last executing test programs: 58.967205507s ago: executing program 2 (id=2621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffc, 0x4}, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 56.895687485s ago: executing program 2 (id=2682): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000900)="0aaf", 0x2000) 56.823045158s ago: executing program 2 (id=2684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 56.726908443s ago: executing program 2 (id=2689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x12', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_u', 0x7) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 56.599827079s ago: executing program 2 (id=2696): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f0000000500), 0x221490, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1186496, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) 56.491506374s ago: executing program 2 (id=2701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 41.32490522s ago: executing program 32 (id=2701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 16.175273867s ago: executing program 5 (id=3456): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 16.002186964s ago: executing program 5 (id=3458): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) 15.072502679s ago: executing program 5 (id=3462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x8, &(0x7f00000005c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) 14.867319208s ago: executing program 5 (id=3471): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl(0xffffffffffffffff, 0xae60, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x1a, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000200e000200", [0x40000000004]}) 14.211594479s ago: executing program 5 (id=3475): fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xf97, 0x5, 0x1, 0x1a, "6518883aa267cb6a471bfcd183cc274d6d5cd0"}) socket$inet(0x2, 0x3, 0x5) 13.523196941s ago: executing program 5 (id=3484): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2c6, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents64(r0, 0x0, 0x22) 13.503868692s ago: executing program 33 (id=3484): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2c6, &(0x7f0000000640)="$eJzs3c9qY1UcB/DfTdKbjArpWga84CxcDdPZukmRGRC7UrJQFypOC9IEoYWCfzB25daNS59AENz5Em58A8Gt4M4KxSv35t4kTZO0gaZV5vNZzJyee77nnnM4adOWe/rh/eHhsywOTr/8LTqdJBq9uBdnSWxHI2pfxwW9bwMA+D87y/P4Mx9b3OKlhbVJRHQ2OzQAYEPmvv7/PbnQXBL46daGBgBsyDvvvvfW7t7ek7ezrBNPh9+c9Ivv7Iv/x9d3D+KTGMR+PIpunEfktfr3A3mej1pZlmV5N2I4OukXyeEHv1T97/4RUeZ3opvGJFK+2yj+ffrm3pOdbCweTPKjYhwvVPfvFfnH5Y8cpvGZ/OMF+ein8dqrM+N/GN349eP4NAbxrOxkmv9qJ8veyL/764v3i+6LfDI66bfLdlPtZe+IAAAAAAAAAAAAAAAAAAAAAABgbQ+rs3PakW3Hg2FRVZ2/0zwvPtiKrLZ98Xyecb5ddzR3PtAoj+/r83UeZVmWV6f3TPOteLkVrbuZNQAAAAAAAAAAAAAAAAAAAPy3HH/2+eFHg8H+0Y0Uqof8J4/1rxfvTsbTm7n0SqxOtaf3alTFFfeKZt0miShqkmWLUEzihpblqsK9ZWP+4cd1O+xc3WYryoXa5Lzq3VUs78I27ahrOvUm+Xm2TRrXvFe67NL9aghHx9eZabp4Q6499/TFsjBa0SZvrnpdvP77eNhVTTL/IkrLVV0Qz//Zqmpissfn98Za+/ny54rEaR0AAAAAAAAAAAAAAAAAALBR04d+L11qxenKaCNvb3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCLpn//f3mhFREXakZVeGVqXEjj6PiOpwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBz4N8AAAD//07qTw8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents64(r0, 0x0, 0x22) 2.933370231s ago: executing program 0 (id=3683): setns(0xc9, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a", 0x8}], 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B'], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4080, 0xff0}], 0x1}, 0x2) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32], 0xfe33) 2.803033797s ago: executing program 0 (id=3686): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) splice(r0, 0x0, r2, 0x0, 0x402000784853bb, 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x1, 0x2, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) 2.583600268s ago: executing program 1 (id=3693): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40012163) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100500, 0xb, 0x0, 0x0, 0xe34, 0x20000000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7f4}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) close(r4) socketpair$unix(0x2f, 0x5, 0x0, 0x0) 2.230886094s ago: executing program 1 (id=3694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 2.11176013s ago: executing program 1 (id=3695): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) close(0x3) 1.68745106s ago: executing program 0 (id=3699): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff0307680093f04604264ea76e", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 1.47906941s ago: executing program 0 (id=3703): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x1, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x6341, 0x0, 0x6, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xcfa4) 1.325940337s ago: executing program 1 (id=3707): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x2001, 0x0) write(r0, &(0x7f0000000380)='2\x00', 0x1) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4}, 0xc) 1.325841517s ago: executing program 1 (id=3708): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='r', 0x1) 1.325617837s ago: executing program 0 (id=3709): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xb, 0x1}, 0x28) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x17e}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4c", 0xa4}], 0x2}}], 0x1, 0x2090) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="228b0a365203", 0x6}, {&(0x7f0000000200)="175c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b3835e48fad535a40000", 0x5f}, {&(0x7f0000000300)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2ac84a402a80df00cf64b156defd33afafab5c8a40dd0f79d03bf481fd2bf7c4c084227a9b3951d6e23156c58e8ff86f5a619", 0x69}], 0x3) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003fd4b20127b080bf82664e51c36a4c4681dd332c6cb068cd11d13dae5f798032ed4237ad618305d0bffb28dac3b13bd148e2d7e8798ce2deb330ec7cdfdc5cddd477f3ffd22b884e91529740da75f625d46b48a6aa4c40adced23638423cdc401bdd228b", 0x441) 1.093126458s ago: executing program 4 (id=3722): pipe(&(0x7f0000000140)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x2001, 0x0) write(r0, &(0x7f0000000380)='2\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000440), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) 1.025350822s ago: executing program 4 (id=3724): setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x7b, 0x51a, 0x5, 0x4, 0x7c8f7f25}, 0x14) link(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000a0000004000000040"], 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) 899.426328ms ago: executing program 4 (id=3728): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x40c0) 885.944818ms ago: executing program 4 (id=3730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x2) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033d", 0x8, 0xffffffffffffffff) 853.941639ms ago: executing program 4 (id=3733): socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 775.725703ms ago: executing program 4 (id=3736): r0 = socket$inet6(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f00000000c0), 0x10127, 0x2, 0x0) 686.312527ms ago: executing program 3 (id=3740): r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x40c0) 670.642868ms ago: executing program 3 (id=3741): pipe(&(0x7f0000000140)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380)='2\x00', 0x1) 619.361911ms ago: executing program 6 (id=3742): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r2, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8995, &(0x7f0000000900)={'syz_tun\x00', @random='\x00\x00\x00 \x00'}) 619.205961ms ago: executing program 3 (id=3743): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk_0/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='1', 0x1) 619.120331ms ago: executing program 3 (id=3744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 613.548931ms ago: executing program 6 (id=3745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 585.150162ms ago: executing program 3 (id=3746): socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0xa, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4040800}, 0x40090) 540.804194ms ago: executing program 3 (id=3747): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 507.742836ms ago: executing program 6 (id=3748): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) 507.280686ms ago: executing program 6 (id=3749): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143943, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 139.444653ms ago: executing program 6 (id=3750): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002f00)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x55}, 0x1c, &(0x7f0000002b80)=[{&(0x7f00000001c0)='!', 0x1}], 0x1}}], 0x1, 0x10004040) 80.414926ms ago: executing program 0 (id=3751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004800}, 0x40c0) 73.686156ms ago: executing program 1 (id=3752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0), &(0x7f0000001900), 0x10000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea684533dc6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 0s ago: executing program 6 (id=3753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x28d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept$inet(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000029c0)) kernel console output (not intermixed with test programs): it(1789402739.349:1092): avc: denied { write } for pid=12916 comm="syz.2.2689" name="c.1" dev="configfs" ino=34000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.587055][ T29] audit: type=1400 audit(1789402739.349:1093): avc: denied { write } for pid=12916 comm="syz.2.2689" name="c.1" dev="configfs" ino=34000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 385.589343][T12918] UDC core: g1: couldn't find an available UDC or it's busy [ 385.921482][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.921576][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.072347][T12958] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2707'. [ 387.514844][ T29] audit: type=1326 audit(1789402741.279:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13029 comm="syz.0.2741" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f19d324e159 code=0x0 [ 387.999366][T13059] syzkaller0: entered promiscuous mode [ 387.999402][T13059] syzkaller0: entered allmulticast mode [ 388.316156][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.372333][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.423520][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.478634][T13089] syzkaller0: entered promiscuous mode [ 388.478658][T13089] syzkaller0: entered allmulticast mode [ 388.492792][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.581324][ T41] bridge_slave_1: left allmulticast mode [ 388.581349][ T41] bridge_slave_1: left promiscuous mode [ 388.581487][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.582287][ T41] bridge_slave_0: left allmulticast mode [ 388.582302][ T41] bridge_slave_0: left promiscuous mode [ 388.582375][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.661882][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.662647][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.663012][ T41] bond0 (unregistering): Released all slaves [ 388.664643][ T41] bond1 (unregistering): Released all slaves [ 388.714668][ T41] IPVS: stopping master sync thread 3542 ... [ 388.719410][ T41] hsr_slave_0: left promiscuous mode [ 388.719676][ T41] hsr_slave_1: left promiscuous mode [ 388.720135][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.720520][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.814565][ T41] team0 (unregistering): Port device team_slave_1 removed [ 388.821107][ T41] team0 (unregistering): Port device team_slave_0 removed [ 388.922919][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.922960][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.923072][T13075] bridge_slave_0: entered allmulticast mode [ 388.923687][T13075] bridge_slave_0: entered promiscuous mode [ 388.926320][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.926354][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.926481][T13075] bridge_slave_1: entered allmulticast mode [ 388.927031][T13075] bridge_slave_1: entered promiscuous mode [ 388.950005][T13075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.954480][T13075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.999771][T13075] team0: Port device team_slave_0 added [ 389.001113][T13075] team0: Port device team_slave_1 added [ 389.025434][T13075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.025464][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.025493][T13075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.026644][T13075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.026660][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.026713][T13075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.128384][T13075] hsr_slave_0: entered promiscuous mode [ 389.129047][ T29] audit: type=1400 audit(1789402742.889:1095): avc: denied { write } for pid=13109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.133723][T13075] hsr_slave_1: entered promiscuous mode [ 389.170648][ T41] IPVS: stop unused estimator thread 0... [ 389.200109][ T29] audit: type=1400 audit(1789402742.959:1096): avc: denied { write } for pid=13124 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.248988][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 389.391724][T13138] syzkaller0: entered promiscuous mode [ 389.391744][T13138] syzkaller0: entered allmulticast mode [ 389.426853][ T29] audit: type=1400 audit(1789402743.189:1097): avc: denied { write } for pid=13129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.496711][ T29] audit: type=1400 audit(1789402743.259:1098): avc: denied { write } for pid=13146 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.634605][T13075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.641861][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.643670][T13075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.647593][T13157] FAULT_INJECTION: