last executing test programs: 2.806879385s ago: executing program 1 (id=1753): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.658946844s ago: executing program 1 (id=1755): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.024146981s ago: executing program 1 (id=1767): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x1) 1.479977333s ago: executing program 1 (id=1772): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.478977543s ago: executing program 1 (id=1773): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000007000000000000000700000085200000030000008520000001000003852000000400000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000700000007b8af8ff00000000bfa200000000000007020000f8ff"], &(0x7f0000000240)='GPL\x00', 0x80, 0xdf, &(0x7f0000000300)=""/223, 0x41100, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x10, 0xcb, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0x7, 0x9}, {0x5, 0x3, 0x2, 0x6}, {0x4, 0x4, 0x2, 0x6}, {0x5, 0x4, 0x8, 0xa}, {0x1, 0x2, 0x10, 0x2}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d749717ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b4085759"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0xa, 0x2, &(0x7f00000018c0)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={r2, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x20, &(0x7f0000001700)={&(0x7f0000001640)=""/27, 0x1b, 0x0, &(0x7f0000001680)=""/77, 0x4d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0x5, &(0x7f00000013c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x899, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000001400)='GPL\x00', 0x6, 0x89, &(0x7f0000001440)=""/137, 0x41000, 0x4, '\x00', r5, @fallback=0x11, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x1, 0x0, 0x80000000, 0x18}, 0x10, r8, r1, 0x0, &(0x7f0000001780)=[r2, r2], 0x0, 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{r2}, &(0x7f0000001900), &(0x7f0000001940)='%pK \x00'}, 0x20) r9 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x8, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000580)='cpu<-0||!') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001880)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a1, &(0x7f0000000080)) sendmsg$inet(r11, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001a00)="4a3f1d064bcdd6ddc3b7e8ae2bf9153e567bc504b6bb5c21fa6925ef37294a98d87034e4ae9f97d34c8dd8deb42f0bc55185257c5a161ab02c28851352663670613905467474efd159c233a2f68a9e0662f50f8fb121c8f074b651d73494540ef3bc7ed6bd701820", 0x68}], 0x1}, 0x48040) 1.113364645s ago: executing program 4 (id=1784): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 1.065432717s ago: executing program 0 (id=1785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) 1.064942678s ago: executing program 0 (id=1786): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000100800309000100030a010100000000000000000100fffd0900010073797a30"], 0xf0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.014040491s ago: executing program 4 (id=1787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @random="7b5b1bc410c8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "16b8c20ea2ccf71d68bdfa7ba2f9aad2"}]}}}}}}}}, 0x0) 1.013750851s ago: executing program 4 (id=1788): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13052cbd7000fddbdf250e000000080001", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x20000890}, 0x8040) 991.346242ms ago: executing program 4 (id=1789): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x107011, &(0x7f0000000000)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x100}}, {@errors_remount}, {@nolazytime}, {@block_validity}]}, 0x0, 0x616, &(0x7f00000003c0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEevFECP74ByothFAoaWtikYSS6NF48WDiyYP4XyiJN+PBqwcvngwJMYaDGCJrZjtTttvd7c/tlPbzSZbOM7M7z3eWfvs88+wzswHsW0PZP2nE4Yi4kUQM1GzrjHzj0NLzHv5562L2SKJSee+PJG7dThZr95XkP/vzF/8zEMnPacShjtX1zi3cvDoxPT01m5dH5q/dGJlbuHn8yrWJy1OXp66PvT525vSp02dGT2zp+LoarPvmq8fJ6Le/nk/ibDzJY8uOq/55PVuqOXvPhqKy5FHt+ux9PbPFfe8Wfw0UvydPJfUr2LUu5Xl7LiKej4HoqPnfHIhP3yk1OKCtKkkUbRSw7yRN8v/H8VZ/GXrbFg+wU4p+QHFu3+g8eLW0zb0SYCc8GF8akFrK/a6IKPK/c2lsMHqrY2h9D5MV4zxJRGxtZG5JVsdPP5z/JHtEk3E4oD0W7xSj3PXtf1LNzcHorZb6HqYr83+xUknznkC2/t1N1j9UV5b/sHMW70TEC3n73x3rzv80z90i/z/YZP3yHwAAAAAAALbPvfGIeK3R/L90ef5Pd4P5P/0RcXYb6l/787/0fr6QbEN1QI0H4xFvNpz/uzzHd7AjL/23Oh+gK7l0ZXrqRET8LyKORVdPVh6t22/tDOHjnx36sln9tfP/skdWfzEXMN/T/c66C3EnJ+YntnrcQMSDOxEvVuf/HsnXrJz/k7X/SYP2P8vvG+us49Ardy8027Z2/gPtUvk64mjD9v9pdztpfX+OkWp/YKToFaz20seff9esfvkP5cna/77W+d+T1N6vZ25j+++OiJMLnZVm2zfb/+9O3u8o9p/5aGJ+fnY0ojs5t3r92MZihr2qyIciX7L8P/Zy6/G/5f5/TR4eiIjFddb53JP+35pt0/5DebL8n2zd/g+ubP83vjB2d/D7ZvVfWFf7f6raph/L1xj/g1qr78ex3gQtJVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMalEfGfSNLh5eU0HR6O6I+I/0dfOj0zN//qpZkPr09m26rf/58W3/Q7sFROiu//H6wpj9WVT0bEwYj4ouNAtTx8cWZ6suyDBwAAAAAAAAAAAAAAAAAAgF2iv3rNf6Wn/vr/zO8dZUcHtF1n/lO+w/7TuelXVnq2NRBgx20+/4FnWHbOv4H872pnLEAJmuf/o8eVqh0NB9hB+v+wf20y/31cAHuA9h/2q3WO6fW2Ow6gDNp/AAAAAADYUw4eufdLEhGLbxyoPjLd+TaT/WFvS8sOACiNObywf3XOlB0BUBbn+ECyvPR3w4v9m8/+T9oTEAAAAAAAAAAAAACwytHDrv+H/ar19f/m9sNe1uL6/0bJ73YBsIc0/+oPbT/sdc7xgWSNsQDX/wMAAAAAAAAAAADALtB78+rE9PTU7NxCaQuVjk2+/K3yYl5j4e00osmmxYldEeEGFiq3I1o/50l7au+KiN3yJszOZdHsVF3FLThKPOSS/y4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADL/g0AAP//ybghBw==") execve(0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x101, 0x0) close(r4) close(r2) socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f334, 0x0) io_setup(0xffff2261, &(0x7f0000000080)=0x0) eventfd(0x671d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) eventfd(0xa) io_submit(r5, 0x0, 0x0) 950.935344ms ago: executing program 0 (id=1790): socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80108906, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 934.068046ms ago: executing program 0 (id=1791): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x4000000, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {0xec0}, {0x5, 0x2}}}, 0x24}}, 0x40004) 855.24281ms ago: executing program 0 (id=1792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000ddffffff850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000200)=r4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 789.015494ms ago: executing program 0 (id=1793): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 509.79976ms ago: executing program 1 (id=1794): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) close(0x3) 440.038605ms ago: executing program 2 (id=1795): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000100)="ba0455111f1b8072fd972350948b", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 435.720225ms ago: executing program 2 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x44010) 398.597857ms ago: executing program 2 (id=1797): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1ce3e4e4b277dc3e}, 0x20000001) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, 0x0, 0x0) 297.650462ms ago: executing program 3 (id=1798): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 275.684094ms ago: executing program 2 (id=1799): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 224.033117ms ago: executing program 3 (id=1800): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 220.132137ms ago: executing program 2 (id=1801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2408c0d4) 193.538639ms ago: executing program 3 (id=1802): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x4e21, 0x3, 'ovf\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0}, 0x0) 112.108744ms ago: executing program 3 (id=1803): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x54, 0x8, 0x0, {0x9, 0x1}, {0x4c, 0x2}, @rumble={0x6, 0x7}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 111.668644ms ago: executing program 3 (id=1804): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) 106.184794ms ago: executing program 2 (id=1805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 90.925625ms ago: executing program 3 (id=1806): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000100)="ba0455111f1b8072fd972350948b", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 190.73µs ago: executing program 4 (id=1807): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x34, 0x401}}], 0x18}}], 0x2, 0x401eb94) 0s ago: executing program 4 (id=1808): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbdf, &(0x7f0000002380)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3d46d80f7e2ba80c"}}) unlink(&(0x7f0000000000)='./file1\x00') kernel console output (not intermixed with test programs): T4087] vfs_read+0x1ab/0x7f0 [ 40.643486][ T4087] ? __rcu_read_unlock+0x4e/0x70 [ 40.643581][ T4087] ? __fget_files+0x184/0x1c0 [ 40.643676][ T4087] ? mutex_lock+0x57/0x90 [ 40.643700][ T4087] ksys_read+0xdc/0x1a0 [ 40.643720][ T4087] __x64_sys_read+0x40/0x50 [ 40.643741][ T4087] x64_sys_call+0x2889/0x3000 [ 40.643812][ T4087] do_syscall_64+0xc0/0x2a0 [ 40.643850][ T4087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.643876][ T4087] RIP: 0033:0x7f02e937b78e [ 40.643957][ T4087] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.643975][ T4087] RSP: 002b:00007f02e7e16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.643993][ T4087] RAX: ffffffffffffffda RBX: 00007f02e7e176c0 RCX: 00007f02e937b78e [ 40.644078][ T4087] RDX: 000000000000000f RSI: 00007f02e7e170a0 RDI: 0000000000000006 [ 40.644094][ T4087] RBP: 00007f02e7e17090 R08: 0000000000000000 R09: 0000000000000000 [ 40.644110][ T4087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.644125][ T4087] R13: 00007f02e9636038 R14: 00007f02e9635fa0 R15: 00007ffccf7b0b38 [ 40.644148][ T4087] [ 40.656666][ T4091] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 40.928423][ T4101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.944434][ T4101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.037029][ T3520] loop1: p1 p3 p4 [ 41.052735][ T3520] loop1: p4 size 589824 extends beyond EOD, truncated [ 41.070499][ T4106] loop1: p1 p3 p4 [ 41.075450][ T4106] loop1: p4 size 589824 extends beyond EOD, truncated [ 41.130688][ T4111] bond1: option ad_select: invalid value (4) [ 41.138518][ T4111] bond1 (unregistering): Released all slaves [ 41.153996][ T4114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.176647][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.187284][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 41.189343][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 41.210930][ T4114] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.220: inode #1717973040: comm syz.4.220: iget: illegal inode # [ 41.241036][ T4114] EXT4-fs (loop4): Remounting filesystem read-only [ 41.254222][ T4114] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.4.220: cleanup dec ref error -30 [ 41.258540][ T4119] udevd[4119]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 41.278143][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.278454][ T4125] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 41.290655][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 41.299903][ T4114] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.220: dec ref error=-30 [ 41.319698][ T4122] bond1 (unregistering): Released all slaves [ 41.345553][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.434983][ T4142] ip6gre1: entered promiscuous mode [ 41.552154][ T3520] loop3: p1 p3 p4 [ 41.557012][ T3520] loop3: p4 size 589824 extends beyond EOD, truncated [ 41.567619][ T4149] loop3: p1 p3 p4 [ 41.572506][ T4149] loop3: p4 size 589824 extends beyond EOD, truncated [ 41.607922][ T4119] udevd[4119]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 41.641165][ T4159] mmap: syz.1.236 (4159): VmData 29069312 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 41.653442][ T4160] EXT4-fs: Ignoring removed nobh option [ 41.664003][ T4160] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.676832][ T4160] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.237: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 41.697895][ T4160] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.237: couldn't read orphan inode 11 (err -117) [ 41.720019][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.736268][ T4160] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.237: Invalid block bitmap block 0 in block_group 0 [ 41.761932][ T4160] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.237: Failed to acquire dquot type 0 [ 41.783822][ T4167] macsec1: entered allmulticast mode [ 41.789185][ T4167] macvlan0: entered allmulticast mode [ 41.794658][ T4167] veth1_vlan: entered allmulticast mode [ 41.801901][ T4167] macvlan0: left allmulticast mode [ 41.807149][ T4167] veth1_vlan: left allmulticast mode [ 41.835946][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.901874][ T4171] msdos: Unknown parameter '' [ 41.915246][ T4171] x_tables: unsorted entry at hook 2 [ 41.946971][ T4177] FAULT_INJECTION: forcing a failure. [ 41.946971][ T4177] name failslab, interval 1, probability 0, space 0, times 0 [ 41.959665][ T4177] CPU: 0 UID: 0 PID: 4177 Comm: syz.3.242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.959685][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.959695][ T4177] Call Trace: [ 41.959700][ T4177] [ 41.959706][ T4177] __dump_stack+0x1d/0x30 [ 41.959725][ T4177] dump_stack_lvl+0x95/0xd0 [ 41.959806][ T4177] dump_stack+0x15/0x1b [ 41.959821][ T4177] should_fail_ex+0x263/0x280 [ 41.959887][ T4177] should_failslab+0x8c/0xb0 [ 41.959906][ T4177] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 41.959925][ T4177] ? __alloc_skb+0x2f0/0x4b0 [ 41.959947][ T4177] __alloc_skb+0x2f0/0x4b0 [ 41.959994][ T4177] ? path_openat+0x1e8e/0x23c0 [ 41.960092][ T4177] tipc_msg_create+0x47/0x230 [ 41.960110][ T4177] __tipc_shutdown+0x8d2/0xc10 [ 41.960160][ T4177] ? __pfx_woken_wake_function+0x10/0x10 [ 41.960186][ T4177] tipc_release+0x6a/0xf50 [ 41.960223][ T4177] ? proc_fail_nth_write+0x13b/0x160 [ 41.960272][ T4177] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.960293][ T4177] ? locks_remove_posix+0x200/0x350 [ 41.960419][ T4177] sock_close+0x6b/0x150 [ 41.960436][ T4177] ? __pfx_sock_close+0x10/0x10 [ 41.960531][ T4177] __fput+0x29b/0x650 [ 