last executing test programs: 1.824949251s ago: executing program 0 (id=2535): socket$inet(0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x3, 0x1e7, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000580)={0x3000000, 0x2000000}) 1.787847504s ago: executing program 0 (id=2536): r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.736121628s ago: executing program 0 (id=2537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 1.061590653s ago: executing program 1 (id=2554): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @remote}, {0x0, 0x4e20, 0x11, 0x0, @opaque="c436171815787eb6c4"}}}}}, 0x0) 1.005037828s ago: executing program 1 (id=2556): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000200), &(0x7f0000000580)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.004782958s ago: executing program 1 (id=2557): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808000, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@rodir}, {@shortname_winnt}, {@rodir}]}, 0x1, 0x2b3, &(0x7f0000001d80)="$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") creat(&(0x7f0000000440)='./file0\x00', 0x0) 989.536719ms ago: executing program 1 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x38}}, 0x0) 938.849043ms ago: executing program 1 (id=2559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)="9a5fd3b1dd4bf23280353f6c948ad41d65a1c0a68a1d94b6be4539156356091d802c8e6eff86a3fbf0f0fdf6ced1290a7ed977e0dd69cb117b7e903f86e299de03bc4632f95e478163b0cb4b1d0f91baea9afbc60d246cfc3e04870e3751c0f3c467ddcaaa73f7c4194d44e115146c609dce8b05cfa4698c0bbf4761e4b56488db3fd80aebeebdea70d45ea5ebda206a41f7b88120c5ba83a95aaad6ac07e041d51c669b0c4162431d061b1f0761738af06c43ab2a5535462dd5e017c30e190d26f879089ad1aad855ab1e06d406ceac365cc4dd2f6143f3d9354a848fb4363213", 0xe1}], 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x82101) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f0000001680)=[{&(0x7f0000001280)='7', 0x1}], 0x1) 884.042978ms ago: executing program 0 (id=2560): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000001c40)='./file0\x00', 0x42000, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB="20bc6898ed6434c9832acab9888b595e29576c6bdfacfba526c55c1360c4ef996f19845cbdbfe829b22af8c73c22f1fe69136fb5ce1377f21d164c4e559b29522d8941c078eeac08a2859513d4f2943950592a5e362b2246eb0f667f1982834e3c0df951f35c64cce5af6d73fc1aa75cff8055dd6b5b6cdf2d0ee597509cac6d22d0f7ebed5c1a43bd1f7a823ecfa196b915ad2104f471446650389b478f64c96311f1a412f627dd8585eacb06b408e9a4ea360e688b2dbd1c590ea7dba03d109fe574c2b24f4fb31c7205e639b7f7b2a6c6f3d6a2ba4b18448dde0fac54806cd489de75176692b9bbf2", @ANYRES64], 0x1, 0x359, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, &(0x7f0000000040)) 883.705188ms ago: executing program 0 (id=2562): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, &(0x7f0000000040)) 873.061188ms ago: executing program 4 (id=2563): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 859.68068ms ago: executing program 0 (id=2564): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 540.044275ms ago: executing program 4 (id=2569): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)) 498.644109ms ago: executing program 4 (id=2573): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002080)=@gettaction={0x58, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x58}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xb7c}, {&(0x7f00000007c0)=""/154, 0x48}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 427.976465ms ago: executing program 4 (id=2575): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002080)=@gettaction={0x58, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x58}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5a0}, {&(0x7f00000007c0)=""/154, 0x68}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 427.426965ms ago: executing program 3 (id=2578): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 427.207595ms ago: executing program 4 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 398.245007ms ago: executing program 4 (id=2581): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) readahead(r1, 0x5, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/201, 0xc9}, {0x0}, {&(0x7f0000000340)=""/133, 0x85}], 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local, @multicast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @broadcast, @remote}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f00005ad000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000240)="460f01ef66baf80cb862e81883ef66bafc0c66b8a07766ef0f3a0fed70400f013a0f005c8f0e650f799f08000000262e400f3066410f3a0b3072670f01c866baf80cb877281181ef66bafc0cec", 0x4d}], 0x1, 0x0, &(0x7f0000000400), 0x0) bind$netlink(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000040)=[0x4, 0x4], 0x2) close(r0) mremap(&(0x7f0000638000/0x1000)=nil, 0x4400, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b00"], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000900)={0x24, &(0x7f0000000700)={0x0, 0x0, 0x1, "c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 347.730201ms ago: executing program 3 (id=2583): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000fc0)={0x0, 0x38}) 347.626891ms ago: executing program 2 (id=2584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) io_setup(0x20, &(0x7f0000001140)) 347.473801ms ago: executing program 3 (id=2585): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000500)=""/215) 335.344383ms ago: executing program 3 (id=2586): r0 = socket$inet6(0x10, 0x3, 0x0) read(r0, &(0x7f0000000340)=""/254, 0xfe) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 266.170748ms ago: executing program 2 (id=2587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e07f000100000000dde3cc1c0000000008"], 0x38}}, 0x0) 192.038044ms ago: executing program 2 (id=2588): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4038ae7a, 0x0) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f00000004c0)="cf", 0x1}], 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 191.893674ms ago: executing program 3 (id=2589): r0 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="95", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) 191.500254ms ago: executing program 3 (id=2590): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r3, @ANYRES16=r4], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000380), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r9}, 0x38) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000280)=""/23, 0x61b000, 0x0, 0x1}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r9}, 0x38) 94.461352ms ago: executing program 1 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001000)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x26}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000500)='./file1\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0) read$FUSE(r0, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_CREATE_OPEN(r0, &(0x7f00000003c0)={0xa0, 0x0, r2}, 0xa0) 81.001773ms ago: executing program 2 (id=2592): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000100, 0x0) 201.93µs ago: executing program 2 (id=2593): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) splice(r2, 0x0, r0, 0x0, 0x20000000000100, 0x0) 0s ago: executing program 2 (id=2594): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x20000000000100, 0x0) kernel console output (not intermixed with test programs): 51][ T297] Bluetooth: hci1: command 0x1003 tx timeout [ 477.114516][ T471] Bluetooth: hci1: sending frame failed (-49) [ 477.666691][T10109] loop0: detected capacity change from 0 to 2048 [ 477.695078][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.702052][ T293] (unnamed net_device) (uninitialized): Assigned a random MAC address: 16:6d:61:79:28:1e [ 477.789445][T10105] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.807055][T10105] device bridge_slave_0 entered promiscuous mode [ 477.823690][T10107] loop1: detected capacity change from 0 to 40427 [ 477.832745][ T293] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 477.833024][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.845844][T10105] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.853054][T10105] device bridge_slave_1 entered promiscuous mode [ 477.909128][T10107] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 477.926898][T10107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 477.940059][T10107] F2FS-fs (loop1): invalid crc value [ 