forcing a failure. [ 389.647593][T13157] name failslab, interval 1, probability 0, space 0, times 0 [ 389.647628][T13157] CPU: 1 UID: 0 PID: 13157 Comm: syz.0.2776 Not tainted syzkaller #0 PREEMPT(lazy) [ 389.647657][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.647670][T13157] Call Trace: [ 389.647739][T13157] [ 389.647800][T13157] __dump_stack+0x1d/0x30 [ 389.647831][T13157] dump_stack_lvl+0x95/0xd0 [ 389.647858][T13157] dump_stack+0x15/0x1b [ 389.647879][T13157] should_fail_ex+0x262/0x280 [ 389.647922][T13157] ? __send_signal_locked+0x14d/0x750 [ 389.647955][T13157] should_failslab+0x8c/0xb0 [ 389.648003][T13157] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 389.648052][T13157] ? __send_signal_locked+0x14d/0x750 [ 389.648088][T13157] __send_signal_locked+0x14d/0x750 [ 389.648117][T13157] ? __rcu_read_unlock+0x33/0x70 [ 389.648159][T13157] do_notify_parent+0x55f/0x600 [ 389.648195][T13157] release_task+0x9bf/0xb90 [ 389.648231][T13157] do_exit+0xd79/0x1510 [ 389.648265][T13157] do_group_exit+0xfe/0x140 [ 389.648295][T13157] ? get_signal+0xe00/0xf10 [ 389.648324][T13157] get_signal+0xe07/0xf10 [ 389.648365][T13157] arch_do_signal_or_restart+0x96/0x480 [ 389.648472][T13157] exit_to_user_mode_loop+0x15d/0x8c0 [ 389.648509][T13157] do_syscall_64+0x212/0x360 [ 389.648561][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.648587][T13157] RIP: 0033:0x7f19d324e159 [ 389.648602][T13157] Code: Unable to access opcode bytes at 0x7f19d324e12f. [ 389.648631][T13157] RSP: 002b:00007f19d1ca70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 389.648656][T13157] RAX: 0000000000000001 RBX: 00007f19d34d5fa8 RCX: 00007f19d324e159 [ 389.648672][T13157] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f19d34d5fac [ 389.648687][T13157] RBP: 00007f19d34d5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 389.648711][T13157] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 389.648725][T13157] R13: 00007f19d34d6038 R14: 00007ffe933f67c0 R15: 00007ffe933f68a8 [ 389.648744][T13157] [ 389.668104][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.673014][T13075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.691118][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.695203][T13075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.699825][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.758363][T13175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2780'. [ 389.861468][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.879968][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.887803][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.887840][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.894308][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.894342][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.958821][ T29] audit: type=1400 audit(1789402743.719:1099): avc: denied { write } for pid=13158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.997661][ T29] audit: type=1400 audit(1789402743.759:1100): avc: denied { write } for pid=13187 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.043216][T13193] veth1_macvtap: left promiscuous mode [ 390.043255][T13193] macsec0: entered promiscuous mode [ 390.229795][T13075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.241172][ T29] audit: type=1400 audit(1789402744.009:1101): avc: denied { write } for pid=13196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.309442][ T29] audit: type=1400 audit(1789402744.069:1102): avc: denied { write } for pid=13223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.386433][T13231] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2787'. [ 390.430036][T13075] veth0_vlan: entered promiscuous mode [ 390.444128][T13075] veth1_vlan: entered promiscuous mode [ 390.462472][T13075] veth0_macvtap: entered promiscuous mode [ 390.465361][T13075] veth1_macvtap: entered promiscuous mode [ 390.479839][T13238] syzkaller0: entered promiscuous mode [ 390.479862][T13238] syzkaller0: entered allmulticast mode [ 390.501927][T13075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.506149][T13075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.534362][ T29] audit: type=1400 audit(1789402744.299:1103): avc: denied { mounton } for pid=13075 comm="syz-executor" path="/root/syzkaller.AhZZQ2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 390.542186][ T112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.542328][ T112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.542482][ T112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.542631][ T112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.568317][T13241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2791'. [ 390.895075][T13271] netlink: 'syz.1.2805': attribute type 1 has an invalid length. [ 390.904631][T13271] bond1: entered promiscuous mode [ 390.909624][T13271] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.642729][T13305] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 391.662856][T13305] bond1: entered promiscuous mode [ 391.662990][T13305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.714410][T13308] xt_hashlimit: size too large, truncated to 1048576 [ 391.846850][T13313] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.2820'. [ 392.523602][T13343] FAULT_INJECTION: forcing a failure. [ 392.523602][T13343] name failslab, interval 1, probability 0, space 0, times 0 [ 392.523639][T13343] CPU: 1 UID: 0 PID: 13343 Comm: syz.1.2833 Not tainted syzkaller #0 PREEMPT(lazy) [ 392.523735][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.523750][T13343] Call Trace: [ 392.523757][T13343] [ 392.523766][T13343] __dump_stack+0x1d/0x30 [ 392.523843][T13343] dump_stack_lvl+0x95/0xd0 [ 392.523939][T13343] dump_stack+0x15/0x1b [ 392.523962][T13343] should_fail_ex+0x262/0x280 [ 392.524015][T13343] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 392.524047][T13343] should_failslab+0x8c/0xb0 [ 392.524100][T13343] __kmalloc_cache_noprof+0x7a/0x400 [ 392.524207][T13343] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 392.524241][T13343] inode_doinit_use_xattr+0x3c/0x2d0 [ 392.524319][T13343] inode_doinit_with_dentry+0x721/0x7b0 [ 392.524360][T13343] sb_finish_set_opts+0x354/0x6b0 [ 392.524407][T13343] selinux_set_mnt_opts+0x1053/0x10a0 [ 392.524437][T13343] security_sb_set_mnt_opts+0x87/0x130 [ 392.524467][T13343] vfs_get_tree+0xf5/0x1d0 [ 392.524559][T13343] vfs_cmd_create+0x8a/0x140 [ 392.524588][T13343] vfs_fsconfig_locked+0x6f/0x210 [ 392.524663][T13343] __se_sys_fsconfig+0x671/0x7e0 [ 392.524696][T13343] __x64_sys_fsconfig+0x67/0x80 [ 392.524732][T13343] x64_sys_call+0xaa0/0x2550 [ 392.524815][T13343] do_syscall_64+0x112/0x360 [ 392.524852][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.524876][T13343] RIP: 0033:0x7f9984e7e159 [ 392.524908][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.524929][T13343] RSP: 002b:00007f99838d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 392.524954][T13343] RAX: ffffffffffffffda RBX: 00007f9985105fa0 RCX: 00007f9984e7e159 [ 392.525004][T13343] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 392.525018][T13343] RBP: 00007f9984f1503b R08: 0000000000000000 R09: 0000000000000000 [ 392.525034][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.525048][T13343] R13: 00007f9985106038 R14: 00007f9985105fa0 R15: 00007ffe11fc9138 [ 392.525070][T13343] [ 392.793218][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'. [ 393.083903][T13374] FAULT_INJECTION: forcing a failure. [ 393.083903][T13374] name failslab, interval 1, probability 0, space 0, times 0 [ 393.083939][T13374] CPU: 0 UID: 0 PID: 13374 Comm: syz.4.2844 Not tainted syzkaller #0 PREEMPT(lazy) [ 393.084003][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.084018][T13374] Call Trace: [ 393.084026][T13374] [ 393.084034][T13374] __dump_stack+0x1d/0x30 [ 393.084063][T13374] dump_stack_lvl+0x95/0xd0 [ 393.084086][T13374] dump_stack+0x15/0x1b [ 393.084106][T13374] should_fail_ex+0x262/0x280 [ 393.084195][T13374] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 393.084223][T13374] should_failslab+0x8c/0xb0 [ 393.084265][T13374] __kmalloc_cache_noprof+0x7a/0x400 [ 393.084300][T13374] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 393.084337][T13374] inode_doinit_use_xattr+0x3c/0x2d0 [ 393.084367][T13374] inode_doinit_with_dentry+0x721/0x7b0 [ 393.084403][T13374] sb_finish_set_opts+0x354/0x6b0 [ 393.084456][T13374] selinux_set_mnt_opts+0x1053/0x10a0 [ 393.084484][T13374] security_sb_set_mnt_opts+0x87/0x130 [ 393.084552][T13374] vfs_get_tree+0xf5/0x1d0 [ 393.084585][T13374] vfs_cmd_create+0x8a/0x140 [ 393.084617][T13374] vfs_fsconfig_locked+0x6f/0x210 [ 393.084647][T13374] __se_sys_fsconfig+0x671/0x7e0 [ 393.084674][T13374] __x64_sys_fsconfig+0x67/0x80 [ 393.084717][T13374] x64_sys_call+0xaa0/0x2550 [ 393.084745][T13374] do_syscall_64+0x112/0x360 [ 393.084777][T13374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.084881][T13374] RIP: 0033:0x7f9a2921e159 [ 393.084901][T13374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.084924][T13374] RSP: 002b:00007f9a27c77028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 393.084947][T13374] RAX: ffffffffffffffda RBX: 00007f9a294a5fa0 RCX: 00007f9a2921e159 [ 393.084965][T13374] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 393.084981][T13374] RBP: 00007f9a292b503b R08: 0000000000000000 R09: 0000000000000000 [ 393.085026][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.085039][T13374] R13: 00007f9a294a6038 R14: 00007f9a294a5fa0 R15: 00007ffc159380c8 [ 393.085058][T13374] [ 393.246036][T13386] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2847'. [ 393.308342][T13357] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.308398][T13357] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.308587][T13357] bridge_slave_0: entered allmulticast mode [ 393.309030][T13357] bridge_slave_0: entered promiscuous mode [ 393.312779][T13357] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.312816][T13357] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.312953][T13357] bridge_slave_1: entered allmulticast mode [ 393.313582][T13357] bridge_slave_1: entered promiscuous mode [ 393.342512][T13357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.344302][T13357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.368489][T13357] team0: Port device team_slave_0 added [ 393.370611][T13357] team0: Port device team_slave_1 added [ 393.407261][T13357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.407276][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.407306][T13357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.410918][T13357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.410932][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.411015][T13357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.481793][T13357] hsr_slave_0: entered promiscuous mode [ 393.488643][T13357] hsr_slave_1: entered promiscuous mode [ 393.489001][T13357] debugfs: 'hsr0' already exists in 'hsr' [ 393.489016][T13357] Cannot create hsr debugfs directory [ 393.513413][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2850'. [ 393.545576][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.545619][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.614411][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.614509][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.658380][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.658500][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.818275][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.818312][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.912741][ T51] bridge_slave_1: left allmulticast mode [ 393.912766][ T51] bridge_slave_1: left promiscuous mode [ 393.912912][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.913531][ T51] bridge_slave_0: left allmulticast mode [ 393.913549][ T51] bridge_slave_0: left promiscuous mode [ 393.913643][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.980211][T13412] FAULT_INJECTION: forcing a failure. [ 393.980211][T13412] name failslab, interval 1, probability 0, space 0, times 0 [ 393.980248][T13412] CPU: 1 UID: 0 PID: 13412 Comm: syz.1.2858 Not tainted syzkaller #0 PREEMPT(lazy) [ 393.980284][T13412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.980376][T13412] Call Trace: [ 393.980398][T13412] [ 393.980408][T13412] __dump_stack+0x1d/0x30 [ 393.980436][T13412] dump_stack_lvl+0x95/0xd0 [ 393.980458][T13412] dump_stack+0x15/0x1b [ 393.980477][T13412] should_fail_ex+0x262/0x280 [ 393.980500][T13412] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 393.980569][T13412] should_failslab+0x8c/0xb0 [ 393.980599][T13412] __kmalloc_cache_noprof+0x7a/0x400 [ 393.980629][T13412] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 393.980734][T13412] inode_doinit_use_xattr+0x3c/0x2d0 [ 393.980765][T13412] inode_doinit_with_dentry+0x721/0x7b0 [ 393.980794][T13412] sb_finish_set_opts+0x354/0x6b0 [ 393.980853][T13412] selinux_set_mnt_opts+0x1053/0x10a0 [ 393.980883][T13412] security_sb_set_mnt_opts+0x87/0x130 [ 393.980916][T13412] vfs_get_tree+0xf5/0x1d0 [ 393.980947][T13412] vfs_cmd_create+0x8a/0x140 [ 393.981165][T13412] vfs_fsconfig_locked+0x6f/0x210 [ 393.981195][T13412] __se_sys_fsconfig+0x671/0x7e0 [ 393.981301][T13412] __x64_sys_fsconfig+0x67/0x80 [ 393.981331][T13412] x64_sys_call+0xaa0/0x2550 [ 393.981355][T13412] do_syscall_64+0x112/0x360 [ 393.981395][T13412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.981435][T13412] RIP: 0033:0x7f9984e7e159 [ 393.981456][T13412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.981475][T13412] RSP: 002b:00007f99838d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 393.981499][T13412] RAX: ffffffffffffffda RBX: 00007f9985105fa0 RCX: 00007f9984e7e159 [ 393.981584][T13412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 393.981600][T13412] RBP: 00007f9984f1503b R08: 0000000000000000 R09: 0000000000000000 [ 393.981614][T13412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.981627][T13412] R13: 00007f9985106038 R14: 00007f9985105fa0 R15: 00007ffe11fc9138 [ 393.981647][T13412] [ 394.180265][T13421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'. [ 394.215168][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.216671][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.218741][ T51] bond0 (unregistering): Released all slaves [ 394.286474][ T51] hsr_slave_0: left promiscuous mode [ 394.288418][ T51] hsr_slave_1: left promiscuous mode [ 394.288953][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.288969][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.289356][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.289369][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.297373][ T51] veth1_macvtap: left promiscuous mode [ 394.297452][ T51] veth0_macvtap: left promiscuous mode [ 394.297535][ T51] veth1_vlan: left promiscuous mode [ 394.297569][ T51] veth0_vlan: left promiscuous mode [ 394.444776][ T51] team0 (unregistering): Port device team_slave_1 removed [ 394.448679][ T29] audit: type=1400 audit(1789403241.219:1104): avc: denied { write } for pid=13433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.456306][ T51] team0 (unregistering): Port device team_slave_0 removed [ 394.507941][ T29] audit: type=1400 audit(1789403241.279:1105): avc: denied { write } for pid=13447 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.549480][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 394.559415][ T29] audit: type=1400 audit(1789403241.329:1106): avc: denied { nlmsg_read } for pid=13449 comm="syz.1.