6020] F2FS-fs (loop1): fault_type options not supported [ 2243.316429][ T6020] F2FS-fs (loop1): invalid crc value [ 2243.323675][ T6020] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2243.358645][ T6020] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2243.365819][ T6020] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2243.388122][ T28] audit: type=1400 audit(2150.770:3324): avc: denied { lock } for pid=6018 comm="syz.1.12368" path="/17/file2/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2243.421183][ T6024] loop3: detected capacity change from 0 to 40427 [ 2243.422907][ T28] audit: type=1400 audit(2150.799:3325): avc: denied { link } for pid=6018 comm="syz.1.12368" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2243.439420][ T6024] F2FS-fs (loop3): fault_injection options not supported [ 2243.456501][ T6024] F2FS-fs (loop3): fault_type options not supported [ 2243.456507][ T5586] syz-executor: attempt to access beyond end of device [ 2243.456507][ T5586] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 2243.487439][ T6024] F2FS-fs (loop3): invalid crc value [ 2243.494072][ T6024] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2243.528199][ T6024] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2243.543258][ T6024] syz.3.12369: attempt to access beyond end of device [ 2243.543258][ T6024] loop3: rw=2049, sector=45096, nr_sectors = 136 limit=40427 [ 2243.563932][ T4009] syz-executor: attempt to access beyond end of device [ 2243.563932][ T4009] loop3: rw=2049, sector=45232, nr_sectors = 16 limit=40427 [ 2244.353635][ T6034] loop1: detected capacity change from 0 to 40427 [ 2244.408792][ T6034] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 2244.451928][ T6046] xt_socket: unknown flags 0x50 [ 2244.522851][ T6034] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2244.572703][ T6034] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2244.647460][ T6034] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2244.686911][ T6034] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2244.768305][ T6044] loop3: detected capacity change from 0 to 40427 [ 2244.782351][ T6044] F2FS-fs (loop3): fault_injection options not supported [ 2244.794616][ T6044] F2FS-fs (loop3): invalid crc value [ 2244.800209][ T5586] syz-executor: attempt to access beyond end of device [ 2244.800209][ T5586] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2244.815759][ T6044] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2245.275288][ T6044] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2245.300401][ T28] audit: type=1400 audit(2152.557:3326): avc: denied { unlink } for pid=6043 comm="syz.3.12371" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2245.335081][ T4009] syz-executor: attempt to access beyond end of device [ 2245.335081][ T4009] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2247.851371][ T6124] loop3: detected capacity change from 0 to 8192 [ 2247.920558][ T6124] loop3: p1 p2 p4 < > [ 2247.924700][ T6124] loop3: partition table partially beyond EOD, truncated [ 2247.931976][ T6124] loop3: p1 start 16777216 is beyond EOD, truncated [ 2247.938741][ T6124] loop3: p2 size 515840 extends beyond EOD, truncated [ 2247.946012][ T6124] loop3: p4 start 16777216 is beyond EOD, truncated [ 2247.992425][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12402'. [ 2249.335326][ T6147] loop3: detected capacity change from 0 to 512 [ 2249.374104][ T6149] loop1: detected capacity change from 0 to 4096 [ 2249.381040][ T6149] EXT4-fs: Ignoring removed mblk_io_submit option [ 2249.401337][ T6149] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2249.505973][ T6149] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2249.673919][ T6147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2249.704385][ T6147] virtiofs: Unknown parameter 'always' [ 2249.850352][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2249.863441][ T28] audit: type=1400 audit(2156.822:3327): avc: denied { read } for pid=6168 comm="syz.2.12419" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2249.890703][ T28] audit: type=1400 audit(2156.851:3328): avc: denied { open } for pid=6168 comm="syz.2.12419" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2249.914448][ T28] audit: type=1400 audit(2156.851:3329): avc: denied { ioctl } for pid=6168 comm="syz.2.12419" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2250.072766][ T6176] loop3: detected capacity change from 0 to 8192 [ 2250.345292][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12422'. [ 2250.369916][ T6176] loop3: p1 p2 p4 < > [ 2250.375275][ T6176] loop3: partition table partially beyond EOD, truncated [ 2250.390373][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2250.390664][ T6176] loop3: p1 start 16777216 is beyond EOD, truncated [ 2250.408063][ T6176] loop3: p2 size 515840 extends beyond EOD, truncated [ 2250.415491][ T6176] loop3: p4 start 16777216 is beyond EOD, truncated [ 2250.452369][ T6188] incfs_lookup_dentry err:-5 [ 2250.459358][ T6188] incfs: Can't find or create .index dir in ./file0 [ 2250.467306][ T6188] incfs: mount failed -5 [ 2250.503787][ T6197] bridge0: port 3(gretap0) entered blocking state [ 2250.513133][ T6197] bridge0: port 3(gretap0) entered disabled state [ 2250.522395][ T6197] device gretap0 entered promiscuous mode [ 2250.533383][ T6197] bridge0: port 3(gretap0) entered blocking state [ 2250.539869][ T6197] bridge0: port 3(gretap0) entered forwarding state [ 2250.627160][T14154] udevd[14154]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 2250.657285][T14154] udevd[14154]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 2250.697283][ T6214] loop3: detected capacity change from 0 to 8192 [ 2250.702867][ T6218] incfs_lookup_dentry err:-5 [ 2250.708301][ T6218] incfs: Can't find or create .index dir in ./file0 [ 2250.715326][ T6218] incfs: mount failed -5 [ 2250.733216][ T6214] loop3: p1 p2 p4 < > [ 2250.741539][ T6214] loop3: partition table partially beyond EOD, truncated [ 2250.766101][ T6214] loop3: p1 start 16777216 is beyond EOD, truncated [ 2250.779374][ T6214] loop3: p2 size 515840 extends beyond EOD, truncated [ 2250.792622][ T6228] xt_socket: unknown flags 0x50 [ 2250.801083][ T6214] loop3: p4 start 16777216 is beyond EOD, truncated [ 2250.832316][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12438'. [ 2251.072683][ T6249] incfs_lookup_dentry err:-5 [ 2251.088617][ T6249] incfs: Can't find or create .index dir in ./file0 [ 2251.111481][ T6249] incfs: mount failed -5 [ 2251.789944][ T6266] bridge0: port 3(gretap0) entered blocking state [ 2251.796559][ T6266] bridge0: port 3(gretap0) entered disabled state [ 2251.804596][ T6266] device gretap0 entered promiscuous mode [ 2251.810541][ T6266] bridge0: port 3(gretap0) entered blocking state [ 2251.817013][ T6266] bridge0: port 3(gretap0) entered forwarding state [ 2251.852555][ T28] audit: type=1400 audit(2158.684:3330): avc: denied { write } for pid=6271 comm="syz.1.12460" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2251.991115][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12462'. [ 2252.461008][ T6321] 9pnet_fd: Insufficient options for proto=fd [ 2252.702908][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12479'. [ 2252.734952][ T6327] device wg2 entered promiscuous mode [ 2253.217355][ T6353] loop1: detected capacity change from 0 to 8192 [ 2253.244422][ T6353] loop1: p1 p2 p4 < > [ 2253.248579][ T6353] loop1: partition table partially beyond EOD, truncated [ 2253.256653][ T6353] loop1: p1 start 16777216 is beyond EOD, truncated [ 2253.264095][ T6353] loop1: p2 size 515840 extends beyond EOD, truncated [ 2253.271801][ T6353] loop1: p4 start 16777216 is beyond EOD, truncated [ 2253.336985][ T6365] device veth0 entered promiscuous mode [ 2253.343558][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12491'. [ 2253.681298][ T6376] loop1: detected capacity change from 0 to 512 [ 2253.855935][ T6376] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2253.901029][ T6376] virtiofs: Unknown parameter 'always' [ 2254.644071][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2254.669017][ T6408] 9pnet_fd: Insufficient options for proto=fd [ 2254.725014][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12507'. [ 2254.747817][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12518'. [ 2254.934708][ T6440] loop1: detected capacity change from 0 to 512 [ 2255.136778][ T6440] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2255.174371][ T6440] virtiofs: Unknown parameter 'always' [ 2255.909193][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2256.021366][ T6469] loop1: detected capacity change from 0 to 8192 [ 2256.069389][ T6469] loop1: p1 p2 p4 < > [ 2256.078287][ T6469] loop1: partition table partially beyond EOD, truncated [ 2256.091794][ T6469] loop1: p1 start 16777216 is beyond EOD, truncated [ 2256.098633][ T6469] loop1: p2 size 515840 extends beyond EOD, truncated [ 2256.112325][ T6469] loop1: p4 start 16777216 is beyond EOD, truncated [ 2256.168110][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12531'. [ 2257.070533][ T6489] incfs_lookup_dentry err:-5 [ 2257.083278][ T6489] incfs: Can't find or create .index dir in ./file0 [ 2257.091244][ T6489] incfs: mount failed -5 [ 2257.240934][ T6504] syz.3.12547[6504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2257.240990][ T6504] syz.3.12547[6504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2257.255237][ T6502] device pim6reg1 entered promiscuous mode [ 2257.272982][ T6494] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2257.555920][ T6516] serio: Serial port ptm0 [ 2259.264982][ T6536] incfs_lookup_dentry err:-5 [ 2259.269695][ T6536] incfs: Can't find or create .index dir in ./file0 [ 2259.278620][ T6536] incfs: mount failed -5 [ 2259.298519][ T6540] loop3: detected capacity change from 0 to 256 [ 2259.524201][ T6548] loop3: detected capacity change from 0 to 128 [ 2260.662421][ T6548] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2263.378878][ T6548] EXT4-fs: failed to create workqueue [ 2263.384327][ T6548] EXT4-fs (loop3): mount failed [ 2263.673900][ T6562] loop1: detected capacity change from 0 to 512 [ 2263.705468][T14154] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2263.839369][ T6562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2263.862486][ T6562] virtiofs: Unknown parameter 'always' [ 2265.260469][ T5809] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2265.484852][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2265.516854][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 2265.526397][ T5809] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.587949][ T5809] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.640404][ T5809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2265.647055][ T6599] fuse: Bad value for 'fd' [ 2265.668832][ T5809] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2265.698396][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.816186][ T5809] usb 4-1: config 0 descriptor?? [ 2265.970314][ T6602] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2266.265234][ T5809] ntrig 0003:1B96:0004.003E: unknown main item tag 0x0 [ 2266.321866][ T5809] ntrig 0003:1B96:0004.003E: unknown main item tag 0x0 [ 2266.418528][ T5809] ntrig 0003:1B96:0004.003E: unknown main item tag 0x0 [ 2266.555220][ T5809] ntrig 0003:1B96:0004.003E: unknown main item tag 0x0 [ 2266.594930][ T6616] syz.2.12582[6616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2266.595005][ T6616] syz.2.12582[6616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2266.629509][ T5809] ntrig 0003:1B96:0004.003E: unknown main item tag 0x0 [ 2266.875706][ T5809] ntrig 