last executing test programs: 6.351524153s ago: executing program 1 (id=3745): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sysinfo(&(0x7f0000000100)=""/52) 3.540756956s ago: executing program 1 (id=3778): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) capset(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 3.309512149s ago: executing program 4 (id=3785): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x540, 0x120, 0x210, 0xffffffff, 0x350, 0x120, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d6], 0x1a2, 0x6, 0x5}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @icmp_id=0x67}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x5e, 0x4, 0x4, 0x42}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x65, @gre_key=0x1}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x1f, "0571", 0x1}}, @common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x7, 0x9d, 0xf8, 0x4, 0x1008, 0x80}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@multicast1, @gre_key=0x8, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 3.25054244s ago: executing program 4 (id=3787): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) 3.25004602s ago: executing program 3 (id=3788): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) ftruncate(0xffffffffffffffff, 0x8002007ffb) 3.145389102s ago: executing program 4 (id=3792): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) 3.067865063s ago: executing program 3 (id=3793): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) 2.285989215s ago: executing program 2 (id=3796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x5c}}, 0x0) 1.545004796s ago: executing program 0 (id=3798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x4e24, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "bd16bc02419c391d6ab287b20de43a889cb2071758ce3ddb6979bc35c3a05a7e", "0b420afd6476b00af3a2efb3e97b4dfd", {"0871caba2330cd331aec94c863f7f7be", "70fc1a30bd72aa31362aa32faa719e73"}}}}}}}, 0x0) 1.539050126s ago: executing program 1 (id=3799): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000340), &(0x7f00000003c0)=0x30) 1.538736146s ago: executing program 2 (id=3800): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="7191e9cdd6", 0x5}, 0x1, 0x0, 0x0, 0x34004841}, 0x24000040) 1.500231497s ago: executing program 0 (id=3801): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.481171827s ago: executing program 2 (id=3802): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 1.408812068s ago: executing program 2 (id=3803): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003e80)=ANY=[], 0x1c}}, 0x0) 1.335865919s ago: executing program 2 (id=3804): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r1, 0x8002007ffb) 1.28119788s ago: executing program 3 (id=3805): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) 1.28073864s ago: executing program 0 (id=3806): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @multicast2}, 0x10) 1.050877574s ago: executing program 0 (id=3807): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$sg(0x0, 0x0, 0x40042) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) 1.050495814s ago: executing program 4 (id=3808): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 1.050120273s ago: executing program 4 (id=3809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x3f, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x9, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa1"}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) 767.790638ms ago: executing program 3 (id=3810): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 767.506138ms ago: executing program 3 (id=3811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x4e24, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "bd16bc02419c391d6ab287b20de43a889cb2071758ce3ddb6979bc35c3a05a7e", "0b420afd6476b00af3a2efb3e97b4dfd", {"0871caba2330cd331aec94c863f7f7be", "70fc1a30bd72aa31362aa32faa719e73"}}}}}}}, 0x0) 90.435348ms ago: executing program 0 (id=3812): sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)="7191e9cdd6", 0x5}, 0x1, 0x0, 0x0, 0x34004841}, 0x24000040) 66.746768ms ago: executing program 1 (id=3813): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1) 36.748489ms ago: executing program 1 (id=3814): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 36.332319ms ago: executing program 2 (id=3815): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) 27.434839ms ago: executing program 3 (id=3816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x6a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 15.628959ms ago: executing program 0 (id=3817): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, r0, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) 15.168099ms ago: executing program 4 (id=3818): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb, [{{0x9, 0x4, 0x0, 0x14, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000140)={0x40, 0x6, 0x5, {0x5, 0xc, "c5f8b4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=3819): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d2", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b5d383823677f025217943343e363268a73daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62", 0x62}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): port 6081 - 0 [ 201.810119][T12113] netlink: 'syz.1.2884': attribute type 10 has an invalid length. [ 201.818006][T12113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2884'. [ 201.863452][T12109] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.933200][T12109] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.943179][T12117] loop4: detected capacity change from 0 to 128 [ 201.953798][T12120] 9pnet_fd: Insufficient options for proto=fd [ 201.964462][T12117] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.976913][T12117] ext4 filesystem being mounted at /587/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.998422][T12109] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.010937][T12109] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.022221][T12109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.033597][T12109] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.089150][T12133] 9pnet_fd: Insufficient options for proto=fd [ 202.131199][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.141182][T11982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.155848][T11982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.173357][T11982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.189239][T11982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.258636][T11982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.272765][T11982] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.282269][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.289349][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.301603][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.308717][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.329494][T12150] loop0: detected capacity change from 0 to 1024 [ 202.371142][T11982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.381663][T11982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.393459][T12156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'. [ 202.405168][T12150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.429785][T12150] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 202.445088][T12150] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 51 with max blocks 1 with error 28 [ 202.457568][T12150] EXT4-fs (loop0): This should not happen!! Data will be lost [ 202.457568][T12150] [ 202.467376][T12150] EXT4-fs (loop0): Total free blocks count 0 [ 202.473470][T12150] EXT4-fs (loop0): Free/Dirty block details [ 202.479450][T12150] EXT4-fs (loop0): free_blocks=68451041280 [ 202.485360][T12150] EXT4-fs (loop0): dirty_blocks=16 [ 202.490487][T12150] EXT4-fs (loop0): Block reservation details [ 202.496574][T12150] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 202.512507][T12162] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 36 with error 28 [ 202.527576][ T31] bridge_slave_1: left allmulticast mode [ 202.533307][ T31] bridge_slave_1: left promiscuous mode [ 202.539095][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.565359][ T31] bridge_slave_0: left allmulticast mode [ 202.571072][ T31] bridge_slave_0: left promiscuous mode [ 202.576777][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.610363][T12156] loop2: detected capacity change from 0 to 128 [ 202.642349][ T31] team0: Port device geneve1 removed [ 202.671176][T12156] syz.2.2902: attempt to access beyond end of device [ 202.671176][T12156] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 202.733617][ T346] kworker/u8:6: attempt to access beyond end of device [ 202.733617][ T346] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 202.749891][ T31] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.758913][ T31] bond_slave_0: left promiscuous mode [ 202.766036][ T31] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.776912][ T31] bond_slave_1: left promiscuous mode [ 202.783120][ T31] $Hÿ (unregistering): Released all slaves [ 202.794847][T12167] IPVS: stopping master sync thread 12168 ... [ 202.801222][T12168] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 202.816293][T11982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.829868][T12167] loop2: detected capacity change from 0 to 1024 [ 202.838244][T12167] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.847074][ T31] hsr_slave_0: left promiscuous mode [ 202.847360][T12167] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 202.861054][ T31] hsr_slave_1: left promiscuous mode [ 202.867282][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.874836][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.884400][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.891891][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.901478][ T31] veth1_vlan: left promiscuous mode [ 202.908151][ T31] veth0_vlan: left promiscuous mode [ 202.921328][T12172] loop2: detected capacity change from 0 to 256 [ 202.984950][ T31] team0 (unregistering): Port device team_slave_1 removed [ 202.990038][T12173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'. [ 203.003760][ T31] team0 (unregistering): Port device team_slave_0 removed [ 203.102842][T11982] veth0_vlan: entered promiscuous mode [ 203.111813][T11982] veth1_vlan: entered promiscuous mode [ 203.125912][T11982] veth0_macvtap: entered promiscuous mode [ 203.133296][T11982] veth1_macvtap: entered promiscuous mode [ 203.153192][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.163888][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.173878][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.184535][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.194763][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.205428][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.216124][T11982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.237284][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.247784][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.257689][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.268187][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.278044][T11982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.288484][T11982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.299723][T11982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.309201][T11982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.318046][T11982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.326911][T11982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.335634][T11982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.349768][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 203.360929][T12194] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.370884][T12197] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2912'. [ 203.419332][T12203] random: crng reseeded on system resumption [ 203.443070][T12194] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.524875][T12194] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.577854][T12201] loop4: detected capacity change from 0 to 128 [ 203.586012][T12194] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.609774][T12210] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 203.619613][T12209] IPVS: stopping master sync thread 12210 ... [ 203.630753][T12209] loop3: detected capacity change from 0 to 1024 [ 203.638030][T12209] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.648848][T12209] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 203.651767][T12201] syz.4.2913: attempt to access beyond end of device [ 203.651767][T12201] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 203.774346][ T159] kworker/u8:5: attempt to access beyond end of device [ 203.774346][ T159] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 203.807554][T12218] netlink: 'syz.2.2917': attribute type 27 has an invalid length. [ 