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.559428][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 394.711189][ T29] audit: type=1400 audit(1789403241.489:1107): avc: denied { write } for pid=13454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.765737][ T29] audit: type=1400 audit(1789403241.539:1108): avc: denied { write } for pid=13471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.814054][T13357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.816004][T13357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.818268][T13357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.819024][T13474] FAULT_INJECTION: forcing a failure. [ 394.819024][T13474] name failslab, interval 1, probability 0, space 0, times 0 [ 394.819052][T13474] CPU: 1 UID: 0 PID: 13474 Comm: syz.3.2871 Not tainted syzkaller #0 PREEMPT(lazy) [ 394.819124][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.819136][T13474] Call Trace: [ 394.819143][T13474] [ 394.819152][T13474] __dump_stack+0x1d/0x30 [ 394.819181][T13474] dump_stack_lvl+0x95/0xd0 [ 394.819275][T13474] dump_stack+0x15/0x1b [ 394.819338][T13474] should_fail_ex+0x262/0x280 [ 394.819376][T13474] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 394.819410][T13474] should_failslab+0x8c/0xb0 [ 394.819446][T13474] __kmalloc_cache_noprof+0x7a/0x400 [ 394.819545][T13474] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 394.819571][T13474] inode_doinit_use_xattr+0x3c/0x2d0 [ 394.819609][T13474] inode_doinit_with_dentry+0x721/0x7b0 [ 394.819644][T13474] sb_finish_set_opts+0x354/0x6b0 [ 394.819678][T13474] selinux_set_mnt_opts+0x1053/0x10a0 [ 394.819772][T13474] security_sb_set_mnt_opts+0x87/0x130 [ 394.819870][T13474] vfs_get_tree+0xf5/0x1d0 [ 394.819905][T13474] vfs_cmd_create+0x8a/0x140 [ 394.819936][T13474] vfs_fsconfig_locked+0x6f/0x210 [ 394.819970][T13474] __se_sys_fsconfig+0x671/0x7e0 [ 394.820042][T13474] __x64_sys_fsconfig+0x67/0x80 [ 394.820075][T13474] x64_sys_call+0xaa0/0x2550 [ 394.820105][T13474] do_syscall_64+0x112/0x360 [ 394.820187][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.820215][T13474] RIP: 0033:0x7f9c78d1e159 [ 394.820256][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.820278][T13474] RSP: 002b:00007f9c77777028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 394.820308][T13474] RAX: ffffffffffffffda RBX: 00007f9c78fa5fa0 RCX: 00007f9c78d1e159 [ 394.820325][T13474] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 394.820339][T13474] RBP: 00007f9c78db503b R08: 0000000000000000 R09: 0000000000000000 [ 394.820422][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.820464][T13474] R13: 00007f9c78fa6038 R14: 00007f9c78fa5fa0 R15: 00007ffd87f82288 [ 394.820487][T13474] [ 394.827120][T13357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.835521][T13357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.847560][T13357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.848200][T13357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.872537][T13357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.955083][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2872'. [ 394.994019][T13357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.023849][T13357] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.032804][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.032841][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.042425][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.042461][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.076750][ T29] audit: type=1400 audit(1789403241.849:1109): avc: denied { write } for pid=13487 comm="syz.3.2875" name="idVendor" dev="configfs" ino=36198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 395.076847][ T29] audit: type=1400 audit(1789403241.849:1110): avc: denied { open } for pid=13487 comm="syz.3.2875" path="/552/config/usb_gadget/g1/idVendor" dev="configfs" ino=36198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 395.342427][ T29] audit: type=1400 audit(1789403242.119:1111): avc: denied { write } for pid=13490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.416241][ T29] audit: type=1400 audit(1789403242.189:1112): avc: denied { write } for pid=13516 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.594273][T13532] FAULT_INJECTION: forcing a failure. [ 395.594273][T13532] name failslab, interval 1, probability 0, space 0, times 0 [ 395.594402][T13532] CPU: 1 UID: 0 PID: 13532 Comm: syz.3.2881 Not tainted syzkaller #0 PREEMPT(lazy) [ 395.594454][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.594468][T13532] Call Trace: [ 395.594477][T13532] [ 395.594486][T13532] __dump_stack+0x1d/0x30 [ 395.594518][T13532] dump_stack_lvl+0x95/0xd0 [ 395.594544][T13532] dump_stack+0x15/0x1b [ 395.594628][T13532] should_fail_ex+0x262/0x280 [ 395.594713][T13532] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 395.594813][T13532] should_failslab+0x8c/0xb0 [ 395.594843][T13532] __kmalloc_cache_noprof+0x7a/0x400 [ 395.594884][T13532] ? inode_doinit_use_xattr+0x3c/0x2d0 [ 395.595017][T13532] inode_doinit_use_xattr+0x3c/0x2d0 [ 395.595097][T13532] inode_doinit_with_dentry+0x721/0x7b0 [ 395.595124][T13532] sb_finish_set_opts+0x354/0x6b0 [ 395.595155][T13532] selinux_set_mnt_opts+0x1053/0x10a0 [ 395.595191][T13532] security_sb_set_mnt_opts+0x87/0x130 [ 395.595313][T13532] vfs_get_tree+0xf5/0x1d0 [ 395.595354][T13532] vfs_cmd_create+0x8a/0x140 [ 395.595385][T13532] vfs_fsconfig_locked+0x6f/0x210 [ 395.595473][T13532] __se_sys_fsconfig+0x671/0x7e0 [ 395.595504][T13532] __x64_sys_fsconfig+0x67/0x80 [ 395.595654][T13532] x64_sys_call+0xaa0/0x2550 [ 395.595685][T13532] do_syscall_64+0x112/0x360 [ 395.595724][T13532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.595747][T13532] RIP: 0033:0x7f9c78d1e159 [ 395.595815][T13532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.595835][T13532] RSP: 002b:00007f9c77777028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 395.595857][T13532] RAX: ffffffffffffffda RBX: 00007f9c78fa5fa0 RCX: 00007f9c78d1e159 [ 395.595871][T13532] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 395.595950][T13532] RBP: 00007f9c78db503b R08: 0000000000000000 R09: 0000000000000000 [ 395.595967][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.595983][T13532] R13: 00007f9c78fa6038 R14: 00007f9c78fa5fa0 R15: 00007ffd87f82288 [ 395.596003][T13532] [ 395.600569][T13357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.696114][ T29] audit: type=1400 audit(1789403242.469:1113): avc: denied { write } for pid=13521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.829473][T13357] veth0_vlan: entered promiscuous mode [ 395.841681][T13357] veth1_vlan: entered promiscuous mode [ 395.888047][T13357] veth0_macvtap: entered promiscuous mode [ 395.898550][T13357] veth1_macvtap: entered promiscuous mode [ 395.919243][T13357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.927105][T13357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.950755][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.951135][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.951238][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.951321][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.224462][T13577] syzkaller0: entered promiscuous mode [ 396.224489][T13577] syzkaller0: entered allmulticast mode [ 396.252300][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 396.275532][T13584] syzkaller0: entered promiscuous mode [ 396.275561][T13584] syzkaller0: entered allmulticast mode [ 396.341424][T13588] netlink: 'syz.0.2890': attribute type 1 has an invalid length. [ 396.373335][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.373507][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.579919][T13604] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2898'. [ 396.673075][T13614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2903'. [ 396.713963][T13612] syzkaller0: entered promiscuous mode [ 396.713988][T13612] syzkaller0: entered allmulticast mode [ 396.722530][T13616] netlink: 'syz.0.2904': attribute type 1 has an invalid length. [ 396.726660][T13616] macvtap1: entered allmulticast mode [ 396.746739][T13618] xt_hashlimit: size too large, truncated to 1048576 [ 397.123554][T13635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2909'. [ 397.123653][T13635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2909'. [ 397.817409][T13643] loop3: detected capacity change from 0 to 512 [ 397.827339][T13643] EXT4-fs: test_dummy_encryption option not supported [ 398.220007][T13661] loop3: detected capacity change from 0 to 256 [ 398.448368][T13672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2929'. [ 398.567102][T13674] syzkaller0: entered promiscuous mode [ 398.567130][T13674] syzkaller0: entered allmulticast mode [ 398.704807][T13678] loop4: detected capacity change from 0 to 512 [ 398.708137][T13678] EXT4-fs (loop4): 1 truncate cleaned up [ 398.708652][T13678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.739905][T13678] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.2932: bg 0: block 465: padding at end of block bitmap is not set [ 398.740059][T13678] EXT4-fs (loop4): Remounting filesystem read-only [ 398.783464][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.962298][T13698] syzkaller0: entered promiscuous mode [ 398.962377][T13698] syzkaller0: entered allmulticast mode [ 399.023558][T13704] loop3: detected capacity change from 0 to 512 [ 399.028711][T13704] EXT4-fs (loop3): invalid journal inode [ 399.028738][T13704] EXT4-fs (loop3): can't get journal size [ 399.036576][T13704] EXT4-fs (loop3): 1 truncate cleaned up [ 399.040678][T13704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.091378][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.098318][T13709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2945'. [ 399.243814][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.243955][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.282866][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.282910][T13725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.282996][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.283099][T13725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.283315][T13725] bridge0: entered promiscuous mode [ 399.283335][T13725] bridge0: entered allmulticast mode [ 399.341061][T13731] syzkaller0: entered promiscuous mode [ 399.341141][T13731] syzkaller0: entered allmulticast mode [ 399.644478][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 399.644498][ T29] audit: type=1400 audit(1789403246.419:1130): avc: denied { map } for pid=13761 comm="syz.4.2968" path="socket:[37137]" dev="sockfs" ino=37137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 399.907899][ T29] audit: type=1400 audit(1789403246.679:1131): avc: denied { setopt } for pid=13789 comm="syz.1.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.954511][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.954621][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.055850][ T29] audit: type=1400 audit(1789403246.829:1132): avc: denied { create } for pid=13803 comm="syz.4.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.057227][ T29] audit: type=1400 audit(1789403246.829:1133): avc: denied { write } for pid=13803 comm="syz.4.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 400.205826][T13817] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2990'. [ 400.369906][ T29] audit: type=1400 audit(1789403247.139:1134): avc: denied { getopt } for pid=13829 comm="syz.4.2998" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 400.564190][ T29] audit: type=1400 audit(1789403247.339:1135): avc: denied { getopt } for pid=13837 comm="syz.0.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 401.014127][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.088951][ T29] audit: type=1400 audit(1789403247.859:1136): avc: denied { nlmsg_write } for pid=13859 comm="syz.3.3008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 401.115178][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.197653][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.198688][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3012'. [ 401.224227][ T29] audit: type=1400 audit(1789403247.999:1137): avc: denied { watch } for pid=13876 comm="syz.3.3013" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 401.262392][T13881] Invalid argument reading file caps for ./file0 [ 401.414653][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.459683][T13886] syzkaller0: entered promiscuous mode [ 401.459699][T13886] syzkaller0: entered allmulticast mode [ 401.477956][T13839] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.478037][T13839] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.478090][T13839] bridge_slave_0: entered allmulticast mode [ 401.478691][T13839] bridge_slave_0: entered promiscuous mode [ 401.789019][ T29] audit: type=1400 audit(1789403248.559:1138): avc: denied { getopt } for pid=13905 comm="syz.1.