41.960554][ T4177] fput_close_sync+0xad/0x190 [ 41.960621][ T4177] __x64_sys_close+0x55/0xf0 [ 41.960670][ T4177] x64_sys_call+0x2c25/0x3000 [ 41.960689][ T4177] do_syscall_64+0xc0/0x2a0 [ 41.960781][ T4177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.960804][ T4177] RIP: 0033:0x7f0915f8aeb9 [ 41.960816][ T4177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.960829][ T4177] RSP: 002b:00007f09149be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 41.960864][ T4177] RAX: ffffffffffffffda RBX: 00007f0916206090 RCX: 00007f0915f8aeb9 [ 41.960909][ T4177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 41.960918][ T4177] RBP: 00007f09149be090 R08: 0000000000000000 R09: 0000000000000000 [ 41.960928][ T4177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.960938][ T4177] R13: 00007f0916206128 R14: 00007f0916206090 R15: 00007ffd942248e8 [ 41.960952][ T4177] [ 41.972087][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 41.972124][ T29] audit: type=1400 audit(1770331110.486:1110): avc: denied { ioctl } for pid=4169 comm="syz.4.241" path="socket:[7042]" dev="sockfs" ino=7042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 42.239775][ T4185] set_capacity_and_notify: 8 callbacks suppressed [ 42.239788][ T4185] loop0: detected capacity change from 0 to 2048 [ 42.281891][ T3520] loop0: p1 p3 p4 [ 42.286914][ T3520] loop0: p4 size 589824 extends beyond EOD, truncated [ 42.297014][ T4185] loop0: p1 p3 p4 [ 42.302340][ T4185] loop0: p4 size 589824 extends beyond EOD, truncated [ 42.323996][ T2999] loop0: p1 p3 p4 [ 42.329195][ T2999] loop0: p4 size 589824 extends beyond EOD, truncated [ 42.374103][ T29] audit: type=1400 audit(1770331110.886:1111): avc: denied { name_connect } for pid=4190 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 42.407774][ T29] audit: type=1400 audit(1770331110.906:1112): avc: denied { write } for pid=4190 comm="syz.0.248" lport=56847 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 42.432070][ T29] audit: type=1400 audit(1770331110.916:1113): avc: denied { setopt } for pid=4190 comm="syz.0.248" lport=56847 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 42.449759][ T4194] __nla_validate_parse: 10 callbacks suppressed [ 42.449808][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 42.465033][ T29] audit: type=1400 audit(1770331110.976:1114): avc: denied { create } for pid=4190 comm="syz.0.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 42.503034][ T4197] loop2: detected capacity change from 0 to 512 [ 42.510327][ T4197] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 12 [ 42.546896][ T4200] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 42.615304][ T4200] loop2: detected capacity change from 0 to 128 [ 42.628055][ T4200] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 04000002) [ 42.645305][ T4200] FAT-fs (loop2): Filesystem has been set read-only [ 42.725645][ T4211] xt_recent: Unsupported userspace flags (000000b1) [ 42.936569][ T4234] bond1: option ad_select: invalid value (4) [ 42.945093][ T4234] bond1 (unregistering): Released all slaves [ 42.983997][ T4241] loop4: detected capacity change from 0 to 4096 [ 42.990625][ T4243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 42.996947][ T4241] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.002354][ T4236] bond1 (unregistering): Released all slaves [ 43.006054][ T4241] EXT4-fs: test_dummy_encryption option not supported [ 43.037713][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 43.049909][ T29] audit: type=1400 audit(1770331111.536:1115): avc: denied { cpu } for pid=4244 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.138164][ T4253] FAULT_INJECTION: forcing a failure. [ 43.138164][ T4253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.151274][ T4253] CPU: 0 UID: 0 PID: 4253 Comm: syz.0.264 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.151302][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.151313][ T4253] Call Trace: [ 43.151322][ T4253] [ 43.151330][ T4253] __dump_stack+0x1d/0x30 [ 43.151411][ T4253] dump_stack_lvl+0x95/0xd0 [ 43.151443][ T4253] dump_stack+0x15/0x1b [ 43.151535][ T4253] should_fail_ex+0x263/0x280 [ 43.151574][ T4253] should_fail+0xb/0x20 [ 43.151604][ T4253] should_fail_usercopy+0x1a/0x20 [ 43.151670][ T4253] _copy_from_user+0x1c/0xb0 [ 43.151695][ T4253] ___sys_sendmsg+0xc1/0x1e0 [ 43.151742][ T4253] __x64_sys_sendmsg+0xd4/0x160 [ 43.151799][ T4253] x64_sys_call+0x17ba/0x3000 [ 43.151824][ T4253] do_syscall_64+0xc0/0x2a0 [ 43.151913][ T4253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.151934][ T4253] RIP: 0033:0x7f02e93baeb9 [ 43.151948][ T4253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.151963][ T4253] RSP: 002b:00007f02e7e17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.151990][ T4253] RAX: ffffffffffffffda RBX: 00007f02e9635fa0 RCX: 00007f02e93baeb9 [ 43.152007][ T4253] RDX: 000000000000c004 RSI: 0000200000000380 RDI: 0000000000000003 [ 43.152022][ T4253] RBP: 00007f02e7e17090 R08: 0000000000000000 R09: 0000000000000000 [ 43.152036][ T4253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.152128][ T4253] R13: 00007f02e9636038 R14: 00007f02e9635fa0 R15: 00007ffccf7b0b38 [ 43.152145][ T4253] [ 43.314511][ T29] audit: type=1400 audit(1770331111.826:1116): avc: denied { mount } for pid=4248 comm="syz.3.262" name="/" dev="autofs" ino=7121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 43.427268][ T29] audit: type=1400 audit(1770331111.936:1117): avc: denied { block_suspend } for pid=4248 comm="syz.3.262" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.446616][ T4258] xt_recent: Unsupported userspace flags (000000b1) [ 43.458928][ T4258] IPv6: sit1: Disabled Multicast RS [ 43.545494][ T4265] loop2: detected capacity change from 0 to 1024 [ 43.570608][ T4265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.590602][ T29] audit: type=1400 audit(1770331112.096:1118): avc: denied { add_name } for pid=4264 comm="syz.2.268" name="control" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.613233][ T29] audit: type=1400 audit(1770331112.096:1119): avc: denied { create } for pid=4264 comm="syz.2.268" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.662294][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.738036][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.274'. [ 43.766149][ T4294] loop0: detected capacity change from 0 to 4096 [ 43.772776][ T4294] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.779272][ T4294] EXT4-fs: test_dummy_encryption option not supported [ 43.832089][ T4300] loop0: detected capacity change from 0 to 2048 [ 43.847048][ T4300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.869053][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.926567][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 43.937916][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 43.949626][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 43.985948][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 44.005379][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 44.031407][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 44.150328][ T4326] bond0: option lp_interval: invalid value (0) [ 44.157146][ T4326] bond0: option lp_interval: allowed values 1 - 2147483647 [ 44.205413][ T4330] bond1 (unregistering): Released all slaves [ 44.579323][ T4351] loop0: detected capacity change from 0 to 512 [ 44.639385][ T4355] FAULT_INJECTION: forcing a failure. [ 44.639385][ T4355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.639405][ T4351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.659210][ T4355] CPU: 1 UID: 0 PID: 4355 Comm: syz.1.296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.659232][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.659243][ T4355] Call Trace: [ 44.659248][ T4355] [ 44.659254][ T4355] __dump_stack+0x1d/0x30 [ 44.659281][ T4355] dump_stack_lvl+0x95/0xd0 [ 44.659305][ T4355] dump_stack+0x15/0x1b [ 44.659393][ T4355] should_fail_ex+0x263/0x280 [ 44.659421][ T4355] should_fail+0xb/0x20 [ 44.659494][ T4355] should_fail_usercopy+0x1a/0x20 [ 44.659522][ T4355] _copy_from_user+0x1c/0xb0 [ 44.659599][ T4355] ___sys_sendmsg+0xc1/0x1e0 [ 44.659692][ T4355] __x64_sys_sendmsg+0xd4/0x160 [ 44.659768][ T4355] x64_sys_call+0x17ba/0x3000 [ 44.659982][ T4355] do_syscall_64+0xc0/0x2a0 [ 44.660014][ T4355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.660114][ T4355] RIP: 0033:0x7f3a6712aeb9 [ 44.660127][ T4355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.660193][ T4355] RSP: 002b:00007f3a65b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.660215][ T4355] RAX: ffffffffffffffda RBX: 00007f3a673a5fa0 RCX: 00007f3a6712aeb9 [ 44.660231][ T4355] RDX: 000000000004c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 44.660246][ T4355] RBP: 00007f3a65b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.660313][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.660324][ T4355] R13: 00007f3a673a6038 R14: 00007f3a673a5fa0 R15: 00007ffdeb034fe8 [ 44.660342][ T4355] [ 44.889065][ T4351] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.294: iget: bad extended attribute block 262144 [ 44.917435][ T4351] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.294: couldn't read orphan inode 15 (err -117) [ 44.929774][ T4351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.948272][ T4361] netlink: 'syz.4.299': attribute type 15 has an invalid length. [ 45.007750][ T4367] batadv_slave_1: entered promiscuous mode [ 45.058316][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.082752][ T4373] netlink: 'syz.2.303': attribute type 30 has an invalid length. [ 45.111155][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.145422][ T411] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.160340][ T411] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.169348][ T411] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.178228][ T411] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 45.338798][ T4382] bond1: option ad_select: invalid value (4) [ 45.352927][ T4382] bond1 (unregistering): Released all slaves [ 45.412263][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.666232][ T4403] lo speed is unknown, defaulting to 1000 [ 46.531814][ T4426] loop4: detected capacity change from 0 to 512 [ 46.549470][ T4426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.581384][ T4426] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.320: iget: bad extended attribute block 262144 [ 46.604493][ T4426] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.320: couldn't read orphan inode 15 (err -117) [ 46.617119][ T4426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.889204][ T4458] FAULT_INJECTION: forcing a failure. [ 46.889204][ T4458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.903140][ T4458] CPU: 1 UID: 0 PID: 4458 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.903170][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.903185][ T4458] Call Trace: [ 46.903193][ T4458] [ 46.903201][ T4458] __dump_stack+0x1d/0x30 [ 46.903228][ T4458] dump_stack_lvl+0x95/0xd0 [ 46.903275][ T4458] dump_stack+0x15/0x1b [ 46.903324][ T4458] should_fail_ex+0x263/0x280 [ 46.903386][ T4458] should_fail+0xb/0x20 [ 46.903420][ T4458] should_fail_usercopy+0x1a/0x20 [ 46.903518][ T4458] _copy_from_user+0x1c/0xb0 [ 46.903537][ T4458] ___sys_sendmsg+0xc1/0x1e0 [ 46.903576][ T4458] __x64_sys_sendmsg+0xd4/0x160 [ 46.903596][ T4458] x64_sys_call+0x17ba/0x3000 [ 46.903681][ T4458] do_syscall_64+0xc0/0x2a0 [ 46.903718][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.903744][ T4458] RIP: 0033:0x7f0915f8aeb9 [ 46.903761][ T4458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.903785][ T4458] RSP: 002b:00007f09149df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.903809][ T4458] RAX: ffffffffffffffda RBX: 00007f0916205fa0 RCX: 00007f0915f8aeb9 [ 46.903826][ T4458] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 46.903915][ T4458] RBP: 00007f09149df090 R08: 0000000000000000 R09: 0000000000000000 [ 46.903931][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.903943][ T4458] R13: 00007f0916206038 R14: 00007f0916205fa0 R15: 00007ffd942248e8 [ 46.904042][ T4458] [ 47.372243][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.387850][ T4478] loop3: detected capacity change from 0 to 4096 [ 47.395259][ T3393] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.407313][ T4478] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.413844][ T4478] EXT4-fs: test_dummy_encryption option not supported [ 47.424160][ T3393] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.497182][ T4484] fido_id[4484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.522933][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 47.522948][ T29] audit: type=1400 audit(1770331116.036:1420): avc: denied { bind } for pid=4487 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.549115][ T29] audit: type=1400 audit(1770331116.036:1421): avc: denied { setopt } for pid=4487 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.579240][ T4491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.598122][ T4491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.720466][ T4493] __nla_validate_parse: 11 callbacks suppressed [ 47.720483][ T4493] netlink: 188 bytes leftover after parsing attributes in process `syz.4.344'. [ 48.000676][ T29] audit: type=1400 audit(1770331116.506:1422): avc: denied { execute } for pid=4514 comm="syz.1.352" name="cgroup" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 48.065640][ T4518] loop4: detected capacity change from 0 to 512 [ 48.072934][ T4518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.091770][ T4518] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.353: iget: bad extended attribute block 262144 [ 48.104897][ T4518] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.353: couldn't read orphan inode 15 (err -117) [ 48.117189][ T4518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.151855][ T4522] bond1 (unregistering): Released all slaves [ 48.183274][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 48.295850][ T4529] loop2: detected capacity change