203.815975][T12222] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 203.826335][T12220] IPVS: stopping master sync thread 12222 ... [ 203.848472][T12220] loop4: detected capacity change from 0 to 1024 [ 203.856672][T12220] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.867942][T12220] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 203.891036][T12194] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.915106][T12194] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.964720][T12194] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.986462][T12194] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.046532][T12214] chnl_net:caif_netlink_parms(): no params data found [ 204.131317][T12214] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.138469][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.157033][T12214] bridge_slave_0: entered allmulticast mode [ 204.165565][T12214] bridge_slave_0: entered promiscuous mode [ 204.173028][T12218] loop2: detected capacity change from 0 to 128 [ 204.191872][T12249] loop0: detected capacity change from 0 to 512 [ 204.198485][T12214] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.205677][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.216213][T12214] bridge_slave_1: entered allmulticast mode [ 204.223465][T12214] bridge_slave_1: entered promiscuous mode [ 204.254003][T12214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.283213][T12214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.321542][T12214] team0: Port device team_slave_0 added [ 204.328303][T12214] team0: Port device team_slave_1 added [ 204.332301][T12218] syz.2.2917: attempt to access beyond end of device [ 204.332301][T12218] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 204.354524][T12214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.361625][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.387638][T12214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.406713][T12214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.413753][T12214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.439728][T12214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.450413][T12256] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2926'. [ 204.475675][ T159] kworker/u8:5: attempt to access beyond end of device [ 204.475675][ T159] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 204.505606][T12214] hsr_slave_0: entered promiscuous mode [ 204.514705][T12214] hsr_slave_1: entered promiscuous mode [ 204.520652][T12214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.528545][T12214] Cannot create hsr debugfs directory [ 204.534292][T12263] macvtap0: refused to change device tx_queue_len [ 204.596609][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2929'. [ 204.636989][T12267] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.661488][T12272] loop3: detected capacity change from 0 to 512 [ 204.703544][T12267] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.772762][T12282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.781401][T12282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.791023][T12267] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.833369][T12267] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.979680][T12298] loop4: detected capacity change from 0 to 128 [ 204.988346][T12298] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.997881][T12214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.002786][T12298] ext4 filesystem being mounted at /603/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.020036][T12214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.030442][T12214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.042013][T12214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.082879][T12214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.095876][T12214] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.106669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.113834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.123554][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.133800][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.140888][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.155089][T12309] macvtap0: refused to change device tx_queue_len [ 205.167452][T12214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.233318][T12214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.310945][T12214] veth0_vlan: entered promiscuous mode [ 205.319434][T12214] veth1_vlan: entered promiscuous mode [ 205.339470][T12214] veth0_macvtap: entered promiscuous mode [ 205.347859][T12214] veth1_macvtap: entered promiscuous mode [ 205.362404][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.373018][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.382904][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.393386][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.403348][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.413987][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.423870][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.434338][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.452785][T12214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.469400][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.479902][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489752][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.500310][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.510190][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.520652][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.530521][T12214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.541092][T12214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.555731][T12214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.575331][T12214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.584249][T12214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.593114][T12214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.601957][T12214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.666418][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 205.666433][ T29] audit: type=1326 audit(1743381156.101:12018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.696498][ T29] audit: type=1326 audit(1743381156.111:12019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.720206][ T29] audit: type=1326 audit(1743381156.111:12020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.736103][T12351] netlink: 'syz.4.2948': attribute type 10 has an invalid length. [ 205.743903][ T29] audit: type=1326 audit(1743381156.111:12021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.751762][T12351] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2948'. [ 205.775316][ T29] audit: type=1326 audit(1743381156.111:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.807956][ T29] audit: type=1326 audit(1743381156.111:12023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.831659][ T29] audit: type=1326 audit(1743381156.111:12024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.855325][ T29] audit: type=1326 audit(1743381156.111:12025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.878902][ T29] audit: type=1326 audit(1743381156.111:12026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.902512][ T29] audit: type=1326 audit(1743381156.111:12027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12340 comm="syz.4.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4190d169 code=0x7ffc0000 [ 205.929210][T12341] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.996448][T12341] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.053216][T12341] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.093312][T12341] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.165609][T12341] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.175137][T12376] IPVS: stopping master sync thread 12378 ... [ 206.184043][T12378] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 206.195367][T12341] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.225659][T12341] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.238422][T12341] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.507397][T12267] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.546148][T12267] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.579864][T12267] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.618540][T12267] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.747259][T12395] macvtap0: refused to change device tx_queue_len [ 206.814951][T12399] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 206.827080][T12397] IPVS: stopping master sync thread 12399 ... [ 206.827613][T12384] chnl_net:caif_netlink_parms(): no params data found [ 206.840193][T12397] loop2: detected capacity change from 0 to 1024 [ 206.847336][T12397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 206.856478][T12397] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 206.902912][T12407] 9pnet_fd: Insufficient options for proto=fd [ 206.918034][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.925143][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.942544][T12384] bridge_slave_0: entered allmulticast mode [ 206.957764][T12384] bridge_slave_0: entered promiscuous mode [ 206.964849][T12411] loop1: detected capacity change from 0 to 256 [ 206.973156][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.980240][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.987616][T12384] bridge_slave_1: entered allmulticast mode [ 206.994505][T12384] bridge_slave_1: entered promiscuous mode [ 207.042770][T12384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.059663][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2963'. [ 207.127175][T12384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.182386][T12422] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 207.182430][T12420] IPVS: stopping master sync thread 12422 ... [ 207.215608][T12384] team0: Port device team_slave_0 added [ 207.221383][T12405] loop2: detected capacity change from 0 to 128 [ 207.222503][T12384] team0: Port device team_slave_1 added [ 207.236167][T12426] IPVS: stopping master sync thread 12427 ... [ 207.239340][T12427] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 207.270910][T12426] loop3: detected capacity change from 0 to 1024 [ 207.279802][T12426] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.289942][T12384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.292137][T12426] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 207.296997][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.331649][T12384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.346909][T12412] syz.2.2962: attempt to access beyond end of device [ 207.346909][T12412] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 207.380434][T12384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.387548][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.413664][T12384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.451254][T12384] hsr_slave_0: entered promiscuous mode [ 207.477208][T12384] hsr_slave_1: entered promiscuous mode [ 207.483227][T12384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.503445][T12384] Cannot create hsr debugfs directory [ 207.505241][ T12] kworker/u8:0: attempt to access beyond end of device [ 207.505241][ T12] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 207.599757][T12384] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.634909][T12442] IPVS: stopping master sync thread 12443 ... [ 207.646386][T12442] loop3: detected capacity change from 0 to 1024 [ 207.654495][T12384] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.657725][T12442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.674554][T12442] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 207.712121][T12445] 9pnet_fd: Insufficient options for proto=fd [ 207.731223][T12384] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.783986][T12384] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.795180][T12453] 9pnet_fd: Insufficient options for proto=fd [ 207.874842][T12469] loop2: detected capacity change from 0 to 512 [ 207.881288][T12462] loop0: detected capacity change from 0 to 512 [ 207.887784][T12469] EXT4-fs: Mount option(s) incompatible with ext2 [ 208.049166][T12482] 9pnet_fd: Insufficient options for proto=fd [ 208.081497][T12486] loop1: detected capacity change from 0 to 256 [ 208.094310][T12488] FAULT_INJECTION: forcing a failure. [ 208.094310][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.107566][T12488] CPU: 0 UID: 0 PID: 12488 Comm: syz.3.2990 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 208.107623][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.107638][T12488] Call Trace: [ 208.107645][T12488] [ 208.107654][T12488] dump_stack_lvl+0xf6/0x150 [ 208.107752][T12488] dump_stack+0x15/0x1a [ 208.107772][T12488] should_fail_ex+0x261/0x270 [ 208.107795][T12488] should_fail+0xb/0x10 [ 208.107816][T12488] should_fail_usercopy+0x1a/0x20 [ 208.107843][T12488] _copy_from_user+0x1c/0xa0 [ 