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 401.996386][T13910] bond1: left promiscuous mode [ 402.437923][T13839] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.437968][T13839] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.438056][T13839] bridge_slave_1: entered allmulticast mode [ 402.438685][T13839] bridge_slave_1: entered promiscuous mode [ 402.483490][T13839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.484547][T13839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.629122][T13839] team0: Port device team_slave_0 added [ 402.637122][T13839] team0: Port device team_slave_1 added [ 402.658336][T13839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.658354][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.658383][T13839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.659061][T13839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.659075][T13839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.659106][T13839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.824901][T13861] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.824939][T13861] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.825009][T13861] bridge_slave_0: entered allmulticast mode [ 402.825589][T13861] bridge_slave_0: entered promiscuous mode [ 402.856929][T13839] hsr_slave_0: entered promiscuous mode [ 402.857660][T13839] hsr_slave_1: entered promiscuous mode [ 402.857899][T13839] debugfs: 'hsr0' already exists in 'hsr' [ 402.857915][T13839] Cannot create hsr debugfs directory [ 402.858061][T13861] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.858092][T13861] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.858209][T13861] bridge_slave_1: entered allmulticast mode [ 402.858576][T13861] bridge_slave_1: entered promiscuous mode [ 402.919337][ T70] bridge_slave_1: left allmulticast mode [ 402.919361][ T70] bridge_slave_1: left promiscuous mode [ 402.919474][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.940058][ T70] bridge_slave_0: left allmulticast mode [ 402.940081][ T70] bridge_slave_0: left promiscuous mode [ 402.940234][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.060396][ T29] audit: type=1400 audit(1789403249.829:1139): avc: denied { write } for pid=13921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.141589][ T70] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 403.141617][ T70] bridge1 (unregistering): left promiscuous mode [ 403.143862][ T70] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 403.143898][ T70] bridge2 (unregistering): left promiscuous mode [ 403.145887][ T70] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 403.145909][ T70] bridge3 (unregistering): left promiscuous mode [ 403.147711][ T70] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 403.147731][ T70] bridge4 (unregistering): left promiscuous mode [ 403.149339][ T70] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 403.149547][ T70] bridge5 (unregistering): left promiscuous mode [ 403.189043][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.218174][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.235164][ T70] bond0 (unregistering): Released all slaves [ 403.251107][ T70] bond1 (unregistering): Released all slaves [ 403.253478][ T70] bond2 (unregistering): Released all slaves [ 403.255536][ T70] bond3 (unregistering): Released all slaves [ 403.257682][ T70] bond4 (unregistering): Released all slaves [ 403.260132][ T70] bond5 (unregistering): Released all slaves [ 403.295540][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 403.326762][T13951] syzkaller0: entered promiscuous mode [ 403.326787][T13951] syzkaller0: entered allmulticast mode [ 403.335194][T13861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.336362][T13861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.368526][ T70] tipc: Disabling bearer [ 403.368629][ T70] tipc: Left network mode [ 403.392596][T13861] team0: Port device team_slave_0 added [ 403.395856][T13861] team0: Port device team_slave_1 added [ 403.411273][ T70] hsr_slave_0: left promiscuous mode [ 403.412412][ T70] hsr_slave_1: left promiscuous mode [ 403.413168][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.413232][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.416812][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.416831][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.420934][ T70] veth1_macvtap: left promiscuous mode [ 403.420960][ T70] veth0_macvtap: left promiscuous mode [ 403.421038][ T70] veth1_vlan: left promiscuous mode [ 403.421071][ T70] veth0_vlan: left promiscuous mode [ 403.589830][ T70] team0 (unregistering): Port device team_slave_1 removed [ 403.599336][ T70] team0 (unregistering): Port device team_slave_0 removed [ 403.699098][T13861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.699116][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.699149][T13861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.699773][T13861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.699786][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.699816][T13861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.874519][T13861] hsr_slave_0: entered promiscuous mode [ 403.881734][T13861] hsr_slave_1: entered promiscuous mode [ 403.881986][T13861] debugfs: 'hsr0' already exists in 'hsr' [ 403.882002][T13861] Cannot create hsr debugfs directory [ 404.050881][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 404.186057][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.186182][ T70] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.268952][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.268993][ T70] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.286088][T13861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 404.293632][T13861] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.294233][T13861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 404.302302][T13861] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.303118][T13861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 404.308301][T13861] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.312966][T13861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 404.329438][T13861] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.331359][T14007] syzkaller0: entered promiscuous mode [ 404.331406][T14007] syzkaller0: entered allmulticast mode [ 404.355328][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.355364][ T70] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.405571][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.405667][ T70] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.420978][T13839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 404.434120][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.439510][T13839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 404.452392][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.454996][T13839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 404.476037][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.487767][T13839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 404.494404][T13839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.529246][T14028] loop3: detected capacity change from 0 to 512 [ 404.529660][T14028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 404.574568][ T70] bridge_slave_1: left allmulticast mode [ 404.574592][ T70] bridge_slave_1: left promiscuous mode [ 404.574742][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.575632][ T70] bridge_slave_0: left allmulticast mode [ 404.575673][ T70] bridge_slave_0: left promiscuous mode [ 404.575785][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.595760][T14028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.621223][T14028] ext4 filesystem being mounted at /609/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.659647][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 404.659664][ T29] audit: type=1400 audit(1789403251.429:1149): avc: denied { write } for pid=14036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.685921][ T29] audit: type=1400 audit(1789403251.459:1150): avc: denied { write } for pid=14022 comm="syz.3.3042" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.694439][ T29] audit: type=1400 audit(1789403251.469:1151): avc: denied { append } for pid=14022 comm="syz.3.3042" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 404.701089][ T29] audit: type=1400 audit(1789403251.479:1152): avc: denied { write } for pid=14053 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.774726][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.797787][ T70] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 404.797814][ T70] bridge1 (unregistering): left promiscuous mode [ 404.820628][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.823577][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.824620][ T70] bond0 (unregistering): Released all slaves [ 404.826699][ T70] bond1 (unregistering): Released all slaves [ 404.880762][ T70] hsr_slave_0: left promiscuous mode [ 404.881087][ T70] hsr_slave_1: left promiscuous mode [ 404.881689][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.881703][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.882182][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.882193][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.884668][ T70] veth1_macvtap: left promiscuous mode [ 404.884685][ T70] veth0_macvtap: left promiscuous mode [ 404.884753][ T70] veth1_vlan: left promiscuous mode [ 404.884775][ T70] veth0_vlan: left promiscuous mode [ 404.976904][ T70] team0 (unregistering): Port device team_slave_1 removed [ 404.978879][ T70] team0 (unregistering): Port device team_slave_0 removed [ 405.067042][T13839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.084125][T13839] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.117302][T13839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.117326][T13839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.147664][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.147706][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.165718][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.165761][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.473794][T13839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.545167][T13861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.570846][T13861] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.575864][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.575906][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.578969][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.579051][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.704702][T14096] syzkaller0: entered promiscuous mode [ 405.704728][T14096] syzkaller0: entered allmulticast mode [ 405.773186][ T29] audit: type=1400 audit(1789403252.549:1153): avc: denied { write } for pid=14089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.814210][T14120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.814374][T14120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.862967][T13839] veth0_vlan: entered promiscuous mode [ 405.867195][ T29] audit: type=1400 audit(1789403252.639:1154): avc: denied { write } for pid=14123 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.868132][ T70] IPVS: stop unused estimator thread 0... [ 405.870004][T13839] veth1_vlan: entered promiscuous mode [ 405.918254][T13839] veth0_macvtap: entered promiscuous mode [ 405.919969][T13839] veth1_macvtap: entered promiscuous mode [ 405.947869][T13839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.949910][T13839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.955417][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 406.010943][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.011199][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.011284][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.011322][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.067122][T13861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.185542][ T29] audit: type=1400 audit(1789403252.959:1155): avc: denied { write } for pid=14140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.235959][T14168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3062'. [ 406.245726][T14168] macvtap1: entered allmulticast mode [ 406.254379][ T29] audit: type=1400 audit(1789403253.029:1156): avc: denied { write } for pid=14172 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.294396][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 406.297640][T14175] syzkaller0: entered promiscuous mode [ 406.297706][T14175] syzkaller0: entered allmulticast mode [ 406.339320][ T29] audit: type=1400 audit(1789403253.109:1157): avc: denied { watch_reads } for pid=14182 comm="syz.4.3065" path="/2" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 406.392562][T13861] veth0_vlan: entered promiscuous mode [ 406.408303][T13861] veth1_vlan: entered promiscuous mode [ 406.431017][T13861] veth0_macvtap: entered promiscuous mode [ 406.432665][T13861] veth1_macvtap: entered promiscuous mode [ 406.458749][T13861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.460118][T13861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.494184][T14200] loop3: detected capacity change from 0 to 512 [ 406.494657][T14200] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 406.498418][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.528022][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.528395][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.550763][ T29] audit: type=1400 audit(1789403253.329:1158): avc: denied { mount } for pid=14197 comm="syz.3.3071" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 406.650567][ T3643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.686544][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 