from 0 to 4096 [ 48.302803][ T4529] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.309266][ T4529] EXT4-fs: test_dummy_encryption option not supported [ 48.326345][ T4531] loop0: detected capacity change from 0 to 1024 [ 48.344055][ T4533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.354299][ T4531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.366989][ T4533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.392203][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.464154][ T4541] loop3: detected capacity change from 0 to 512 [ 48.470832][ T4541] EXT4-fs: Ignoring removed nobh option [ 48.484911][ T4541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.509506][ T4541] EXT4-fs (loop3): 1 truncate cleaned up [ 48.516199][ T4541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.549576][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 48.611997][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.667516][ T29] audit: type=1400 audit(1770331117.176:1423): avc: denied { bind } for pid=4551 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.738583][ T4554] netlink: 14 bytes leftover after parsing attributes in process `syz.3.364'. [ 48.747652][ T29] audit: type=1400 audit(1770331117.246:1424): avc: denied { bind } for pid=4553 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.767070][ T29] audit: type=1400 audit(1770331117.246:1425): avc: denied { listen } for pid=4553 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.786708][ T29] audit: type=1400 audit(1770331117.246:1426): avc: denied { accept } for pid=4553 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.807522][ T29] audit: type=1400 audit(1770331117.316:1427): avc: denied { read } for pid=4553 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.927544][ T4567] FAULT_INJECTION: forcing a failure. [ 48.927544][ T4567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.940803][ T4567] CPU: 0 UID: 0 PID: 4567 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.940829][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.940842][ T4567] Call Trace: [ 48.940849][ T4567] [ 48.940874][ T4567] __dump_stack+0x1d/0x30 [ 48.940908][ T4567] dump_stack_lvl+0x95/0xd0 [ 48.940963][ T4567] dump_stack+0x15/0x1b [ 48.940981][ T4567] should_fail_ex+0x263/0x280 [ 48.941009][ T4567] should_fail+0xb/0x20 [ 48.941110][ T4567] should_fail_usercopy+0x1a/0x20 [ 48.941198][ T4567] _copy_to_user+0x20/0xa0 [ 48.941218][ T4567] simple_read_from_buffer+0xb5/0x130 [ 48.941258][ T4567] proc_fail_nth_read+0x10e/0x150 [ 48.941285][ T4567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.941314][ T4567] vfs_read+0x1ab/0x7f0 [ 48.941403][ T4567] ? __rcu_read_unlock+0x4e/0x70 [ 48.941428][ T4567] ? __fget_files+0x184/0x1c0 [ 48.941447][ T4567] ? mutex_lock+0x57/0x90 [ 48.941560][ T4567] ksys_read+0xdc/0x1a0 [ 48.941578][ T4567] __x64_sys_read+0x40/0x50 [ 48.941599][ T4567] x64_sys_call+0x2889/0x3000 [ 48.941628][ T4567] do_syscall_64+0xc0/0x2a0 [ 48.941727][ T4567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.941750][ T4567] RIP: 0033:0x7f0915f4b78e [ 48.941764][ T4567] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 48.941810][ T4567] RSP: 002b:00007f09149defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.941876][ T4567] RAX: ffffffffffffffda RBX: 00007f09149df6c0 RCX: 00007f0915f4b78e [ 48.941893][ T4567] RDX: 000000000000000f RSI: 00007f09149df0a0 RDI: 0000000000000004 [ 48.941904][ T4567] RBP: 00007f09149df090 R08: 0000000000000000 R09: 0000000000000000 [ 48.941981][ T4567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.941994][ T4567] R13: 00007f0916206038 R14: 00007f0916205fa0 R15: 00007ffd942248e8 [ 48.942016][ T4567] [ 48.957217][ T4563] bond1: option ad_select: invalid value (4) [ 49.082859][ T4571] FAULT_INJECTION: forcing a failure. [ 49.082859][ T4571] name failslab, interval 1, probability 0, space 0, times 0 [ 49.153641][ T4571] CPU: 0 UID: 0 PID: 4571 Comm: syz.1.371 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.153691][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.153708][ T4571] Call Trace: [ 49.153717][ T4571] [ 49.153728][ T4571] __dump_stack+0x1d/0x30 [ 49.153759][ T4571] dump_stack_lvl+0x95/0xd0 [ 49.153793][ T4571] dump_stack+0x15/0x1b [ 49.153820][ T4571] should_fail_ex+0x263/0x280 [ 49.153867][ T4571] should_failslab+0x8c/0xb0 [ 49.153897][ T4571] __kmalloc_noprof+0xb8/0x580 [ 49.153990][ T4571] ? io_cache_alloc_new+0x2a/0xb0 [ 49.154053][ T4571] io_cache_alloc_new+0x2a/0xb0 [ 49.154133][ T4571] __io_prep_rw+0x118/0x710 [ 49.154220][ T4571] ? __io_alloc_req_refill+0x141/0x1e0 [ 49.154251][ T4571] io_prep_read+0x31/0xe0 [ 49.154276][ T4571] ? blk_start_plug_nr_ios+0xc2/0xe0 [ 49.154324][ T4571] io_submit_sqes+0x70e/0x11b0 [ 49.154376][ T4571] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 49.154477][ T4571] ? __rcu_read_unlock+0x4e/0x70 [ 49.154505][ T4571] ? get_pid_task+0x96/0xd0 [ 49.154532][ T4571] ? proc_fail_nth_write+0x13b/0x160 [ 49.154596][ T4571] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.154624][ T4571] ? vfs_write+0x86e/0x9f0 [ 49.154640][ T4571] ? __rcu_read_unlock+0x4e/0x70 [ 49.154676][ T4571] ? __fget_files+0x184/0x1c0 [ 49.154703][ T4571] ? mutex_lock+0x57/0x90 [ 49.154727][ T4571] ? mutex_unlock+0x4e/0x90 [ 49.154810][ T4571] ? fput+0x8f/0xc0 [ 49.154840][ T4571] __x64_sys_io_uring_enter+0x78/0x90 [ 49.154873][ T4571] x64_sys_call+0x27e4/0x3000 [ 49.154896][ T4571] do_syscall_64+0xc0/0x2a0 [ 49.154949][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.154981][ T4571] RIP: 0033:0x7f3a6712aeb9 [ 49.154995][ T4571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.155049][ T4571] RSP: 002b:00007f3a65b7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 49.155070][ T4571] RAX: ffffffffffffffda RBX: 00007f3a673a5fa0 RCX: 00007f3a6712aeb9 [ 49.155155][ T4571] RDX: 00000000000004c3 RSI: 0000000000004be7 RDI: 0000000000000004 [ 49.155166][ T4571] RBP: 00007f3a65b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.155177][ T4571] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 49.155187][ T4571] R13: 00007f3a673a6038 R14: 00007f3a673a5fa0 R15: 00007ffdeb034fe8 [ 49.155204][ T4571] [ 49.156395][ T4563] bond1 (unregistering): Released all slaves [ 49.199272][ T4573] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4573 comm=syz.3.372 [ 49.317437][ T4574] netlink: 232 bytes leftover after parsing attributes in process `syz.3.372'. [ 49.360338][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.524388][ T29] audit: type=1326 audit(1770331118.036:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 49.547943][ T29] audit: type=1326 audit(1770331118.036:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4582 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 49.584593][ T4588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.377'. [ 49.622386][ T4573] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.629715][ T4573] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.696750][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.706942][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.782784][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.819634][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.844242][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.854939][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.016298][ T4619] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 50.661442][ T4620] FAULT_INJECTION: forcing a failure. [ 50.661442][ T4620] name failslab, interval 1, probability 0, space 0, times 0 [ 50.674798][ T4620] CPU: 1 UID: 0 PID: 4620 Comm: syz.2.378 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.674873][ T4620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.674883][ T4620] Call Trace: [ 50.674890][ T4620] [ 50.674907][ T4620] __dump_stack+0x1d/0x30 [ 50.674933][ T4620] dump_stack_lvl+0x95/0xd0 [ 50.674957][ T4620] dump_stack+0x15/0x1b [ 50.674979][ T4620] should_fail_ex+0x263/0x280 [ 50.675071][ T4620] should_failslab+0x8c/0xb0 [ 50.675093][ T4620] __kmalloc_noprof+0xb8/0x580 [ 50.675120][ T4620] ? kernfs_fop_write_iter+0xe2/0x300 [ 50.675207][ T4620] kernfs_fop_write_iter+0xe2/0x300 [ 50.675235][ T4620] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 50.675262][ T4620] vfs_write+0x5a6/0x9f0 [ 50.675287][ T4620] ksys_write+0xdc/0x1a0 [ 50.675365][ T4620] __x64_sys_write+0x40/0x50 [ 50.675381][ T4620] x64_sys_call+0x2847/0x3000 [ 50.675403][ T4620] do_syscall_64+0xc0/0x2a0 [ 50.675464][ T4620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.675483][ T4620] RIP: 0033:0x7f614f59aeb9 [ 50.675505][ T4620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.675580][ T4620] RSP: 002b:00007f614dfd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.675676][ T4620] RAX: ffffffffffffffda RBX: 00007f614f816090 RCX: 00007f614f59aeb9 [ 50.675692][ T4620] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000008 [ 50.675707][ T4620] RBP: 00007f614dfd6090 R08: 0000000000000000 R09: 0000000000000000 [ 50.675754][ T4620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.675765][ T4620] R13: 00007f614f816128 R14: 00007f614f816090 R15: 00007fff6600b348 [ 50.675783][ T4620] [ 50.905922][ T4628] xt_recent: Unsupported userspace flags (000000b1) [ 50.907119][ T4625] syz_tun: entered allmulticast mode [ 50.945110][ T4625] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 51.043020][ T4630] bond1: option ad_select: invalid value (4) [ 51.163029][ T4630] bond1 (unregistering): Released all slaves [ 51.222546][ T4638] vlan0: entered promiscuous mode [ 51.498739][ T4651] syz.3.389 uses obsolete (PF_INET,SOCK_PACKET) [ 51.719734][ T4624] syz_tun: left allmulticast mode [ 51.760108][ T4653] bond1 (unregistering): Released all slaves [ 51.817096][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 51.885484][ T4657] bond1 (unregistering): Released all slaves [ 51.915105][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 52.001102][ T4665] lo speed is unknown, defaulting to 1000 [ 52.091640][ T4674] netlink: 104 bytes leftover after parsing attributes in process `syz.0.398'. [ 52.159568][ T4677] bond1: option ad_select: invalid value (4) [ 52.173588][ T4677] bond1 (unregistering): Released all slaves [ 52.301071][ T4679] loop1: detected capacity change from 0 to 4096 [ 52.325685][ T4679] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.332177][ T4679] EXT4-fs: test_dummy_encryption option not supported [ 52.464724][ T4697] loop4: detected capacity change from 0 to 512 [ 52.472010][ T4697] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 52.485568][ T4697] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 52.501721][ T3520] udevd[3520]: incorrect jbd checksum on /dev/loop4 [ 52.520298][ T3520] udevd[3520]: incorrect jbd checksum on /dev/loop4 [ 52.541636][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 52.547950][ T29] audit: type=1400 audit(1770331121.046:1531): avc: denied { bind } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.660266][ T29] audit: type=1400 audit(1770331121.086:1532): avc: denied { create } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.679835][ T29] audit: type=1400 audit(1770331121.086:1533): avc: denied { tracepoint } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.699551][ T29] audit: type=1400 audit(1770331121.086:1534): avc: denied { create } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.719434][ T29] audit: type=1400 audit(1770331121.086:1535): avc: denied { bind } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 52.738596][ T29] audit: type=1400 audit(1770331121.086:1536): avc: denied { create } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.758655][ T29] audit: type=1400 audit(1770331121.086:1537): avc: denied { bind } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.777917][ T29] audit: type=1400 audit(1770331121.086:1538): avc: denied { write } for pid=4693 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.797742][ T29] audit: type=1400 audit(1770331121.096:1539): avc: denied { name_bind } for pid=4699 comm="syz.2.408" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 52.819274][ T29] audit: type=1400 audit(1770331121.096:1540): avc: denied { node_bind } for pid=4699 comm="syz.2.408" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.840127][ T4710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 52.919906][ T4665] geneve0: entered promiscuous mode [ 52.925904][ T4665] geneve0: entered allmulticast mode [ 53.058025][ T4729] loop4: detected capacity change from 0 to 512 [ 53.065296][ T4729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.108483][ T4729] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.418: iget: bad extended attribute block 262144 [ 53.138793][ T4729] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.418: couldn't read orphan inode 15 (err -117) [ 53.171967][ T4735] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4735 comm=syz.2.420 [ 53.188593][ T4729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.217933][ T4735] netlink: 232 bytes leftover after parsing attributes in process `syz.2.420'. [ 53.288527][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.292174][ T4740] loop0: detected capacity change from 0 to 512 [ 53.295899][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.344023][ T4740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.361102][ T4740] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.414249][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.439779][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.452280][ T4735] batadv_slave_1: left promiscuous mode [ 53.522879][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.561395][ T411] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.570533][ T411] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.610921][ T411] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.619899][ T411] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.629799][ T411] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.638839][ T411] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.647960][ T411] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.656912][ T411] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.776933][ T4766] loop1: detected capacity change from 0 to 1024 [ 53.812773][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.856852][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.899852][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.065330][ T4788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.437'. [ 54.211973][ T4804] loop4: detected capacity change from 0 to 512 [ 54.239823][ T4804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.249907][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 54.274303][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.288098][ T4804] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.443: iget: bad extended attribute block 262144 [ 54.310384][ T4809] loop3: detected capacity change from 0 to 4096 [ 54.322815][ T4811] bond1: option ad_select: invalid value (4) [ 54.329629][ T4811] bond1 (unregistering): Released all slaves [ 54.336459][ T4804] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.443: couldn't read orphan inode 15 (err -117) [ 54.350696][ T4809] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.357208][ T4809] EXT4-fs: test_dummy_encryption option not supported [ 54.383530][ T4804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.687408][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.703417][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.943162][ T4840] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.456' sets config #4 [ 55.011512][ T3393] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 55.024957][ T3393] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.062892][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.070187][ T4850] loop2: detected capacity change from 0 to 512 [ 55.078931][ T4846] loop1: detected capacity change from 0 to 4096 [ 55.088648][ T4846] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.095211][ T4846] EXT4-fs: test_dummy_encryption option not supported [ 55.147773][ T4854] bond1 (unregistering): Released all slaves [ 55.185998][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 55.247566][ T4866] veth1_to_bond: entered allmulticast mode [ 55.257996][ T4866] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 55.268266][ T4865] veth1_to_bond: left allmulticast mode [ 55.470812][ T4885] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.525612][ T4891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.473'. [ 55.634807][ T4903] netlink: 104 bytes leftover after parsing attributes in process `syz.4.476'. [ 55.806958][ T4927] FAULT_INJECTION: forcing a failure. [ 55.806958][ T4927] name failslab, interval 1, probability 0, space 0, times 0 [ 55.819700][ T4927] CPU: 0 UID: 0 PID: 4927 Comm: syz.4.487 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.819739][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.819750][ T4927] Call Trace: [ 55.819755][ T4927] [ 55.819761][ T4927] __dump_stack+0x1d/0x30 [ 55.819782][ T4927] dump_stack_lvl+0x95/0xd0 [ 55.819802][ T4927] dump_stack+0x15/0x1b [ 55.819874][ T4927] should_fail_ex+0x263/0x280 [ 55.819905][ T4927] should_failslab+0x8c/0xb0 [ 55.819930][ T4927] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 55.819960][ T4927] ? __alloc_skb+0x2f0/0x4b0 [ 55.820075][ T4927] __alloc_skb+0x2f0/0x4b0 [ 55.820110][ T4927] ? __alloc_skb+0x219/0x4b0 [ 55.820184][ T4927] netlink_alloc_large_skb+0xbf/0xf0 [ 55.820219][ T4927] netlink_sendmsg+0x40c/0x6f0 [ 55.820323][ T4927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.820342][ T4927] ____sys_sendmsg+0x5af/0x600 [ 55.820415][ T4927] ___sys_sendmsg+0x195/0x1e0 [ 55.820443][ T4927] __x64_sys_sendmsg+0xd4/0x160 [ 55.820468][ T4927] x64_sys_call+0x17ba/0x3000 [ 55.820490][ T4927] do_syscall_64+0xc0/0x2a0 [ 55.820550][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.820570][ T4927] RIP: 0033:0x7f500a9aaeb9 [ 55.820583][ T4927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.820600][ T4927] RSP: 002b:00007f50093ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.820617][ T4927] RAX: ffffffffffffffda RBX: 00007f500ac25fa0 RCX: 00007f500a9aaeb9 [ 55.820637][ T4927] RDX: 0000000020040844 RSI: 0000200000000340 RDI: 0000000000000003 [ 55.820692][ T4927] RBP: 00007f50093ff090 R08: 0000000000000000 R09: 0000000000000000 [ 55.820708][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.820741][ T4927] R13: 00007f500ac26038 R14: 00007f500ac25fa0 R15: 00007ffcdcfb8b48 [ 55.820767][ T4927] [ 56.058428][ T4930] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 56.080791][ T4935] netlink: 104 bytes leftover after parsing attributes in process `syz.4.490'. [ 56.098657][ T4936] netlink: 'syz.2.491': attribute type 1 has an invalid length. [ 56.113202][ T4936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.139462][ T4936] bond1: (slave veth5): Enslaving as an active interface with a down link [ 56.162875][ T4936] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 56.170118][ T4936] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 56.199933][ T4944] loop1: detected capacity change from 0 to 512 [ 56.243481][ T4944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.256320][ T4949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.269167][ T4944] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.292073][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /91/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 56.317361][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz-executor: path /91/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 56.338456][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /91/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 56.367838][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /91/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 56.403781][ T3315] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 56.423662][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.436052][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /91/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 56.458368][ T4949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.472480][ T3315] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 56.535514][ T4949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.574587][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.587533][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /91/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 56.623161][ T3315] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 56.652043][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.663688][ T3315] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /91/file0/file0: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 56.685872][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.697807][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.709861][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.710902][ T4949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.723145][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.743686][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.755557][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.767567][ T3315] EXT4-fs warning (device loop1): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 56.821139][ T411] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.835084][ T411] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.850079][ T411] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.853802][ T4505] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.866158][ T411] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.040207][ T411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.094668][ T411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.165055][ T411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.224992][ T411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.292208][ T411] bridge_slave_1: left allmulticast mode [ 57.297928][ T411] bridge_slave_1: left promiscuous mode [ 57.304226][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.312165][ T411] bridge_slave_0: left allmulticast mode [ 57.317798][ T411] bridge_slave_0: left promiscuous mode [ 57.323468][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.433645][ T411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.443640][ T411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.453796][ T411] bond0 (unregistering): Released all slaves [ 57.485597][ T411] tipc: Left network mode [ 57.493469][ T411] hsr_slave_0: left promiscuous mode [ 57.499121][ T411] hsr_slave_1: left promiscuous mode [ 57.505013][ T411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.512480][ T411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.520183][ T411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.527640][ T411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.538891][ T411] veth1_macvtap: left promiscuous mode [ 57.544483][ T411] veth0_macvtap: left promiscuous mode [ 57.550042][ T411] veth1_vlan: left promiscuous mode [ 57.574891][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 57.574906][ T29] audit: type=1400 audit(1770331126.086:1677): avc: denied { add_name } for pid=4967 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.604146][ T29] audit: type=1400 audit(1770331126.086:1678): avc: denied { create } for pid=4967 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.630161][ T29] audit: type=1400 audit(1770331126.116:1679): avc: denied { write } for pid=4967 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=3501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.656433][ T29] audit: type=1400 audit(1770331126.116:1680): avc: denied { append } for pid=4967 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=3501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.683972][ T29] audit: type=1400 audit(1770331126.186:1681): avc: denied { remove_name } for pid=4978 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.707489][ T29] audit: type=1400 audit(1770331126.186:1682): avc: denied { unlink } for pid=4978 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=3501 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.749204][ T411] team0 (unregistering): Port device team_slave_1 removed [ 57.759646][ T411] team0 (unregistering): Port device team_slave_0 removed [ 71.276032][ T5095] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5095 comm=syz.2.504 [ 71.292857][ T5097] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5097 comm=syz.3.505 [ 71.314332][ T5094] bond1: option ad_select: invalid value (4) [ 71.323336][ T5095] netlink: 232 bytes leftover after parsing attributes in process `syz.2.504'. [ 71.332961][ T5097] netlink: 232 bytes leftover after parsing attributes in process `syz.3.505'. [ 71.346260][ T29] audit: type=1400 audit(1770331139.856:1683): avc: denied { mounton } for pid=5104 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.347281][ T5094] bond1 (unregistering): Released all slaves [ 71.404562][ T5103] bond1: option ad_select: invalid value (4) [ 71.412639][ T5103] bond1 (unregistering): Released all slaves [ 71.429163][ T29] audit: type=1400 audit(1770331139.936:1684): avc: denied { connect } for pid=5111 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.449154][ T29] audit: type=1400 audit(1770331139.936:1685): avc: denied { write } for pid=5111 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.507731][ T29] audit: type=1400 audit(1770331139.986:1686): avc: denied { ioctl } for pid=5111 comm="syz.2.508" path="socket:[10753]" dev="sockfs" ino=10753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.580771][ T5124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 71.599515][ T5120] loop2: detected capacity change from 0 to 8192 [ 71.608774][ T5104] lo speed is unknown, defaulting to 1000 [ 71.617886][ T29] audit: type=1400 audit(1770331140.126:1687): avc: denied { mount } for pid=5127 comm="syz.0.511" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.673082][ T29] audit: type=1400 audit(1770331140.166:1688): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.687117][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 71.706342][ T29] audit: type=1400 audit(1770331140.186:1689): avc: denied { mount } for pid=5111 comm="syz.2.508" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 71.780386][ T29] audit: type=1400 audit(1770331140.286:1690): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 71.875003][ T5142] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5142 comm=syz.3.517 [ 71.883113][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 71.917016][ T5146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 71.927241][ T5142] netlink: 232 bytes leftover after parsing attributes in process `syz.3.517'. [ 71.942746][ T5144] loop0: detected capacity change from 0 to 4096 [ 71.955295][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.963105][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.969645][ T5144] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.970377][ T5104] bridge_slave_0: entered allmulticast mode [ 71.976640][ T5144] EXT4-fs: test_dummy_encryption option not supported [ 71.983820][ T5104] bridge_slave_0: entered promiscuous mode [ 71.997012][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.004194][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.011885][ T5104] bridge_slave_1: entered allmulticast mode [ 72.018652][ T5104] bridge_slave_1: entered promiscuous mode [ 72.038550][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.048911][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.072366][ T5104] team0: Port device team_slave_0 added [ 72.079153][ T5104] team0: Port device team_slave_1 added [ 72.109963][ T5158] loop0: detected capacity change from 0 to 512 [ 72.123030][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.130103][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.156843][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.161562][ T5160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'. [ 72.168470][ T5158] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.185038][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.192030][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.215312][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 72.219358][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.227054][ T5153] netlink: 'syz.4.519': attribute type 5 has an invalid length. [ 72.246956][ T5158] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.521: iget: bad extended attribute block 262144 [ 72.260120][ T5158] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.521: couldn't read orphan inode 15 (err -117) [ 72.273994][ T5158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.296344][ T5104] hsr_slave_0: entered promiscuous mode [ 72.305536][ T5104] hsr_slave_1: entered promiscuous mode [ 72.311460][ T5104] debugfs: 'hsr0' already exists in 'hsr' [ 72.317263][ T5104] Cannot create hsr debugfs directory [ 72.414920][ T5170] loop4: detected capacity change from 0 to 8192 [ 72.437119][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 72.604492][ T5198] loop3: detected capacity change from 0 to 4096 [ 72.621969][ T5198] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.628486][ T5198] EXT4-fs: test_dummy_encryption option not supported [ 72.638737][ T5104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.649231][ T5104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.660751][ T5104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.683980][ T5104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.697346][ T5214] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5214 comm=syz.4.531 [ 72.722770][ T5214] netlink: 232 bytes leftover after parsing attributes in process `syz.4.531'. [ 72.825270][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.832727][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.957542][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.978923][ T5214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.120105][ T3393] lo speed is unknown, defaulting to 1000 [ 73.126005][ T3393] syz2: Port: 1 Link DOWN [ 73.157062][ T5261] xt_recent: Unsupported userspace flags (000000b1) [ 73.168366][ T52] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.178301][ T52] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.207140][ T52] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.243933][ T52] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.308018][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.348994][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.382899][ T5271] loop3: detected capacity change from 0 to 4096 [ 73.416692][ T5271] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.423261][ T5271] EXT4-fs: test_dummy_encryption option not supported [ 73.576179][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.583357][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.616094][ T5104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.626631][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.640488][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.647819][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.676264][ T29] audit: type=1400 audit(1770331142.186:1691): avc: denied { bind } for pid=5293 comm="syz.3.548" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.696616][ T29] audit: type=1400 audit(1770331142.186:1692): avc: denied { node_bind } for pid=5293 comm="syz.3.548" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 73.725688][ T5294] loop3: detected capacity change from 0 to 1024 [ 73.766703][ T5300] loop4: detected capacity change from 0 to 1024 [ 73.804307][ T5294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.858724][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.874918][ T5300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.885841][ T5294] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.548: inode #1717973040: comm syz.3.548: iget: illegal inode # [ 73.908340][ T5294] EXT4-fs (loop3): Remounting filesystem read-only [ 73.915294][ T5294] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.3.548: cleanup dec ref error -30 [ 73.929035][ T5294] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.548: dec ref error=-30 [ 73.943184][ T5316] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5316 comm=syz.2.550 [ 73.958847][ T5300] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.549: inode #1717973040: comm syz.4.549: iget: illegal inode # [ 73.993243][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.003065][ T5300] EXT4-fs (loop4): Remounting filesystem read-only [ 74.009610][ T5300] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.4.549: cleanup dec ref error -30 [ 74.023938][ T5300] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.549: dec ref error=-30 [ 74.044402][ T5320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.079325][ T5320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.087798][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.129702][ T5104] veth0_vlan: entered promiscuous mode [ 74.152460][ T5104] veth1_vlan: entered promiscuous mode [ 74.180795][ T5104] veth0_macvtap: entered promiscuous mode [ 74.183215][ T5331] loop2: detected capacity change from 0 to 4096 [ 74.202878][ T5104] veth1_macvtap: entered promiscuous mode [ 74.225385][ T5331] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.232596][ T5331] EXT4-fs: test_dummy_encryption option not supported [ 74.259375][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.298943][ T5339] bond1: option ad_select: invalid value (4) [ 74.305704][ T5339] bond1 (unregistering): Released all slaves [ 74.316524][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.337216][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.387819][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.415796][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.458321][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474595][ T5363] loop1: detected capacity change from 0 to 1024 [ 74.517223][ T5363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.634168][ T5382] Invalid ELF header magic: != ELF [ 74.713454][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.279121][ T5435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.292489][ T5437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.301053][ T5437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.320927][ T5435] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.575: inode #1717973040: comm syz.4.575: iget: illegal inode # [ 75.360558][ T5435] EXT4-fs (loop4): Remounting filesystem read-only [ 75.369753][ T5435] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.4.575: cleanup dec ref error -30 [ 75.406111][ T5435] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.575: dec ref error=-30 [ 75.477170][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.541697][ T5462] EXT4-fs: quotafile must be on filesystem root [ 75.595802][ T5465] bond1 (unregistering): Released all slaves [ 75.753062][ T5485] bond1: option ad_select: invalid value (4) [ 75.761289][ T5485] bond1 (unregistering): Released all slaves [ 75.771788][ T5487] Attempt to read inode for relocated directory [ 75.913771][ T5502] xt_recent: Unsupported userspace flags (000000b1) [ 75.945643][ T5498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.998093][ T5498] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.590: iget: bad extended attribute block 262144 [ 76.022925][ T5498] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.590: couldn't read orphan inode 15 (err -117) [ 76.068112][ T5498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.144710][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.404498][ T5536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.427292][ T5536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.481523][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 76.481600][ T29] audit: type=1326 audit(1770331144.986:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.537379][ T5532] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.543960][ T5532] EXT4-fs: test_dummy_encryption option not supported [ 76.560614][ T29] audit: type=1326 audit(1770331144.986:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.584760][ T29] audit: type=1326 audit(1770331144.996:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.608191][ T29] audit: type=1326 audit(1770331144.996:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.632261][ T29] audit: type=1326 audit(1770331144.996:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.655701][ T29] audit: type=1326 audit(1770331144.996:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.679596][ T29] audit: type=1326 audit(1770331144.996:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.703747][ T29] audit: type=1326 audit(1770331144.996:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.727103][ T29] audit: type=1326 audit(1770331144.996:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.751017][ T29] audit: type=1326 audit(1770331144.996:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5509 comm="syz.0.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f02e93baeb9 code=0x7ffc0000 [ 76.776157][ T5548] __nla_validate_parse: 9 callbacks suppressed [ 76.776202][ T5548] netlink: 68 bytes leftover after parsing attributes in process `syz.3.601'. [ 76.903486][ T5558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'. [ 76.931716][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 77.116632][ T5584] set_capacity_and_notify: 6 callbacks suppressed [ 77.116649][ T5584] loop3: detected capacity change from 0 to 4096 [ 77.150786][ T5594] netlink: 68 bytes leftover after parsing attributes in process `syz.2.615'. [ 77.196963][ T5584] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.203565][ T5584] EXT4-fs: test_dummy_encryption option not supported [ 77.210860][ T5597] xt_recent: Unsupported userspace flags (000000b1) [ 77.454559][ T5611] loop1: detected capacity change from 0 to 4096 [ 77.462642][ T5611] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.469108][ T5611] EXT4-fs: test_dummy_encryption option not supported [ 77.520666][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.542090][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.603283][ T5627] loop2: detected capacity change from 0 to 4096 [ 77.610027][ T5627] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.616675][ T5627] EXT4-fs: test_dummy_encryption option not supported [ 77.666139][ T5631] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 77.761448][ T5639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'. [ 77.809894][ T5643] loop1: detected capacity change from 0 to 1024 [ 77.812984][ T5641] loop2: detected capacity change from 0 to 4096 [ 77.837192][ T5641] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.843809][ T5641] EXT4-fs: test_dummy_encryption option not supported [ 77.861812][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.898607][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.917270][ T5650] loop0: detected capacity change from 0 to 512 [ 77.928000][ T5650] EXT4-fs: Ignoring removed nobh option [ 77.954384][ T5650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.968422][ T5652] bond2 (unregistering): Released all slaves [ 77.974847][ T5650] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.989148][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 78.003609][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 78.045817][ T5660] loop1: detected capacity change from 0 to 512 [ 78.052591][ T5660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.057026][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.089980][ T5660] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.642: iget: bad extended attribute block 262144 [ 78.108379][ T5660] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.642: couldn't read orphan inode 15 (err -117) [ 78.136012][ T5663] netlink: 56 bytes leftover after parsing attributes in process `syz.2.644'. [ 78.144991][ T5663] netlink: 56 bytes leftover after parsing attributes in process `syz.2.644'. [ 78.157682][ T5660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.189311][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.223711][ T5667] loop0: detected capacity change from 0 to 4096 [ 78.230997][ T5667] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.237564][ T5667] EXT4-fs: test_dummy_encryption option not supported [ 78.430183][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.446385][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.493525][ T5694] gre1: entered allmulticast mode [ 78.546824][ T5697] xt_recent: Unsupported userspace flags (000000b1) [ 78.579234][ T5699] loop1: detected capacity change from 0 to 512 [ 78.589980][ T5699] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.603564][ T5699] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.656: iget: bad extended attribute block 262144 [ 78.633197][ T5699] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.656: couldn't read orphan inode 15 (err -117) [ 78.758943][ T5699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.786468][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.066371][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 79.150257][ T5719] loop3: detected capacity change from 0 to 4096 [ 79.157368][ T5719] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.163899][ T5719] EXT4-fs: test_dummy_encryption option not supported [ 79.208452][ T5721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.662'. [ 79.326272][ T5729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.399446][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.452522][ T5735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.476065][ T5735] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.667: iget: bad extended attribute block 262144 [ 79.502196][ T5735] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.667: couldn't read orphan inode 15 (err -117) [ 79.508072][ T5738] bond2: option ad_select: invalid value (4) [ 79.524659][ T5735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.537813][ T5738] bond2 (unregistering): Released all slaves [ 