208.107871][T12488] copy_msghdr_from_user+0x54/0x2b0 [ 208.107918][T12488] ? __fget_files+0x186/0x1c0 [ 208.107949][T12488] __sys_sendmsg+0x141/0x240 [ 208.107978][T12488] __x64_sys_sendmsg+0x46/0x50 [ 208.108000][T12488] x64_sys_call+0x26f3/0x2e10 [ 208.108088][T12488] do_syscall_64+0xc9/0x1c0 [ 208.108112][T12488] ? clear_bhb_loop+0x25/0x80 [ 208.108181][T12488] ? clear_bhb_loop+0x25/0x80 [ 208.108203][T12488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.108304][T12488] RIP: 0033:0x7f18b828d169 [ 208.108322][T12488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.108345][T12488] RSP: 002b:00007f18b68f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.108392][T12488] RAX: ffffffffffffffda RBX: 00007f18b84a5fa0 RCX: 00007f18b828d169 [ 208.108407][T12488] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 208.108421][T12488] RBP: 00007f18b68f7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.108435][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.108449][T12488] R13: 0000000000000000 R14: 00007f18b84a5fa0 R15: 00007fffeb228e68 [ 208.108541][T12488] [ 208.319838][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2989'. [ 208.431988][T12495] process 'syz.0.2991' launched './file0' with NULL argv: empty string added [ 208.768702][T12513] 9pnet_fd: Insufficient options for proto=fd [ 208.850217][T12522] loop2: detected capacity change from 0 to 512 [ 208.857181][T12522] EXT4-fs: dax option not supported [ 208.866879][T12522] FAULT_INJECTION: forcing a failure. [ 208.866879][T12522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.880043][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.2.3002 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 208.880067][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.880109][T12522] Call Trace: [ 208.880184][T12522] [ 208.880190][T12522] dump_stack_lvl+0xf6/0x150 [ 208.880269][T12522] dump_stack+0x15/0x1a [ 208.880283][T12522] should_fail_ex+0x261/0x270 [ 208.880300][T12522] should_fail+0xb/0x10 [ 208.880419][T12522] should_fail_usercopy+0x1a/0x20 [ 208.880445][T12522] _copy_from_user+0x1c/0xa0 [ 208.880496][T12522] __x64_sys_rt_sigsuspend+0x72/0xe0 [ 208.880633][T12522] x64_sys_call+0x1f92/0x2e10 [ 208.880667][T12522] do_syscall_64+0xc9/0x1c0 [ 208.880686][T12522] ? clear_bhb_loop+0x25/0x80 [ 208.880774][T12522] ? clear_bhb_loop+0x25/0x80 [ 208.880793][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.880811][T12522] RIP: 0033:0x7f87c4c8d169 [ 208.880824][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.880839][T12522] RSP: 002b:00007f87c32f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 208.880914][T12522] RAX: ffffffffffffffda RBX: 00007f87c4ea5fa0 RCX: 00007f87c4c8d169 [ 208.880924][T12522] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000040 [ 208.880934][T12522] RBP: 00007f87c32f7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.880944][T12522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.881003][T12522] R13: 0000000000000000 R14: 00007f87c4ea5fa0 R15: 00007fff1fc52cc8 [ 208.881018][T12522] [ 209.178122][T12540] FAULT_INJECTION: forcing a failure. [ 209.178122][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 209.190880][T12540] CPU: 0 UID: 0 PID: 12540 Comm: syz.1.3008 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 209.190913][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.190996][T12540] Call Trace: [ 209.191003][T12540] [ 209.191011][T12540] dump_stack_lvl+0xf6/0x150 [ 209.191038][T12540] dump_stack+0x15/0x1a [ 209.191057][T12540] should_fail_ex+0x261/0x270 [ 209.191081][T12540] should_failslab+0x8f/0xb0 [ 209.191160][T12540] kmem_cache_alloc_noprof+0x59/0x340 [ 209.191198][T12540] ? sk_prot_alloc+0x41/0x190 [ 209.191238][T12540] sk_prot_alloc+0x41/0x190 [ 209.191276][T12540] sk_alloc+0x33/0x360 [ 209.191362][T12540] unix_create1+0xa6/0x410 [ 209.191381][T12540] ? inode_init_always_gfp+0x4b8/0x4f0 [ 209.191419][T12540] unix_create+0x112/0x140 [ 209.191454][T12540] __sock_create+0x2e9/0x5a0 [ 209.191545][T12540] __sys_socketpair+0x192/0x440 [ 209.191581][T12540] __x64_sys_socketpair+0x52/0x60 [ 209.191692][T12540] x64_sys_call+0x2230/0x2e10 [ 209.191717][T12540] do_syscall_64+0xc9/0x1c0 [ 209.191751][T12540] ? clear_bhb_loop+0x25/0x80 [ 209.191777][T12540] ? clear_bhb_loop+0x25/0x80 [ 209.191802][T12540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.191822][T12540] RIP: 0033:0x7f65d4ecf0ba [ 209.191844][T12540] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.191861][T12540] RSP: 002b:00007f65d352ef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 209.191879][T12540] RAX: ffffffffffffffda RBX: 00007f65d50e5f00 RCX: 00007f65d4ecf0ba [ 209.191914][T12540] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 209.191927][T12540] RBP: 00007f65d352f090 R08: 0000000000000000 R09: 0000000000000000 [ 209.191958][T12540] R10: 00007f65d352ef98 R11: 0000000000000246 R12: 0000000000000001 [ 209.191968][T12540] R13: 0000000000000000 R14: 00007f65d50e5fa0 R15: 00007ffdbf7f7788 [ 209.191985][T12540] [ 209.201904][T12542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3009'. [ 209.420206][T12555] loop3: detected capacity change from 0 to 256 [ 209.491123][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 209.523611][T12547] loop2: detected capacity change from 0 to 128 [ 209.589412][T12547] syz.2.3011: attempt to access beyond end of device [ 209.589412][T12547] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 209.676954][ T3418] kworker/u8:7: attempt to access beyond end of device [ 209.676954][ T3418] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 209.725428][T12564] loop2: detected capacity change from 0 to 512 [ 209.741308][T12567] netlink: 'syz.0.3016': attribute type 4 has an invalid length. [ 209.817263][T12578] 9pnet_fd: Insufficient options for proto=fd [ 209.917587][T12589] netlink: 'syz.0.3024': attribute type 4 has an invalid length. [ 210.082700][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3024'. [ 210.114263][T12595] lo: entered promiscuous mode [ 210.119124][T12595] lo: entered allmulticast mode [ 210.356749][T12595] loop1: detected capacity change from 0 to 128 [ 210.428112][T12620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.477186][T12623] netlink: 'syz.3.3034': attribute type 10 has an invalid length. [ 210.485120][T12623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3034'. [ 210.503861][T12605] syz.1.3025: attempt to access beyond end of device [ 210.503861][T12605] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 210.535449][T12620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.554170][T12623] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 210.565866][T12623] team0: Failed to send options change via netlink (err -105) [ 210.571923][T12630] loop2: detected capacity change from 0 to 256 [ 210.573464][T12623] team0: Port device geneve1 added [ 210.587831][T12620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.636574][ T159] kworker/u8:5: attempt to access beyond end of device [ 210.636574][ T159] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 210.655443][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'. [ 210.668628][T12620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.694364][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 210.694380][ T29] audit: type=1326 audit(1743381161.131:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.725082][ T29] audit: type=1326 audit(1743381161.131:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.748870][ T29] audit: type=1326 audit(1743381161.131:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.748883][T12634] loop1: detected capacity change from 0 to 8192 [ 210.748907][ T29] audit: type=1326 audit(1743381161.131:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.774697][T12634] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.779224][ T29] audit: type=1326 audit(1743381161.131:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.836934][ T29] audit: type=1326 audit(1743381161.131:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.860530][ T29] audit: type=1326 audit(1743381161.131:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.884595][ T29] audit: type=1326 audit(1743381161.131:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.908434][ T29] audit: type=1326 audit(1743381161.131:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.932096][ T29] audit: type=1326 audit(1743381161.131:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12635 comm="syz.0.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bd4ed169 code=0x7ffc0000 [ 210.990408][T12620] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.010231][T12620] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.029062][T12620] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.042510][T12620] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.129083][T12649] syzkaller1: entered allmulticast mode [ 211.194850][T12384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 211.218166][T12384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 211.229373][T12384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 211.247039][T12384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.376093][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.389728][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.428850][T12663] veth0_macvtap: left promiscuous mode [ 211.438220][T12663] macvtap0: refused to change device tx_queue_len [ 211.448721][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.455868][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.480784][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.487900][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.648885][T12678] loop3: detected capacity change from 0 to 512 [ 211.670676][T12683] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.698760][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.720154][T12689] netlink: 'syz.0.3052': attribute type 10 has an invalid length. [ 211.728191][T12689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3052'. [ 211.753793][T12683] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.823060][T12683] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.835570][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'. [ 211.847169][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.855799][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.868846][T12701] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.893379][T12683] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.913836][T12384] veth0_vlan: entered promiscuous mode [ 211.922177][T12384] veth1_vlan: entered promiscuous mode [ 211.929117][T12701] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.950544][T12384] veth0_macvtap: entered promiscuous mode [ 211.958498][T12384] veth1_macvtap: entered promiscuous mode [ 211.969679][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.980165][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.990119][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.000698][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.010602][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.021035][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.030954][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.041421][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.051320][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.061802][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.072887][T12384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.086109][T12683] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.097602][T12683] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.106904][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.117467][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.127392][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.137889][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.148000][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.158586][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.168431][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.178899][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.188750][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.199255][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.210985][T12384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.223634][T12683] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.235899][T12701] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.251171][T12683] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.260661][T12710] veth0_macvtap: left promiscuous mode [ 212.268619][T12710] macvtap0: refused to change device tx_queue_len [ 212.276432][T12384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.285317][T12384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.294128][T12384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.303062][T12384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.333098][T12701] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.420586][T12730] loop4: detected capacity change from 0 to 1024 [ 212.433328][T12730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.657815][T12384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.662868][T12747] pim6reg: entered allmulticast mode [ 212.677088][T12747] pim6reg: left allmulticast mode [ 212.767911][T12755] veth0_macvtap: left promiscuous mode [ 212.776926][T12755] macvtap0: refused to change device tx_queue_len [ 212.820356][T12738] chnl_net:caif_netlink_parms(): no params data found [ 212.842795][T12761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.893870][T12766] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 212.901850][T12766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3069'. [ 212.932250][T12766] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 212.941405][T12766] team0: Failed to send options change via netlink (err -105) [ 212.948978][T12766] team0: Port device geneve1 added [ 212.981283][T12761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.006545][T12738] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.013737][T12738] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.021125][T12738] bridge_slave_0: entered allmulticast mode [ 213.027718][T12738] bridge_slave_0: entered promiscuous mode [ 213.035354][T12738] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.042523][T12738] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.049774][T12738] bridge_slave_1: entered allmulticast mode [ 213.056371][T12738] bridge_slave_1: entered promiscuous mode [ 213.066677][T12761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.097564][T12738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.118482][T12761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.131243][T12738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.165456][T12738] team0: Port device team_slave_0 added [ 213.174899][T12738] team0: Port device team_slave_1 added [ 213.206252][T12761] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.218309][T12761] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.227333][T12738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.234399][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.260334][T12738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.272515][T12738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.279492][T12738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.305450][T12738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.319135][T12761] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.336250][T12761] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.394519][T12738] hsr_slave_0: entered promiscuous mode [ 213.411242][T12738] hsr_slave_1: entered promiscuous mode [ 213.419449][T12738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.431687][T12738] Cannot create hsr debugfs directory [ 213.503512][T12797] 9pnet_fd: Insufficient options for proto=fd [ 213.534834][T12799] macvtap0: refused to change device tx_queue_len [ 213.622970][T12738] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.674648][T12812] loop4: detected capacity change from 0 to 256 [ 213.694671][T12738] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.713257][T12816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.722119][T12816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.736491][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3086'. [ 213.763116][T12738] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.822961][T12738] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.926425][T12738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.935727][T12738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.944785][T12738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.954460][T12738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.001440][T12738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.014032][T12738] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.023555][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.030620][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.041562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.048663][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.108262][T12738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.166288][T12738] veth0_vlan: entered promiscuous mode [ 214.174408][T12738] veth1_vlan: entered promiscuous mode [ 214.190097][T12738] veth0_macvtap: entered promiscuous mode [ 214.198146][T12738] veth1_macvtap: entered promiscuous mode [ 214.209642][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.220254][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.230204][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.240815][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.250707][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.261158][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.271128][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.281642][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.291462][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.301962][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.311816][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.315794][T12829] 9pnet_fd: Insufficient options for proto=fd [ 214.322252][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.340274][T12738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.353586][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.364129][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.374010][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.384500][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.394478][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.405011][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.414918][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.425369][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.435209][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.445680][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.455589][T12738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.466088][T12738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.477336][T12738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.491255][T12738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.500089][T12738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.508903][T12738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.517720][T12738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.548409][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.557398][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.702115][T12833] loop0: detected capacity change from 0 to 128 [ 214.825322][T12841] syz.0.3091: attempt to access beyond end of device [ 214.825322][T12841] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 214.992918][ T12] kworker/u8:0: attempt to access beyond end of device [ 214.992918][ T12] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 214.999496][T12864] 9pnet_fd: Insufficient options for proto=fd [ 215.149247][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'. [ 215.159661][T12879] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.213637][T12879] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.233377][T12890] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.246043][T12894] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.273590][T12879] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.285989][T12899] netlink: 'syz.2.3110': attribute type 10 has an invalid length. [ 215.294036][T12899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3110'. [ 215.305187][T12900] netlink: 'syz.0.3111': attribute type 10 has an invalid length. [ 215.313051][T12900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3111'. [ 215.352555][T12899] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 215.361405][T12899] team0: Failed to send options change via netlink (err -105) [ 215.368935][T12899] team0: Port device geneve1 added [ 215.378477][T12890] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.390482][T12894] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.404398][T12879] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.453518][T12894] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.493428][T12894] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.532197][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.540702][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.559068][T12894] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.570312][T12894] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.581731][T12894] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.593641][T12894] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.658168][T12701] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.670515][T12701] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.682255][T12701] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.694105][T12701] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.761240][ T29] kauditd_printk_skb: 1129 callbacks suppressed [ 215.761259][ T29] audit: type=1326 audit(1743381166.191:13783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.791244][ T29] audit: type=1326 audit(1743381166.191:13784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.822797][ T29] audit: type=1326 audit(1743381166.191:13785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.846434][ T29] audit: type=1326 audit(1743381166.191:13786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.870223][ T29] audit: type=1326 audit(1743381166.191:13787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.893826][ T29] audit: type=1326 audit(1743381166.191:13788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.917536][ T29] audit: type=1326 audit(1743381166.191:13789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.941227][ T29] audit: type=1326 audit(1743381166.191:13790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.964872][ T29] audit: type=1326 audit(1743381166.191:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 215.988678][ T29] audit: type=1326 audit(1743381166.191:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12933 comm="syz.3.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 216.099568][T12947] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.132820][T12947] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.150018][T12951] netlink: 'syz.0.3132': attribute type 10 has an invalid length. [ 216.157978][T12951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3132'. [ 216.204434][T12947] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.303394][T12947] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.378152][T12956] pim6reg: entered allmulticast mode [ 216.589584][T12958] 9pnet_fd: Insufficient options for proto=fd [ 217.087682][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.098441][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.099289][T12987] pim6reg: entered allmulticast mode [ 217.115583][T12987] pim6reg: left allmulticast mode [ 217.384986][T12990] 9pnet_fd: Insufficient options for proto=fd [ 217.424688][T12890] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.700212][T12879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.729892][T12879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.741333][T12879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.755839][T12879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.858904][T13021] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.943437][T13021] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.007844][T13021] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.045972][T13034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.055043][T13034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.123788][T13021] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.741229][T13045] loop1: detected capacity change from 0 to 256 [ 218.802535][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3164'. [ 218.854083][T12890] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.920561][T12890] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.935040][T12890] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.945215][T13051] FAULT_INJECTION: forcing a failure. [ 218.945215][T13051] name failslab, interval 1, probability 0, space 0, times 0 [ 218.946992][T12890] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.957985][T13051] CPU: 0 UID: 0 PID: 13051 Comm: syz.4.3166 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 218.958019][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.958035][T13051] Call Trace: [ 218.958043][T13051] [ 218.958053][T13051] dump_stack_lvl+0xf6/0x150 [ 218.958085][T13051] dump_stack+0x15/0x1a [ 218.958112][T13051] should_fail_ex+0x261/0x270 [ 218.958139][T13051] should_failslab+0x8f/0xb0 [ 218.958173][T13051] __kmalloc_noprof+0xad/0x410 [ 218.958212][T13051] ? sock_kmalloc+0x83/0xc0 [ 218.958238][T13051] sock_kmalloc+0x83/0xc0 [ 218.958282][T13051] ____sys_sendmsg+0x12c/0x4e0 [ 