477.947949][T10075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10075 comm=syz.2.2186 [ 477.963842][T10107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 478.011797][ T293] usb 3-1: USB disconnect, device number 26 [ 478.097690][T10107] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 478.104715][T10107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 478.121274][T10105] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.128155][T10105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.135275][T10105] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.142035][T10105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.189162][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.197111][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.205338][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.234614][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.243657][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.250529][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.268319][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.498675][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.505547][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.556766][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.565105][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.589461][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.615767][T10105] device veth0_vlan entered promiscuous mode [ 478.627846][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.639734][ T4994] device bridge_slave_1 left promiscuous mode [ 478.645677][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.695578][ T4994] device bridge_slave_0 left promiscuous mode [ 478.718748][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.733568][T10152] loop1: detected capacity change from 0 to 1024 [ 478.740802][ T4994] device veth1_macvtap left promiscuous mode [ 478.749176][ T4994] device veth0_vlan left promiscuous mode [ 478.828485][T10152] EXT4-fs (loop1): Test dummy encryption mode enabled [ 478.836673][T10152] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 478.853775][T10105] device veth1_macvtap entered promiscuous mode [ 478.861011][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.868462][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.876123][T10152] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 478.876529][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.146890][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.161875][ T30] audit: type=1107 audit(1720966610.742:761): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 479.165367][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.194532][ T293] Bluetooth: hci1: command 0x1001 tx timeout [ 479.203589][ T4482] Bluetooth: hci1: sending frame failed (-49) [ 479.207216][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.217743][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.226164][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.240887][T10160] FAULT_INJECTION: forcing a failure. [ 479.240887][T10160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.255875][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.268680][T10160] CPU: 1 PID: 10160 Comm: syz.1.2199 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 479.280488][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 479.292570][T10160] Call Trace: [ 479.296337][T10160] [ 479.300438][T10160] dump_stack_lvl+0x151/0x1b7 [ 479.306554][T10162] loop4: detected capacity change from 0 to 1024 [ 479.306951][T10160] ? io_uring_drop_tctx_refs+0x190/0x190 [ 479.320719][T10160] dump_stack+0x15/0x17 [ 479.324708][T10160] should_fail+0x3c6/0x510 [ 479.328962][T10160] should_fail_usercopy+0x1a/0x20 [ 479.333822][T10160] _copy_to_user+0x20/0x90 [ 479.338160][T10160] simple_read_from_buffer+0xc7/0x150 [ 479.343367][T10160] proc_fail_nth_read+0x1a3/0x210 [ 479.348224][T10160] ? proc_fault_inject_write+0x390/0x390 [ 479.353778][T10160] ? fsnotify_perm+0x470/0x5d0 [ 479.358465][T10160] ? security_file_permission+0x86/0xb0 [ 479.363844][T10160] ? proc_fault_inject_write+0x390/0x390 [ 479.369316][T10160] vfs_read+0x27d/0xd40 [ 479.373312][T10160] ? kasan_quarantine_put+0x34/0x1a0 [ 479.378516][T10160] ? kernel_read+0x1f0/0x1f0 [ 479.382939][T10160] ? __kasan_check_write+0x14/0x20 [ 479.387896][T10160] ? mutex_lock+0xb6/0x1e0 [ 479.392138][T10160] ? wait_for_completion_killable_timeout+0x10/0x10 [ 479.398564][T10160] ? __fdget_pos+0x2e7/0x3a0 [ 479.402990][T10160] ? ksys_read+0x77/0x2c0 [ 479.407155][T10160] ksys_read+0x199/0x2c0 [ 479.411235][T10160] ? vfs_write+0x1110/0x1110 [ 479.415659][T10160] ? debug_smp_processor_id+0x17/0x20 [ 479.420870][T10160] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 479.426770][T10160] __x64_sys_read+0x7b/0x90 [ 479.431111][T10160] do_syscall_64+0x3d/0xb0 [ 479.435370][T10160] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 479.441090][T10160] RIP: 0033:0x7f64b43036bc [ 479.445355][T10160] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 479.464786][T10160] RSP: 002b:00007f64b3586040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.473032][T10160] RAX: ffffffffffffffda RBX: 00007f64b4492f60 RCX: 00007f64b43036bc [ 479.480842][T10160] RDX: 000000000000000f RSI: 00007f64b35860b0 RDI: 0000000000000003 [ 479.488655][T10160] RBP: 00007f64b35860a0 R08: 0000000000000000 R09: 0000000000000000 [ 479.496467][T10160] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 479.504450][T10160] R13: 000000000000000b R14: 00007f64b4492f60 R15: 00007fffdcb87698 [ 479.512267][T10160] [ 479.585026][T10166] loop1: detected capacity change from 0 to 1024 [ 479.594457][T10162] EXT4-fs (loop4): Test dummy encryption mode enabled [ 479.606728][T10162] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 479.624132][T10154] loop0: detected capacity change from 0 to 40427 [ 479.636170][T10162] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 479.685417][T10166] EXT4-fs (loop1): Test dummy encryption mode enabled [ 479.694610][T10166] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 479.705565][T10166] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 479.759376][T10154] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 479.767347][T10154] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 479.792065][T10154] F2FS-fs (loop0): Found nat_bits in checkpoint [ 479.847549][T10154] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 479.852739][T10179] loop4: detected capacity change from 0 to 2048 [ 479.854587][T10154] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 479.904141][T10181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10181 comm=syz.1.2203 [ 479.938229][T10179] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 480.172613][T10184] attempt to access beyond end of device [ 480.172613][T10184] loop0: rw=2049, want=40432, limit=40427 [ 480.541606][T10186] loop1: detected capacity change from 0 to 40427 [ 480.589933][T10186] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 480.597495][T10186] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 480.598023][T10192] loop0: detected capacity change from 0 to 1024 [ 480.606870][T10186] F2FS-fs (loop1): invalid crc value [ 480.619006][T10186] F2FS-fs (loop1): Found nat_bits in checkpoint [ 480.653272][T10186] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 480.660225][T10186] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 480.662608][T10192] EXT4-fs (loop0): Test dummy encryption mode enabled [ 480.686445][T10192] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 480.748448][T10192] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 480.787932][ T30] audit: type=1107 audit(1720966612.362:762): pid=10191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 481.119481][ T20] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 481.135381][T10202] loop0: detected capacity change from 0 to 1024 [ 481.173156][T10204] UDC core: couldn't find an available UDC or it's busy: -16 [ 481.181464][T10202] EXT4-fs (loop0): Test dummy encryption mode enabled [ 481.188097][T10202] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 481.201310][T10204] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 481.205866][T10202] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 481.237518][ T30] audit: type=1107 audit(1720966612.822:763): pid=10201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 481.268929][ T300] Bluetooth: hci1: command 0x1009 