406.716929][T14218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3075'. [ 406.729487][T14218] macvtap2: entered allmulticast mode [ 406.747270][T14220] loop3: detected capacity change from 0 to 512 [ 406.763228][T14220] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 406.763305][T14220] System zones: 1-12 [ 406.763740][T14220] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #12: comm syz.3.3074: missing EA_INODE flag [ 406.763842][T14220] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 406.763935][T14220] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.3074: error while reading EA inode 12 err=-117 [ 406.764064][T14220] loop3: lost filesystem error report for type 5 error -117 [ 406.765464][T14220] EXT4-fs (loop3): 1 orphan inode deleted [ 406.765929][T14220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.783264][T14230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.783370][T14230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.883818][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.885474][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.909304][T14242] syzkaller0: entered promiscuous mode [ 406.909326][T14242] syzkaller0: entered allmulticast mode [ 406.983652][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 407.231920][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.391077][T14297] syzkaller0: entered promiscuous mode [ 407.391104][T14297] syzkaller0: entered allmulticast mode [ 407.476491][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.476600][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.514910][T14321] syzkaller0: entered promiscuous mode [ 407.514933][T14321] syzkaller0: entered allmulticast mode [ 407.548765][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.548802][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.785210][T14349] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3095'. [ 408.042504][T14288] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.042542][T14288] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.042746][T14288] bridge_slave_0: entered allmulticast mode [ 408.044308][T14288] bridge_slave_0: entered promiscuous mode [ 408.082472][T14288] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.082600][T14288] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.082802][T14288] bridge_slave_1: entered allmulticast mode [ 408.083974][T14288] bridge_slave_1: entered promiscuous mode [ 408.145334][T14288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.150173][T14288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.204442][T14288] team0: Port device team_slave_0 added [ 408.208911][T14288] team0: Port device team_slave_1 added [ 408.250807][T14288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.250832][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.250895][T14288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.253837][T14288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.253848][T14288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.253970][T14288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.431111][T14288] hsr_slave_0: entered promiscuous mode [ 408.431665][T14288] hsr_slave_1: entered promiscuous mode [ 408.432032][T14288] debugfs: 'hsr0' already exists in 'hsr' [ 408.432048][T14288] Cannot create hsr debugfs directory [ 408.693388][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.693425][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.734233][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.734268][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.569321][ T51] bridge_slave_1: left allmulticast mode [ 409.569427][ T51] bridge_slave_1: left promiscuous mode [ 409.584556][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.589435][ T51] bridge_slave_0: left allmulticast mode [ 409.589482][ T51] bridge_slave_0: left promiscuous mode [ 409.598172][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.745622][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.746794][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.747519][ T51] bond0 (unregistering): Released all slaves [ 409.749236][ T51] bond1 (unregistering): Released all slaves [ 409.797306][ T51] hsr_slave_0: left promiscuous mode [ 409.797554][ T51] hsr_slave_1: left promiscuous mode [ 409.797962][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.797979][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.798474][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.798490][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.800213][ T51] veth0_macvtap: left promiscuous mode [ 409.800374][ T51] veth1_vlan: left promiscuous mode [ 409.800572][ T51] veth0_vlan: left promiscuous mode [ 409.885250][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 409.885335][ T29] audit: type=1326 audit(1789403256.659:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.5.3108" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f7133e159 code=0x0 [ 409.944096][ T51] team0 (unregistering): Port device team_slave_1 removed [ 409.946648][ T51] team0 (unregistering): Port device team_slave_0 removed [ 410.091844][ T29] audit: type=1400 audit(1789403256.869:1178): avc: denied { write } for pid=14422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.131464][ T29] audit: type=1400 audit(1789403256.909:1179): avc: denied { write } for pid=14433 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.249685][ T29] audit: type=1400 audit(1789403257.019:1180): avc: denied { write } for pid=14436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.270310][ T29] audit: type=1400 audit(1789403257.039:1181): avc: denied { write } for pid=14448 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.302798][T14288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.305008][T14288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.305670][T14288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.307589][T14288] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.308054][T14288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.310216][T14288] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.352632][T14288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.354795][T14288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.358945][ T51] IPVS: stop unused estimator thread 0... [ 410.414410][T14288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.419935][T14288] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.439179][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.439218][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.459053][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.459093][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.558994][T14466] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3113'. [ 410.562685][T14466] vlan2: entered promiscuous mode [ 410.562831][T14466] vlan2: entered allmulticast mode [ 410.649671][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.649827][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.687813][T14288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.771124][T14491] syzkaller0: entered promiscuous mode [ 410.771148][T14491] syzkaller0: entered allmulticast mode [ 410.777536][T14288] veth0_vlan: entered promiscuous mode [ 410.798735][T14288] veth1_vlan: entered promiscuous mode [ 410.815954][T14288] veth0_macvtap: entered promiscuous mode [ 410.817497][T14288] veth1_macvtap: entered promiscuous mode [ 410.835826][T14288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.839498][T14288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.891036][ T112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.891208][ T112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.891401][ T112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.910413][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.969010][ T29] audit: type=1326 audit(1789403257.739:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14512 comm="syz.3.3128" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21fa25e159 code=0x0 [ 411.074386][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3130'. [ 411.232072][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'. [ 411.799593][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'. [ 411.887613][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 412.058070][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.058217][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.077206][ T29] audit: type=1400 audit(1789403258.839:1183): avc: denied { read } for pid=14569 comm="syz.5.3152" name="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.077297][ T29] audit: type=1400 audit(1789403258.839:1184): avc: denied { read open } for pid=14569 comm="syz.5.3152" path="/" dev="configfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 412.237302][T14589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3160'. [ 412.237329][T14589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3160'. [ 412.377585][T14599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3164'. [ 412.621103][T14611] loop5: detected capacity change from 0 to 512 [ 412.644574][T14611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.644684][T14611] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.680312][ T29] audit: type=1400 audit(1789403259.449:1185): avc: denied { write } for pid=14610 comm="syz.5.3170" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.682268][T14611] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 412.761297][ T29] audit: type=1400 audit(1789403259.529:1186): avc: denied { create } for pid=14619 comm="syz.0.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 412.766528][T13861] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.966942][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3176'. [ 413.125828][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3177'. [ 413.369485][T14640] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 413.369506][T14640] netlink: 'syz.3.3178': attribute type 2 has an invalid length. [ 413.374911][T14640] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 413.374930][T14640] netlink: 'syz.3.3178': attribute type 2 has an invalid length. [ 413.615853][T14656] netlink: 13439 bytes leftover after parsing attributes in process `syz.4.3185'. [ 413.688937][T14663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3187'. [ 413.746553][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.746683][T14655] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.814647][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.816931][T14655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.982151][ T51] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.982196][ T51] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.982262][ T51] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.982299][ T51] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.055743][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3205'. [ 414.339859][T14740] macvtap1: entered allmulticast mode [ 414.727410][T14784] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 414.828753][T14796] netlink: 'syz.0.3244': attribute type 39 has an invalid length. [ 414.869186][T14791] netlink: 'syz.4.3242': attribute type 10 has an invalid length. [ 414.881254][T14791] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 414.942863][T14806] tipc: Enabling of bearer rejected, failed to enable media [ 415.039781][T14820] wg2: entered promiscuous mode [ 415.039813][T14820] wg2: entered allmulticast mode [ 415.123359][T14827] syzkaller0: entered promiscuous mode [ 415.123384][T14827] syzkaller0: entered allmulticast mode [ 415.197397][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 415.197415][ T29] audit: type=1400 audit(1789403261.969:1191): avc: denied { write } for pid=14834 comm="syz.4.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 415.258425][T14837] netlink: 'syz.4.3262': attribute type 10 has an invalid length. [ 415.271853][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.273904][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.283664][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.284022][T14837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.284412][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.284556][T14837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.296319][T14845] netlink: 'syz.0.3267': attribute type 21 has an invalid length. [ 415.296742][T14837] team0: Port device bridge0 added [ 415.312709][T14843] syzkaller0: create flow: hash 1666117748 index 0 [ 415.367277][T14847] netlink: 'syz.0.3268': attribute type 41 has an invalid length. [ 415.371024][T14843] syzkaller0 (unregistered): delete flow: hash 1666117748 index 0 [ 415.593569][T14861] netlink: 'syz.3.3273': attribute type 21 has an invalid length. [ 415.712858][T14870] syzkaller0: entered promiscuous mode [ 415.712883][T14870] syzkaller0: entered allmulticast mode [ 415.863958][T14881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.864090][T14881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.896455][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.896636][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.899757][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.899892][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.107430][T14884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.107510][T14884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.124479][T14896] syzkaller0: entered promiscuous mode [ 416.124499][T14896] syzkaller0: entered allmulticast mode [ 