218.958305][T13051] ? copy_msghdr_from_user+0x25d/0x2b0 [ 218.958341][T13051] __sys_sendmmsg+0x22a/0x4b0 [ 218.958390][T13051] __x64_sys_sendmmsg+0x57/0x70 [ 218.958414][T13051] x64_sys_call+0x2b53/0x2e10 [ 218.958523][T13051] do_syscall_64+0xc9/0x1c0 [ 218.958549][T13051] ? clear_bhb_loop+0x25/0x80 [ 218.958577][T13051] ? clear_bhb_loop+0x25/0x80 [ 218.958682][T13051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.958708][T13051] RIP: 0033:0x7fefdda8d169 [ 218.958728][T13051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.958751][T13051] RSP: 002b:00007fefdc0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.958813][T13051] RAX: ffffffffffffffda RBX: 00007fefddca5fa0 RCX: 00007fefdda8d169 [ 218.958828][T13051] RDX: 0000000000000001 RSI: 0000200000000bc0 RDI: 0000000000000006 [ 218.958843][T13051] RBP: 00007fefdc0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 218.958930][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.958945][T13051] R13: 0000000000000000 R14: 00007fefddca5fa0 R15: 00007ffe6ade5308 [ 218.958966][T13051] [ 219.149285][T12890] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.195862][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 219.207555][T13059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.254534][T13059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.304296][T13059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.365227][T13059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.411110][T13059] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.427543][T13059] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.438701][T13059] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.449984][T13059] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.477587][T13068] pim6reg: left allmulticast mode [ 219.799409][T13075] pim6reg: entered allmulticast mode [ 220.258962][T12947] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.270316][T12947] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.282739][T12947] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.294437][T12947] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.338422][T13094] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.385055][T13094] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.396580][T13100] netlink: 'syz.0.3179': attribute type 10 has an invalid length. [ 220.404470][T13100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3179'. [ 220.422040][T13099] loop2: detected capacity change from 0 to 512 [ 220.482828][T13094] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.554241][T13094] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.570310][T13108] veth0_macvtap: left promiscuous mode [ 220.586932][T13108] macvtap0: refused to change device tx_queue_len [ 220.620418][T13021] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.657311][T13021] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.677497][T13118] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.695369][T13104] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3183'. [ 220.714807][T13021] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.729876][T13123] netlink: 'syz.2.3189': attribute type 10 has an invalid length. [ 220.732283][T13021] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.737754][T13123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3189'. [ 220.866487][T13123] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 220.881533][T13118] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.919980][T13129] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3194'. [ 220.955767][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 220.974247][T13135] pim6reg: entered allmulticast mode [ 221.017542][T13137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3195'. [ 221.035379][T13118] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.113338][T13118] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.221727][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 221.221746][ T29] audit: type=1400 audit(1743381171.571:14223): avc: denied { bind } for pid=13136 comm="syz.1.3195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 221.312216][T13139] loop1: detected capacity change from 0 to 512 [ 221.419920][T13143] loop1: detected capacity change from 0 to 512 [ 221.426854][T13143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 221.438627][T13143] EXT4-fs (loop1): 1 truncate cleaned up [ 221.444762][T13143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.476615][T13147] macvtap0: refused to change device tx_queue_len [ 221.508154][T13149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.511782][ T29] audit: type=1326 audit(1743381171.941:14224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.517058][T13149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.540305][ T29] audit: type=1326 audit(1743381171.941:14225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.571645][ T29] audit: type=1326 audit(1743381171.941:14226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.595260][ T29] audit: type=1326 audit(1743381171.941:14227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.618881][ T29] audit: type=1326 audit(1743381171.941:14228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.642521][ T29] audit: type=1326 audit(1743381171.941:14229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.666215][ T29] audit: type=1326 audit(1743381171.941:14230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.689822][ T29] audit: type=1326 audit(1743381171.941:14231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.713491][ T29] audit: type=1326 audit(1743381171.941:14232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13148 comm="syz.3.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b828d169 code=0x7ffc0000 [ 221.766482][T12214] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.828954][T13159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.830914][T13161] pim6reg: left allmulticast mode [ 221.837581][T13159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.163002][T13166] loop4: detected capacity change from 0 to 512 [ 222.368425][T13176] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 222.442894][T13175] loop4: detected capacity change from 0 to 512 [ 222.449682][T13175] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.462573][T13175] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3212: invalid indirect mapped block 4294967295 (level 0) [ 222.478462][T13175] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3212: invalid indirect mapped block 4294967295 (level 1) [ 222.493566][T13175] EXT4-fs (loop4): 1 orphan inode deleted [ 222.499370][T13175] EXT4-fs (loop4): 1 truncate cleaned up [ 222.505504][T13175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.565207][T12384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.582395][T13189] FAULT_INJECTION: forcing a failure. [ 222.582395][T13189] name failslab, interval 1, probability 0, space 0, times 0 [ 222.595069][T13189] CPU: 0 UID: 0 PID: 13189 Comm: syz.1.3218 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 222.595150][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.595166][T13189] Call Trace: [ 222.595173][T13189] [ 222.595182][T13189] dump_stack_lvl+0xf6/0x150 [ 222.595210][T13189] dump_stack+0x15/0x1a [ 222.595227][T13189] should_fail_ex+0x261/0x270 [ 222.595322][T13189] should_failslab+0x8f/0xb0 [ 222.595353][T13189] __kmalloc_cache_noprof+0x55/0x320 [ 222.595384][T13189] ? tipc_group_create_member+0x43/0x260 [ 222.595413][T13189] tipc_group_create_member+0x43/0x260 [ 222.595481][T13189] tipc_group_add_member+0x30/0x40 [ 222.595548][T13189] tipc_nametbl_build_group+0x1a2/0x220 [ 222.595580][T13189] tipc_sk_join+0x248/0x2f0 [ 222.595604][T13189] tipc_setsockopt+0x641/0x6c0 [ 222.595682][T13189] ? __pfx_tipc_setsockopt+0x10/0x10 [ 222.595707][T13189] __sys_setsockopt+0x187/0x200 [ 222.595797][T13189] __x64_sys_setsockopt+0x66/0x80 [ 222.595837][T13189] x64_sys_call+0x2a09/0x2e10 [ 222.595866][T13189] do_syscall_64+0xc9/0x1c0 [ 222.595890][T13189] ? clear_bhb_loop+0x25/0x80 [ 222.595915][T13189] ? clear_bhb_loop+0x25/0x80 [ 222.595942][T13189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.596046][T13189] RIP: 0033:0x7f65d4ecd169 [ 222.596063][T13189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.596081][T13189] RSP: 002b:00007f65d352f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.596098][T13189] RAX: ffffffffffffffda RBX: 00007f65d50e5fa0 RCX: 00007f65d4ecd169 [ 222.596109][T13189] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 222.596122][T13189] RBP: 00007f65d352f090 R08: 0000000000000010 R09: 0000000000000000 [ 222.596136][T13189] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.596150][T13189] R13: 0000000000000000 R14: 00007f65d50e5fa0 R15: 00007ffdbf7f7788 [ 222.596171][T13189] [ 223.112377][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.120885][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.131081][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.139660][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.164461][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.173046][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.181200][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.193565][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.204587][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.213546][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.224046][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.232953][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.469799][T13246] loop3: detected capacity change from 0 to 512 [ 223.492380][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'. [ 223.502944][T13249] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.573324][T13249] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.598650][T13263] 9pnet_fd: Insufficient options for proto=fd [ 223.622880][T13249] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.683174][T13249] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.770537][T13249] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.781969][T13249] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.793290][T13249] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.804390][T13249] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.831080][T13118] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.843112][T13118] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.851824][T13269] macvtap0: refused to change device tx_queue_len [ 223.873502][T13118] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.893039][T13118] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.981501][T13288] 9pnet_fd: Insufficient options for proto=fd [ 224.028043][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 224.039288][T13295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.094998][T13303] pim6reg: entered allmulticast mode [ 224.101049][T13303] pim6reg: left allmulticast mode [ 224.110862][T13295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.183483][T13295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.245490][T13295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.307661][T13318] 9pnet_fd: Insufficient options for proto=fd [ 224.518544][T13346] 9pnet_fd: Insufficient options for proto=fd [ 224.607749][T13094] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.619921][T13094] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.632386][T13094] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.657904][T13094] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.797589][T13386] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.842503][T13395] netlink: 'syz.4.3299': attribute type 10 has an invalid length. [ 224.850373][T13395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3299'. [ 224.866115][T13394] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.882272][T13395] team0: Port device geneve1 added [ 224.896097][T13386] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.914011][T13394] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.927516][T13400] netlink: 'syz.3.3302': attribute type 10 has an invalid length. [ 224.935476][T13400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3302'. [ 224.947839][T13400] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 225.013293][T13386] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.104742][T13394] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.218162][T13407] pim6reg: entered allmulticast mode [ 225.226872][T13386] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.270418][T13394] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.336855][T13386] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.380510][T13394] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.402676][T13386] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.419045][T13386] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.433789][T13394] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.445313][T13394] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.457350][T13394] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.469004][T13386] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.673554][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 