tx timeout [ 481.505726][T10211] loop0: detected capacity change from 0 to 256 [ 481.578681][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 481.678718][ T293] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 481.858733][ T20] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 481.867595][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.875936][ T20] usb 3-1: Product: syz [ 481.880084][ T20] usb 3-1: Manufacturer: syz [ 481.884487][ T20] usb 3-1: SerialNumber: syz [ 481.893112][ T20] usb 3-1: config 0 descriptor?? [ 482.038717][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.049621][ T293] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.062382][ T293] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.071246][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.079933][ T293] usb 2-1: config 0 descriptor?? [ 482.276774][T10219] loop0: detected capacity change from 0 to 1024 [ 482.349167][T10219] EXT4-fs (loop0): Test dummy encryption mode enabled [ 482.355863][T10219] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 482.366729][T10219] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 482.525598][T10231] loop4: detected capacity change from 0 to 2048 [ 482.588856][ T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: b2:00:1f:15:05:6a [ 482.760028][ T20] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 482.858680][ T293] usbhid 2-1:0.0: can't add hid device: -71 [ 482.867535][ T293] usbhid: probe of 2-1:0.0 failed with error -71 [ 482.879676][ T293] usb 2-1: USB disconnect, device number 25 [ 482.955399][T10189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10189 comm=syz.2.2207 [ 482.990746][ T300] usb 3-1: USB disconnect, device number 27 [ 482.998766][ T137] net eth1: rx_urb submit failed: -19 [ 483.658644][T10273] loop4: detected capacity change from 0 to 1024 [ 483.666602][T10273] EXT4-fs (loop4): Test dummy encryption mode enabled [ 483.676362][T10273] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 483.687938][T10273] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 483.750193][T10269] loop0: detected capacity change from 0 to 40427 [ 483.758564][ T30] audit: type=1107 audit(1720966615.332:764): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 483.772538][T10276] loop2: detected capacity change from 0 to 2048 [ 483.809766][T10269] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 483.821643][T10269] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 483.830941][T10269] F2FS-fs (loop0): invalid crc value [ 483.835812][T10276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 483.840768][T10269] F2FS-fs (loop0): Found nat_bits in checkpoint [ 483.902359][T10269] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 483.910079][T10269] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 484.344868][T10290] loop1: detected capacity change from 0 to 256 [ 484.484594][T10292] loop0: detected capacity change from 0 to 1024 [ 484.499012][T10292] EXT4-fs (loop0): Test dummy encryption mode enabled [ 484.505781][T10292] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 484.517805][T10292] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 485.770447][T10315] loop0: detected capacity change from 0 to 2048 [ 485.851379][T10317] loop4: detected capacity change from 0 to 2048 [ 485.882867][T10299] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.890297][T10299] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.897783][T10299] device bridge_slave_0 entered promiscuous mode [ 485.909620][T10299] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.925344][T10299] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.945448][T10299] device bridge_slave_1 entered promiscuous mode [ 485.953362][T10317] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 486.423610][T10326] loop2: detected capacity change from 0 to 1024 [ 486.499750][T10326] EXT4-fs (loop2): Test dummy encryption mode enabled [ 486.506502][T10326] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 486.528408][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 486.543115][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.566691][T10326] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 486.633668][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 486.642459][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.665423][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.672325][ T7501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.674442][ T30] audit: type=1107 audit(1720966618.262:765): pid=10325 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 486.714382][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 486.747840][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.753497][T10338] loop0: detected capacity change from 0 to 1024 [ 486.766252][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.773178][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.796371][T10338] EXT4-fs (loop0): Test dummy encryption mode enabled [ 486.808722][T10338] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 486.808740][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.828852][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 486.836628][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.850751][T10338] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 486.885493][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.917926][T10299] device veth0_vlan entered promiscuous mode [ 486.935180][T10330] loop1: detected capacity change from 0 to 40427 [ 486.942466][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.952196][T10330] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 486.968710][T10330] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 486.972915][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.995725][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 487.015682][T10299] device veth1_macvtap entered promiscuous mode [ 487.022839][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 487.050573][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 487.071586][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 487.104211][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 487.112562][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 487.128001][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 487.137601][T10330] F2FS-fs (loop1): invalid crc value [ 487.195062][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 487.212339][ T627] device bridge_slave_1 left promiscuous mode [ 487.229484][ T627] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.240259][T10330] F2FS-fs (loop1): Found nat_bits in checkpoint [ 487.260773][ T627] device bridge_slave_0 left promiscuous mode [ 487.276894][ T627] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.288471][ T627] device veth1_macvtap left promiscuous mode [ 487.315887][T10354] loop0: detected capacity change from 0 to 512 [ 487.322575][ T627] device veth0_vlan left promiscuous mode [ 487.362582][T10330] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 487.478908][T10330] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 487.613414][T10354] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2240: bad orphan inode 4 [ 487.635002][T10354] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 487.662562][T10341] loop2: detected capacity change from 0 to 40427 [ 487.686190][T10354] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2240: Logical block already allocated [ 487.755307][T10363] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2240: bg 0: block 3: invalid block bitmap [ 487.770626][T10341] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 488.131000][T10341] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 488.147154][T10341] F2FS-fs (loop2): invalid crc value [ 488.157894][T10341] F2FS-fs (loop2): Found nat_bits in checkpoint [ 488.236295][T10371] loop0: detected capacity change from 0 to 512 [ 488.260448][T10375] loop3: detected capacity change from 0 to 2048 [ 488.314250][T10379] loop1: detected capacity change from 0 to 1024 [ 488.321591][T10371] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2241: bad orphan inode 4 [ 488.325765][T10341] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 488.332328][T10371] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 488.339417][T10341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 488.357630][T10371] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2241: Logical