416.254906][T14898] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.261466][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.262370][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.331232][T14904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.331339][T14904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.333095][T14904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.333190][T14904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.333736][T14904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.333984][T14904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.384217][T14906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.384392][T14906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.464656][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.464876][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.665825][T14900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.665945][T14900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.728537][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.728710][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.731022][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.731160][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.879910][T14925] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 416.922964][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.923085][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.926818][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.926958][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.939613][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.939759][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.942088][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.942244][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.000517][T14919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.000643][T14919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.328185][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.328376][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.329459][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.329541][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.440102][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.440258][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.514335][T14937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.514482][T14937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.582167][T14943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.582259][T14943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.794637][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.794845][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.973964][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.974055][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.975475][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.975620][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.030144][T14958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.030268][T14958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.032406][T14958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.032582][T14958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.033186][T14958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.033299][T14958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.097404][T14960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.097561][T14960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.176573][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.176669][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.177582][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.177687][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.437301][T14972] __nla_validate_parse: 8 callbacks suppressed [ 418.437315][T14972] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3320'. [ 418.641723][T14987] tipc: Started in network mode [ 418.641751][T14987] tipc: Node identity 628517527f84, cluster identity 4711 [ 418.641818][T14987] tipc: Enabled bearer , priority 0 [ 418.681004][T14987] syzkaller0: entered promiscuous mode [ 418.681031][T14987] syzkaller0: entered allmulticast mode [ 418.681684][T14987] tipc: Resetting bearer [ 418.684697][T14986] tipc: Resetting bearer [ 418.715675][T14986] tipc: Disabling bearer [ 418.768094][ T29] audit: type=1400 audit(1789403265.539:1192): avc: denied { connect } for pid=14989 comm="syz.3.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.768375][ T29] audit: type=1400 audit(1789403265.539:1193): avc: denied { write } for pid=14989 comm="syz.3.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.821229][T14992] syzkaller0: entered promiscuous mode [ 418.821252][T14992] syzkaller0: entered allmulticast mode [ 418.964827][T15012] tipc: Enabled bearer , priority 0 [ 418.992950][T15012] syzkaller0: entered promiscuous mode [ 418.992975][T15012] syzkaller0: entered allmulticast mode [ 418.993717][T15012] tipc: Resetting bearer [ 418.998057][T15011] tipc: Resetting bearer [ 419.004621][T15011] tipc: Disabling bearer [ 419.109089][ T29] audit: type=1400 audit(1789403265.869:1194): avc: denied { mount } for pid=15002 comm="syz.4.3336" name="/" dev="rpc_pipefs" ino=42514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 419.182033][T15018] syzkaller0: entered promiscuous mode [ 419.182076][T15018] syzkaller0: entered allmulticast mode [ 419.433055][T15024] netlink: 'syz.3.3343': attribute type 10 has an invalid length. [ 419.475231][T15024] team0 (unregistering): Port device team_slave_0 removed [ 419.506147][T15024] team0 (unregistering): Port device team_slave_1 removed [ 419.647157][ T29] audit: type=1400 audit(1789403266.419:1195): avc: denied { write } for pid=15021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.717614][ T29] audit: type=1400 audit(1789403266.489:1196): avc: denied { write } for pid=15039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.852621][T15053] tipc: Started in network mode [ 419.852654][T15053] tipc: Node identity ca2e36a386c4, cluster identity 4711 [ 419.852761][T15053] tipc: Enabled bearer , priority 0 [ 419.883285][T15058] loop5: detected capacity change from 0 to 2368 [ 419.899963][T15053] syzkaller0: entered promiscuous mode [ 419.899984][T15053] syzkaller0: entered allmulticast mode [ 419.903938][T15053] tipc: Resetting bearer [ 419.922056][T15052] tipc: Resetting bearer [ 419.944748][T15052] tipc: Disabling bearer [ 419.993602][ T29] audit: type=1326 audit(1789403266.769:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15070 comm="syz.5.3357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f7133e159 code=0x0 [ 420.036759][T15075] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 420.101594][T15080] syzkaller0: entered promiscuous mode [ 420.101614][T15080] syzkaller0: entered allmulticast mode [ 420.176339][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3364'. [ 420.261371][ T29] audit: type=1400 audit(1789403267.029:1198): avc: denied { recv } for pid=15089 comm="syz.4.3362" saddr=10.128.0.163 src=30036 daddr=10.128.0.8 dest=43746 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 420.318228][T15099] tipc: Enabling of bearer rejected, failed to enable media [ 421.075267][T15124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3375'. [ 421.091128][ T29] audit: type=1400 audit(1789403267.859:1199): avc: denied { egress } for pid=15120 comm="syz.4.3375" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 421.091165][ T29] audit: type=1400 audit(1789403267.859:1200): avc: denied { sendto } for pid=15120 comm="syz.4.3375" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 421.193334][ T29] audit: type=1400 audit(1789403267.959:1201): avc: denied { write } for pid=15108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.550464][ T29] audit: type=1400 audit(1789403268.299:1202): avc: denied { write } for pid=15133 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.745095][ T29] audit: type=1400 audit(1789403268.519:1203): avc: denied { write } for pid=15136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.831368][ T29] audit: type=1400 audit(1789403268.609:1204): avc: denied { write } for pid=15147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.100676][ T29] audit: type=1400 audit(1789403268.829:1205): avc: denied { name_connect } for pid=15160 comm="syz.4.3381" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 422.346405][T15174] syz.4.3383 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 422.480454][ T29] audit: type=1400 audit(1789403269.239:1206): avc: denied { write } for pid=15150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.557755][ T29] audit: type=1400 audit(1789403269.329:1207): avc: denied { write } for pid=15183 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.082882][T15213] syzkaller0: entered promiscuous mode [ 423.082906][T15213] syzkaller0: entered allmulticast mode [ 423.428251][T15224] netlink: 'syz.1.3397': attribute type 2 has an invalid length. [ 423.738496][T15232] loop4: detected capacity change from 0 to 8192 [ 423.828403][T15238] FAULT_INJECTION: forcing a failure. [ 423.828403][T15238] name failslab, interval 1, probability 0, space 0, times 0 [ 423.828436][T15238] CPU: 0 UID: 0 PID: 15238 Comm: syz.4.3404 Not tainted syzkaller #0 PREEMPT(lazy) [ 423.828502][T15238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.828514][T15238] Call Trace: [ 423.828522][T15238] [ 423.828532][T15238] __dump_stack+0x1d/0x30 [ 423.828563][T15238] dump_stack_lvl+0x95/0xd0 [ 423.828591][T15238] dump_stack+0x15/0x1b [ 423.828674][T15238] should_fail_ex+0x262/0x280 [ 423.828702][T15238] ? radix_tree_node_alloc+0xa0/0x200 [ 423.828732][T15238] should_failslab+0x8c/0xb0 [ 423.828781][T15238] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 423.828808][T15238] ? __rcu_read_unlock+0x4e/0x70 [ 423.828838][T15238] ? radix_tree_node_alloc+0xa0/0x200 [ 423.828883][T15238] radix_tree_node_alloc+0xa0/0x200 [ 423.828916][T15238] idr_get_free+0x1fc/0x560 [ 423.828944][T15238] idr_alloc_u32+0xe9/0x1a0 [ 423.829032][T15238] idr_alloc_cyclic+0x7b/0x140 [ 423.829054][T15238] bpf_link_prime+0x69/0x1d0 [ 423.829074][T15238] tcx_link_attach+0xf4/0x550 [ 423.829150][T15238] ? __fget_files+0x184/0x1c0 [ 423.829307][T15238] link_create+0x51e/0x6b0 [ 423.829397][T15238] __sys_bpf+0x5a2/0xc30 [ 423.829461][T15238] ? do_futex+0x2c0/0x460 [ 423.829491][T15238] __x64_sys_bpf+0x69/0x80 [ 423.829517][T15238] x64_sys_call+0xf26/0x2550 [ 423.829628][T15238] do_syscall_64+0x112/0x360 [ 423.829658][T15238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.829679][T15238] RIP: 0033:0x7f1480e5e159 [ 423.829810][T15238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.829836][T15238] RSP: 002b:00007f147f8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 423.829868][T15238] RAX: ffffffffffffffda RBX: 00007f14810e5fa0 RCX: 00007f1480e5e159 [ 423.829882][T15238] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 423.829899][T15238] RBP: 00007f1480ef503b R08: 0000000000000000 R09: 0000000000000000 [ 423.829915][T15238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.829931][T15238] R13: 00007f14810e6038 R14: 00007f14810e5fa0 R15: 00007ffdb5840518 [ 423.829970][T15238] [ 423.846482][T15228] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input206 [ 424.069850][T15248] syzkaller0: entered promiscuous mode [ 424.069934][T15248] syzkaller0: entered allmulticast mode [ 424.186164][T15259] ./dev/sda1: Can't lookup blockdev [ 424.313619][T15263] FAULT_INJECTION: forcing a failure. [ 424.313619][T15263] name failslab, interval 1, probability 0, space 0, times 0 [ 424.313888][T15263] CPU: 0 UID: 0 PID: 15263 Comm: syz.5.3414 Not tainted syzkaller #0 PREEMPT(lazy) [ 424.313960][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.313975][T15263] Call Trace: [ 424.313983][T15263] [ 424.313992][T15263] __dump_stack+0x1d/0x30 [ 424.314027][T15263] dump_stack_lvl+0x95/0xd0 [ 424.314095][T15263] dump_stack+0x15/0x1b [ 424.314121][T15263] should_fail_ex+0x262/0x280 [ 424.314149][T15263] ? sctp_add_bind_addr+0x71/0x1e0 [ 424.314204][T15263] should_failslab+0x8c/0xb0 [ 424.314233][T15263] __kmalloc_cache_noprof+0x7a/0x400 [ 424.314261][T15263] ? sctp_add_bind_addr+0x71/0x1e0 [ 424.314290][T15263] sctp_add_bind_addr+0x71/0x1e0 [ 424.314342][T15263] sctp_copy_local_addr_list+0x1b4/0x250 [ 424.314418][T15263] sctp_copy_one_addr+0x7f/0x280 [ 424.314446][T15263] sctp_bind_addr_copy+0x11b/0x290 [ 424.314470][T15263] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 424.314491][T15263] sctp_connect_new_asoc+0x1c3/0x3a0 [ 424.314540][T15263] sctp_sendmsg+0x105f/0x1d00 [ 424.314634][T15263] ? inet_sendmsg+0x23/0xd0 [ 424.314662][T15263] ? __pfx_sctp_sendmsg+0x10/0x10 [ 424.314721][T15263] inet_sendmsg+0xc5/0xd0 [ 424.314750][T15263] ? __pfx_inet_sendmsg+0x10/0x10 [ 424.314778][T15263] ____sys_sendmsg+0x4e8/0x580 [ 424.314814][T15263] ___sys_sendmsg+0x195/0x1e0 [ 424.314848][T15263] __sys_sendmmsg+0x185/0x320 [ 424.314876][T15263] __x64_sys_sendmmsg+0x57/0x70 [ 424.314935][T15263] x64_sys_call+0x1fb4/0x2550 [ 424.314960][T15263] do_syscall_64+0x112/0x360 [ 424.315062][T15263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.315085][T15263] RIP: 0033:0x7f3f7133e159 [ 424.315101][T15263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.315121][T15263] RSP: 002b:00007f3f6fd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 424.315142][T15263] RAX: ffffffffffffffda RBX: 00007f3f715c5fa0 RCX: 00007f3f7133e159 [ 424.315238][T15263] RDX: 0000000000000001 RSI: 0000200000002f00 RDI: 0000000000000004 [ 424.315255][T15263] RBP: 00007f3f713d503b R08: 0000000000000000 R09: 0000000000000000 [ 424.315318][T15263] R10: 0000000010004040 R11: 0000000000000246 R12: 0000000000000000 [ 424.315334][T15263] R13: 00007f3f715c6038 R14: 00007f3f715c5fa0 R15: 00007ffcb9d70cc8 [ 424.315356][T15263] [ 424.639218][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.639397][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.874507][T15283] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 424.905870][T15283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.916515][T15283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.936915][T15283] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 424.939658][T15283] bond0 (unregistering): Released all slaves [ 424.958276][T15291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.958369][T15291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.118796][T15311] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 425.124407][T15311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 425.135003][T15311] bond1: (slave geneve2): making interface the new active one [ 