0003:1B96:0004.003E: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 2266.920425][ T6625] hub 8-0:1.0: USB hub found [ 2266.925249][ T6625] hub 8-0:1.0: 1 port detected [ 2268.625964][ T6549] usb 4-1: USB disconnect, device number 70 [ 2268.658488][ T6633] fuse: Bad value for 'fd' [ 2268.669972][ T6623] fido_id[6623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2269.081768][ T6651] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2269.243037][ T6660] 9pnet_fd: Insufficient options for proto=fd [ 2269.898089][ T6673] hub 8-0:1.0: USB hub found [ 2269.928416][ T6673] hub 8-0:1.0: 1 port detected [ 2270.530416][ T6698] virtiofs: Unknown parameter 'always' [ 2270.776881][ T6695] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2271.567798][ T6715] loop3: detected capacity change from 0 to 512 [ 2271.704533][ T6715] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.12616: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2271.722536][ T6715] EXT4-fs error (device loop3): ext4_quota_enable:7012: comm syz.3.12616: Bad quota inode: 3, type: 0 [ 2271.735166][ T6715] EXT4-fs warning (device loop3): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2271.751655][ T6715] EXT4-fs (loop3): mount failed [ 2273.112495][ T6748] tipc: Started in network mode [ 2273.118196][ T6748] tipc: Node identity 4ab98d2b4bfd, cluster identity 4711 [ 2273.119939][ T6747] loop1: detected capacity change from 0 to 256 [ 2273.125377][ T6748] tipc: Enabled bearer , priority 0 [ 2273.147621][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12628'. [ 2273.157978][ T6748] tipc: Resetting bearer [ 2273.164734][ T6746] tipc: Disabling bearer [ 2273.313090][ T6765] loop1: detected capacity change from 0 to 128 [ 2273.322658][ T6765] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2273.548002][ T6765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2273.571034][ T6765] hub 8-0:1.0: USB hub found [ 2273.576927][ T6765] hub 8-0:1.0: 1 port detected [ 2274.198924][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2274.255489][ T6786] hub 8-0:1.0: USB hub found [ 2274.267693][ T6786] hub 8-0:1.0: 1 port detected [ 2274.437893][ T6798] virtiofs: Unknown parameter 'always' [ 2274.711160][ T6800] device pim6reg1 entered promiscuous mode [ 2275.042156][T19749] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2275.266616][T19749] usb 5-1: Using ep0 maxpacket: 8 [ 2275.273443][T19749] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2275.335848][T19749] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2275.369165][T19749] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2275.379936][T19749] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2275.420295][T19749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.441886][T19749] usb 5-1: config 0 descriptor?? [ 2275.458009][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12651'. [ 2275.718109][ T6817] loop1: detected capacity change from 0 to 256 [ 2275.984346][T14154] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2276.817903][ T6823] loop1: detected capacity change from 0 to 128 [ 2276.826308][ T6823] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2276.955165][ T6823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2276.974067][ T6823] hub 8-0:1.0: USB hub found [ 2276.979695][ T6823] hub 8-0:1.0: 1 port detected [ 2277.463398][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2277.465155][T19749] ntrig 0003:1B96:0004.003F: unknown main item tag 0x0 [ 2277.477176][T19749] ntrig 0003:1B96:0004.003F: unknown main item tag 0x0 [ 2277.484496][T19749] ntrig 0003:1B96:0004.003F: unknown main item tag 0x0 [ 2277.491417][T19749] ntrig 0003:1B96:0004.003F: unknown main item tag 0x0 [ 2277.498497][T19749] ntrig 0003:1B96:0004.003F: unknown main item tag 0x0 [ 2277.522648][T19749] ntrig 0003:1B96:0004.003F: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 2277.622746][ T6852] device pim6reg1 entered promiscuous mode [ 2277.805065][T23934] usb 5-1: USB disconnect, device number 69 [ 2278.957218][ T6901] hub 8-0:1.0: USB hub found [ 2278.973984][ T6901] hub 8-0:1.0: 1 port detected [ 2279.040883][T19749] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2279.352577][T19749] usb 4-1: Using ep0 maxpacket: 8 [ 2279.387173][T19749] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2279.398151][T19749] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2279.408383][T19749] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2279.417016][T19749] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2279.426224][T19749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.505766][T19749] usb 4-1: config 0 descriptor?? [ 2279.951524][T19749] ntrig 0003:1B96:0004.0040: unknown main item tag 0x0 [ 2279.960685][T19749] ntrig 0003:1B96:0004.0040: unknown main item tag 0x0 [ 2279.975295][T19749] ntrig 0003:1B96:0004.0040: unknown main item tag 0x0 [ 2279.989990][T19749] ntrig 0003:1B96:0004.0040: unknown main item tag 0x0 [ 2280.004631][T19749] ntrig 0003:1B96:0004.0040: unknown main item tag 0x0 [ 2280.020577][T19749] ntrig 0003:1B96:0004.0040: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 2280.381805][T19749] usb 4-1: USB disconnect, device number 71 [ 2280.645634][ T6930] device pim6reg1 entered promiscuous mode [ 2280.777665][ T6940] hub 8-0:1.0: USB hub found [ 2280.782502][ T6940] hub 8-0:1.0: 1 port detected [ 2280.909439][ T6947] xt_socket: unknown flags 0x50 [ 2281.115585][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12703'. [ 2281.763873][ T6964] loop1: detected capacity change from 0 to 512 [ 2281.820702][ T6964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2282.133519][ T6981] device wg2 left promiscuous mode [ 2282.168522][ T6981] device wg2 entered promiscuous mode [ 2282.507109][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2282.568275][ T411] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2282.840764][ T7015] virtiofs: Unknown parameter 'always' [ 2283.799293][ T7023] loop1: detected capacity change from 0 to 512 [ 2283.945898][ T7023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2283.968782][ T411] usb 3-1: Using ep0 maxpacket: 8 [ 2283.975204][ T411] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2284.011516][ T411] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2284.043564][ T411] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2284.233059][ T7023] No source specified [ 2284.510299][ T411] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2284.539622][ T411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2284.548688][ T411] usb 3-1: config 0 descriptor?? [ 2284.717190][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2285.903875][ T7060] loop1: detected capacity change from 0 to 512 [ 2285.977622][ T7060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2287.088066][ T411] ntrig 0003:1B96:0004.0041: unknown main item tag 0x0 [ 2287.101157][ T411] ntrig 0003:1B96:0004.0041: unknown main item tag 0x0 [ 2287.101734][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2287.108326][ T411] ntrig 0003:1B96:0004.0041: unknown main item tag 0x0 [ 2287.180894][ T411] ntrig 0003:1B96:0004.0041: unknown main item tag 0x0 [ 2287.213787][ T411] ntrig 0003:1B96:0004.0041: unknown main item tag 0x0 [ 2287.229955][ T411] ntrig 0003:1B96:0004.0041: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 2287.991916][ T7091] loop3: detected capacity change from 0 to 4096 [ 2288.350186][ T7091] EXT4-fs: Ignoring removed mblk_io_submit option [ 2288.797673][ T7091] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2288.979118][ T7091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2289.436624][ T7100] incfs_lookup_dentry err:-5 [ 2289.478413][ T7100] incfs: Can't find or create .index dir in ./file0 [ 2289.515388][ T7100] incfs: mount failed -5 [ 2289.556844][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2289.556869][ T411] usb 3-1: USB disconnect, device number 76 [ 2290.041067][ T6] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2290.348716][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 2290.397492][ T6] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2291.370460][ T6] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2291.384649][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2291.392888][ T6] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2291.402255][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.424219][ T6] usb 4-1: config 0 descriptor?? [ 2291.456317][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12766'. [ 2291.984461][ T6] ntrig 0003:1B96:0004.0042: unknown main item tag 0x0 [ 2291.991431][ T6] ntrig 0003:1B96:0004.0042: unknown main item tag 0x0 [ 2291.998629][ T6] ntrig 0003:1B96:0004.0042: unknown main item tag 0x0 [ 2292.005895][ T6] ntrig 0003:1B96:0004.0042: unknown main item tag 0x0 [ 2292.013048][ T6] ntrig 0003:1B96:0004.0042: unknown main item tag 0x0 [ 2292.020912][ T6] ntrig 0003:1B96:0004.0042: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 2292.351749][ T411] usb 4-1: USB disconnect, device number 72 [ 2292.626867][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12779'. [ 2292.725284][ T7192] incfs_lookup_dentry err:-5 [ 2292.729964][ T7192] incfs: Can't find or create .index dir in ./file0 [ 2292.737689][ T7192] incfs: mount failed -5 [ 2293.026161][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12782'. [ 2294.647768][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12791'. [ 2294.716109][ T7233] incfs_lookup_dentry err:-5 [ 2294.746000][ T7233] incfs: Can't find or create .index dir in ./file0 [ 2294.758016][ T7233] incfs: mount failed -5 [ 2295.901874][ T7263] loop1: detected capacity change from 0 to 512 [ 2295.911538][ T7263] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2295.991467][ T7263] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2295.999957][ T7263] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 2296.009593][ T7263] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 2296.019261][ T7263] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.12803: Failed to acquire dquot type 1 [ 2296.034044][ T7263] EXT4-fs (loop1): 1 truncate cleaned up [ 2296.040310][ T7263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2296.247324][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12806'. [ 2297.109536][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2297.127480][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12810'. [ 2298.098925][ T7309] loop3: detected capacity change from 0 to 512 [ 2298.265192][ T7309] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2298.705286][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2299.518190][ T7336] loop1: detected capacity change from 0 to 256 [ 2301.312884][ T7372] loop1: detected capacity change from 0 to 512 [ 2302.475793][ T7372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2302.560720][ T7372] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2302.731635][ T7372] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 2302.741384][ T7372] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 2302.750925][ T7372] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.12841: Failed to acquire dquot type 1 [ 2302.765231][ T7372] EXT4-fs (loop1): 1 truncate cleaned up [ 2302.771238][ T7372] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2303.523151][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2304.583194][ T7412] overlayfs: failed to resolve './file2': -2 [ 2305.866885][ T7430] loop3: detected capacity change from 0 to 512 [ 2306.252297][ T6] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2306.328434][ T7430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2306.345555][ T7428] virtiofs: Unknown