225.688905][T13443] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.785192][T13443] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.857095][T13443] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.903225][T13443] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.527494][ T29] kauditd_printk_skb: 1133 callbacks suppressed [ 226.527545][ T29] audit: type=1326 audit(1743381176.961:15366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.558143][ T29] audit: type=1326 audit(1743381176.961:15367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.581930][ T29] audit: type=1326 audit(1743381176.961:15368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.605619][ T29] audit: type=1326 audit(1743381176.961:15369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.629342][ T29] audit: type=1326 audit(1743381176.961:15370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.653049][ T29] audit: type=1326 audit(1743381176.961:15371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.676625][ T29] audit: type=1326 audit(1743381176.961:15372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.700193][ T29] audit: type=1326 audit(1743381176.961:15373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.723889][ T29] audit: type=1326 audit(1743381176.961:15374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 226.747530][ T29] audit: type=1326 audit(1743381176.961:15375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.3341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefdda8d169 code=0x7ffc0000 [ 227.006008][T13525] loop3: detected capacity change from 0 to 512 [ 227.138782][T13527] chnl_net:caif_netlink_parms(): no params data found [ 227.180570][T13527] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.187771][T13527] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.195128][T13527] bridge_slave_0: entered allmulticast mode [ 227.201722][T13527] bridge_slave_0: entered promiscuous mode [ 227.208475][T13527] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.215692][T13527] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.222967][T13527] bridge_slave_1: entered allmulticast mode [ 227.229651][T13527] bridge_slave_1: entered promiscuous mode [ 227.255677][T13527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.266218][T13527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.287834][T13527] team0: Port device team_slave_0 added [ 227.294704][T13527] team0: Port device team_slave_1 added [ 227.312519][T13527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.319601][T13527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.345580][T13527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.357439][T13527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.364441][T13527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.390444][T13527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.415205][T13555] loop4: detected capacity change from 0 to 512 [ 227.434942][T13527] hsr_slave_0: entered promiscuous mode [ 227.441198][T13527] hsr_slave_1: entered promiscuous mode [ 227.447208][T13527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.454855][T13527] Cannot create hsr debugfs directory [ 227.507227][T13566] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.532580][T13527] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.553275][T13566] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.554636][T13571] netlink: 'syz.3.3364': attribute type 10 has an invalid length. [ 227.571038][T13571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3364'. [ 227.592895][T13527] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.613149][T13566] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.653296][T13527] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.694688][T13566] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.732904][T13527] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.358278][T13295] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.370083][T13295] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.381121][T13295] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.392729][T13295] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.437866][T13443] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.449575][T13443] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.461429][T13443] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.473168][T13443] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.487229][T13593] netlink: 'syz.1.3370': attribute type 10 has an invalid length. [ 228.495127][T13593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3370'. [ 228.510592][T13595] lo: entered promiscuous mode [ 228.515403][T13595] lo: entered allmulticast mode [ 228.681860][T13595] loop2: detected capacity change from 0 to 128 [ 228.752296][T13595] syz.2.3371: attempt to access beyond end of device [ 228.752296][T13595] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 228.822710][ T12] kworker/u8:0: attempt to access beyond end of device [ 228.822710][ T12] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 228.936849][T13614] loop2: detected capacity change from 0 to 512 [ 228.949813][T13614] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.976430][T13614] EXT4-fs (loop2): 1 truncate cleaned up [ 228.985208][T13614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.000461][T13621] block device autoloading is deprecated and will be removed. [ 229.010906][T13621] syz.4.3381: attempt to access beyond end of device [ 229.010906][T13621] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 229.044927][T13527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.052902][T12738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.066160][T13527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.075521][T13627] loop4: detected capacity change from 0 to 128 [ 229.084478][T13527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.095945][T13527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.104992][T13627] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.120206][T13627] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.161105][T13634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.169142][T13527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.174886][T12384] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.181319][T13527] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.201018][T13634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.202756][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.215856][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.224938][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.232121][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.300946][T13637] loop4: detected capacity change from 0 to 2048 [ 229.308375][T13637] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 229.327128][T13637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.340481][T13637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.352333][T13527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.458043][T13527] veth0_vlan: entered promiscuous mode [ 229.467241][T13527] veth1_vlan: entered promiscuous mode [ 229.485173][T13527] veth0_macvtap: entered promiscuous mode [ 229.493829][T13527] veth1_macvtap: entered promiscuous mode [ 229.507083][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.517850][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.527785][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.538303][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.548201][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.558740][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.568720][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.579248][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.589259][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.599798][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.609715][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.620261][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.630153][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.640668][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.652239][T13527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.663700][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.674478][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.684384][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.694925][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.704851][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.715462][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.725373][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.735861][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.745861][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.756414][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.766404][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.776911][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.786962][T13527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.797456][T13527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.808284][T13527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.821967][T13527] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.830850][T13527] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.839825][T13527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.848737][T13527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.913325][T13651] loop3: detected capacity change from 0 to 1024 [ 229.934729][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 229.935452][T13651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.943706][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3351'. [ 229.964832][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3351'. [ 229.980642][T13660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.999952][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.024433][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.614327][T13686] loop2: detected capacity change from 0 to 128 [ 230.635643][T13686] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.648204][T13686] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.691511][T12738] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.977687][T13704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3408'. [ 231.007404][T13707] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3411'. [ 231.183820][ T12] Dead loop on virtual device ipvlan1, fix it urgently! [ 231.192599][ T12] Dead loop on virtual device ipvlan1, fix it urgently! [ 231.260837][T13724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.331096][T13735] loop2: detected capacity change from 0 to 512 [ 231.348637][T13735] EXT4-fs error (device loop2): ext4_iget_extra_inode:4704: inode #15: comm syz.2.3422: corrupted in-inode xattr: invalid ea_ino [ 231.364343][T13735] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.3422: couldn't read orphan inode 15 (err -117) [ 231.379541][T13735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.388979][T13746] loop4: detected capacity change from 0 to 512 [ 231.399394][T13746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.409554][T13746] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (fffe0000) [ 231.622424][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3422'. [ 232.038461][ T9] Dead loop on virtual device ipvlan1, fix it urgently! [ 232.067070][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 232.067088][ T29] audit: type=1400 audit(1743381182.501:15459): avc: denied { setopt } for pid=13782 comm="syz.4.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.202616][T12738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.239262][ T29] audit: type=1400 audit(1743381182.671:15460): avc: denied { mount } for pid=13790 comm="syz.1.3446" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 232.256170][T13792] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3447'. [ 232.309024][ T29] audit: type=1400 audit(1743381182.701:15461): avc: denied { connect } for pid=13790 comm="syz.1.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.329243][ T29] audit: type=1400 audit(1743381182.701:15462): avc: denied { write } for pid=13790 comm="syz.1.3446" path="socket:[61688]" dev="sockfs" ino=61688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.755264][ T29] audit: type=1400 audit(1743381182.911:15463): avc: denied { write } for pid=13790 comm="syz.1.