425.143150][T15311] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 426.036454][T15359] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3452'. [ 426.960681][ T29] audit: type=1326 audit(1789403273.719:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1480e5e159 code=0x7ffc0000 [ 426.960713][ T29] audit: type=1326 audit(1789403273.719:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1480e5e159 code=0x7ffc0000 [ 426.960814][ T29] audit: type=1326 audit(1789403273.719:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1480e5e159 code=0x7ffc0000 [ 426.960844][ T29] audit: type=1326 audit(1789403273.719:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1480e5e159 code=0x7ffc0000 [ 426.960923][ T29] audit: type=1326 audit(1789403273.719:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1480e5e159 code=0x7ffc0000 [ 426.960956][ T29] audit: type=1326 audit(1789403273.719:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1480e1e98e code=0x7ffc0000 [ 426.961114][ T29] audit: type=1326 audit(1789403273.719:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1480e5e159 code=0x7ffc0000 [ 426.961183][ T29] audit: type=1326 audit(1789403273.729:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1480e1e98e code=0x7ffc0000 [ 426.961208][ T29] audit: type=1326 audit(1789403273.729:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1480e1e98e code=0x7ffc0000 [ 426.961232][ T29] audit: type=1326 audit(1789403273.729:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1480e1e98e code=0x7ffc0000 [ 426.962116][T15376] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 426.962133][T15376] Cannot find add_set index 0 as target [ 427.304257][T15384] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3465'. [ 427.376500][T15391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.376696][T15391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.468754][T15402] loop5: detected capacity change from 0 to 512 [ 427.494807][T14083] syzkaller0: tun_net_xmit 76 [ 427.495129][T14083] syzkaller0: tun_net_xmit 48 [ 427.505126][T15402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.505302][T15402] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.507542][T15401] syzkaller0: create flow: hash 1666117748 index 2 [ 427.520547][ T1525] syzkaller0: tun_net_xmit 76 [ 427.830775][ T3400] syzkaller0: tun_net_xmit 76 [ 428.080436][T15410] loop5: detected capacity change from 512 to 0 [ 428.081120][ C0] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 428.107498][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.107885][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.110053][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.110326][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.110597][ T3400] syzkaller0: tun_net_xmit 76 [ 428.113763][T15409] syzkaller0: delete flow: hash 1666117748 index 2 [ 428.115445][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.115756][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.116434][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.476023][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.477965][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.487454][T13861] EXT4-fs warning (device loop5): ext4_empty_dir:3087: inode #11: lblock 0: comm syz-executor: error -EIO reading directory block [ 428.548456][T15422] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3476'. [ 428.744871][T14416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.748186][T14416] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 428.748206][T14416] EXT4-fs (loop5): I/O error while writing superblock [ 428.764551][T15405] Buffer I/O error on dev loop5, logical block 12, lost sync page write [ 428.870964][T15443] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3487'. [ 429.318460][T15451] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.318496][T15451] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.318617][T15451] bridge_slave_0: entered allmulticast mode [ 429.319298][T15451] bridge_slave_0: entered promiscuous mode [ 429.320744][T15451] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.320777][T15451] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.320886][T15451] bridge_slave_1: entered allmulticast mode [ 429.321273][T15451] bridge_slave_1: entered promiscuous mode [ 429.335150][T15451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.336160][T15451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.346536][T15451] team0: Port device team_slave_0 added [ 429.347776][T15451] team0: Port device team_slave_1 added [ 429.358207][T15451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.358226][T15451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.358262][T15451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.358765][T15451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.358777][T15451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.358805][T15451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.376614][T15451] hsr_slave_0: entered promiscuous mode [ 429.377108][T15451] hsr_slave_1: entered promiscuous mode [ 429.377336][T15451] debugfs: 'hsr0' already exists in 'hsr' [ 429.377350][T15451] Cannot create hsr debugfs directory [ 429.662424][T15472] FAULT_INJECTION: forcing a failure. [ 429.662424][T15472] name failslab, interval 1, probability 0, space 0, times 0 [ 429.662500][T15472] CPU: 0 UID: 0 PID: 15472 Comm: syz.4.3493 Not tainted syzkaller #0 PREEMPT(lazy) [ 429.662524][T15472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.662537][T15472] Call Trace: [ 429.662543][T15472] [ 429.662552][T15472] __dump_stack+0x1d/0x30 [ 429.662611][T15472] dump_stack_lvl+0x95/0xd0 [ 429.662637][T15472] dump_stack+0x15/0x1b [ 429.662715][T15472] should_fail_ex+0x262/0x280 [ 429.662750][T15472] ? alloc_empty_file+0x70/0x1e0 [ 429.662776][T15472] should_failslab+0x8c/0xb0 [ 429.662811][T15472] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 429.662840][T15472] ? alloc_empty_file+0x70/0x1e0 [ 429.662862][T15472] alloc_empty_file+0x70/0x1e0 [ 429.662887][T15472] alloc_file_pseudo+0x92/0x120 [ 429.662967][T15472] anon_inode_getfile+0xa0/0x120 [ 429.662989][T15472] bpf_link_prime+0xfd/0x1d0 [ 429.663010][T15472] tcx_link_attach+0xf4/0x550 [ 429.663035][T15472] ? __fget_files+0x184/0x1c0 [ 429.663108][T15472] link_create+0x51e/0x6b0 [ 429.663142][T15472] __sys_bpf+0x5a2/0xc30 [ 429.663169][T15472] ? do_futex+0x2c0/0x460 [ 429.663274][T15472] __x64_sys_bpf+0x69/0x80 [ 429.663300][T15472] x64_sys_call+0xf26/0x2550 [ 429.663327][T15472] do_syscall_64+0x112/0x360 [ 429.663368][T15472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.663454][T15472] RIP: 0033:0x7f1480e5e159 [ 429.663472][T15472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.663494][T15472] RSP: 002b:00007f147f8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.663571][T15472] RAX: ffffffffffffffda RBX: 00007f14810e5fa0 RCX: 00007f1480e5e159 [ 429.663589][T15472] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 429.663606][T15472] RBP: 00007f1480ef503b R08: 0000000000000000 R09: 0000000000000000 [ 429.663622][T15472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.663664][T15472] R13: 00007f14810e6038 R14: 00007f14810e5fa0 R15: 00007ffdb5840518 [ 429.663753][T15472] [ 429.864712][T15451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 429.879391][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.881386][T15451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 429.888384][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.889126][T15451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 429.898119][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.900314][T15451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 429.908621][T15451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.942880][T15451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.948896][T15451] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.952660][T14083] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.952696][T14083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.956339][T14083] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.956376][T14083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.978080][T15488] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3497'. [ 430.367198][T15451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.389794][T15522] FAULT_INJECTION: forcing a failure. [ 430.389794][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 430.389845][T15522] CPU: 1 UID: 0 PID: 15522 Comm: syz.3.3506 Not tainted syzkaller #0 PREEMPT(lazy) [ 430.389877][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.389917][T15522] Call Trace: [ 430.389927][T15522] [ 430.389937][T15522] __dump_stack+0x1d/0x30 [ 430.389969][T15522] dump_stack_lvl+0x95/0xd0 [ 430.390029][T15522] dump_stack+0x15/0x1b [ 430.390063][T15522] should_fail_ex+0x262/0x280 [ 430.390093][T15522] ? alloc_empty_file+0x70/0x1e0 [ 430.390120][T15522] should_failslab+0x8c/0xb0 [ 430.390230][T15522] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 430.390265][T15522] ? alloc_empty_file+0x70/0x1e0 [ 430.390292][T15522] alloc_empty_file+0x70/0x1e0 [ 430.390365][T15522] alloc_file_pseudo+0x92/0x120 [ 430.390392][T15522] anon_inode_getfile+0xa0/0x120 [ 430.390416][T15522] bpf_link_prime+0xfd/0x1d0 [ 430.390441][T15522] tcx_link_attach+0xf4/0x550 [ 430.390494][T15522] link_create+0x51e/0x6b0 [ 430.390555][T15522] __sys_bpf+0x5a2/0xc30 [ 430.390590][T15522] __x64_sys_bpf+0x69/0x80 [ 430.390614][T15522] x64_sys_call+0xf26/0x2550 [ 430.390661][T15522] do_syscall_64+0x112/0x360 [ 430.390698][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.390724][T15522] RIP: 0033:0x7f21fa25e159 [ 430.390744][T15522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.390823][T15522] RSP: 002b:00007f21f8cb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.390851][T15522] RAX: ffffffffffffffda RBX: 00007f21fa4e5fa0 RCX: 00007f21fa25e159 [ 430.390946][T15522] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 430.390963][T15522] RBP: 00007f21fa2f503b R08: 0000000000000000 R09: 0000000000000000 [ 430.390978][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.391047][T15522] R13: 00007f21fa4e6038 R14: 00007f21fa4e5fa0 R15: 00007fff1cea8648 [ 430.391113][T15522] [ 430.425648][T15524] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3507'. [ 430.499894][T15532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.500072][T15532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.612607][T15451] veth0_vlan: entered promiscuous mode [ 430.615035][T15451] veth1_vlan: entered promiscuous mode [ 430.627811][T15451] veth0_macvtap: entered promiscuous mode [ 430.629809][T15451] veth1_macvtap: entered promiscuous mode [ 430.635770][T15451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.639819][T15451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.682871][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.701855][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.702642][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.702809][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.704359][T15532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.704470][T15532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.747405][T15561] loop6: detected capacity change from 0 to 256 [ 431.803308][T15562] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3517'. [ 431.820579][T15561] FAT-fs (loop6): codepage cp855 not found [ 431.858821][T15573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.858989][T15573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.867776][T15569] FAULT_INJECTION: forcing a failure. [ 431.867776][T15569] name failslab, interval 1, probability 0, space 0, times 0 [ 431.867850][T15569] CPU: 0 UID: 0 PID: 15569 Comm: syz.1.3520 Not tainted syzkaller #0 PREEMPT(lazy) [ 431.867877][T15569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.867890][T15569] Call Trace: [ 431.867898][T15569] [ 431.867906][T15569] __dump_stack+0x1d/0x30 [ 431.867934][T15569] dump_stack_lvl+0x95/0xd0 [ 431.868014][T15569] dump_stack+0x15/0x1b [ 431.868058][T15569] should_fail_ex+0x262/0x280 [ 431.868135][T15569] ? alloc_empty_file+0x70/0x1e0 [ 431.868158][T15569] should_failslab+0x8c/0xb0 [ 431.868187][T15569] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 431.868219][T15569] ? alloc_empty_file+0x70/0x1e0 [ 431.868244][T15569] alloc_empty_file+0x70/0x1e0 [ 431.868266][T15569] alloc_file_pseudo+0x92/0x120 [ 431.868291][T15569] anon_inode_getfile+0xa0/0x120 [ 431.868360][T15569] bpf_link_prime+0xfd/0x1d0 [ 431.868380][T15569] tcx_link_attach+0xf4/0x550 [ 431.868404][T15569] ? __fget_files+0x184/0x1c0 [ 431.868428][T15569] link_create+0x51e/0x6b0 [ 431.868519][T15569] __sys_bpf+0x5a2/0xc30 [ 431.868545][T15569] ? do_futex+0x2c0/0x460 [ 431.868662][T15569] __x64_sys_bpf+0x69/0x80 [ 431.868685][T15569] x64_sys_call+0xf26/0x2550 [ 431.868738][T15569] do_syscall_64+0x112/0x360 [ 431.868772][T15569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.868820][T15569] RIP: 0033:0x7f9984e7e159 [ 431.868838][T15569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.868858][T15569] RSP: 002b:00007f99838d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.868881][T15569] RAX: ffffffffffffffda RBX: 00007f9985105fa0 RCX: 00007f9984e7e159 [ 431.868897][T15569] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c [ 431.868917][T15569] RBP: 00007f9984f1503b R08: 0000000000000000 R09: 0000000000000000 [ 431.868932][T15569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.868946][T15569] R13: 00007f9985106038 R14: 00007f9985105fa0 R15: 00007ffe11fc9138 [ 431.868966][T15569] [ 432.637394][T15596] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3531'. [ 433.424196][T15621] netlink: 15231 bytes leftover after parsing attributes in process `syz.6.3543'. [ 433.591331][T15628] syzkaller0: entered promiscuous mode [ 433.591354][T15628] syzkaller0: entered allmulticast mode [ 433.713132][T15637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3549'. [ 434.107531][T15650] netlink: 15231 bytes leftover after parsing attributes in process `syz.6.3555'. [ 434.163945][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 434.163964][ T29] audit: type=1400 audit(1789403280.939:1419): avc: denied { bind } for pid=15655 comm="syz.1.