block already allocated [ 488.900579][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 488.911910][T10379] EXT4-fs (loop1): Test dummy encryption mode enabled [ 488.930382][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 488.939682][T10386] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2241: bg 0: block 3: invalid block bitmap [ 488.940606][T10379] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 488.975199][T10379] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 489.009638][ T30] audit: type=1107 audit(1720966620.592:766): pid=10378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 489.119652][T10391] loop1: detected capacity change from 0 to 1024 [ 489.155802][T10393] loop0: detected capacity change from 0 to 2048 [ 489.175688][T10391] EXT4-fs (loop1): Test dummy encryption mode enabled [ 489.183453][T10391] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 489.202512][T10391] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 489.239242][T10400] loop4: detected capacity change from 0 to 512 [ 489.239515][T10393] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.262946][T10400] EXT4-fs (loop4): Unrecognized mount option "dont_hash" or missing value [ 489.340321][ T30] audit: type=1400 audit(1720966620.922:767): avc: denied { mount } for pid=10398 comm="syz.4.2249" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 489.401390][T10402] loop1: detected capacity change from 0 to 2048 [ 489.410009][ T30] audit: type=1400 audit(1720966620.952:768): avc: denied { getopt } for pid=10398 comm="syz.4.2249" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.425296][T10405] loop4: detected capacity change from 0 to 512 [ 489.431911][ T30] audit: type=1400 audit(1720966620.952:769): avc: denied { read } for pid=10398 comm="syz.4.2249" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 489.459068][ T30] audit: type=1400 audit(1720966620.952:770): avc: denied { open } for pid=10398 comm="syz.4.2249" path="/15/file0" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 489.481558][ T30] audit: type=1400 audit(1720966620.962:771): avc: denied { unmount } for pid=10105 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 489.501972][ T30] audit: type=1400 audit(1720966620.972:772): avc: denied { read write } for pid=10105 comm="syz-executor" name="loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.526720][ T30] audit: type=1400 audit(1720966620.972:773): avc: denied { open } for pid=10105 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.551158][ T30] audit: type=1400 audit(1720966620.972:774): avc: denied { ioctl } for pid=10105 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 489.579154][T10405] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2251: bad orphan inode 4 [ 489.599889][T10405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.619462][T10402] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 489.669527][T10405] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2251: Logical block already allocated [ 489.825280][T10410] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2251: bg 0: block 3: invalid block bitmap [ 489.917504][T10406] loop3: detected capacity change from 0 to 40427 [ 490.666536][T10424] loop3: detected capacity change from 0 to 512 [ 490.732896][T10426] loop1: detected capacity change from 0 to 2048 [ 490.949349][ T778] Bluetooth: hci0: command 0x1003 tx timeout [ 490.955837][ T4482] Bluetooth: hci0: sending frame failed (-49) [ 491.299602][T10433] loop0: detected capacity change from 0 to 1024 [ 491.390877][T10433] EXT4-fs (loop0): Test dummy encryption mode enabled [ 491.403887][T10433] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 491.438684][T10433] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 491.589544][T10440] loop3: detected capacity change from 0 to 1024 [ 491.638681][T10437] binder: 10436:10437 ioctl c018620c 0 returned -14 [ 491.721692][T10451] loop1: detected capacity change from 0 to 512 [ 491.753535][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 491.753551][ T30] audit: type=1400 audit(1720966623.332:816): avc: denied { create } for pid=10452 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 491.807067][T10451] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2263: bad orphan inode 4 [ 491.817149][T10451] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 491.838844][T10451] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2263: Logical block already allocated [ 491.875009][T10456] FAULT_INJECTION: forcing a failure. [ 491.875009][T10456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.887950][T10456] CPU: 0 PID: 10456 Comm: syz.0.2259 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 491.897741][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 491.904459][T10458] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.2263: bg 0: block 3: invalid block bitmap [ 491.907639][T10456] Call Trace: [ 491.907649][T10456] [ 491.925609][T10456] dump_stack_lvl+0x151/0x1b7 [ 491.930118][T10456] ? io_uring_drop_tctx_refs+0x190/0x190 [ 491.935591][T10456] dump_stack+0x15/0x17 [ 491.939578][T10456] should_fail+0x3c6/0x510 [ 491.943835][T10456] should_fail_usercopy+0x1a/0x20 [ 491.948695][T10456] _copy_from_user+0x20/0xd0 [ 491.953123][T10456] __sys_bpf+0x1e9/0x760 [ 491.957196][T10456] ? fput_many+0x160/0x1b0 [ 491.961451][T10456] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 491.966662][T10456] ? debug_smp_processor_id+0x17/0x20 [ 491.971864][T10456] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 491.977770][T10456] __x64_sys_bpf+0x7c/0x90 [ 491.982019][T10456] do_syscall_64+0x3d/0xb0 [ 491.986359][T10456] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 491.992085][T10456] RIP: 0033:0x7f05d24a5bd9 [ 491.996353][T10456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.015777][T10456] RSP: 002b:00007f05d1727048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.024025][T10456] RAX: ffffffffffffffda RBX: 00007f05d2633f60 RCX: 00007f05d24a5bd9 [ 492.031838][T10456] RDX: 0000000000000048 RSI: 0000000020000380 RDI: 0000000000000000 [ 492.039646][T10456] RBP: 00007f05d17270a0 R08: 0000000000000000 R09: 0000000000000000 [ 492.047459][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.055269][T10456] R13: 000000000000000b R14: 00007f05d2633f60 R15: 00007ffd2c0a01b8 [ 492.063086][T10456] [ 492.365796][T10469] loop0: detected capacity change from 0 to 256 [ 492.419491][T10467] loop3: detected capacity change from 0 to 40427 [ 492.471166][ T30] audit: type=1400 audit(1720966624.052:817): avc: denied { mount } for pid=10464 comm="syz.0.2266" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 492.493527][ T30] audit: type=1400 audit(1720966624.052:818): avc: denied { write } for pid=10464 comm="syz.0.2266" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 492.515076][ T30] audit: type=1400 audit(1720966624.052:819): avc: denied { add_name } for pid=10464 comm="syz.0.2266" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 492.535751][ T30] audit: type=1400 audit(1720966624.052:820): avc: denied { associate } for pid=10464 comm="syz.0.2266" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 492.558702][ T30] audit: type=1400 audit(1720966624.052:821): avc: denied { read write open } for pid=10464 comm="syz.0.2266" path=2F35382FE91F7189591E9233614B2F66696C6531 dev="loop0" ino=1049220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 492.585653][ T30] audit: type=1400 audit(1720966624.052:822): avc: denied { remove_name } for pid=10464 comm="syz.0.2266" name="file1" dev="loop0" ino=1049220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 492.609222][ T30] audit: type=1400 audit(1720966624.052:823): avc: denied { unlink } for pid=10464 comm="syz.0.2266" name="file1" dev="loop0" ino=1049220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 492.647263][T10471] loop4: detected capacity change from 0 to 1024 [ 492.671611][T10471] EXT4-fs (loop4): Test dummy encryption mode enabled [ 492.678257][T10471] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 492.713979][T10471] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 492.782309][ T30] audit: type=1107 audit(1720966624.362:824): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 493.057607][ T778] Bluetooth: hci0: command 0x1001 tx timeout [ 493.070681][ T4482] Bluetooth: hci0: sending frame failed (-49) [ 493.103726][T10473] loop1: detected capacity change from 0 to 40427 [ 493.117634][ T30] audit: type=1400 audit(1720966624.692:825): avc: denied { read } for pid=10480 comm="syz.3.2271" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 493.147118][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 493.169272][T10484] loop3: detected capacity change from 0 to 512 [ 493.205980][T10473] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 493.213680][T10473] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 493.223020][T10473] F2FS-fs (loop1): invalid crc value [ 493.229889][T10473] F2FS-fs (loop1): Found nat_bits in checkpoint [ 493.270987][T10473] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 493.288671][T10473] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 493.879367][T10494] loop1: detected capacity change from 0 to 2048 [ 494.013272][T10498] loop3: detected capacity change from 0 to 512 [ 494.812066][T10509] loop4: detected capacity change from 0 to 512 [ 494.905703][T10509] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2278: bad orphan inode 4 [ 494.907797][T10515] loop3: detected capacity change from 0 to 1024 [ 494.915850][T10509] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 494.938319][T10509] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2278: Logical block already allocated [ 495.035919][T10519] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2278: bg 0: block 3: invalid block bitmap [ 495.074852][T10520] device pim6reg1 entered promiscuous mode [ 495.108662][ T42] Bluetooth: hci0: command 0x1009 tx timeout [ 495.298043][T10522] loop3: detected capacity change from 0 to 40427 [ 495.832323][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 496.188900][T10529] loop1: detected capacity change from 0 to 40427 [ 496.201966][T10535] loop3: detected capacity change from 0 to 512 [ 496.239304][T10529] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 496.246918][T10529] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 496.255824][T10529] F2FS-fs (loop1): invalid crc value [ 496.262375][T10529] F2FS-fs (loop1): Found nat_bits in checkpoint [ 496.284742][T10529] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 496.291781][T10529] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 496.827525][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 496.827541][ T30] audit: type=1400 audit(1720966628.402:830): avc: denied { integrity } for pid=10544 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 496.885817][T10552] loop1: detected capacity change from 0 to 2048 [ 496.892769][ T30] audit: type=1400 audit(1720966628.442:831): avc: denied { mounton } for pid=10548 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 496.926646][ T30] audit: type=1400 audit(1720966628.442:832): avc: denied { mount } for pid=10548 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 496.993129][ T30] audit: type=1400 audit(1720966628.442:833): avc: denied { read } for pid=10548 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 497.038925][ T30] audit: type=1400 audit(1720966628.442:834): avc: denied { open } for pid=10548 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 497.224052][ T30] audit: type=1400 audit(1720966628.442:835): avc: denied { mounton } for pid=10548 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 497.245690][ T30] audit: type=1400 audit(1720966628.452:836): avc: denied { module_request } for pid=10548 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 497.280769][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.287662][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.292906][ T30] audit: type=1400 audit(1720966628.872:837): avc: denied { read write } for pid=10558 comm="syz.3.2290" name="vhost-vsock" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.300210][T10548] device bridge_slave_0 entered promiscuous mode [ 497.325801][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.332927][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.340128][ T30] audit: type=1400 audit(1720966628.872:838): avc: denied { open } for pid=10558 comm="syz.3.2290" path="/dev/vhost-vsock" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.364151][T10548] device bridge_slave_1 entered promiscuous mode [ 497.383720][ T30] audit: type=1400 audit(1720966628.872:839): avc: denied { ioctl } for pid=10558 comm="syz.3.2290" path="/dev/vhost-vsock" dev="devtmpfs" ino=172 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 497.606267][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.613164][T10548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.620283][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.627123][T10548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.646900][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.653870][ T313] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 497.661727][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.669422][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.676697][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.686612][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.694645][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.701611][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.720878][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.739553][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.746408][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.762180][T10566] loop4: detected capacity change from 0 to 1024 [ 497.764721][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.794532][T10548] device veth0_vlan entered promiscuous mode [ 497.802557][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 497.810846][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 497.818529][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 497.819495][T10566] EXT4-fs (loop4): Test dummy encryption mode enabled [ 497.826727][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 497.839783][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.849571][T10566] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 497.856759][T10548] device veth1_macvtap entered promiscuous mode [ 497.865803][T10568] loop1: detected capacity change from 0 to 1024 [ 497.866138][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 497.881787][T10566] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 497.908233][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 497.918945][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 497.920072][T10568] EXT4-fs (loop1): Test dummy encryption mode enabled [ 497.940620][T10568] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 497.966919][T10568] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 497.999017][ T313] usb 4-1: Using ep0 maxpacket: 32 [ 498.024402][T10575] loop4: detected capacity change from 0 to 512 [ 498.031835][T10577] FAULT_INJECTION: forcing a failure. [ 498.031835][T10577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 498.045640][T10577] CPU: 0 PID: 10577 Comm: syz.2.2294 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 498.055523][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 498.057554][T10575] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2293: bad orphan inode 4 [ 498.065414][T10577] Call Trace: [ 498.065426][T10577] [ 498.065433][T10577] dump_stack_lvl+0x151/0x1b7 [ 498.065455][T10577] ? io_uring_drop_tctx_refs+0x190/0x190 [ 498.065472][T10577] dump_stack+0x15/0x17 [ 498.065485][T10577] should_fail+0x3c6/0x510 [ 498.075795][T10575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 498.078258][T10577] should_fail_alloc_page+0x5a/0x80 [ 498.114632][T10577] prepare_alloc_pages+0x15c/0x700 [ 498.119571][T10577] ? __alloc_pages+0x8f0/0x8f0 [ 498.124173][T10577] ? __alloc_pages_bulk+0xe40/0xe40 [ 498.129204][T10577] ? avc_has_perm_noaudit+0x2dd/0x430 [ 498.134416][T10577] __alloc_pages+0x18c/0x8f0 [ 498.138839][T10577] ? prep_new_page+0x110/0x110 [ 498.143443][T10577] ? tcp_leave_memory_pressure+0xe3/0x100 [ 498.148995][T10577] ? tcp_enter_memory_pressure+0x100/0x100 [ 498.154634][T10577] ? __sk_mem_raise_allocated+0x1e5/0x1110 [ 498.160278][T10577] skb_page_frag_refill+0x209/0x3b0 [ 498.165312][T10577] sk_page_frag_refill+0x4d/0x210 [ 498.170171][T10577] ? sk_msg_alloc+0x758/0xa80 [ 498.174685][T10577] sk_msg_alloc+0x15a/0xa80 [ 498.179028][T10577] tcp_bpf_sendmsg+0x4e5/0xbf0 [ 498.183636][T10577] ? tcp_bpf_recvmsg+0x400/0x400 [ 498.188505][T10577] ? selinux_socket_accept+0x5b0/0x5b0 [ 498.193786][T10577] ? proc_fail_nth_write+0x20b/0x290 [ 498.198907][T10577] ? inet_send_prepare+0x5e/0x4a0 [ 498.203762][T10577] inet6_sendmsg+0xa1/0xc0 [ 498.208014][T10577] ? inet6_compat_ioctl+0x4e0/0x4e0 [ 498.213053][T10577] __sys_sendto+0x564/0x720 [ 498.217389][T10577] ? __ia32_sys_getpeername+0x90/0x90 [ 498.222595][T10577] ? mutex_unlock+0xb2/0x260 [ 498.227023][T10577] ? fput_many+0x160/0x1b0 [ 498.231277][T10577] ? debug_smp_processor_id+0x17/0x20 [ 498.236481][T10577] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 498.242472][T10577] __x64_sys_sendto+0xe5/0x100 [ 498.247072][T10577] do_syscall_64+0x3d/0xb0 [ 498.251323][T10577] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 498.257050][T10577] RIP: 0033:0x7f441e11cbd9 [ 498.261312][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.280747][T10577] RSP: 002b:00007f441d39e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 498.289011][T10577] RAX: ffffffffffffffda RBX: 00007f441e2aaf60 RCX: 00007f441e11cbd9 [ 498.296802][T10577] RDX: fffffffffffffea5 RSI: 0000000020000040 RDI: 0000000000000003 [ 498.304615][T10577] RBP: 00007f441d39e0a0 R08: 0000000020000100 R09: 000000000000001c [ 498.312433][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.320240][T10577] R13: 000000000000000b R14: 00007f441e2aaf60 R15: 00007ffc304d9bb8 [ 498.328055][T10577] [ 498.345262][T10575] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2293: Logical block already allocated [ 498.555252][T10582] loop1: detected capacity change from 0 to 40427 [ 498.598732][ T313] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 498.607734][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.615893][ T313] usb 4-1: Product: syz [ 498.620213][ T313] usb 4-1: Manufacturer: syz [ 498.624615][ T313] usb 4-1: SerialNumber: syz [ 498.634373][ T313] usb 4-1: config 0 descriptor?? [ 498.659212][T10582] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 498.666833][T10582] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 498.675842][T10582] F2FS-fs (loop1): invalid crc value [ 498.682593][T10582] F2FS-fs (loop1): Found nat_bits in checkpoint [ 498.697165][ T8] Bluetooth: hci1: Frame reassembly failed (-84) [ 498.715910][T10582] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 498.722978][T10582] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 499.286370][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 499.295466][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 499.588879][ T313] (unnamed net_device) (uninitialized): Assigned a random MAC address: ee:d0:b0:a6:8c:0a [ 499.592772][T10605] loop1: detected capacity change from 0 to 2048 [ 499.600621][ T313] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 499.858282][T10559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10559 comm=syz.3.2290 [ 499.883910][ T778] usb 4-1: USB disconnect, device number 22 [ 499.889758][ T137] net eth1: rx_urb submit failed: -19 [ 500.070401][T10632] loop4: detected capacity change from 0 to 1024 [ 500.086242][T10632] EXT4-fs (loop4): Test dummy encryption mode enabled [ 500.093153][T10632] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 500.105669][T10632] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 500.519188][ T4994] device bridge_slave_1 left promiscuous mode [ 500.527009][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.534707][ T4994] device bridge_slave_0 left promiscuous mode [ 500.541403][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.550444][ T4994] device veth1_macvtap left promiscuous mode [ 500.556366][ T4994] device veth0_vlan left promiscuous mode [ 500.621810][T10647] 9pnet: Could not find request transport: fd0x0000000000000006 [ 500.653694][T10649] loop3: detected capacity change from 0 to 512 [ 500.718676][ T7501] Bluetooth: hci1: command 0x1003 tx timeout [ 500.724604][ T47] Bluetooth: hci1: sending frame failed (-49) [ 500.744900][T10645] loop1: detected capacity change from 0 to 40427 [ 500.827446][T10645] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 500.835078][T10645] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 500.844692][T10645] F2FS-fs (loop1): invalid crc value [ 500.851277][T10645] F2FS-fs (loop1): Found nat_bits in checkpoint [ 500.902845][T10645] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 500.909855][T10645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 501.075927][ T4994] Bluetooth: hci0: Frame reassembly failed (-84) [ 501.092713][T10656] loop4: detected capacity change from 0 to 1024 [ 501.104928][T10656] EXT4-fs (loop4): Test dummy encryption mode enabled [ 501.112151][T10656] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 501.124513][T10658] loop3: detected capacity change from 0 to 512 [ 501.125842][T10656] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 501.239787][T10662] loop4: detected capacity change from 0 to 512 [ 501.270454][T10662] EXT4-fs (loop4): Ignoring removed nobh option [ 501.284144][T10662] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: none. [ 501.588668][ T778] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 501.838642][ T778] usb 5-1: Using ep0 maxpacket: 16 [ 501.958907][ T778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 501.970051][ T778] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 501.979333][ T778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.994824][ T778] usb 5-1: config 0 descriptor?? [ 502.092426][T10667] loop3: detected capacity change from 0 to 40427 [ 502.257539][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 502.257554][ T30] audit: type=1400 audit(1720966633.832:875): avc: denied { create } for pid=10661 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 502.288529][ T30] audit: type=1400 audit(1720966633.872:876): avc: denied { bind } for pid=10661 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 502.522512][T10662] UDC core: couldn't find an available UDC or it's busy: -16 [ 502.533397][T10662] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 502.560756][ T778] hid (null): report_id 0 is invalid [ 502.566043][ T778] hid (null): unknown global tag 0xc [ 502.574374][ T778] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1 [ 502.582008][ T778] hid-generic 0003:0158:0100.000D: unexpected long global item [ 502.589915][ T778] hid-generic: probe of 0003:0158:0100.000D failed with error -22 [ 502.599066][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.606038][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.613233][T10671] device bridge_slave_0 entered promiscuous mode [ 502.620504][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.627386][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.634787][T10671] device bridge_slave_1 entered promiscuous mode [ 502.678846][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.685703][T10671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.692835][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.699591][T10671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.720869][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.728293][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.735777][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.745846][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.754001][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.760873][ T778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.773319][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.780360][ T778] usb 5-1: USB disconnect, device number 24 [ 502.781706][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.789351][ T42] Bluetooth: hci1: command 0x1001 tx timeout [ 502.793835][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.805223][ T471] Bluetooth: hci1: sending frame failed (-49) [ 502.815783][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.823729][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.844865][T10671] device veth0_vlan entered promiscuous mode [ 502.857596][T10671] device veth1_macvtap entered promiscuous mode [ 502.873889][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.882064][T10677] loop3: detected capacity change from 0 to 1024 [ 502.882548][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.896403][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.904521][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.911981][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.927094][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.935272][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 