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.814318][ T29] audit: type=1400 audit(1743381183.251:15464): avc: denied { unmount } for pid=12214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 233.035086][ T3354] IPVS: starting estimator thread 0... [ 233.132069][T13811] IPVS: using max 2448 ests per chain, 122400 per kthread [ 233.279594][T13823] sch_fq: defrate 0 ignored. [ 233.284481][ T29] audit: type=1400 audit(1743381183.711:15465): avc: denied { ioctl } for pid=13822 comm="syz.4.3457" path="mnt:[4026532372]" dev="nsfs" ino=4026532372 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 233.298656][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.318405][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.349699][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.358551][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.499360][T13834] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3462'. [ 233.536471][T13838] loop2: detected capacity change from 0 to 256 [ 233.543763][T13838] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.573310][T13840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.582035][T13840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.714507][ T29] audit: type=1400 audit(1743381184.151:15466): avc: denied { unmount } for pid=12214 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 233.778846][T13852] loop0: detected capacity change from 0 to 128 [ 233.887484][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3469'. [ 234.324357][ T29] audit: type=1400 audit(1743381184.751:15467): avc: denied { connect } for pid=13869 comm="syz.2.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 234.890805][T13889] loop0: detected capacity change from 0 to 8192 [ 235.411941][T13903] loop4: detected capacity change from 0 to 512 [ 235.422211][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 235.441014][T13903] EXT4-fs: Ignoring removed bh option [ 235.529019][T13903] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 235.562002][T13903] EXT4-fs (loop4): 1 truncate cleaned up [ 235.578495][T13903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.649681][ T29] audit: type=1400 audit(1743381186.061:15468): avc: denied { rename } for pid=13902 comm="syz.4.3487" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.701349][T13915] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.741538][T12384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.851426][T13918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.919149][T13918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.015352][T13923] loop3: detected capacity change from 0 to 512 [ 236.077928][T13923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.164267][T13923] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.3494: bad orphan inode 458763 [ 236.178175][T13923] EXT4-fs (loop3): Remounting filesystem read-only [ 236.186653][T13923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.215198][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.264460][T13938] loop3: detected capacity change from 0 to 128 [ 236.283286][T13938] FAT-fs (loop3): error, corrupted directory (invalid i_start) [ 236.290930][T13938] FAT-fs (loop3): Filesystem has been set read-only [ 236.421341][T13953] loop3: detected capacity change from 0 to 2048 [ 236.463477][T13953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.478379][T13953] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.554523][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.700005][T13964] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3510'. [ 236.715464][T13966] xt_cgroup: invalid path, errno=-2 [ 236.729745][T13968] loop3: detected capacity change from 0 to 512 [ 236.736451][T13968] EXT4-fs: test_dummy_encryption option not supported [ 236.765357][T13972] loop3: detected capacity change from 0 to 128 [ 237.436953][T13985] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 237.443598][T13985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.451132][T13985] vhci_hcd vhci_hcd.0: Device attached [ 237.460261][T13985] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 237.466907][T13985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.474505][T13985] vhci_hcd vhci_hcd.0: Device attached [ 237.480722][T13985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 237.489442][T13985] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 237.496143][T13985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.503689][T13985] vhci_hcd vhci_hcd.0: Device attached [ 237.510196][T13985] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 237.516829][T13985] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 237.524560][T13985] vhci_hcd vhci_hcd.0: Device attached [ 237.530813][T13985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 237.539455][T13985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 237.548079][T13985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 237.557028][T13985] vhci_hcd vhci_hcd.0: port 0 already used [ 237.569290][T13993] vhci_hcd: connection closed [ 237.569335][T13988] vhci_hcd: connection closed [ 237.569424][T13990] vhci_hcd: connection closed [ 237.574365][T13986] vhci_hcd: connection closed [ 237.579184][ T12] vhci_hcd: stop threads [ 237.592613][ T12] vhci_hcd: release socket [ 237.597133][ T12] vhci_hcd: disconnect device [ 237.692002][ T12] vhci_hcd: stop threads [ 237.696307][ T12] vhci_hcd: release socket [ 237.700826][ T12] vhci_hcd: disconnect device [ 237.713978][T13999] random: crng reseeded on system resumption [ 237.785061][ T12] vhci_hcd: stop threads [ 237.789376][ T12] vhci_hcd: release socket [ 237.793921][ T12] vhci_hcd: disconnect device [ 237.801306][ T12] vhci_hcd: stop threads [ 237.805632][ T12] vhci_hcd: release socket [ 237.810079][ T12] vhci_hcd: disconnect device [ 237.991548][ T1049] vhci_hcd: vhci_device speed not set [ 238.341124][T14013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.468968][T14013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.488503][T14017] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3523'. [ 238.697531][T14019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3525'. [ 239.061334][ T3354] IPVS: starting estimator thread 0... [ 239.171746][T14027] IPVS: using max 2448 ests per chain, 122400 per kthread [ 239.263855][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 239.263872][ T29] audit: type=1400 audit(1743381189.701:15473): avc: denied { getopt } for pid=14035 comm="syz.3.3531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.306167][T14040] loop4: detected capacity change from 0 to 512 [ 239.323341][T14040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c018, mo2=0002] [ 239.341470][T14040] System zones: 1-12 [ 239.353987][T14040] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 239.372887][T14040] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3532: attempt to clear invalid blocks 2 len 1 [ 239.401494][ T29] audit: type=1400 audit(1743381189.831:15474): avc: denied { read } for pid=14044 comm="syz.1.3533" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.401765][T14040] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 239.424990][ T29] audit: type=1400 audit(1743381189.831:15475): avc: denied { open } for pid=14044 comm="syz.1.3533" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.439507][T14040] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3532: invalid indirect mapped block 1819239214 (level 0) [ 239.463404][ T29] audit: type=1400 audit(1743381189.831:15476): avc: denied { ioctl } for pid=14044 comm="syz.1.3533" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.506993][T14040] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3532: invalid indirect mapped block 1819239214 (level 1) [ 239.522614][T14040] EXT4-fs (loop4): 1 truncate cleaned up [ 239.528800][T14040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.589888][ T29] audit: type=1400 audit(1743381190.021:15477): avc: denied { quotaon } for pid=14039 comm="syz.4.3532" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.633077][T14056] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3538'. [ 239.656640][T12384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.685519][T14063] loop3: detected capacity change from 0 to 2048 [ 239.713726][T14070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.725679][T14063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.726068][T14070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.748494][T14076] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3541'. [ 239.759599][T14065] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3541'. [ 239.795758][T14078] loop4: detected capacity change from 0 to 1024 [ 239.805130][T14078] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 239.814989][T14078] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 239.827140][T14078] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 239.838407][T14078] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.3545: unexpected bad inode w/o EXT4_IGET_BAD [ 239.854990][T14078] EXT4-fs (loop4): no journal found [ 239.860250][T14078] EXT4-fs (loop4): can't get journal size [ 239.877253][T14078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 239.891304][T14078] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 16: comm syz.4.3545: path /133/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 239.976056][T12384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.282456][ T29] audit: type=1400 audit(1743381190.721:15478): avc: denied { read } for pid=14091 comm="syz.4.3549" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 240.307252][ T29] audit: type=1400 audit(1743381190.721:15479): avc: denied { open } for pid=14091 comm="syz.4.3549" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 240.469004][T14113] tipc: Started in network mode [ 240.473955][T14113] tipc: Node identity ac1414aa, cluster identity 4711 [ 240.483777][T14113] tipc: Enabled bearer , priority 10 [ 240.781551][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.075941][T14124] tun0: tun_chr_ioctl cmd 2147767517 [ 241.251892][T14132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.260866][T14132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.547458][ T29] audit: type=1400 audit(1743381191.981:15480): avc: denied { create } for pid=14157 comm="syz.0.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 241.571814][ T29] audit: type=1400 audit(1743381192.001:15481): avc: denied { ioctl } for pid=14157 comm="syz.0.3573" path="socket:[62940]" dev="sockfs" ino=62940 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 241.601609][ T10] tipc: Node number set to 2886997162 [ 241.666907][T14174] loop4: detected capacity change from 0 to 128 [ 241.675047][T14174] ext3: Unknown parameter 'smackfsroot' [ 241.692144][T14178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.700698][T14178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.278151][ T29] audit: type=1400 audit(1743381192.711:15482): avc: denied { append } for pid=14200 comm="syz.1.3592" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 242.572643][T14234] syz.3.3604: attempt to access beyond end of device [ 242.572643][T14234] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 242.666482][T14245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3610'. [ 242.744811][T14248] loop4: detected capacity change from 0 to 1024 [ 242.772002][T14248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.924024][T12384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.376356][T14296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.384969][T14296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.619459][T14241] dccp_close: ABORT with 32 bytes unread [ 243.873157][T14311] loop4: detected capacity change from 0 to 128 [ 243.946554][T14311] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.037865][T14311] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.218932][T12384] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.221973][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 244.696492][T14336] loop2: detected capacity change from 0 to 1024 [ 244.769817][T14336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.028581][T14350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.047530][T12738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.060649][T14350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.075020][T14351] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.3647' sets config #1 [ 245.094380][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.104328][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.365470][T14372] netlink: 71 bytes leftover after parsing attributes in process `syz.4.3665'. [ 245.522305][T14380] No such timeout policy "syz1" [ 246.008620][T14388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.017189][T14388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.960391][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 246.960405][ T29] audit: type=1400 audit(1743381197.391:15487): avc: denied { name_bind } for pid=14400 comm="syz.2.3677" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 247.467877][T14406] loop2: detected capacity change from 0 to 1024 [ 247.474955][T14406] EXT4-fs: Ignoring removed oldalloc option [ 247.480939][T14406] EXT4-fs: Ignoring removed bh option [ 