parameter 'always' [ 2306.374400][ T7438] device pim6reg1 entered promiscuous mode [ 2306.854598][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2306.969863][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 2306.984545][ T6] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2306.996945][ T6] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2307.006773][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2307.013479][ T6] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2307.022622][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.034155][ T6] usb 2-1: config 0 descriptor?? [ 2307.701530][ T7454] overlayfs: failed to resolve './file2': -2 [ 2307.822159][ T6] ntrig 0003:1B96:0004.0043: unknown main item tag 0x0 [ 2307.829342][ T6] ntrig 0003:1B96:0004.0043: unknown main item tag 0x0 [ 2307.837378][ T6] ntrig 0003:1B96:0004.0043: unknown main item tag 0x0 [ 2307.897030][ T6] ntrig 0003:1B96:0004.0043: unknown main item tag 0x0 [ 2307.904094][ T6] ntrig 0003:1B96:0004.0043: unknown main item tag 0x0 [ 2307.913905][ T6] ntrig 0003:1B96:0004.0043: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 2308.097255][ T7474] loop3: detected capacity change from 0 to 512 [ 2308.248980][ T7474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2308.418862][ T7477] virtiofs: Unknown parameter 'always' [ 2308.655138][ T6] usb 2-1: USB disconnect, device number 59 [ 2308.921550][ T7478] fido_id[7478]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2309.370803][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2311.166595][ T7543] xt_socket: unknown flags 0x50 [ 2311.345842][ T7548] 9pnet_fd: Insufficient options for proto=fd [ 2311.582109][ T7572] syz.2.12914[7572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2311.582199][ T7572] syz.2.12914[7572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2311.847509][ T7588] loop3: detected capacity change from 0 to 256 [ 2312.367669][ T7592] syz.3.12921[7592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2312.367973][ T7592] syz.3.12921[7592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2312.381743][ T7592] loop3: detected capacity change from 0 to 128 [ 2312.402033][ T7592] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2312.506183][ T7592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2312.519335][ T7592] hub 8-0:1.0: USB hub found [ 2312.524611][ T7592] hub 8-0:1.0: 1 port detected [ 2313.119547][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2313.798556][ T7618] serio: Serial port ptm0 [ 2314.450093][ T7636] device syzkaller0 entered promiscuous mode [ 2314.486907][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12937'. [ 2315.101178][ T7652] xt_socket: unknown flags 0x50 [ 2316.806838][ T7664] loop3: detected capacity change from 0 to 512 [ 2317.091148][ T7664] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2317.107860][ T7664] virtiofs: Unknown parameter 'always' [ 2317.254015][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2317.280385][ T7683] device syzkaller0 entered promiscuous mode [ 2317.312225][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12952'. [ 2317.598115][ T7718] device wg2 left promiscuous mode [ 2317.612749][ T7715] A6±ÿ: renamed from team_slave_1 [ 2317.655856][ T7718] device wg2 entered promiscuous mode [ 2319.266497][ T7746] loop3: detected capacity change from 0 to 512 [ 2319.658877][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12976'. [ 2319.690134][ T7746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2319.955117][ T7737] loop1: detected capacity change from 0 to 8192 [ 2320.289428][ T7746] virtiofs: Unknown parameter 'always' [ 2320.463234][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2320.659450][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12996'. [ 2320.840306][ T7820] loop3: detected capacity change from 0 to 512 [ 2321.112304][ T7820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2321.138861][ T7820] virtiofs: Unknown parameter 'always' [ 2321.756690][ T7848] overlayfs: missing 'lowerdir' [ 2321.871402][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2321.999149][ T7851] device veth0 entered promiscuous mode [ 2322.005489][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13018'. [ 2322.138556][ T7883] overlayfs: missing 'lowerdir' [ 2322.141608][ T7881] xt_socket: unknown flags 0x50 [ 2322.328597][ T7906] overlayfs: missing 'lowerdir' [ 2322.444902][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13037'. [ 2323.039782][ T7935] device wg2 entered promiscuous mode [ 2323.061164][ T7939] overlayfs: missing 'lowerdir' [ 2323.173658][ T7943] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2323.469728][ T7976] hub 8-0:1.0: USB hub found [ 2323.474724][ T7976] hub 8-0:1.0: 1 port detected [ 2323.543944][ T7979] overlayfs: failed to resolve './bus': -2 [ 2324.398287][ T8016] serio: Serial port ptm0 [ 2326.034691][ T8057] overlayfs: failed to resolve './bus': -2 [ 2326.102704][ T8074] device wg2 left promiscuous mode [ 2326.121560][ T8074] device wg2 entered promiscuous mode [ 2326.456933][ T8134] loop1: detected capacity change from 0 to 256 [ 2326.462702][ T8136] tipc: Enabling of bearer rejected, failed to enable media [ 2326.473711][ T8136] device syzkaller0 entered promiscuous mode [ 2326.481561][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13138'. [ 2326.498019][T14154] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2326.671606][ T8143] syz.1.13137[8143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2326.671847][ T8143] syz.1.13137[8143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2326.697155][ T8143] loop1: detected capacity change from 0 to 128 [ 2326.795963][ T8143] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2326.887626][ T8143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2327.540555][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2327.592851][ T8165] fuse: Bad value for 'fd' [ 2327.708961][ T8182] incfs_lookup_dentry err:-5 [ 2327.713664][ T8182] incfs: Can't find or create .index dir in ./file0 [ 2327.720527][ T8182] incfs: mount failed -5 [ 2327.875222][T31313] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2328.067508][T31313] usb 5-1: Using ep0 maxpacket: 8 [ 2328.074307][T31313] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2328.085452][T31313] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2328.095265][T31313] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2328.101968][T31313] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2328.111217][T31313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.119703][T31313] usb 5-1: config 0 descriptor?? [ 2328.594179][ T8200] syz.0.13159[8200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2328.594494][ T8200] syz.0.13159[8200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2328.984089][ T8203] fuse: Invalid rootmode [ 2329.505116][T31313] ntrig 0003:1B96:0004.0044: unknown main item tag 0x0 [ 2329.514559][T31313] ntrig 0003:1B96:0004.0044: unknown main item tag 0x0 [ 2329.521535][T31313] ntrig 0003:1B96:0004.0044: unknown main item tag 0x0 [ 2329.528614][T31313] ntrig 0003:1B96:0004.0044: unknown main item tag 0x0 [ 2329.536209][T31313] ntrig 0003:1B96:0004.0044: unknown main item tag 0x0 [ 2329.548182][T31313] ntrig 0003:1B96:0004.0044: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 2329.757742][ T8248] loop3: detected capacity change from 0 to 256 [ 2329.792295][T31313] usb 5-1: USB disconnect, device number 70 [ 2329.932508][ T8255] syz.3.13184[8255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2329.933568][ T8255] syz.3.13184[8255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2329.972201][ T8255] loop3: detected capacity change from 0 to 128 [ 2330.288092][ T8255] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2331.449787][ T8255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2331.616331][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2331.850267][ T8284] device wg2 left promiscuous mode [ 2332.067753][ T8307] syz.2.13204[8307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2332.068102][ T8307] syz.2.13204[8307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2332.183616][ T7381] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2332.397312][ T7381] usb 5-1: Using ep0 maxpacket: 8 [ 2332.406740][ T7381] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2332.460568][ T7381] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2332.556513][ T7381] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2332.618740][ T7381] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2332.647924][ T7381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.727015][ T7381] usb 5-1: config 0 descriptor?? [ 2332.998712][ T8325] device wg2 entered promiscuous mode [ 2333.058632][ T8335] loop1: detected capacity change from 0 to 256 [ 2333.333883][ T7381] ntrig 0003:1B96:0004.0045: unknown main item tag 0x0 [ 2333.348699][ T7381] ntrig 0003:1B96:0004.0045: unknown main item tag 0x0 [ 2333.355655][ T7381] ntrig 0003:1B96:0004.0045: unknown main item tag 0x0 [ 2333.380754][ T7381] ntrig 0003:1B96:0004.0045: unknown main item tag 0x0 [ 2333.387797][ T7381] ntrig 0003:1B96:0004.0045: unknown main item tag 0x0 [ 2333.395880][ T7381] ntrig 0003:1B96:0004.0045: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 2333.685056][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13237'. [ 2333.765493][ T411] usb 5-1: USB disconnect, device number 71 [ 2333.788953][ T8378] device pim6reg1 entered promiscuous mode [ 2335.369840][ T8390] loop3: detected capacity change from 0 to 512 [ 2335.721461][ T8390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2336.176951][ T8389] virtiofs: Unknown parameter 'always' [ 2336.318604][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2337.343442][ T8443] incfs_lookup_dentry err:-5 [ 2337.360071][ T8443] incfs: Can't find or create .index dir in ./file0 [ 2337.367050][ T8443] incfs: mount failed -5 [ 2337.539283][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13269'. [ 2337.571128][ T8485] incfs_lookup_dentry err:-5 [ 2337.577615][ T8485] incfs: Can't find or create .index dir in ./file0 [ 2337.592422][ T8485] incfs: mount failed -5 [ 2337.849442][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13296'. [ 2338.272328][ T8572] 9pnet_fd: Insufficient options for proto=fd [ 2338.380949][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13320'. [ 2338.469073][ T8602] 9pnet_fd: Insufficient options for proto=fd [ 2338.554972][ T8607] device pim6reg1 entered promiscuous mode [ 2338.696940][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13343'. [ 2338.708112][ T8633] 9pnet_fd: Insufficient options for proto=fd [ 2338.781865][ T8644] device pim6reg1 entered promiscuous mode [ 2338.844135][ T8653] device pim6reg1 entered promiscuous mode [ 2338.926124][ T8659] 9pnet_fd: Insufficient options for proto=fd [ 2339.042726][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13361'. [ 2339.125335][ T8681] device wg2 left promiscuous mode [ 2339.132982][ T8681] device wg2 entered promiscuous mode [ 2339.213118][ T8685] virtiofs: Unknown parameter 'always' [ 2339.622662][ T8691] device pim6reg1 entered promiscuous mode [ 2339.761331][ T8693] 9pnet_fd: Insufficient options for proto=fd [ 2340.088625][ T8698] device syzkaller0 entered promiscuous mode [ 2340.131684][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13373'. [ 2341.106385][ T8725] device pim6reg1 entered promiscuous mode [ 2341.187116][ T8732] device pim6reg1 entered promiscuous mode [ 2341.400788][ T8745] loop1: detected capacity change from 0 to 512 [ 2341.493441][ T8745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2341.552581][ T8745] virtiofs: Unknown parameter 'always' [ 2341.596968][ T8748] device syzkaller0 entered promiscuous mode [ 2341.654846][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13394'. [ 2341.758397][ T8760] fuse: Unknown parameter 'use00000000000000000000' [ 2341.836214][ T28] audit: type=1400 audit(2242.851:3331): avc: denied { ioctl } for pid=8761 comm="syz.3.13399" path="socket:[160505]" dev="sockfs" ino=160505 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2343.056720][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2343.093519][ T8770] device pim6reg1 entered promiscuous mode [ 2343.370839][ T8786] loop1: detected capacity change from 0 to 4096 [ 2343.378736][ T8786] EXT4-fs: Ignoring removed mblk_io_submit option [ 2343.425919][ T8786] EXT4-fs (loop1): Test dummy encryption mode enabled [ 2343.458502][ T8786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2343.752410][ T8789] device syzkaller0 entered promiscuous mode [ 2343.835967][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13408'. [ 2344.283740][ T8805] virtiofs: Unknown parameter 'always' [ 2344.305772][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2344.932335][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13415'. [ 2345.293821][ T8821] virtiofs: Unknown parameter 'always' [ 2345.552324][ T8825] device wg2 entered promiscuous mode [ 2347.343247][ T8871] device wg2 entered promiscuous mode [ 2347.790488][ T8889] serio: Serial port ptm0 [ 2348.386455][ T8904] device wg2 left promiscuous mode [ 2348.497181][ T8904] device wg2 entered promiscuous mode [ 2348.516309][ T8907] incfs_lookup_dentry err:-5 [ 2348.609129][ T8907] incfs: Can't find or create .index dir in ./file0 [ 2348.616986][ T8907] incfs: mount failed -5 [ 2348.811081][ T8913] device pim6reg1 entered promiscuous mode [ 2349.350293][ T8963] device wg2 entered promiscuous mode [ 2349.442592][ T8969] device pim6reg1 entered promiscuous mode [ 2350.218570][ T411] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2350.433640][ T9009] loop1: detected capacity change from 0 to 8192 [ 2350.464237][ T9017] fuse: Unknown parameter 'user_id00000000000000000000' [ 2350.499290][ T9009] loop1: p1 p2 p4 < > [ 2350.503942][ T9009] loop1: partition table partially beyond EOD, truncated [ 2350.512007][ T9009] loop1: p1 start 16777216 is beyond EOD, truncated [ 2350.518972][ T9009] loop1: p2 size 515840 extends beyond EOD, truncated [ 2350.526554][ T9009] loop1: p4 start 16777216 is beyond EOD, truncated [ 2350.539271][ T411] usb 4-1: Using ep0 maxpacket: 8 [ 2350.558516][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13494'. [ 2350.558866][ T411] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2350.580225][ T411] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2350.591146][ T411] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2350.607842][ T9029] device syzkaller0 entered promiscuous mode [ 2350.620206][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13503'. [ 2350.692280][ T9032] virtiofs: Unknown parameter 'always' [ 2350.756018][ T411] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2350.771745][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.600487][T14154] udevd[14154]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 2351.610853][ T411] usb 4-1: config 0 descriptor?? [ 2351.758349][ T9061] loop1: detected capacity change from 0 to 512 [ 2351.769976][ T9061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2351.888963][ T9061] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2351.898191][ T9061] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 2351.907798][ T9061] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 2351.917485][ T9061] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.13512: Failed to acquire dquot type 1 [ 2351.934851][ T9061] EXT4-fs (loop1): 1 truncate cleaned up [ 2351.941136][ T9061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2352.224190][ T411] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 2352.239364][ T411] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 2352.247973][ T411] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 2352.258878][ T411] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 2352.267308][ T411] ntrig 0003:1B96:0004.0046: unknown main item tag 0x0 [ 2352.301433][ T9075] 9pnet_fd: Insufficient options for proto=fd [ 2352.332397][ T411] ntrig 0003:1B96:0004.0046: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 2352.653869][ T4480] usb 4-1: USB disconnect, device number 73 [ 2352.683484][ T9077] fido_id[9077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 2352.801050][ T9083] device pim6reg1 entered promiscuous mode [ 2352.908571][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2353.032465][ T9087] virtiofs: Unknown parameter 'always' [ 2353.804761][ T9106] 9pnet_fd: Insufficient options for proto=fd [ 2354.049728][ T9128] loop1: detected capacity change from 0 to 512 [ 2354.059027][ T9128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2354.198754][ T9128] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2354.208065][ T9128] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 2354.217723][ T9128] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 2354.227351][ T9128] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.13534: Failed to acquire dquot type 1 [ 2354.241423][ T9128] EXT4-fs (loop1): 1 truncate cleaned up [ 2354.247632][ T9128] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2354.457853][ T9135] device syzkaller0 entered promiscuous mode [ 2354.557029][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13540'. [ 2355.116033][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2355.378273][ T9153] 9pnet_fd: Insufficient options for proto=fd [ 2355.462639][ T9157] loop3: detected capacity change from 0 to 512 [ 2355.598202][ T9157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2355.623961][ T9157] virtiofs: Unknown parameter 'always' [ 2356.297163][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13553'. [ 2357.567256][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2357.711495][ T9190] 9pnet_fd: Insufficient options for proto=fd [ 2358.061125][ T9210] tipc: Enabled bearer , priority 0 [ 2358.068755][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13566'. [ 2358.080146][ T9210] tipc: Resetting bearer [ 2358.086892][ T9209] tipc: Disabling bearer [ 2358.823847][ T9219] virtiofs: Unknown parameter 'always' [ 2359.111774][ T9222] incfs_lookup_dentry err:-5 [ 2359.172679][ T9222] incfs: Can't find or create .index dir in ./file0 [ 2359.279763][ T9222] incfs: mount failed -5 [ 2359.956714][ T9280] hub 8-0:1.0: USB hub found [ 2359.961841][ T9280] hub 8-0:1.0: 1 port detected [ 2361.031383][ T9304] loop1: detected capacity change from 0 to 256 [ 2361.074882][ T9310] device pim6reg1 entered promiscuous mode [ 2361.498205][ T9323] hub 8-0:1.0: USB hub found [ 2361.502956][ T9323] hub 8-0:1.0: 1 port detected [ 2361.849502][ T9331] loop3: detected capacity change from 0 to 512 [ 2362.116328][ T9331] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2362.811088][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2362.832581][ T9349] incfs_lookup_dentry err:-5 [ 2362.865520][ T9349] incfs: Can't find or create .index dir in ./file0 [ 2362.885385][ T9355] fuse: Unknown parameter 'fd0x0000000000000004' [ 2362.893026][ T9349] incfs: mount failed -5 [ 2362.994808][ T9368] device wg2 left promiscuous mode [ 2363.016717][ T9368] device wg2 entered promiscuous mode [ 2363.164253][ T9388] fuse: Unknown parameter 'fd0x0000000000000004' [ 2363.354519][ T9397] device wg2 left promiscuous mode [ 2363.429768][ T9397] device wg2 entered promiscuous mode [ 2363.905867][ T9424] device wg2 left promiscuous mode [ 2363.917131][ T9424] device wg2 entered promiscuous mode [ 2363.939483][ T9431] device wg2 left promiscuous mode [ 2363.947297][ T9431] device wg2 entered promiscuous mode [ 2364.008497][ T9436] tipc: Started in network mode [ 2364.013625][ T9436] tipc: Node identity 5aa0ef30c9a1, cluster identity 4711 [ 2364.022449][ T9436] tipc: Enabled bearer , priority 0 [ 2364.033597][ T9436] device syzkaller0 entered promiscuous mode [ 2364.178850][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13657'. [ 2364.301648][ T9436] tipc: Resetting bearer [ 2364.309609][ T9434] tipc: Resetting bearer [ 2364.319979][ T9434] tipc: Disabling bearer [ 2364.380879][ T9455] device pim6reg1 entered promiscuous mode [ 2364.389046][ T9457] device wg2 left promiscuous mode [ 2364.396372][ T9457] device wg2 entered promiscuous mode [ 2364.551593][ T9473] overlayfs: failed to resolve './bus': -2 [ 2365.332080][ T9529] tipc: Started in network mode [ 2365.337602][ T9529] tipc: Node identity b68e04a90f25, cluster identity 4711 [ 2365.380623][ T9529] tipc: Enabled bearer , priority 0 [ 2365.406416][ T9534] device syzkaller0 entered promiscuous mode [ 2365.430112][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13697'. [ 2365.451776][ T9529] tipc: Resetting bearer [ 2365.461386][ T9527] tipc: Resetting bearer [ 2365.470548][ T9527] tipc: Disabling bearer [ 2365.936263][ T9569] virtiofs: Unknown parameter 'always' [ 2366.832145][ T9587] tipc: Enabled bearer , priority 0 [ 2366.891340][ T9591] device syzkaller0 entered promiscuous mode [ 2366.918820][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13717'. [ 2366.928866][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13720'. [ 2366.950047][ T9587] tipc: Resetting bearer [ 2366.956634][ T9584] tipc: Resetting bearer [ 2366.963404][ T9584] tipc: Disabling bearer [ 2367.056443][ T9594] device pim6reg1 entered promiscuous mode [ 2367.104262][ T9605] 9pnet_fd: Insufficient options for proto=fd [ 2367.212142][ T9614] overlayfs: failed to resolve './bus': -2 [ 2368.020568][ T9630] device wg2 left promiscuous mode [ 2368.061724][ T9630] device wg2 entered promiscuous mode [ 2368.159148][ T9640] virtiofs: Unknown parameter 'always' [ 2368.283515][ T9641] 9pnet_fd: Insufficient options for proto=fd [ 2369.122343][ T9672] incfs_lookup_dentry err:-5 [ 2369.126998][ T9672] incfs: Can't find or create .index dir in ./file0 [ 2369.133933][ T9672] incfs: mount failed -5 [ 2369.578775][ T9689] overlayfs: failed to resolve './bus': -2 [ 2369.840437][ T9694] device wg2 left promiscuous mode [ 2369.847434][ T9694] device wg2 entered promiscuous mode [ 2370.024624][ T9700] loop1: detected capacity change from 0 to 512 [ 2370.223588][ T9700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2370.587789][ T9712] incfs_lookup_dentry err:-5 [ 2370.644401][ T9712] incfs: Can't find or create .index dir in ./file0 [ 2370.694547][ T9712] incfs: mount failed -5 [ 2370.935510][ T9720] tipc: Enabled bearer , priority 0 [ 2370.979450][ T9720] device syzkaller0 entered promiscuous mode [ 2370.998656][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13771'. [ 2371.041292][ T9720] tipc: Resetting bearer [ 2371.078688][ T9718] tipc: Resetting bearer [ 2371.088633][ T9718] tipc: Disabling bearer [ 2371.152341][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2372.270705][ T9756] 9pnet_fd: Insufficient options for proto=fd [ 2372.733129][ T6549] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2373.064389][ T6549] usb 5-1: Using ep0 maxpacket: 8 [ 2373.072261][ T6549] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2373.105242][ T6549] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2373.116570][ T6549] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2373.123406][ T6549] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2373.132725][ T6549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2373.141703][ T6549] usb 5-1: config 0 descriptor?? [ 2375.127556][ T6549] ntrig 0003:1B96:0004.0047: unknown