79.555023][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.568367][ T5741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.576923][ T5741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.730883][ T5755] x_tables: unsorted entry at hook 2 [ 79.814677][ T5762] bond2 (unregistering): Released all slaves [ 79.870422][ T5770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.901873][ T5772] gtp0: entered promiscuous mode [ 79.906873][ T5772] gtp0: entered allmulticast mode [ 79.913956][ T5770] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.680: iget: bad extended attribute block 262144 [ 79.937130][ T5770] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.680: couldn't read orphan inode 15 (err -117) [ 79.965445][ T5770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.114860][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.166866][ T5798] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.233452][ T5798] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.315348][ T5798] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.398155][ T5813] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.405216][ T5813] EXT4-fs: test_dummy_encryption option not supported [ 80.459001][ T5815] bond1 (unregistering): Released all slaves [ 80.569067][ T5824] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.610745][ T5824] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.699: iget: bad extended attribute block 262144 [ 80.632812][ T5824] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.699: couldn't read orphan inode 15 (err -117) [ 80.645517][ T5798] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.656760][ T5824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.665451][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.706480][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.716297][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.791047][ T5836] netlink: 'syz.3.703': attribute type 1 has an invalid length. [ 80.814296][ T1865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.831827][ T1865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.850257][ T1865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.860310][ T1865] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.008655][ T5844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.080090][ T5852] capability: warning: `syz.0.711' uses deprecated v2 capabilities in a way that may be insecure [ 81.142072][ T5850] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.148690][ T5850] EXT4-fs: test_dummy_encryption option not supported [ 81.158032][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.197056][ T5854] 9p: Bad value for 'wfdno' [ 81.222915][ T5858] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.251075][ T5860] bond2 (unregistering): Released all slaves [ 81.334197][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.379230][ T5868] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 81.461754][ T5883] FAT-fs (loop3): bogus number of reserved sectors [ 81.468338][ T5883] FAT-fs (loop3): Can't find a valid FAT filesystem [ 81.512584][ T5884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.589506][ T5891] 9p: Bad value for 'wfdno' [ 81.637841][ T5893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.646438][ T5893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.665559][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.692425][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 81.692437][ T29] audit: type=1326 audit(1770331150.206:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.741881][ T5899] bond2: option ad_select: invalid value (4) [ 81.760490][ T5899] bond2 (unregistering): Released all slaves [ 81.800019][ T29] audit: type=1326 audit(1770331150.236:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.824113][ T29] audit: type=1326 audit(1770331150.236:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.847470][ T29] audit: type=1326 audit(1770331150.236:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.871333][ T29] audit: type=1326 audit(1770331150.236:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.895266][ T29] audit: type=1326 audit(1770331150.236:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.918611][ T29] audit: type=1326 audit(1770331150.236:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.919827][ T5896] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.943354][ T29] audit: type=1326 audit(1770331150.236:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 81.948441][ T5896] EXT4-fs: test_dummy_encryption option not supported [ 81.973120][ T29] audit: type=1326 audit(1770331150.236:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 82.002399][ T29] audit: type=1326 audit(1770331150.236:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5894 comm="syz.3.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0915f4b78e code=0x7ffc0000 [ 82.110694][ T5910] __nla_validate_parse: 11 callbacks suppressed [ 82.110713][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.734'. [ 82.333163][ T5940] set_capacity_and_notify: 12 callbacks suppressed [ 82.333178][ T5940] loop2: detected capacity change from 0 to 1024 [ 82.346536][ T5941] loop1: detected capacity change from 0 to 512 [ 82.453647][ T5940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.468292][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.492270][ T5942] loop4: detected capacity change from 0 to 8192 [ 82.550742][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.580789][ T5949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.749'. [ 82.608434][ T5951] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5951 comm=syz.0.748 [ 82.677610][ T5955] xt_recent: Unsupported userspace flags (000000b1) [ 82.686223][ T5951] netlink: 232 bytes leftover after parsing attributes in process `syz.0.748'. [ 82.715734][ T5104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.752271][ T5963] loop2: detected capacity change from 0 to 512 [ 82.758923][ T5963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.797479][ T5971] loop0: detected capacity change from 0 to 1024 [ 82.804475][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'. [ 82.817269][ T5963] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.754: iget: bad extended attribute block 262144 [ 82.847801][ T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.855408][ T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.864359][ T5963] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.754: couldn't read orphan inode 15 (err -117) [ 82.876879][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.890771][ T5971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.905969][ T4596] IPVS: starting estimator thread 0... [ 82.923830][ T5963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.949985][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.985368][ T5981] loop3: detected capacity change from 0 to 764 [ 82.994205][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.011950][ T5979] IPVS: using max 2208 ests per chain, 110400 per kthread [ 83.026534][ T5981] Symlink component flag not implemented [ 83.055578][ T5990] 9p: Bad value for 'wfdno' [ 83.077239][ T5992] netlink: 104 bytes leftover after parsing attributes in process `syz.1.764'. [ 83.086321][ T5981] Symlink component flag not implemented (116) [ 83.176250][ T5998] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=5998 comm=syz.0.767 [ 83.224778][ T5998] netlink: 232 bytes leftover after parsing attributes in process `syz.0.767'. [ 83.242402][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 83.415458][ T6019] 9p: Bad value for 'wfdno' [ 83.437613][ T6024] FAULT_INJECTION: forcing a failure. [ 83.437613][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 83.451051][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.3.777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.451155][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.451170][ T6024] Call Trace: [ 83.451178][ T6024] [ 83.451186][ T6024] __dump_stack+0x1d/0x30 [ 83.451213][ T6024] dump_stack_lvl+0x95/0xd0 [ 83.451254][ T6024] dump_stack+0x15/0x1b [ 83.451270][ T6024] should_fail_ex+0x263/0x280 [ 83.451297][ T6024] should_failslab+0x8c/0xb0 [ 83.451330][ T6024] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 83.451358][ T6024] ? __alloc_skb+0x2f0/0x4b0 [ 83.451400][ T6024] __alloc_skb+0x2f0/0x4b0 [ 83.451532][ T6024] ? __alloc_skb+0x219/0x4b0 [ 83.451564][ T6024] netlink_alloc_large_skb+0xbf/0xf0 [ 83.451597][ T6024] netlink_sendmsg+0x40c/0x6f0 [ 83.451619][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.451644][ T6024] ____sys_sendmsg+0x5af/0x600 [ 83.451691][ T6024] ___sys_sendmsg+0x195/0x1e0 [ 83.451718][ T6024] __x64_sys_sendmsg+0xd4/0x160 [ 83.451741][ T6024] x64_sys_call+0x17ba/0x3000 [ 83.451768][ T6024] do_syscall_64+0xc0/0x2a0 [ 83.451830][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.451853][ T6024] RIP: 0033:0x7f0915f8aeb9 [ 83.451879][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.451895][ T6024] RSP: 002b:00007f09149df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.451916][ T6024] RAX: ffffffffffffffda RBX: 00007f0916205fa0 RCX: 00007f0915f8aeb9 [ 83.451941][ T6024] RDX: 000000000004c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 83.451956][ T6024] RBP: 00007f09149df090 R08: 0000000000000000 R09: 0000000000000000 [ 83.451971][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.451984][ T6024] R13: 00007f0916206038 R14: 00007f0916205fa0 R15: 00007ffd942248e8 [ 83.452006][ T6024] [ 83.645720][ T6021] lo speed is unknown, defaulting to 1000 [ 83.824389][ T6044] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.902860][ T6054] bond2: option ad_select: invalid value (4) [ 83.909455][ T6054] bond2 (unregistering): Released all slaves [ 83.922320][ T6044] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.067939][ T6074] xt_recent: Unsupported userspace flags (000000b1) [ 84.123743][ T6044] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.216806][ T6044] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.340838][ T411] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.353547][ T411] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.365615][ T411] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.377022][ T411] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.583784][ T6095] loop3: detected capacity change from 0 to 1024 [ 84.631998][ T6095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.669621][ T6097] bond1 (unregistering): Released all slaves [ 84.691803][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.711083][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.802'. [ 84.784306][ T6108] loop4: detected capacity change from 0 to 1024 [ 84.805963][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 84.815527][ T6108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.878833][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.962452][ T6122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.970930][ T6122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.046187][ T6131] loop2: detected capacity change from 0 to 1024 [ 85.082783][ T6131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.152531][ T6139] bond2 (unregistering): Released all slaves [ 85.210503][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 85.229241][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.293359][ T6150] FAULT_INJECTION: forcing a failure. [ 85.293359][ T6150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.306568][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.2.818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.306596][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.306610][ T6150] Call Trace: [ 85.306616][ T6150] [ 85.306624][ T6150] __dump_stack+0x1d/0x30 [ 85.306648][ T6150] dump_stack_lvl+0x95/0xd0 [ 85.306696][ T6150] dump_stack+0x15/0x1b [ 85.306755][ T6150] should_fail_ex+0x263/0x280 [ 85.306875][ T6150] should_fail+0xb/0x20 [ 85.306909][ T6150] should_fail_usercopy+0x1a/0x20 [ 85.307014][ T6150] _copy_to_user+0x20/0xa0 [ 85.307041][ T6150] simple_read_from_buffer+0xb5/0x130 [ 85.307077][ T6150] proc_fail_nth_read+0x10e/0x150 [ 85.307213][ T6150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.307299][ T6150] vfs_read+0x1ab/0x7f0 [ 85.307323][ T6150] ? __rcu_read_unlock+0x4e/0x70 [ 85.307362][ T6150] ? __fget_files+0x184/0x1c0 [ 85.307389][ T6150] ? mutex_lock+0x57/0x90 [ 85.307481][ T6150] ksys_read+0xdc/0x1a0 [ 85.307505][ T6150] __x64_sys_read+0x40/0x50 [ 85.307533][ T6150] x64_sys_call+0x2889/0x3000 [ 85.307640][ T6150] do_syscall_64+0xc0/0x2a0 [ 85.307681][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.307719][ T6150] RIP: 0033:0x7f614f55b78e [ 85.307736][ T6150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 85.307836][ T6150] RSP: 002b:00007f614dff6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.307861][ T6150] RAX: ffffffffffffffda RBX: 00007f614dff76c0 RCX: 00007f614f55b78e [ 85.307874][ T6150] RDX: 000000000000000f RSI: 00007f614dff70a0 RDI: 0000000000000004 [ 85.307950][ T6150] RBP: 00007f614dff7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.308041][ T6150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.308053][ T6150] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007fff6600b348 [ 85.308070][ T6150] [ 85.583248][ T6162] xt_recent: Unsupported userspace flags (000000b1) [ 86.765075][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.819561][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.938646][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.951724][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 86.957179][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.079171][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.087837][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 87.087850][ T29] audit: type=1326 audit(1770331155.606:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.119019][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.128623][ T29] audit: type=1326 audit(1770331155.606:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.152728][ T29] audit: type=1326 audit(1770331155.636:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.176019][ T29] audit: type=1326 audit(1770331155.636:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.199942][ T29] audit: type=1326 audit(1770331155.636:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.223862][ T29] audit: type=1326 audit(1770331155.636:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.247137][ T29] audit: type=1400 audit(1770331155.636:2066): avc: denied { bind } for pid=6292 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.267203][ T29] audit: type=1326 audit(1770331155.636:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.290530][ T29] audit: type=1326 audit(1770331155.636:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.314566][ T29] audit: type=1326 audit(1770331155.646:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6292 comm="syz.3.