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.164181][ T29] audit: type=1400 audit(1789403280.939:1420): avc: denied { setopt } for pid=15655 comm="syz.1.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.167244][ T29] audit: type=1400 audit(1789403280.939:1421): avc: denied { write } for pid=15655 comm="syz.1.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 434.192082][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3558'. [ 434.203482][T15658] netlink: 'syz.6.3560': attribute type 10 has an invalid length. [ 434.269673][T15658] team0 (unregistering): Port device team_slave_0 removed [ 434.276187][T15658] team0 (unregistering): Port device team_slave_1 removed [ 434.486138][T15682] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.3567'. [ 434.711243][T15711] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3581'. [ 434.865496][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3587'. [ 434.992337][T15732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.992485][T15732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.849733][T15743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3595'. [ 435.896876][T15745] loop4: detected capacity change from 0 to 512 [ 436.062690][T15756] FAULT_INJECTION: forcing a failure. [ 436.062690][T15756] name failslab, interval 1, probability 0, space 0, times 0 [ 436.062750][T15756] CPU: 1 UID: 0 PID: 15756 Comm: syz.4.3602 Not tainted syzkaller #0 PREEMPT(lazy) [ 436.062780][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.062823][T15756] Call Trace: [ 436.062830][T15756] [ 436.062902][T15756] __dump_stack+0x1d/0x30 [ 436.062932][T15756] dump_stack_lvl+0x95/0xd0 [ 436.063131][T15756] dump_stack+0x15/0x1b [ 436.063154][T15756] should_fail_ex+0x262/0x280 [ 436.063197][T15756] ? x509_cert_parse+0x3b/0x450 [ 436.063235][T15756] should_failslab+0x8c/0xb0 [ 436.063268][T15756] __kmalloc_cache_noprof+0x7a/0x400 [ 436.063311][T15756] ? x509_cert_parse+0x3b/0x450 [ 436.063346][T15756] x509_cert_parse+0x3b/0x450 [ 436.063381][T15756] x509_key_preparse+0x3c/0x420 [ 436.063453][T15756] asymmetric_key_preparse+0x68/0xb0 [ 436.063562][T15756] __key_create_or_update+0x2df/0x840 [ 436.063596][T15756] key_create_or_update+0x42/0x60 [ 436.063698][T15756] __se_sys_add_key+0x2a5/0x360 [ 436.063723][T15756] __x64_sys_add_key+0x67/0x80 [ 436.063808][T15756] x64_sys_call+0x1fa9/0x2550 [ 436.063833][T15756] do_syscall_64+0x112/0x360 [ 436.063928][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.063949][T15756] RIP: 0033:0x7f1480e5e159 [ 436.063965][T15756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.063986][T15756] RSP: 002b:00007f147f8b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 436.064075][T15756] RAX: ffffffffffffffda RBX: 00007f14810e5fa0 RCX: 00007f1480e5e159 [ 436.064096][T15756] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 436.064110][T15756] RBP: 00007f1480ef503b R08: ffffffffffffffff R09: 0000000000000000 [ 436.064127][T15758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.064126][T15756] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 436.064226][T15758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.064259][T15756] R13: 00007f14810e6038 R14: 00007f14810e5fa0 R15: 00007ffdb5840518 [ 436.064278][T15756] [ 436.230157][T15768] netlink: 'syz.3.3607': attribute type 10 has an invalid length. [ 436.262502][T15771] FAULT_INJECTION: forcing a failure. [ 436.262502][T15771] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 436.262533][T15771] CPU: 1 UID: 0 PID: 15771 Comm: syz.1.3608 Not tainted syzkaller #0 PREEMPT(lazy) [ 436.262582][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.262594][T15771] Call Trace: [ 436.262639][T15771] [ 436.262647][T15771] __dump_stack+0x1d/0x30 [ 436.262725][T15771] dump_stack_lvl+0x95/0xd0 [ 436.262748][T15771] dump_stack+0x15/0x1b [ 436.262770][T15771] should_fail_ex+0x262/0x280 [ 436.262860][T15771] should_fail+0xb/0x20 [ 436.262881][T15771] should_fail_usercopy+0x1a/0x20 [ 436.262915][T15771] strncpy_from_user+0x27/0x250 [ 436.263146][T15771] do_getname+0x59/0x1c0 [ 436.263168][T15771] getname_flags+0x1d/0x30 [ 436.263256][T15771] do_sys_openat2+0x6c/0x130 [ 436.263282][T15771] __x64_sys_openat+0xf2/0x120 [ 436.263356][T15771] x64_sys_call+0x1f72/0x2550 [ 436.263415][T15771] do_syscall_64+0x112/0x360 [ 436.263447][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.263485][T15771] RIP: 0033:0x7f9984e3e98e [ 436.263502][T15771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.263549][T15771] RSP: 002b:00007f99838d6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.263630][T15771] RAX: ffffffffffffffda RBX: 00007f99838d76c0 RCX: 00007f9984e3e98e [ 436.263646][T15771] RDX: 0000000000000000 RSI: 00007f99838d6f90 RDI: ffffffffffffff9c [ 436.263685][T15771] RBP: 00007f9984f1503b R08: 0000000000000000 R09: 0000000000000000 [ 436.263699][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.263712][T15771] R13: 00007f9985106038 R14: 00007f9985105fa0 R15: 00007ffe11fc9138 [ 436.263731][T15771] [ 436.510975][ T29] audit: type=1400 audit(1789403283.279:1422): avc: denied { write } for pid=15786 comm="syz.4.3616" name="functions" dev="configfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.511008][ T29] audit: type=1400 audit(1789403283.289:1423): avc: denied { write } for pid=15786 comm="syz.4.3616" name="midi2.0" dev="configfs" ino=45838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 436.898450][T15827] FAULT_INJECTION: forcing a failure. [ 436.898450][T15827] name failslab, interval 1, probability 0, space 0, times 0 [ 436.898903][T15827] CPU: 1 UID: 0 PID: 15827 Comm: syz.4.3634 Not tainted syzkaller #0 PREEMPT(lazy) [ 436.898932][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.898947][T15827] Call Trace: [ 436.898954][T15827] [ 436.898963][T15827] __dump_stack+0x1d/0x30 [ 436.899067][T15827] dump_stack_lvl+0x95/0xd0 [ 436.899092][T15827] dump_stack+0x15/0x1b [ 436.899139][T15827] should_fail_ex+0x262/0x280 [ 436.899165][T15827] ? kobject_get_path+0x92/0x1c0 [ 436.899191][T15827] should_failslab+0x8c/0xb0 [ 436.899227][T15827] __kmalloc_noprof+0xd0/0x4d0 [ 436.899315][T15827] ? kobject_get_path+0x92/0x1c0 [ 436.899340][T15827] ? should_failslab+0x8c/0xb0 [ 436.899368][T15827] kobject_get_path+0x92/0x1c0 [ 436.899444][T15827] kobject_uevent_env+0x1c2/0x560 [ 436.899478][T15827] kobject_uevent+0x1d/0x30 [ 436.899505][T15827] driver_register+0x1e2/0x220 [ 436.899533][T15827] usb_gadget_register_driver_owner+0x92/0x1a0 [ 436.899650][T15827] raw_ioctl+0xc5b/0x1df0 [ 436.899677][T15827] ? ioctl_has_perm+0x273/0x2c0 [ 436.899706][T15827] ? do_vfs_ioctl+0x848/0xe50 [ 436.899786][T15827] ? selinux_file_ioctl+0x33c/0x3c0 [ 436.899810][T15827] ? __fget_files+0x184/0x1c0 [ 436.899837][T15827] ? __pfx_raw_ioctl+0x10/0x10 [ 436.899870][T15827] __se_sys_ioctl+0xce/0x140 [ 436.899981][T15827] __x64_sys_ioctl+0x43/0x50 [ 436.900011][T15827] x64_sys_call+0x239d/0x2550 [ 436.900082][T15827] do_syscall_64+0x112/0x360 [ 436.900124][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.900153][T15827] RIP: 0033:0x7f1480e5ddeb [ 436.900171][T15827] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 436.900190][T15827] RSP: 002b:00007f147f8b4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.900212][T15827] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f1480e5ddeb [ 436.900227][T15827] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 436.900310][T15827] RBP: 00007f147f8b5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 436.900327][T15827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.900341][T15827] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 436.900361][T15827] [ 437.031978][T15827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.048910][T15827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.194254][T15831] __nla_validate_parse: 1 callbacks suppressed [ 437.194274][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3636'. [ 437.247204][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 437.281532][T15843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.281642][T15843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.540909][T15857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 437.553618][T15857] loop6: detected capacity change from 0 to 1024 [ 437.563848][T15857] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.3645: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 437.563951][T15857] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 437.564622][T15857] EXT4-fs (loop6): Remounting filesystem read-only [ 437.564702][T15857] EXT4-fs (loop6): get root inode failed [ 437.564714][T15857] EXT4-fs (loop6): mount failed [ 437.923720][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 438.057536][T15875] syzkaller0: entered promiscuous mode [ 438.057562][T15875] syzkaller0: entered allmulticast mode [ 438.362825][ T29] audit: type=1400 audit(1789403285.139:1424): avc: denied { write } for pid=15887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.452616][ T29] audit: type=1400 audit(1789403285.209:1425): avc: denied { write } for pid=15919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.607181][T15932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 439.037557][ T29] audit: type=1400 audit(1789403285.809:1426): avc: denied { write } for pid=15923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.173922][ T29] audit: type=1400 audit(1789403285.929:1427): avc: denied { write } for pid=15946 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.181153][ T29] audit: type=1400 audit(1789403285.959:1428): avc: denied { write } for pid=15948 comm="syz.4.3675" name="core" dev="configfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.181996][ T29] audit: type=1400 audit(1789403285.959:1429): avc: denied { write } for pid=15948 comm="syz.4.3675" name="rd_mcp_0" dev="configfs" ino=46234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.411639][ T29] audit: type=1400 audit(1789403286.189:1430): avc: denied { ioctl } for pid=15961 comm="syz.6.3682" path="/21/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 439.419237][T15965] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.3683'. [ 441.055296][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 441.244540][ T29] audit: type=1400 audit(1789403288.019:1431): avc: denied { write } for pid=16059 comm="syz.4.3722" name="functions" dev="configfs" ino=1848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.249290][ T29] audit: type=1400 audit(1789403288.019:1432): avc: denied { write } for pid=16059 comm="syz.4.3722" name="ep.0" dev="configfs" ino=46540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 441.328168][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3723'. [ 441.559605][ T29] audit: type=1400 audit(1789403288.329:1433): avc: denied { read } for pid=16090 comm="syz.4.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.717290][T16108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3744'. [ 441.821158][T16118] loop6: detected capacity change from 0 to 128 [ 441.824935][T16118] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 441.825093][T16118] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 441.827199][ T29] audit: type=1400 audit(1789403288.599:1434): avc: denied { setattr } for pid=16117 comm="syz.6.3749" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.827857][ T29] audit: type=1400 audit(1789403288.599:1435): avc: denied { write } for pid=16117 comm="syz.6.3749" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.828460][ T29] audit: type=1400 audit(1789403288.599:1436): avc: denied { ioctl } for pid=16117 comm="syz.6.3749" path="/38/mnt/bus" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 442.234961][T15451] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.299281][T16122] ================================================================== [ 442.299325][T16122] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 442.299362][T16122] [ 442.299369][T16122] read-write to 0xffff888105d92230 of 8 bytes by task 14083 on cpu 0: [ 442.299386][T16122] __xa_clear_mark+0xf5/0x1e0 [ 442.299404][T16122] __folio_end_writeback+0xe7/0x530 [ 442.299432][T16122] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 442.299459][T16122] folio_end_writeback+0x1c/0x70 [ 442.299480][T16122] ext4_finish_bio+0x454/0x770 [ 442.299504][T16122] ext4_release_io_end+0x9f/0x1f0 [ 442.299527][T16122] ext4_end_io_end+0x18d/0x240 [ 442.299550][T16122] ext4_end_io_rsv_work+0x15b/0x1f0 [ 442.299571][T16122] process_scheduled_works+0x56a/0xa50 [ 442.299604][T16122] worker_thread+0x569/0x750 [ 442.299635][T16122] kthread+0x223/0x270 [ 442.299653][T16122] ret_from_fork+0x146/0x330 [ 442.299679][T16122] ret_from_fork_asm+0x1a/0x30 [ 442.299707][T16122] [ 442.299714][T16122] read to 0xffff888105d92230 of 8 bytes by task 16122 on cpu 1: [ 442.299734][T16122] xas_find_marked+0x211/0x650 [ 442.299770][T16122] filemap_get_folios_tag+0xf7/0x400 [ 442.299795][T16122] filemap_write_and_wait_range+0x1f5/0x370 [ 442.299828][T16122] filemap_invalidate_pages+0xd3/0x1e0 [ 442.299854][T16122] kiocb_invalidate_pages+0x6e/0x80 [ 442.299880][T16122] __iomap_dio_rw+0x6e7/0x1410 [ 442.299906][T16122] iomap_dio_rw+0x40/0x90 [ 442.299930][T16122] ext4_file_write_iter+0xd4b/0x1020 [ 442.299954][T16122] vfs_write+0x57f/0x9a0 [ 442.299985][T16122] ksys_write+0xdc/0x1a0 [ 442.300023][T16122] __x64_sys_write+0x40/0x50 [ 442.300053][T16122] x64_sys_call+0x154e/0x2550 [ 442.300079][T16122] do_syscall_64+0x112/0x360 [ 442.300109][T16122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.300131][T16122] [ 442.300136][T16122] value changed: 0xffffffffffff8000 -> 0xfffffffffff00000 [ 442.300152][T16122] [ 442.300156][T16122] Reported by Kernel Concurrency Sanitizer on: [ 442.300170][T16122] CPU: 1 UID: 0 PID: 16122 Comm: syz.3.3747 Not tainted syzkaller #0 PREEMPT(lazy) [ 442.300199][T16122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.300211][T16122] ==================================================================