main item tag 0x0 [ 2375.134546][ T6549] ntrig 0003:1B96:0004.0047: unknown main item tag 0x0 [ 2375.141651][ T6549] ntrig 0003:1B96:0004.0047: unknown main item tag 0x0 [ 2375.148587][ T6549] ntrig 0003:1B96:0004.0047: unknown main item tag 0x0 [ 2375.155782][ T6549] ntrig 0003:1B96:0004.0047: unknown main item tag 0x0 [ 2375.174653][ T6549] ntrig 0003:1B96:0004.0047: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0 [ 2375.335424][ T9836] 9pnet_fd: Insufficient options for proto=fd [ 2375.674335][ T6549] usb 5-1: USB disconnect, device number 72 [ 2377.205690][ T9859] loop3: detected capacity change from 0 to 512 [ 2377.396576][ T9859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2377.416394][ T9859] virtiofs: Unknown parameter 'always' [ 2377.577058][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2377.805143][ T9895] tipc: Enabled bearer , priority 0 [ 2377.819938][ T9895] device syzkaller0 entered promiscuous mode [ 2377.828768][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13828'. [ 2377.847602][ T9895] tipc: Resetting bearer [ 2377.858356][ T9891] tipc: Resetting bearer [ 2377.865672][ T9891] tipc: Disabling bearer [ 2377.876162][ T9904] ÿÿÿÿÿÿ: renamed from vlan1 [ 2378.039566][ T9914] loop1: detected capacity change from 0 to 512 [ 2378.266419][ T9914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2378.294453][ T9914] virtiofs: Unknown parameter 'always' [ 2378.324318][T13081] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2378.968264][ T9934] device wg2 left promiscuous mode [ 2379.012245][ T9934] device wg2 entered promiscuous mode [ 2379.021106][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2379.061717][T13081] usb 5-1: Using ep0 maxpacket: 8 [ 2379.074178][T13081] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2379.101390][T13081] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2379.111466][T13081] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2379.207625][ T9960] virtiofs: Unknown parameter 'always' [ 2379.310079][T13081] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2379.320116][T13081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2380.536514][ T9969] virtiofs: Unknown parameter 'always' [ 2380.994976][T13081] usb 5-1: config 0 descriptor?? [ 2381.000501][T13081] usb 5-1: can't set config #0, error -71 [ 2381.008104][T13081] usb 5-1: USB disconnect, device number 73 [ 2381.111714][ T9988] device pim6reg1 entered promiscuous mode [ 2381.359964][ T9996] syz.2.13871[9996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2381.361643][ T9996] syz.2.13871[9996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2382.982936][T10011] virtiofs: Unknown parameter 'always' [ 2383.005585][T10013] virtiofs: Unknown parameter 'always' [ 2383.814730][T10051] device wg2 left promiscuous mode [ 2383.823805][T10051] device wg2 entered promiscuous mode [ 2384.170876][T10062] virtiofs: Unknown parameter 'always' [ 2384.837314][T10069] device pim6reg1 entered promiscuous mode [ 2385.235702][T10119] device pim6reg1 entered promiscuous mode [ 2385.331451][T10122] serio: Serial port ptm0 [ 2385.602837][T10132] device wg2 left promiscuous mode [ 2385.734340][T10132] device wg2 entered promiscuous mode [ 2386.236891][T10143] loop1: detected capacity change from 0 to 512 [ 2386.246959][T10142] loop3: detected capacity change from 0 to 512 [ 2387.478096][T10143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2387.498656][T10142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2387.559169][T10159] virtiofs: Unknown parameter 'always' [ 2387.724600][T10168] device pim6reg1 entered promiscuous mode [ 2387.802468][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2387.824976][T10175] device wg2 left promiscuous mode [ 2387.843753][T10175] device wg2 entered promiscuous mode [ 2388.115595][T10188] serio: Serial port ptm0 [ 2388.178602][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2389.389605][T10222] device pim6reg1 entered promiscuous mode [ 2389.604785][T10225] virtiofs: Unknown parameter 'always' [ 2389.796184][T10234] device pim6reg1 entered promiscuous mode [ 2390.764111][T10242] serio: Serial port ptm0 [ 2390.874402][T10255] incfs_lookup_dentry err:-5 [ 2390.879105][T10255] incfs: Can't find or create .index dir in ./file0 [ 2390.886042][T10255] incfs: mount failed -5 [ 2392.079911][T10258] loop1: detected capacity change from 0 to 512 [ 2392.302664][T10258] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.13981: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2392.320940][T10258] EXT4-fs error (device loop1): ext4_quota_enable:7012: comm syz.1.13981: Bad quota inode: 3, type: 0 [ 2392.333117][T10258] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2392.350020][T10258] EXT4-fs (loop1): mount failed [ 2392.734044][T10270] device pim6reg1 entered promiscuous mode [ 2392.767261][T10276] device pim6reg1 entered promiscuous mode [ 2393.007114][T10289] incfs_lookup_dentry err:-5 [ 2393.018054][T10289] incfs: Can't find or create .index dir in ./file0 [ 2393.025149][T10289] incfs: mount failed -5 [ 2393.044055][T10291] device pim6reg1 entered promiscuous mode [ 2393.340829][T10307] loop3: detected capacity change from 0 to 512 [ 2394.068556][T10307] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2394.101196][T10307] virtiofs: Unknown parameter 'always' [ 2394.318567][T10316] device pim6reg1 entered promiscuous mode [ 2394.660961][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2394.887758][T10330] device pim6reg1 entered promiscuous mode [ 2395.149932][T10338] device pim6reg1 entered promiscuous mode [ 2395.170146][T10341] device wg2 left promiscuous mode [ 2395.185889][T10341] device wg2 entered promiscuous mode [ 2395.653918][T10359] syz.1.14018[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2395.653992][T10359] syz.1.14018[10359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2395.742818][T10363] virtiofs: Unknown parameter 'always' [ 2396.269831][T10376] fuse: Bad value for 'fd' [ 2396.667294][T10390] tipc: Enabled bearer , priority 0 [ 2396.715003][T10390] device syzkaller0 entered promiscuous mode [ 2396.752093][T10398] device pim6reg1 entered promiscuous mode [ 2396.760825][T10390] tipc: Resetting bearer [ 2396.769359][T10399] incfs_lookup_dentry err:-5 [ 2396.774051][T10399] incfs: Can't find or create .index dir in ./file0 [ 2396.780755][T10399] incfs: mount failed -5 [ 2396.785119][T10388] tipc: Resetting bearer [ 2396.791743][T10388] tipc: Disabling bearer [ 2397.174599][T10425] virtiofs: Unknown parameter 'always' [ 2397.325211][T10426] syz.3.14044[10426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2397.325549][T10426] syz.3.14044[10426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2398.206306][T10436] loop1: detected capacity change from 0 to 512 [ 2398.432036][T10436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2399.371125][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2399.504770][T10467] device wg2 left promiscuous mode [ 2399.512070][T10467] device wg2 entered promiscuous mode [ 2400.603536][T10501] device pim6reg1 entered promiscuous mode [ 2400.761917][T10512] device wg2 left promiscuous mode [ 2400.770432][T10512] device wg2 entered promiscuous mode [ 2401.536766][T10581] 9pnet_fd: Insufficient options for proto=fd [ 2403.282332][T10609] 9pnet_fd: Insufficient options for proto=fd [ 2403.400967][T10617] loop1: detected capacity change from 0 to 512 [ 2403.595401][T10617] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.14121: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2403.613177][T10617] EXT4-fs error (device loop1): ext4_quota_enable:7012: comm syz.1.14121: Bad quota inode: 3, type: 0 [ 2403.625287][T10617] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2403.642094][T10617] EXT4-fs (loop1): mount failed [ 2404.813142][T10668] loop3: detected capacity change from 0 to 512 [ 2406.112176][T10668] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2407.407324][T10688] device pim6reg1 entered promiscuous mode [ 2407.417402][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2407.494257][T10703] device wg2 left promiscuous mode [ 2407.501008][T10703] device wg2 entered promiscuous mode [ 2407.610935][T10716] incfs_lookup_dentry err:-5 [ 2407.615620][T10716] incfs: Can't find or create .index dir in ./file0 [ 2407.622621][T10716] incfs: mount failed -5 [ 2407.840092][T10724] 9pnet_fd: Insufficient options for proto=fd [ 2407.933442][T10730] device pim6reg1 entered promiscuous mode [ 2407.963069][T10735] device wg2 left promiscuous mode [ 2407.984927][T10735] device wg2 entered promiscuous mode [ 2408.180687][T10764] device pim6reg1 entered promiscuous mode [ 2408.477540][T10768] device wg2 left promiscuous mode [ 2408.489540][T10768] device wg2 entered promiscuous mode [ 2408.502336][T10770] device pim6reg1 entered promiscuous mode [ 2408.643426][T10798] 9pnet_fd: Insufficient options for proto=fd [ 2408.661985][T10801] device wg2 left promiscuous mode [ 2408.670477][T10801] device wg2 entered promiscuous mode [ 2408.702077][T10806] 9pnet_fd: Insufficient options for proto=fd [ 2408.708516][T10804] device wg2 left promiscuous mode [ 2408.717072][T10804] device wg2 entered promiscuous mode [ 2408.756506][T10814] device pim6reg1 entered promiscuous mode [ 2409.473051][T10837] device wg2 left promiscuous mode [ 2410.272053][T10837] device wg2 entered promiscuous mode [ 2410.314090][T10841] 9pnet_fd: Insufficient options for proto=fd [ 2410.322277][T10846] device pim6reg1 entered promiscuous mode [ 2410.553981][T10872] loop1: detected capacity change from 0 to 512 [ 2410.600307][T10872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2410.652134][T10872] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2410.661320][T10872] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 2410.670909][T10872] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 2410.680338][T10872] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.14223: Failed to acquire dquot type 1 [ 2410.695598][T10872] EXT4-fs (loop1): 1 truncate cleaned up [ 2410.701870][T10872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2411.087217][T10882] device wg2 left promiscuous mode [ 2411.476204][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2411.477005][T10880] 9pnet_fd: Insufficient options for proto=fd [ 2411.490365][T10882] device wg2 entered promiscuous mode [ 2411.564527][T10895] device pim6reg1 entered promiscuous mode [ 2411.628221][T10905] incfs_lookup_dentry err:-5 [ 2411.632997][T10905] incfs: Can't find or create .index dir in ./file0 [ 2411.640578][T10905] incfs: mount failed -5 [ 2411.703325][T10922] device wg2 left promiscuous mode [ 2411.733731][T10922] device wg2 entered promiscuous mode [ 2411.803986][T10937] device pim6reg1 entered promiscuous mode [ 2411.932972][T10959] device wg2 left promiscuous mode [ 2411.941656][T10959] device wg2 entered promiscuous mode [ 2412.662613][T10973] 9pnet_fd: Insufficient options for proto=fd [ 2412.707161][T10976] device pim6reg1 entered promiscuous mode [ 2412.982279][T10991] device wg2 left promiscuous mode [ 2412.999797][T10991] device wg2 entered promiscuous mode [ 2413.046461][T10996] 9pnet_fd: Insufficient options for proto=fd [ 2413.100953][T11001] 9pnet_fd: Insufficient options for proto=fd [ 2413.151601][T11007] device pim6reg1 entered promiscuous mode [ 2413.206406][T11024] 9pnet_fd: Insufficient options for proto=fd [ 2413.234656][T11031] incfs_lookup_dentry err:-5 [ 2413.239346][T11031] incfs: Can't find or create .index dir in ./file0 [ 2413.246182][T11031] incfs: mount failed -5 [ 2413.283790][T11039] 9pnet_fd: Insufficient options for proto=fd [ 2414.291675][T11057] 9pnet_fd: Insufficient options for proto=fd [ 2414.311072][T11061] device pim6reg1 entered promiscuous mode [ 2414.438305][T11070] 9pnet_fd: Insufficient options for proto=fd [ 2414.650962][T11101] 9pnet_fd: Insufficient options for proto=fd [ 2414.671900][T11098] device pim6reg1 entered promiscuous mode [ 2414.995331][T11129] 9pnet_fd: Insufficient options for proto=fd [ 2415.272095][T11157] 9pnet_fd: Insufficient options for proto=fd [ 2415.313446][T11164] device wg2 left promiscuous mode [ 2415.334407][T11164] device wg2 entered promiscuous mode [ 2415.521295][T11176] device pim6reg1 entered promiscuous mode [ 2415.579969][T11179] device pim6reg1 entered promiscuous mode [ 2415.944853][T11194] loop1: detected capacity change from 0 to 512 [ 2416.139844][T11194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2416.171229][T11194] virtiofs: Unknown parameter 'always' [ 2416.783726][T11200] device wg2 left promiscuous mode [ 2416.937204][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2416.943204][T11200] device wg2 entered promiscuous mode [ 2416.981945][T11212] device pim6reg1 entered promiscuous mode [ 2416.989105][T11211] device pim6reg1 entered promiscuous mode [ 2417.089229][T11227] device pim6reg1 entered promiscuous mode [ 2417.212744][T11240] loop1: detected capacity change from 0 to 512 [ 2417.356539][T11240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2417.382923][T11240] virtiofs: Unknown parameter 'always' [ 2417.424326][T11248] device wg2 left promiscuous mode [ 2417.466968][T11248] device wg2 entered promiscuous mode [ 2417.917651][T11258] device pim6reg1 entered promiscuous mode [ 2418.074618][T11261] device pim6reg1 entered promiscuous mode [ 2418.096447][T11265] device pim6reg1 entered promiscuous mode [ 2418.186303][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2418.687192][T11311] virtiofs: Unknown parameter 'always' [ 2418.970757][T11317] device pim6reg1 entered promiscuous mode [ 2419.717647][T11344] device pim6reg1 entered promiscuous mode [ 2419.889210][T11043] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2420.105955][T11370] virtiofs: Unknown parameter 'always' [ 2420.156507][T11043] usb 2-1: Using ep0 maxpacket: 8 [ 2420.224924][T11043] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2420.301825][T11043] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2420.419336][T11043] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2421.604035][T11043] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2421.622420][T11043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2421.631225][T11043] usb 2-1: config 0 descriptor?? [ 2421.875485][T11394] device wg2 left promiscuous mode [ 2421.901132][T11394] device wg2 entered promiscuous mode [ 2422.200584][T11043] ntrig 0003:1B96:0004.0048: unknown main item tag 0x0 [ 2422.207536][T11414] device wg2 left promiscuous mode [ 2422.207535][T11043] ntrig 0003:1B96:0004.0048: unknown main item tag 0x0 [ 2422.207558][T11043] ntrig 0003:1B96:0004.0048: unknown main item tag 0x0 [ 2422.230098][T11414] device wg2 entered promiscuous mode [ 2422.241119][T11043] ntrig 0003:1B96:0004.0048: unknown main item tag 0x0 [ 2422.248126][T11043] ntrig 0003:1B96:0004.0048: unknown main item tag 0x0 [ 2422.263019][T11043] ntrig 0003:1B96:0004.0048: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 2422.311897][T11425] device pim6reg1 entered promiscuous mode [ 2422.673369][T11444] device wg2 left promiscuous mode [ 2422.815291][T11444] device wg2 entered promiscuous mode [ 2423.391347][T11457] device syzkaller0 entered promiscuous mode [ 2423.436128][T11043] usb 2-1: USB disconnect, device number 60 [ 2423.458824][T11465] fido_id[11465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2423.542379][T11474] device pim6reg1 entered promiscuous mode [ 2424.464736][T11043] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2424.631809][T11519] device pim6reg1 entered promiscuous mode [ 2424.645273][T11523] device wg2 left promiscuous mode [ 2424.657177][T11043] usb 2-1: Using ep0 maxpacket: 8 [ 2424.663058][T11523] device wg2 entered promiscuous mode [ 2424.667179][T11043] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2424.680486][T11525] device pim6reg1 entered promiscuous mode [ 2424.687618][T11043] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2424.697647][T11043] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2424.704427][T11043] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2424.713825][T11043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2424.732930][T11043] usb 2-1: config 0 descriptor?? [ 2424.748463][T11534] 9pnet_fd: Insufficient options for proto=fd [ 2425.252417][T11553] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2425.345547][T11560] device wg2 left promiscuous mode [ 2425.353474][T11560] device wg2 entered promiscuous mode [ 2425.361167][T11561] device pim6reg1 entered promiscuous mode [ 2425.413579][T11566] device pim6reg1 entered promiscuous mode [ 2425.481974][T11043] ntrig 0003:1B96:0004.0049: unknown main item tag 0x0 [ 2425.489137][T11043] ntrig 0003:1B96:0004.0049: unknown main item tag 0x0 [ 2425.496093][T11043] ntrig 0003:1B96:0004.0049: unknown main item tag 0x0 [ 2425.503058][T11043] ntrig 0003:1B96:0004.0049: unknown main item tag 0x0 [ 2425.509948][T11043] ntrig 0003:1B96:0004.0049: unknown main item tag 0x0 [ 2425.585119][T11576] loop3: detected capacity change from 0 to 512 [ 2426.548850][T11043] ntrig 0003:1B96:0004.0049: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 2426.568084][T11592] device wg2 left promiscuous mode [ 2426.580438][T11592] device wg2 entered promiscuous mode [ 2426.590075][T11576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2426.607393][T11575] virtiofs: Unknown parameter 'always' [ 2426.687226][T11609] device pim6reg1 entered promiscuous mode [ 2426.766489][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2426.779767][T11043] usb 2-1: USB disconnect, device number 61 [ 2426.850923][T11627] device pim6reg1 entered promiscuous mode [ 2429.876455][T11662] loop3: detected capacity change from 0 to 512 [ 2431.368030][T11662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2431.524883][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2431.650318][T11679] loop1: detected capacity change from 0 to 512 [ 2431.728333][T11679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2432.556129][T11679] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2432.564187][T11679] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 2432.574220][T11679] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 2432.583673][T11679] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.14565: Failed to acquire dquot type 1 [ 2432.597357][T11679] EXT4-fs (loop1): 1 truncate cleaned up [ 2432.604419][T11679] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2433.033451][T11686] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.049285][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 2433.067657][T11686] device bridge_slave_0 entered promiscuous mode [ 2433.081958][T11686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.099915][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 2433.111080][T11686] device bridge_slave_1 entered promiscuous mode [ 2433.119575][T11690] 9pnet_fd: Insufficient options for proto=fd [ 2433.133034][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2433.252601][T11710] device pim6reg1 entered promiscuous mode [ 2433.258973][T11708] device pim6reg1 entered promiscuous mode [ 2433.277306][T11686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2433.284485][T11686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2433.291857][T11686] bridge0: port 1(bridge_slave_0) entered blocking state [ 2433.298912][T11686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2433.377820][T11718] loop1: detected capacity change from 0 to 512 [ 2433.677407][T11718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2434.065262][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 2434.096423][T14190] bridge0: port 2(bridge_slave_1) entered disabled state [ 2434.204039][T30952] tipc: Left network mode [ 2434.222363][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2434.236417][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2434.340471][T11734] loop3: detected capacity change from 0 to 512 [ 2434.349112][T11734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2434.384022][ T5586] EXT4-fs (loop1): unmounting filesystem. [ 2434.421013][T11734] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2434.429438][T11734] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 2434.438979][T11734] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 2434.448523][T11734] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.14582: Failed to acquire dquot type 1 [ 2434.462318][T11734] EXT4-fs (loop3): 1 truncate cleaned up [ 2434.469590][T11734] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2434.510065][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2434.571014][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2434.662379][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 2434.669479][T14190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2434.702122][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2434.730406][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2434.748557][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 2434.755669][T14190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2434.764424][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2435.496419][T11752] loop1: detected capacity change from 0 to 512 [ 2435.514960][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2435.527088][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2435.589647][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2435.608908][T11752] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.14589: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2435.626536][T11752] EXT4-fs error (device loop1): ext4_quota_enable:7012: comm syz.1.14589: Bad quota inode: 3, type: 0 [ 2435.639084][T11752] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2435.655631][T11752] EXT4-fs (loop1): mount failed [ 2435.715302][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2435.896978][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2435.916677][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2436.014637][T11686] device veth0_vlan entered promiscuous mode [ 2436.020964][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2436.040119][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2436.061193][T11686] device veth1_macvtap entered promiscuous mode [ 2436.940344][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2436.950313][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2436.958053][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2436.966719][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2436.975282][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2436.997164][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2437.040788][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2437.062294][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2437.092133][T14190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2437.317620][T30952] bridge0: port 3(gretap0) entered disabled state [ 2437.340779][T30952] device gretap0 left promiscuous mode [ 2437.406571][T30952] bridge0: port 3(gretap0) entered disabled state [ 2437.745880][T30952] device bridge_slave_1 left promiscuous mode [ 2437.763209][T30952] bridge0: port 2(bridge_slave_1) entered disabled state [ 2437.850619][T30952] device bridge_slave_0 left promiscuous mode [ 2437.856789][T30952] bridge0: port 1(bridge_slave_0) entered disabled state [ 