247.510826][T14406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.603883][T14406] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.3679: Allocating blocks 497-513 which overlap fs metadata [ 247.630045][T14417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.638674][T14417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.700253][T14413] EXT4-fs (loop2): pa ffff8881005879a0: logic 48, phys. 177, len 21 [ 247.708420][T14413] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 247.886261][T12738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.967169][T14421] ref_ctr_offset mismatch. inode: 0x264 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 248.320352][T14438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.331298][T14438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.354564][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3690'. [ 249.813870][T14480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.821115][T14480] IPv6: NLM_F_CREATE should be set when creating new route [ 249.828373][T14480] IPv6: NLM_F_CREATE should be set when creating new route [ 249.835616][T14480] IPv6: NLM_F_CREATE should be set when creating new route [ 249.997846][T14486] devpts: Unknown parameter './file0' [ 250.229049][T14513] IPv6: NLM_F_CREATE should be specified when creating new route [ 250.276812][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.285511][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.299422][T14517] loop3: detected capacity change from 0 to 1024 [ 250.306357][T14517] EXT4-fs: Ignoring removed oldalloc option [ 250.312408][T14517] EXT4-fs: Ignoring removed bh option [ 250.334812][T14517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.370811][T14517] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.3719: Allocating blocks 497-513 which overlap fs metadata [ 250.476485][T14517] EXT4-fs (loop3): pa ffff888100587930: logic 48, phys. 177, len 21 [ 250.484595][T14517] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 250.540128][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.844842][T14542] loop3: detected capacity change from 0 to 1024 [ 250.896323][T14542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.916192][T14553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.924798][T14553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.939842][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.034770][T14555] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 251.041442][T14555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 251.048974][T14555] vhci_hcd vhci_hcd.0: Device attached [ 251.090717][T14555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.116202][T14557] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 251.122837][T14557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 251.130553][T14557] vhci_hcd vhci_hcd.0: Device attached [ 251.194768][T14571] ref_ctr_offset mismatch. inode: 0x1ae offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 251.209459][T14557] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(15) [ 251.216078][T14557] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 251.223770][T14557] vhci_hcd vhci_hcd.0: Device attached [ 251.232354][ T3354] vhci_hcd: vhci_device speed not set [ 251.240766][T14557] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 251.247401][T14557] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 251.255078][T14557] vhci_hcd vhci_hcd.0: Device attached [ 251.308763][ T3354] usb 5-1: new full-speed USB device number 3 using vhci_hcd [ 251.398337][T14586] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.536925][ T29] audit: type=1326 audit(1743381201.571:15488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14563 comm="syz.1.3737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65d4ecd169 code=0x0 [ 251.567226][T14590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.575795][T14590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.587615][T14555] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 251.590990][T14557] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.594233][T14555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 251.594327][T14555] vhci_hcd vhci_hcd.0: Device attached [ 251.619918][T14555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.635191][T14573] vhci_hcd: connection closed [ 251.635191][T14575] vhci_hcd: connection closed [ 251.635415][T14569] vhci_hcd: connection closed [ 251.640377][T14559] vhci_hcd: connection closed [ 251.645251][ T12] vhci_hcd: stop threads [ 251.649470][T14556] vhci_hcd: connection reset by peer [ 251.654182][ T12] vhci_hcd: release socket [ 251.654200][ T12] vhci_hcd: disconnect device [ 251.659607][ T12] vhci_hcd: stop threads [ 251.677467][ T12] vhci_hcd: release socket [ 251.681905][ T12] vhci_hcd: disconnect device [ 251.687043][ T12] vhci_hcd: stop threads [ 251.691358][ T12] vhci_hcd: release socket [ 251.695862][ T12] vhci_hcd: disconnect device [ 251.701070][ T12] vhci_hcd: stop threads [ 251.705417][ T12] vhci_hcd: release socket [ 251.709842][ T12] vhci_hcd: disconnect device [ 251.715397][ T12] vhci_hcd: stop threads [ 251.719668][ T12] vhci_hcd: release socket [ 251.724173][ T12] vhci_hcd: disconnect device [ 251.742793][T14592] loop3: detected capacity change from 0 to 256 [ 253.059709][T14613] loop4: detected capacity change from 0 to 1024 [ 253.067306][T14613] EXT4-fs: Ignoring removed oldalloc option [ 253.073310][T14613] EXT4-fs: Ignoring removed bh option [ 253.084586][T14613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.135353][T12384] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.165305][T14617] set match dimension is over the limit! [ 253.913487][ T29] audit: type=1400 audit(1743381204.341:15489): avc: denied { connect } for pid=14633 comm="syz.2.3759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.152792][T14646] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.758372][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3772'. [ 254.767546][T14665] netlink: 'syz.2.3773': attribute type 26 has an invalid length. [ 254.809503][T14667] loop2: detected capacity change from 0 to 1024 [ 254.817947][T14667] EXT4-fs: Ignoring removed oldalloc option [ 254.824258][T14667] EXT4-fs: Ignoring removed bh option [ 254.831036][T14669] loop3: detected capacity change from 0 to 1024 [ 254.838198][T14669] EXT4-fs: Ignoring removed oldalloc option [ 254.844508][T14669] EXT4-fs: Ignoring removed bh option [ 254.865021][T14667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.869548][T14669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.973492][T12738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.010021][T14669] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.3775: Allocating blocks 497-513 which overlap fs metadata [ 255.059060][T14669] EXT4-fs (loop3): pa ffff888100587a10: logic 48, phys. 177, len 21 [ 255.067225][T14669] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 255.171231][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.268450][ T29] audit: type=1400 audit(1743381205.701:15490): avc: denied { write } for pid=14694 comm="syz.3.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.315090][ T29] audit: type=1400 audit(1743381205.721:15491): avc: denied { read } for pid=14694 comm="syz.3.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.354383][T14697] loop3: detected capacity change from 0 to 1024 [ 255.361102][T14697] EXT4-fs: Ignoring removed oldalloc option [ 255.367243][T14697] EXT4-fs: Ignoring removed bh option [ 255.399285][T14697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.442135][T14709] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3778'. [ 255.456254][T11982] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.260283][T14744] loop2: detected capacity change from 0 to 1024 [ 257.297523][ T3354] usb 5-1: enqueue for inactive port 0 [ 257.303087][ T3354] usb 5-1: enqueue for inactive port 0 [ 257.314965][T14744] EXT4-fs: Ignoring removed oldalloc option [ 257.321051][T14744] EXT4-fs: Ignoring removed bh option [ 257.336667][ T29] audit: type=1400 audit(1743381207.761:15492): avc: denied { bind } for pid=14745 comm="syz.0.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.356252][ T29] audit: type=1400 audit(1743381207.761:15493): avc: denied { name_bind } for pid=14745 comm="syz.0.3806" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 257.371610][ T3354] vhci_hcd: vhci_device speed not set [ 257.377237][ T29] audit: type=1400 audit(1743381207.761:15494): avc: denied { node_bind } for pid=14745 comm="syz.0.3806" saddr=224.0.0.2 src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 257.524895][T14744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.537969][T12738] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.564677][T14779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.576204][T14779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.584287][T14777] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 258.587047][T14782] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.590889][T14777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 258.608942][T14777] vhci_hcd vhci_hcd.0: Device attached [ 258.615063][ T2] ================================================================== [ 258.623192][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 258.629723][ T2] [ 258.632051][ T2] read-write to 0xffffffff86861068 of 4 bytes by task 14751 on cpu 1: [ 258.640201][ T2] free_pid+0x7e/0x180 [ 258.644279][ T2] free_pids+0x7a/0xb0 [ 258.648355][ T2] release_task+0x97f/0xb70 [ 258.652874][ T2] do_exit+0xf5d/0x1840 [ 258.657043][ T2] kthread_exit+0x92/0x190 [ 258.661463][ T2] kthread+0x4c1/0x540 [ 258.665540][ T2] ret_from_fork+0x4b/0x60 [ 258.669960][ T2] ret_from_fork_asm+0x1a/0x30 [ 258.674730][ T2] [ 258.677054][ T2] read to 0xffffffff86861068 of 4 bytes by task 2 on cpu 0: [ 258.684335][ T2] copy_process+0x1754/0x1f60 [ 258.689028][ T2] kernel_clone+0x168/0x5d0 [ 258.693541][ T2] kernel_thread+0xbf/0xf0 [ 258.697979][ T2] kthreadd+0x29f/0x370 [ 258.702142][ T2] ret_from_fork+0x4b/0x60 [ 258.706559][ T2] ret_from_fork_asm+0x1a/0x30 [ 258.711333][ T2] [ 258.713651][ T2] value changed: 0x800000ca -> 0x800000c9 [ 258.719365][ T2] [ 258.721686][ T2] Reported by Kernel Concurrency Sanitizer on: [ 258.727834][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 258.739467][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.749521][ T2] ================================================================== [ 258.760782][T14783] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 258.763500][T14777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 258.767440][T14783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 258.783020][T14777] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 258.789623][T14777] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 258.797101][T14783] vhci_hcd vhci_hcd.0: Device attached [ 258.797126][T14777] vhci_hcd vhci_hcd.0: Device attached [ 258.813646][T14777] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 258.820271][T14777] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 258.827902][T14777] vhci_hcd vhci_hcd.0: Device attached [ 258.835896][T14777] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(15) [ 258.842519][T14777] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 258.850187][T14777] vhci_hcd vhci_hcd.0: Device attached [ 258.859027][T14777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 258.867570][T14777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 258.876102][T14777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 258.881632][ T3506] vhci_hcd: vhci_device speed not set [ 258.889697][T14792] vhci_hcd: connection closed [ 258.889858][T14788] vhci_hcd: connection closed [ 258.889967][T14790] vhci_hcd: connection closed [ 258.894866][T14778] vhci_hcd: connection closed [ 258.899399][T14784] vhci_hcd: connection closed [ 258.909119][ T3418] vhci_hcd: stop threads [ 258.918157][ T3418] vhci_hcd: release socket [ 258.922630][ T3418] vhci_hcd: disconnect device [ 258.929731][ T3418] vhci_hcd: stop threads [ 258.934056][ T3418] vhci_hcd: release socket [ 258.938565][ T3418] vhci_hcd: disconnect device [ 258.945908][ T3506] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 258.954081][T14781] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 258.954129][ T3418] vhci_hcd: stop threads [ 258.964315][ T3418] vhci_hcd: release socket [ 258.968748][ T3418] vhci_hcd: disconnect device [ 258.976212][ T3418] vhci_hcd: stop threads [ 258.980557][ T3418] vhci_hcd: release socket [ 258.985028][ T3418] vhci_hcd: disconnect device [ 258.990156][ T3418] vhci_hcd: stop threads [ 258.994491][ T3418] vhci_hcd: release socket [ 258.999024][ T3418] vhci_hcd: disconnect device [ 261.502290][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 263.981653][ T3506] usb 1-1: enqueue for inactive port 0 [ 263.987202][ T3506] usb 1-1: enqueue for inactive port 0 [ 264.062383][ T3506] vhci_hcd: vhci_device speed not set