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0915f8aeb9 code=0x7ffc0000 [ 87.374411][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.387832][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.398380][ T6303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.407367][ T6301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.417127][ T6301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.427284][ T6303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.558003][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.567426][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.734210][ T6315] tipc: Can't bind to reserved service type 1 [ 87.818534][ T6318] lo speed is unknown, defaulting to 1000 [ 87.943296][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.964582][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.978332][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.988576][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.102274][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.110787][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.566183][ T6359] infiniband syz1: set down [ 88.570847][ T6359] infiniband syz1: added ipvlan0 [ 88.586640][ T6359] RDS/IB: syz1: added [ 88.591871][ T6359] smc: adding ib device syz1 with port count 1 [ 88.598095][ T6359] smc: ib device syz1 port 1 has no pnetid [ 88.687456][ T6366] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 88.890092][ T6387] 9pnet_virtio: no channels available for device syz [ 88.940566][ T6395] serio: Serial port ptm0 [ 89.003041][ T6405] netlink: 220 bytes leftover after parsing attributes in process `syz.0.932'. [ 89.299312][ T6428] tipc: Started in network mode [ 89.304249][ T6428] tipc: Node identity , cluster identity 4711 [ 89.310416][ T6428] tipc: Failed to obtain node identity [ 89.316542][ T6428] tipc: Enabling of bearer rejected, failed to enable media [ 89.403409][ T6439] 9pnet_virtio: no channels available for device syz [ 89.460541][ T6447] tap0: tun_chr_ioctl cmd 1074025675 [ 89.466533][ T6447] tap0: persist enabled [ 89.470965][ T6447] tap0: tun_chr_ioctl cmd 1074025675 [ 89.476304][ T6447] tap0: persist disabled [ 89.544351][ T6457] bridge0: port 3(syz_tun) entered blocking state [ 89.550866][ T6457] bridge0: port 3(syz_tun) entered disabled state [ 89.557539][ T6457] syz_tun: entered allmulticast mode [ 89.573875][ T6457] syz_tun: entered promiscuous mode [ 89.579512][ T6457] bridge0: port 3(syz_tun) entered blocking state [ 89.586020][ T6457] bridge0: port 3(syz_tun) entered forwarding state [ 89.621031][ T6464] only policy match revision 0 supported [ 89.621045][ T6464] unable to load match [ 89.813079][ T6485] syzkaller0: entered promiscuous mode [ 89.818613][ T6485] syzkaller0: entered allmulticast mode [ 89.865956][ T6487] 9pnet_virtio: no channels available for device syz [ 89.889733][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.897265][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.904998][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.912420][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.919927][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.927463][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.934919][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.942357][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.949842][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.957236][ T9] hid-generic 00A0:0086:0003.0005: unknown main item tag 0x0 [ 89.965441][ T9] hid-generic 00A0:0086:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 90.007868][ T6495] fido_id[6495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.027928][ T6501] 9pnet_virtio: no channels available for device syz [ 90.072928][ T6503] syzkaller0: entered promiscuous mode [ 90.078500][ T6503] syzkaller0: entered allmulticast mode [ 90.156438][ T6509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.170191][ T6507] netlink: 56 bytes leftover after parsing attributes in process `syz.2.978'. [ 90.183340][ T6509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.192469][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'. [ 90.290212][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.316458][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.461831][ T6532] loop5: detected capacity change from 0 to 7 [ 90.493780][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 90.503834][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 90.667771][ T6558] tipc: Started in network mode [ 90.672703][ T6558] tipc: Node identity b237327babb9, cluster identity 4711 [ 90.680727][ T6558] tipc: Enabled bearer , priority 0 [ 90.687967][ T6558] syzkaller0: entered promiscuous mode [ 90.693488][ T6558] syzkaller0: entered allmulticast mode [ 90.703995][ T6558] tipc: Resetting bearer [ 90.705952][ T6559] netlink: 'syz.4.1000': attribute type 3 has an invalid length. [ 90.717870][ T6557] tipc: Resetting bearer [ 90.725468][ T6557] tipc: Disabling bearer [ 90.944867][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.953773][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.972981][ T6605] usb usb7: usbfs: process 6605 (syz.2.1015) did not claim interface 0 before use [ 90.988583][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.004674][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 91.012331][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.212038][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.220713][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.313053][ T6621] 9pnet_virtio: no channels available for device syz [ 91.687947][ T6649] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 91.694552][ T6649] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 91.702939][ T6649] vhci_hcd vhci_hcd.0: Device attached [ 91.720654][ T6654] batman_adv: batadv0: Adding interface: dummy0 [ 91.727129][ T6654] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.754418][ T6654] batman_adv: batadv0: Interface activated: dummy0 [ 91.783331][ T6650] vhci_hcd: connection closed [ 91.783765][ T31] vhci_hcd vhci_hcd.0: stop threads [ 91.793843][ T31] vhci_hcd vhci_hcd.0: release socket [ 91.799341][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 91.876340][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 91.893377][ T6676] hsr_slave_0: left promiscuous mode [ 91.916626][ T6676] hsr_slave_1: left promiscuous mode [ 92.064061][ T6700] 9pnet_virtio: no channels available for device syz [ 92.072027][ T6703] syzkaller0: entered promiscuous mode [ 92.077709][ T6703] syzkaller0: entered allmulticast mode [ 92.282840][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.291493][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.381209][ T6748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1074'. [ 92.390389][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1074'. [ 92.390885][ T6747] sctp: [Deprecated]: syz.0.1075 (pid 6747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.390885][ T6747] Use struct sctp_sack_info instead [ 92.604804][ T6776] team0: No ports can be present during mode change [ 92.624476][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 92.624486][ T6778] hugetlbfs: Bad value '$' for mount option 'size' [ 92.624486][ T6778] [ 92.624490][ T29] audit: type=1400 audit(1770331160.947:2111): avc: denied { remount } for pid=6777 comm="syz.1.1088" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 93.113123][ T6847] loop4: detected capacity change from 0 to 7 [ 93.240258][ T6864] netlink: 'syz.3.1126': attribute type 4 has an invalid length. [ 93.415846][ T6886] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 93.439697][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.461923][ T29] audit: type=1400 audit(1770331161.723:2112): avc: denied { create } for pid=6885 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 93.489971][ T6886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.493814][ T29] audit: type=1400 audit(1770331161.733:2113): avc: denied { write } for pid=6885 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 93.510877][ T6886] bond1: (slave bond2): Enslaving as an active interface with a down link [ 93.558141][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1134'. [ 93.567805][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.652650][ T6909] geneve2: entered promiscuous mode [ 93.681369][ T6915] syzkaller0: entered promiscuous mode [ 93.686914][ T6915] syzkaller0: entered allmulticast mode [ 93.848455][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1155'. [ 93.903655][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 93.943712][ T6943] bridge_slave_1: left allmulticast mode [ 93.949569][ T6943] bridge_slave_1: left promiscuous mode [ 93.955391][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.980065][ T6943] bridge_slave_0: left allmulticast mode [ 93.985836][ T6943] bridge_slave_0: left promiscuous mode [ 93.991743][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.034615][ T6967] 9pnet_virtio: no channels available for device syz [ 94.051424][ T29] audit: type=1400 audit(1770331162.275:2114): avc: denied { read } for pid=6968 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 94.096480][ T29] audit: type=1400 audit(1770331162.312:2115): avc: denied { lock } for pid=6970 comm="syz.1.1172" path="socket:[17543]" dev="sockfs" ino=17543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.175573][ T29] audit: type=1400 audit(1770331162.397:2116): avc: denied { remount } for pid=6980 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.291532][ T29] audit: type=1400 audit(1770331162.509:2117): avc: denied { cpu } for pid=6999 comm="syz.4.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.905528][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1225'. [ 94.979549][ T7100] netlink: 'syz.1.1229': attribute type 4 has an invalid length. [ 95.174642][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1236'. [ 95.295294][ T7133] syzkaller1: entered promiscuous mode [ 95.300811][ T7133] syzkaller1: entered allmulticast mode [ 95.315282][ T7135] netlink: 'syz.0.1245': attribute type 4 has an invalid length. [ 95.429620][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 95.486828][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.698051][ T7152] geneve2: entered promiscuous mode [ 95.823673][ T36] IPVS: starting estimator thread 0... [ 95.917806][ T7169] lo speed is unknown, defaulting to 1000 [ 95.946577][ T7167] IPVS: using max 2784 ests per chain, 139200 per kthread [ 96.292675][ T36] IPVS: starting estimator thread 0... [ 96.335384][ T7197] netlink: 'syz.0.1272': attribute type 4 has an invalid length. [ 96.392292][ T7192] IPVS: using max 2784 ests per chain, 139200 per kthread [ 96.575418][ T3375] hid_parser_main: 9 callbacks suppressed [ 96.575437][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.588745][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.596118][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.603590][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.611052][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.618435][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.625855][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.633383][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.640777][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.648281][ T3375] hid-generic 00A0:0086:0003.0006: unknown main item tag 0x0 [ 96.656893][ T3375] hid-generic 00A0:0086:0003.0006: hidraw0: HID v0.05 Device [syz1] on syz0 [ 96.686464][ T7236] fido_id[7236]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.709235][ T7240] syzkaller0: entered promiscuous mode [ 96.714841][ T7240] syzkaller0: entered allmulticast mode [ 97.010095][ T7284] syzkaller0: entered promiscuous mode [ 97.015694][ T7284] syzkaller0: entered allmulticast mode [ 97.297716][ T7317] syzkaller0: entered promiscuous mode [ 97.303269][ T7317] syzkaller0: entered allmulticast mode [ 97.553011][ T7005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.594979][ T7342] syzkaller0: entered promiscuous mode [ 97.600579][ T7342] syzkaller0: entered allmulticast mode [ 97.630171][ T7344] syzkaller0: entered promiscuous mode [ 97.635922][ T7344] syzkaller0: entered allmulticast mode [ 97.733639][ T7355] lo speed is unknown, defaulting to 1000 [ 97.808455][ T7357] lo speed is unknown, defaulting to 1000 [ 98.252920][ T7413] syzkaller0: entered promiscuous mode [ 98.258530][ T7413] syzkaller0: entered allmulticast mode [ 98.793166][ T7505] geneve2: entered promiscuous mode [ 98.799128][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.812980][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.821785][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.831008][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.863281][ T7515] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.011062][ T7533] geneve2: entered promiscuous mode [ 99.016980][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.026396][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.046562][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.055593][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.084584][ T7539] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.143177][ T29] audit: type=1400 audit(1770331167.035:2118): avc: denied { create } for pid=7534 comm="syz.3.