2437.888548][T30952] device veth1_macvtap left promiscuous mode [ 2440.459588][T11883] device pim6reg1 entered promiscuous mode [ 2441.169911][T11894] loop3: detected capacity change from 0 to 4096 [ 2441.177117][T11894] EXT4-fs: Ignoring removed mblk_io_submit option [ 2441.186781][T11894] EXT4-fs (loop3): Test dummy encryption mode enabled [ 2441.251250][T11894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2441.377421][ T4815] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2441.397708][T11901] device wg2 left promiscuous mode [ 2441.656207][ T4815] usb 2-1: Using ep0 maxpacket: 8 [ 2441.667170][ T4815] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2441.705808][T11906] device pim6reg1 entered promiscuous mode [ 2441.722799][ T4815] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2441.755994][ T4815] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2441.764914][ T4815] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2441.774247][ T4815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2441.809435][ T4815] usb 2-1: config 0 descriptor?? [ 2442.031227][ T4009] EXT4-fs (loop3): unmounting filesystem. [ 2442.498238][ T4815] ntrig 0003:1B96:0004.004A: unknown main item tag 0x0 [ 2442.507678][ T4815] ntrig 0003:1B96:0004.004A: unknown main item tag 0x0 [ 2442.515087][ T4815] ntrig 0003:1B96:0004.004A: unknown main item tag 0x0 [ 2442.522141][ T4815] ntrig 0003:1B96:0004.004A: unknown main item tag 0x0 [ 2442.529213][ T4815] ntrig 0003:1B96:0004.004A: unknown main item tag 0x0 [ 2442.537213][ T4815] ntrig 0003:1B96:0004.004A: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 2442.552633][ T4815] usb 2-1: USB disconnect, device number 62 [ 2442.580015][T11928] fido_id[11928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2442.744873][T11933] device wg2 left promiscuous mode [ 2443.217804][T11948] device pim6reg1 entered promiscuous mode [ 2443.350377][T11960] device wg2 left promiscuous mode [ 2443.363193][T11962] device pim6reg1 entered promiscuous mode [ 2443.638777][T11992] device wg2 left promiscuous mode [ 2443.688858][T12001] device pim6reg1 entered promiscuous mode [ 2444.261246][T12045] device pim6reg1 entered promiscuous mode [ 2444.618324][T12064] device wg2 entered promiscuous mode [ 2444.657026][T12073] device pim6reg1 entered promiscuous mode [ 2444.827943][T12092] device wg2 entered promiscuous mode [ 2444.972077][T12106] loop1: detected capacity change from 0 to 512 [ 2445.222800][T12106] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.14726: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 2445.241326][T12106] EXT4-fs error (device loop1): ext4_quota_enable:7012: comm syz.1.14726: Bad quota inode: 3, type: 0 [ 2445.253539][T12106] EXT4-fs warning (device loop1): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 2445.270230][T12106] EXT4-fs (loop1): mount failed [ 2445.850436][T12119] device pim6reg1 entered promiscuous mode [ 2446.045016][T12126] device pim6reg1 entered promiscuous mode [ 2446.094546][T12131] device wg2 left promiscuous mode [ 2446.103030][T12131] device wg2 entered promiscuous mode [ 2446.279560][T12145] 9pnet_fd: Insufficient options for proto=fd [ 2446.758176][T12160] device pim6reg1 entered promiscuous mode [ 2446.760363][T12162] overlayfs: failed to resolve './bus': -2 [ 2446.898967][T12171] 9pnet_fd: Insufficient options for proto=fd [ 2446.991607][T12163] bridge0: port 1(bridge_slave_0) entered blocking state [ 2447.008431][T12163] bridge0: port 1(bridge_slave_0) entered disabled state [ 2447.029476][T12163] device bridge_slave_0 entered promiscuous mode [ 2447.291927][T12163] bridge0: port 2(bridge_slave_1) entered blocking state [ 2447.347427][T12163] bridge0: port 2(bridge_slave_1) entered disabled state [ 2447.354995][T12163] device bridge_slave_1 entered promiscuous mode [ 2447.371350][T12186] device pim6reg1 entered promiscuous mode [ 2447.423673][T30952] tipc: Left network mode [ 2447.476274][T12163] bridge0: port 2(bridge_slave_1) entered blocking state [ 2447.483358][T12163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2447.490669][T12163] bridge0: port 1(bridge_slave_0) entered blocking state [ 2447.497741][T12163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2447.523033][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2447.531269][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 2447.539970][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 2447.558239][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2447.566515][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2447.573576][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2447.581221][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2447.589948][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2447.596991][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2447.599201][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2447.604411][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2447.632663][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2447.652193][T12163] device veth0_vlan entered promiscuous mode [ 2447.660702][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2447.669811][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2447.678352][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2447.687408][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2447.702272][T12163] device veth1_macvtap entered promiscuous mode [ 2447.712823][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2447.721190][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2447.728780][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2447.737122][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2447.747071][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2447.765744][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2447.774592][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2447.783256][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2447.792214][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2447.802392][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 2447.808779][ T24] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2447.862237][ T24] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2447.873151][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2447.880418][ T24] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 2447.889788][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.903727][ T24] usb 2-1: config 0 descriptor?? [ 2447.973289][T12208] 9pnet_fd: Insufficient options for proto=fd [ 2448.116840][T30952] device bridge_slave_1 left promiscuous mode [ 2448.137442][T30952] bridge0: port 2(bridge_slave_1) entered disabled state [ 2448.146459][T30952] device bridge_slave_0 left promiscuous mode [ 2448.152909][T30952] bridge0: port 1(bridge_slave_0) entered disabled state [ 2448.164182][T30952] device veth1_macvtap left promiscuous mode [ 2448.187624][T30952] device veth0_vlan left promiscuous mode [ 2448.357990][ T24] ntrig 0003:1B96:0004.004B: unknown main item tag 0x0 [ 2448.402629][ T24] ntrig 0003:1B96:0004.004B: unknown main item tag 0x0 [ 2448.416661][ T24] ntrig 0003:1B96:0004.004B: unknown main item tag 0x0 [ 2448.432749][ T24] ntrig 0003:1B96:0004.004B: unknown main item tag 0x0 [ 2448.462419][ T24] ntrig 0003:1B96:0004.004B: unknown main item tag 0x0 [ 2448.493357][ T24] ntrig 0003:1B96:0004.004B: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 2448.584535][ T24] usb 2-1: USB disconnect, device number 63 [ 2448.699934][T12240] 9pnet_fd: Insufficient options for proto=fd [ 2448.882746][T12248] device pim6reg1 entered promiscuous mode [ 2449.063626][T12271] device pim6reg1 entered promiscuous mode [ 2449.103431][T12272] overlayfs: failed to resolve './bus': -2 [ 2449.219652][T12280] device pim6reg1 entered promiscuous mode [ 2449.360110][T12282] device pim6reg1 entered promiscuous mode [ 2450.386240][T12300] device pim6reg1 entered promiscuous mode [ 2450.426529][T12305] device pim6reg1 entered promiscuous mode [ 2450.445846][T12304] device pim6reg1 entered promiscuous mode [ 2450.541082][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 2450.550380][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.557912][T12309] device bridge_slave_0 entered promiscuous mode [ 2450.565352][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2450.572706][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 2450.580300][T12309] device bridge_slave_1 entered promiscuous mode [ 2450.754218][T12336] device pim6reg1 entered promiscuous mode [ 2450.907047][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 2450.914144][T12309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2450.921437][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 2450.928494][T12309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2450.968407][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2450.977283][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 2450.996700][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 2451.028186][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2451.061859][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2451.068966][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2451.082451][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2451.091912][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 2451.098984][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2451.110398][T12349] device pim6reg1 entered promiscuous mode [ 2451.130010][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2451.143507][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2451.161165][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2451.177549][T12309] device veth0_vlan entered promiscuous mode [ 2451.185126][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2451.203983][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2451.211666][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2451.232370][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2451.254467][T12309] device veth1_macvtap entered promiscuous mode [ 2451.273705][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2451.291131][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2451.311157][T30952] device bridge_slave_1 left promiscuous mode [ 2451.318500][T30952] bridge0: port 2(bridge_slave_1) entered disabled state [ 2451.335017][T30952] device bridge_slave_0 left promiscuous mode [ 2451.347960][T30952] bridge0: port 1(bridge_slave_0) entered disabled state [ 2451.365130][T30952] device veth1_macvtap left promiscuous mode [ 2451.385246][T30952] device veth0_vlan left promiscuous mode [ 2451.507036][T12360] device pim6reg1 entered promiscuous mode [ 2451.572188][T12372] device pim6reg1 entered promiscuous mode [ 2451.965881][T12401] device pim6reg1 entered promiscuous mode [ 2451.980066][T12404] device pim6reg1 entered promiscuous mode [ 2452.191604][T12434] device pim6reg1 entered promiscuous mode [ 2452.263307][T12453] incfs: Backing dir is not set, filesystem can't be mounted. [ 2452.270883][T12453] incfs: mount failed -2 [ 2452.481207][T12479] device pim6reg1 entered promiscuous mode [ 2559.936061][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2559.943145][ C1] (detected by 1, t=10002 jiffies, g=190957, q=282 ncpus=2) [ 2559.950601][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295181904-4295171901), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 2559.963960][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g190957 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2559.975244][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2559.985208][ C1] rcu: RCU grace-period kthread stack dump: [ 2559.991088][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 