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 99.282781][ T7563] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.463683][ T7590] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.576008][ T7602] lo speed is unknown, defaulting to 1000 [ 99.762319][ T7629] syzkaller0: entered promiscuous mode [ 99.767941][ T7629] syzkaller0: entered allmulticast mode [ 99.800433][ T7631] lo speed is unknown, defaulting to 1000 [ 100.022418][ T7653] syzkaller0: entered promiscuous mode [ 100.027933][ T7653] syzkaller0: entered allmulticast mode [ 100.704014][ T7712] syzkaller0: entered promiscuous mode [ 100.710261][ T7712] syzkaller0: entered allmulticast mode [ 101.055154][ T29] audit: type=1400 audit(1770331168.766:2119): avc: denied { create } for pid=7728 comm="syz.0.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.211534][ T7748] syzkaller0: entered promiscuous mode [ 101.217142][ T7748] syzkaller0: entered allmulticast mode [ 101.233477][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'. [ 101.393395][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 101.568289][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 101.701168][ T7816] syzkaller0: entered promiscuous mode [ 101.706707][ T7816] syzkaller0: entered allmulticast mode [ 101.866286][ T7805] lo speed is unknown, defaulting to 1000 [ 102.064850][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 102.421074][ T7858] bridge0: entered allmulticast mode [ 102.426607][ T7862] bridge_slave_1: left allmulticast mode [ 102.432380][ T7862] bridge_slave_1: left promiscuous mode [ 102.438754][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.447242][ T7862] bridge_slave_0: left allmulticast mode [ 102.453745][ T7862] bridge_slave_0: left promiscuous mode [ 102.459532][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.519742][ T7868] syzkaller1: entered promiscuous mode [ 102.525358][ T7868] syzkaller1: entered allmulticast mode [ 102.661254][ T7872] syzkaller0: entered promiscuous mode [ 102.667630][ T7872] syzkaller0: entered allmulticast mode [ 102.710151][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1566'. [ 102.828904][ T7899] geneve2: entered promiscuous mode [ 102.844931][ T411] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.853318][ T411] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.889552][ T411] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942252][ T411] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.156924][ T7939] bridge_slave_1: entered promiscuous mode [ 103.318466][ T7962] syzkaller1: entered promiscuous mode [ 103.323982][ T7962] syzkaller1: entered allmulticast mode [ 103.376372][ T7969] syzkaller0: entered promiscuous mode [ 103.382022][ T7969] syzkaller0: entered allmulticast mode [ 103.443198][ T7973] syzkaller0: entered promiscuous mode [ 103.448783][ T7973] syzkaller0: entered allmulticast mode [ 103.818443][ T8003] syzkaller1: entered promiscuous mode [ 103.824158][ T8003] syzkaller1: entered allmulticast mode [ 103.939203][ T8015] syzkaller0: entered promiscuous mode [ 103.944726][ T8015] syzkaller0: entered allmulticast mode [ 103.977743][ T8018] macsec0: entered allmulticast mode [ 103.983614][ T8018] veth1_macvtap: entered allmulticast mode [ 103.990066][ T8018] macsec0: entered promiscuous mode [ 104.281874][ T8036] syzkaller1: entered promiscuous mode [ 104.287556][ T8036] syzkaller1: entered allmulticast mode [ 104.588301][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1634'. [ 104.708830][ T8050] syzkaller0: entered promiscuous mode [ 104.714382][ T8050] syzkaller0: entered allmulticast mode [ 104.890325][ T8053] veth0_vlan: entered allmulticast mode [ 104.936293][ T8053] ªªªªªª™™: renamed from vlan0 [ 104.985753][ T8060] bridge0: entered allmulticast mode [ 105.040373][ T8067] syzkaller1: entered promiscuous mode [ 105.046013][ T8067] syzkaller1: entered allmulticast mode [ 105.107242][ T8071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1645'. [ 105.135403][ T8069] syzkaller0: entered promiscuous mode [ 105.140932][ T8069] syzkaller0: entered allmulticast mode [ 105.469518][ T8090] syzkaller0: entered promiscuous mode [ 105.475083][ T8090] syzkaller0: entered allmulticast mode [ 105.550610][ T8073] lo speed is unknown, defaulting to 1000 [ 105.574433][ T8100] syzkaller1: entered promiscuous mode [ 105.579940][ T8100] syzkaller1: entered allmulticast mode [ 105.804451][ T8117] syzkaller0: entered promiscuous mode [ 105.810741][ T8117] syzkaller0: entered allmulticast mode [ 106.155200][ T8139] hugetlbfs: Bad value for 'size' [ 106.271507][ T8147] syzkaller1: entered promiscuous mode [ 106.277235][ T8147] syzkaller1: entered allmulticast mode [ 106.478014][ T8166] hugetlbfs: Bad value for 'size' [ 106.734305][ T8184] lo speed is unknown, defaulting to 1000 [ 106.793424][ T8189] syzkaller1: entered promiscuous mode [ 106.799058][ T8189] syzkaller1: entered allmulticast mode [ 107.061420][ T8204] syzkaller0: entered promiscuous mode [ 107.067051][ T8204] syzkaller0: entered allmulticast mode [ 107.214640][ T8200] lo speed is unknown, defaulting to 1000 [ 107.444686][ T8211] lo speed is unknown, defaulting to 1000 [ 107.548828][ T8242] syzkaller1: entered promiscuous mode [ 107.554435][ T8242] syzkaller1: entered allmulticast mode [ 107.608277][ T8244] lo speed is unknown, defaulting to 1000 [ 108.105187][ T8276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1735'. [ 108.269766][ T3375] IPVS: starting estimator thread 0... [ 108.391160][ T8291] syzkaller1: entered promiscuous mode [ 108.396754][ T8291] syzkaller1: entered allmulticast mode [ 108.402493][ T8283] IPVS: using max 2688 ests per chain, 134400 per kthread [ 108.515203][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.537932][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.638119][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.668560][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.732721][ T8312] syzkaller0: entered promiscuous mode [ 108.738978][ T8312] syzkaller0: entered allmulticast mode [ 108.782623][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.800683][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.817618][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.826657][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.926931][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.939255][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.058353][ T8323] syzkaller1: entered promiscuous mode [ 109.063994][ T8323] syzkaller1: entered allmulticast mode [ 109.169487][ T8325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1758'. [ 109.194195][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.202908][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.426108][ T8327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.435420][ T8327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.466520][ T8337] syzkaller0: entered promiscuous mode [ 109.472074][ T8337] syzkaller0: entered allmulticast mode [ 109.491034][ T8341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.500421][ T8341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.517135][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.526755][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.594570][ T8345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.605135][ T8345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.623291][ T8347] syzkaller1: entered promiscuous mode [ 109.628805][ T8347] syzkaller1: entered allmulticast mode [ 109.733817][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.742441][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.750817][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.759295][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.337208][ T8370] syzkaller0: entered promiscuous mode [ 110.342744][ T8370] syzkaller0: entered allmulticast mode [ 110.519613][ T8386] syzkaller1: entered promiscuous mode [ 110.525288][ T8386] syzkaller1: entered allmulticast mode [ 110.567332][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1788'. [ 110.593119][ T8393] loop4: detected capacity change from 0 to 1024 [ 110.692524][ T8402] syzkaller0: entered promiscuous mode [ 110.698136][ T8402] syzkaller0: entered allmulticast mode [ 110.712326][ T8403] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1789'. [ 110.797058][ T8405] loop0: detected capacity change from 0 to 1024 [ 110.805569][ T8405] EXT4-fs: Ignoring removed oldalloc option [ 110.811692][ T8405] EXT4-fs: Ignoring removed bh option [ 110.821895][ T8405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.835503][ T29] audit: type=1400 audit(1770331177.978:2120): avc: denied { read open } for pid=8404 comm="syz.0.1793" path="/369/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.859278][ T29] audit: type=1400 audit(1770331177.978:2121): avc: denied { write } for pid=8404 comm="syz.0.1793" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.077044][ T8411] pim6reg1: entered promiscuous mode [ 111.082407][ T8411] pim6reg1: entered allmulticast mode [ 111.395048][ T4607] IPVS: starting estimator thread 0... [ 111.431933][ T29] audit: type=1400 audit(1770331178.539:2122): avc: denied { write } for pid=8435 comm="syz.3.1803" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 111.497864][ T8434] IPVS: using max 2640 ests per chain, 132000 per kthread [ 111.500787][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'. [ 111.514143][ T8440] bridge_slave_1: left allmulticast mode [ 111.519898][ T8440] bridge_slave_1: left promiscuous mode [ 111.525784][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.538747][ T8440] bridge_slave_0: left allmulticast mode [ 111.544504][ T8440] bridge_slave_0: left promiscuous mode [ 111.550196][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.608474][ T8409] ================================================================== [ 111.616634][ T8409] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 111.624646][ T8409] [ 111.626989][ T8409] write to 0xffff88811b868b5c of 4 bytes by task 8405 on cpu 0: [ 111.634633][ T8409] xas_set_mark+0x12b/0x140 [ 111.639173][ T8409] __folio_start_writeback+0x17b/0x370 [ 111.644665][ T8409] ext4_bio_write_folio+0x5ad/0x9f0 [ 111.649909][ T8409] mpage_process_page_bufs+0x4a1/0x620 [ 111.655384][ T8409] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 111.661213][ T8409] ext4_do_writepages+0x6fe/0x2800 [ 111.666357][ T8409] ext4_writepages+0x18f/0x320 [ 111.671139][ T8409] do_writepages+0x1c6/0x310 [ 111.675762][ T8409] file_write_and_wait_range+0x178/0x2f0 [ 111.681591][ T8409] generic_buffers_fsync_noflush+0x45/0x130 [ 111.687510][ T8409] ext4_sync_file+0x1aa/0x680 [ 111.692205][ T8409] vfs_fsync_range+0x10d/0x130 [ 111.696998][ T8409] ext4_buffered_write_iter+0x34f/0x3c0 [ 111.702575][ T8409] ext4_file_write_iter+0x380/0xf70 [ 111.707803][ T8409] iter_file_splice_write+0x6bc/0xa80 [ 111.713189][ T8409] direct_splice_actor+0x156/0x2a0 [ 111.718318][ T8409] splice_direct_to_actor+0x311/0x670 [ 111.723706][ T8409] do_splice_direct+0x119/0x1a0 [ 111.728586][ T8409] do_sendfile+0x382/0x650 [ 111.733024][ T8409] __x64_sys_sendfile64+0x105/0x150 [ 111.738253][ T8409] x64_sys_call+0x2db1/0x3000 [ 111.742946][ T8409] do_syscall_64+0xc0/0x2a0 [ 111.747466][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.753366][ T8409] [ 111.755691][ T8409] read to 0xffff88811b868b5c of 4 bytes by task 8409 on cpu 1: [ 111.763239][ T8409] file_write_and_wait_range+0x130/0x2f0 [ 111.768889][ T8409] generic_buffers_fsync_noflush+0x45/0x130 [ 111.774798][ T8409] ext4_sync_file+0x1aa/0x680 [ 111.779477][ T8409] vfs_fsync_range+0x10d/0x130 [ 111.784252][ T8409] ext4_buffered_write_iter+0x34f/0x3c0 [ 111.789813][ T8409] ext4_file_write_iter+0x380/0xf70 [ 111.795026][ T8409] iter_file_splice_write+0x6bc/0xa80 [ 111.800402][ T8409] direct_splice_actor+0x156/0x2a0 [ 111.805518][ T8409] splice_direct_to_actor+0x311/0x670 [ 111.810900][ T8409] do_splice_direct+0x119/0x1a0 [ 111.815764][ T8409] do_sendfile+0x382/0x650 [ 111.820199][ T8409] __x64_sys_sendfile64+0x105/0x150 [ 111.825411][ T8409] x64_sys_call+0x2db1/0x3000 [ 111.830106][ T8409] do_syscall_64+0xc0/0x2a0 [ 111.834630][ T8409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.840533][ T8409] [ 111.842858][ T8409] value changed: 0x0a000021 -> 0x04000021 [ 111.848578][ T8409] [ 111.850902][ T8409] Reported by Kernel Concurrency Sanitizer on: [ 111.857052][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.0.1793 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.866879][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.876943][ T8409] ================================================================== [ 111.885978][ T8447] loop4: detected capacity change from 0 to 4096 [ 111.904257][ T8447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.910446][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.926190][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.936223][ T8447] EXT4-fs (loop4): shut down requested (1) [ 111.942895][ T29] audit: type=1400 audit(1770331179.016:2123): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 111.945472][ T8447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 111.973196][ T29] audit: type=1400 audit(1770331179.016:2124): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.995332][ T29] audit: type=1400 audit(1770331179.016:2125): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.018483][ T29] audit: type=1400 audit(1770331179.016:2126): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.024154][ T8447] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 112.039381][ T29] audit: type=1400 audit(1770331179.016:2127): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.039410][ T29] audit: type=1400 audit(1770331179.016:2128): avc: denied { append open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.094562][ T29] audit: type=1400 audit(1770331179.016:2129): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.127974][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.