2560.001875][ C1] Call Trace: [ 2560.005155][ C1] [ 2560.008076][ C1] __schedule+0xb87/0x14e0 [ 2560.012497][ C1] ? release_firmware_map_entry+0x194/0x194 [ 2560.018391][ C1] ? __mod_timer+0x7ae/0xb30 [ 2560.023204][ C1] schedule+0xbd/0x170 [ 2560.027273][ C1] schedule_timeout+0x12c/0x2e0 [ 2560.032115][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 2560.037482][ C1] ? __cfi_process_timeout+0x10/0x10 [ 2560.042761][ C1] ? prepare_to_swait_event+0x308/0x320 [ 2560.048314][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 2560.053202][ C1] ? rcu_gp_init+0xf10/0xf10 [ 2560.057792][ C1] rcu_gp_kthread+0x95/0x370 [ 2560.062380][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 2560.067584][ C1] ? __kasan_check_read+0x11/0x20 [ 2560.072609][ C1] ? __kthread_parkme+0x142/0x180 [ 2560.077630][ C1] kthread+0x281/0x320 [ 2560.081703][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 2560.086900][ C1] ? __cfi_kthread+0x10/0x10 [ 2560.091481][ C1] ret_from_fork+0x1f/0x30 [ 2560.095915][ C1] [ 2560.098935][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2560.105257][ C1] CPU: 1 PID: 12496 Comm: syz.5.14896 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 2560.115230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2560.125287][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 2560.131200][ C1] Code: 74 05 83 ff 30 75 12 5d c3 81 ff d0 00 00 00 74 f6 81 ff e0 00 00 00 74 ee c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 eb d9 89 f6 31 d2 e8 ba be 56 01 5d c3 0f 1f 84 00 00 00 00 [ 2560.150811][ C1] RSP: 0018:ffffc9000154fc20 EFLAGS: 00000246 [ 2560.156916][ C1] RAX: 00000000000000f6 RBX: 00000000000000f6 RCX: 000000000000083f [ 2560.164976][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 2560.172956][ C1] RBP: ffffc9000154fc20 R08: dffffc0000000000 R09: fffff520002a9f81 [ 2560.180926][ C1] R10: 0000000000000000 R11: ffffffff81342080 R12: 0000000000000000 [ 2560.188901][ C1] R13: dffffc0000000001 R14: ffffffff86491b60 R15: dffffc0000000000 [ 2560.196868][ C1] FS: 00007f0f2408a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2560.205829][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2560.212410][ C1] CR2: 000000110c283313 CR3: 00000001434b8000 CR4: 00000000003506a0 [ 2560.220642][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2560.228612][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2560.236597][ C1] Call Trace: [ 2560.239879][ C1] [ 2560.242808][ C1] x2apic_send_IPI_self+0x6f/0x80 [ 2560.247841][ C1] arch_irq_work_raise+0x98/0xf0 [ 2560.252783][ C1] __irq_work_queue_local+0x115/0x190 [ 2560.258170][ C1] irq_work_queue+0x9e/0x150 [ 2560.262784][ C1] bpf_send_signal_common+0x2b2/0x420 [ 2560.268161][ C1] ? __set_printk_clr_event+0x80/0x80 [ 2560.273539][ C1] bpf_send_signal+0x19/0x20 [ 2560.278145][ C1] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 2560.283619][ C1] bpf_trace_run2+0xff/0x250 [ 2560.288225][ C1] ? __cfi_bpf_trace_run2+0x10/0x10 [ 2560.293426][ C1] __bpf_trace_sys_enter+0x62/0x70 [ 2560.298534][ C1] trace_sys_enter+0x3d/0x50 [ 2560.303211][ C1] syscall_trace_enter+0xf3/0x150 [ 2560.308334][ C1] syscall_enter_from_user_mode+0x1f/0x30 [ 2560.314090][ C1] do_syscall_64+0x24/0xa0 [ 2560.318526][ C1] ? clear_bhb_loop+0x30/0x80 [ 2560.323209][ C1] ? clear_bhb_loop+0x30/0x80 [ 2560.327892][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2560.333779][ C1] RIP: 0033:0x7f0f2312add9 [ 2560.338188][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 2560.357788][ C1] RSP: 002b:00007f0f24089b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 2560.366198][ C1] RAX: ffffffffffffffda RBX: 00007f0f233b5fa8 RCX: 00007f0f2312add9 [ 2560.374167][ C1] RDX: 00007f0f24089b40 RSI: 00007f0f24089c70 RDI: 0000000000000011 [ 2560.382216][ C1] RBP: 00007f0f233b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2560.390188][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2560.398171][ C1] R13: 00007f0f233b6038 R14: 00007fff760c0650 R15: 00007fff760c0738 [ 2560.406146][ C1] [ 2701.405296][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 232s! [ 2701.414249][ C0] Showing busy workqueues and worker pools: [ 2701.420160][ C0] workqueue events: flags=0x0 [ 2701.424840][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2701.424888][ C0] pending: kfree_rcu_monitor, rht_deferred_worker [ 2701.424930][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 2701.424967][ C0] pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 2701.425060][ C0] workqueue events_long: flags=0x0 [ 2701.463684][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2701.463732][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work [ 2701.463824][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 2701.463864][ C0] pending: br_fdb_cleanup, br_fdb_cleanup [ 2701.463900][ C0] workqueue events_unbound: flags=0x2 [ 2701.500985][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 2701.501027][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 2701.501074][ C0] workqueue events_power_efficient: flags=0x80 [ 2701.522065][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 2701.522107][ C0] pending: neigh_managed_work, gc_worker, neigh_periodic_work [ 2701.522165][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 2701.522202][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, neigh_periodic_work, check_lifetime [ 2701.522279][ C0] workqueue rcu_gp: flags=0x8 [ 2701.560653][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.560698][ C0] pending: srcu_invoke_callbacks [ 2701.560733][ C0] workqueue netns: flags=0xe000a [ 2701.578694][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 2701.578737][ C0] in-flight: 30952:cleanup_net [ 2701.578771][ C0] workqueue mm_percpu_wq: flags=0x8 [ 2701.596158][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.596201][ C0] pending: vmstat_update [ 2701.596234][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.596269][ C0] pending: vmstat_update [ 2701.596302][ C0] workqueue writeback: flags=0x4a [ 2701.625807][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2701.625852][ C0] pending: wb_workfn [ 2701.625891][ C0] workqueue dm_bufio_cache: flags=0x8 [ 2701.642709][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.642759][ C0] pending: work_fn [ 2701.642791][ C0] workqueue mld: flags=0x40008 [ 2701.659327][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=13 [ 2701.659369][ C0] pending: mld_dad_work [ 2701.659403][ C0] inactive: mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work [ 2701.659603][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 2701.694031][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 2701.694077][ C0] pending: addrconf_dad_work [ 2701.694112][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 2701.694160][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=31 [ 2701.694195][ C0] in-flight: 6:addrconf_dad_work [ 2701.694229][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 2701.694798][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2701.784828][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2701.784874][ C0] pending: wg_packet_handshake_send_worker [ 2701.784914][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2701.803657][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.803704][ C0] pending: wg_packet_encrypt_worker [ 2701.803735][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.803771][ C0] in-flight: 5809:wg_packet_encrypt_worker [ 2701.803801][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2701.836260][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2701.836302][ C0] pending: wg_packet_handshake_send_worker [ 2701.836344][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2701.855008][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.855056][ C0] pending: wg_packet_encrypt_worker [ 2701.855083][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.855121][ C0] pending: wg_packet_encrypt_worker [ 2701.855152][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2701.886741][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.886787][ C0] pending: wg_packet_encrypt_worker [ 2701.886816][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.886853][ C0] pending: wg_packet_encrypt_worker [ 2701.886880][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2701.918525][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.918575][ C0] pending: wg_packet_encrypt_worker [ 2701.918606][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.918643][ C0] pending: wg_packet_encrypt_worker [ 2701.918670][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2701.950366][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.950411][ C0] pending: wg_packet_encrypt_worker [ 2701.950441][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.950477][ C0] pending: wg_packet_encrypt_worker [ 2701.950502][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2701.982365][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.982410][ C0] pending: wg_packet_encrypt_worker [ 2701.982439][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2701.982475][ C0] pending: wg_packet_encrypt_worker [ 2701.982503][ C0] workqueue wg-kex-wg0: flags=0x6 [ 2702.013907][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2702.013952][ C0] pending: wg_packet_handshake_send_worker [ 2702.013992][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2702.032688][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.032741][ C0] pending: wg_packet_encrypt_worker [ 2702.032771][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.032807][ C0] pending: wg_packet_encrypt_worker [ 2702.032833][ C0] workqueue wg-kex-wg1: flags=0x6 [ 2702.064461][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2702.064504][ C0] pending: wg_packet_handshake_send_worker [ 2702.064541][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2702.083217][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.083266][ C0] pending: wg_packet_encrypt_worker [ 2702.083300][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.083339][ C0] pending: wg_packet_encrypt_worker [ 2702.083364][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2702.115093][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.115143][ C0] pending: wg_packet_encrypt_worker [ 2702.115171][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.115209][ C0] pending: wg_packet_encrypt_worker [ 2702.115234][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 2702.146970][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.147014][ C0] pending: wg_packet_encrypt_worker [ 2702.147043][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.147079][ C0] pending: wg_packet_encrypt_worker [ 2702.147106][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 2702.178961][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.179007][ C0] pending: wg_packet_encrypt_worker [ 2702.179034][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.179071][ C0] pending: wg_packet_encrypt_worker [ 2702.179095][ C0] workqueue wg-kex-wg2: flags=0x6 [ 2702.210471][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 2702.210513][ C0] pending: wg_packet_handshake_send_worker [ 2702.210552][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 2702.229383][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.229434][ C0] pending: wg_packet_encrypt_worker [ 2702.229465][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 2702.229501][ C0] pending: wg_packet_encrypt_worker [ 2702.229527][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=233s workers=7 idle: 19749 4815 31313 6636 4480 [ 2702.229597][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=233s workers=8 idle: 30361 393 31004 14190 3572 8 701