502.959128][T10679] loop0: detected capacity change from 0 to 512 [ 502.991671][ T30] audit: type=1107 audit(1720966634.572:877): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 503.011693][T10679] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2312: bad orphan inode 4 [ 503.024172][T10679] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 503.049334][T10679] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2312: Logical block already allocated [ 503.068973][T10682] loop3: detected capacity change from 0 to 2048 [ 503.108748][ T778] Bluetooth: hci0: command 0x1003 tx timeout [ 503.114716][ T471] Bluetooth: hci0: sending frame failed (-49) [ 503.129727][T10683] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2312: bg 0: block 3: invalid block bitmap [ 503.229334][ T627] device bridge_slave_1 left promiscuous mode [ 503.236084][ T627] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.249010][ T627] device bridge_slave_0 left promiscuous mode [ 503.255986][ T627] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.272733][ T627] device veth1_macvtap left promiscuous mode [ 503.278726][ T627] device veth0_vlan left promiscuous mode [ 503.728668][ T297] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 503.991475][ T297] usb 5-1: Using ep0 maxpacket: 32 [ 504.044072][ T30] audit: type=1400 audit(1720966635.622:878): avc: denied { ioctl } for pid=10694 comm="syz.3.2317" path="/dev/uinput" dev="devtmpfs" ino=166 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 504.168748][ T20] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 504.298712][ T297] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 504.307646][ T297] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.315550][ T297] usb 5-1: Product: syz [ 504.319564][ T297] usb 5-1: Manufacturer: syz [ 504.323943][ T297] usb 5-1: SerialNumber: syz [ 504.329025][ T297] usb 5-1: config 0 descriptor?? [ 504.418654][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 504.718833][ T20] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 504.727765][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.735524][ T20] usb 1-1: Product: syz [ 504.739605][ T20] usb 1-1: Manufacturer: syz [ 504.743956][ T20] usb 1-1: SerialNumber: syz [ 504.749086][ T20] usb 1-1: config 0 descriptor?? [ 504.779426][T10701] loop3: detected capacity change from 0 to 512 [ 504.868720][ T42] Bluetooth: hci1: command 0x1009 tx timeout [ 505.008766][ T297] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:24:10:a6:d2:40 [ 505.021133][ T297] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 505.119145][T10716] loop3: detected capacity change from 0 to 1024 [ 505.198671][ T42] Bluetooth: hci0: command 0x1001 tx timeout [ 505.204516][ T471] Bluetooth: hci0: sending frame failed (-49) [ 505.240359][T10689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10689 comm=syz.4.2315 [ 505.457368][ T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: c6:d5:2f:3b:c9:2c [ 505.472790][ T297] usb 5-1: USB disconnect, device number 25 [ 505.478805][ T137] net eth1: rx_urb submit failed: -19 [ 505.491435][ T20] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 505.678812][T10696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10696 comm=syz.0.2316 [ 505.909634][ T297] usb 1-1: USB disconnect, device number 17 [ 505.918803][ T137] net eth1: rx_urb submit failed: -19 [ 506.077663][T10764] loop4: detected capacity change from 0 to 512 [ 506.175424][T10764] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2321: bad orphan inode 4 [ 506.186099][T10764] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.206565][T10764] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2321: Logical block already allocated [ 506.275231][T10769] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2321: bg 0: block 3: invalid block bitmap [ 506.301894][T10768] loop3: detected capacity change from 0 to 40427 [ 506.467495][T10771] loop0: detected capacity change from 0 to 512 [ 506.534524][T10771] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2323: bad orphan inode 4 [ 506.545870][T10771] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.693347][T10771] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.2323: Logical block already allocated [ 506.762162][T10776] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.2323: bg 0: block 3: invalid block bitmap [ 506.978736][T10778] loop4: detected capacity change from 0 to 1024 [ 507.079593][T10778] EXT4-fs (loop4): Test dummy encryption mode enabled [ 507.086242][T10778] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 507.098320][T10778] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 507.130133][ T30] audit: type=1107 audit(1720966638.712:879): pid=10777 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 507.167285][ T30] audit: type=1400 audit(1720966638.742:880): avc: denied { read write } for pid=10782 comm="syz.3.2326" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 507.190943][ T30] audit: type=1400 audit(1720966638.742:881): avc: denied { open } for pid=10782 comm="syz.3.2326" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 507.214441][ T30] audit: type=1400 audit(1720966638.742:882): avc: denied { mounton } for pid=10782 comm="syz.3.2326" path="/30/file0" dev="tmpfs" ino=205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 507.225171][T10785] loop4: detected capacity change from 0 to 2048 [ 507.268676][ T42] Bluetooth: hci0: command 0x1009 tx timeout [ 507.342235][ T30] audit: type=1400 audit(1720966638.922:883): avc: denied { unmount } for pid=10299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 507.370530][T10789] loop3: detected capacity change from 0 to 512 [ 507.789707][T10797] loop3: detected capacity change from 0 to 1024 [ 507.969583][T10799] loop3: detected capacity change from 0 to 1024 [ 507.977734][ T30] audit: type=1107 audit(1720966639.552:884): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 508.217335][ T30] audit: type=1400 audit(1720966639.792:885): avc: denied { mount } for pid=10802 comm="syz.4.2333" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 508.271305][ T30] audit: type=1326 audit(1720966639.852:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.0.2334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f409db44bd9 code=0x0 [ 508.832480][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.839602][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.846718][T10811] device bridge_slave_0 entered promiscuous mode [ 508.854116][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.861336][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.868981][T10811] device bridge_slave_1 entered promiscuous mode [ 508.936169][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.943072][T10811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.950164][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.956932][T10811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.982901][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.991875][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.999881][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 509.007330][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.022770][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.033996][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.040881][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.052887][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.060992][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.063317][T10818] loop4: detected capacity change from 0 to 1024 [ 509.067862][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.134512][T10818] EXT4-fs (loop4): Test dummy encryption mode enabled [ 509.188279][T10818] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 509.301284][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 509.309390][T10818] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 509.341868][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 509.349464][ T30] audit: type=1107 audit(1720966640.922:887): pid=10817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 509.372623][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.386092][T10811] device veth0_vlan entered promiscuous mode [ 509.394733][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.402885][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.411269][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.426951][T10827] loop4: detected capacity change from 0 to 512 [ 509.437731][T10811] device veth1_macvtap entered promiscuous mode [ 509.444832][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.457922][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 509.468154][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 509.509432][T10827] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2339: bad orphan inode 4 [ 509.523160][T10827] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 509.541021][T10827] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2339: Logical block already allocated [ 509.589431][ T45] device bridge_slave_1 left promiscuous mode [ 509.595575][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.603346][ T45] device bridge_slave_0 left promiscuous mode [ 509.610884][T10831] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2339: bg 0: block 3: invalid block bitmap [ 509.618849][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.631352][ T45] device veth1_macvtap left promiscuous mode [ 509.637253][ T45] device veth0_vlan left promiscuous mode [ 509.637838][T10829] loop2: detected capacity change from 0 to 40427 [ 509.642793][ T42] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 509.709729][T10829] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 509.717353][T10829] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 509.726293][T10829] F2FS-fs (loop2): invalid crc value [ 509.733578][T10829] F2FS-fs (loop2): Found nat_bits in checkpoint [ 509.756334][T10829] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 509.763311][T10829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 510.406175][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 510.632212][T10847] loop4: detected capacity change from 0 to 2048 [ 510.697181][T10850] loop2: detected capacity change from 0 to 2048 [ 510.722571][T10845] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.729512][T10845] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.736663][T10845] device bridge_slave_0 entered promiscuous mode [ 510.743894][T10845] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.751043][T10845] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.758319][T10845] device bridge_slave_1 entered promiscuous mode [ 510.798918][ T42] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 510.906437][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.971908][ T42] usb 1-1: Product: syz [ 510.972826][T10856] loop3: detected capacity change from 0 to 1024 [ 510.984164][ T42] usb 1-1: Manufacturer: syz [ 510.993932][ T42] usb 1-1: SerialNumber: syz [ 511.003785][ T42] usb 1-1: config 0 descriptor?? [ 511.051874][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 511.059394][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.068177][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.076953][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.084978][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.091811][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.099277][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.107842][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 511.128964][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.137235][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.144105][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.179937][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.187862][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.202708][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.215176][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.232814][T10845] device veth0_vlan entered promiscuous mode [ 511.244803][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 511.253331][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.261858][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 511.269914][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.285520][T10845] device veth1_macvtap entered promiscuous mode [ 511.294179][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.302682][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 511.310312][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 511.327242][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 511.335565][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 511.344243][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 511.353828][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 511.409635][T10859] loop3: detected capacity change from 0 to 40427 [ 511.431801][ T45] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 511.446153][ T45] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 511.683610][T10869] loop2: detected capacity change from 0 to 1024 [ 511.698710][ T42] (unnamed net_device) (uninitialized): Assigned a random MAC address: aa:33:a3:b0:d5:7e [ 511.723522][T10869] EXT4-fs (loop2): Test dummy encryption mode enabled [ 511.730344][T10869] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 511.742732][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 511.764255][ T30] audit: type=1400 audit(1720966643.342:888): avc: denied { write } for pid=81 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.766277][ T42] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 511.787300][ T30] audit: type=1400 audit(1720966643.342:889): avc: denied { remove_name } for pid=81 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.823252][ T7501] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 511.832638][ T30] audit: type=1400 audit(1720966643.342:890): avc: denied { rename } for pid=81 comm="syslogd" name="messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 511.837292][T10869] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 511.881957][ T30] audit: type=1400 audit(1720966643.342:891): avc: denied { add_name } for pid=81 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.913153][ T30] audit: type=1400 audit(1720966643.342:892): avc: denied { unlink } for pid=81 comm="syslogd" name="messages.0" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 512.128770][ T7501] usb 2-1: Using ep0 maxpacket: 16 [ 512.288964][ T7501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 512.321370][ T7501] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 512.321830][T10822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10822 comm=syz.0.2338 [ 512.362582][ T7501] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.397179][ T7501] usb 2-1: config 0 descriptor?? [ 512.444482][ T4994] device bridge_slave_1 left promiscuous mode [ 512.460574][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.488431][ T4994] device bridge_slave_0 left promiscuous mode [ 512.513258][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.531099][ T20] usb 1-1: USB disconnect, device number 18 [ 512.544066][ T4994] device veth1_macvtap left promiscuous mode [ 512.557101][ T4994] device veth0_vlan left promiscuous mode [ 512.986994][T10910] loop2: detected capacity change from 0 to 256 [ 513.027137][T10864] UDC core: couldn't find an available UDC or it's busy: -16 [ 513.034448][T10864] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.061133][ T7501] hid (null): report_id 0 is invalid [ 513.066554][ T7501] hid (null): unknown global tag 0xc [ 513.074505][ T7501] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1 [ 513.082010][ T7501] hid-generic 0003:0158:0100.000E: unexpected long global item [ 513.089587][ T7501] hid-generic: probe of 0003:0158:0100.000E failed with error -22 [ 513.223291][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 513.223374][ T30] audit: type=1400 audit(1720966644.792:896): avc: denied { write } for pid=10909 comm="syz.2.2351" path="socket:[53876]" dev="sockfs" ino=53876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 513.366942][ T42] usb 2-1: USB disconnect, device number 26 [ 513.445887][T10914] loop4: detected capacity change from 0 to 512 [ 513.474434][T10916] loop0: detected capacity change from 0 to 2048 [ 513.500523][T10914] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2352: bad orphan inode 4 [ 513.510586][T10914] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 513.526931][T10914] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.2352: Logical block already allocated [ 513.530155][T10916] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 513.605087][T10920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2352: bg 0: block 3: invalid block bitmap [ 513.748714][ T7501] Bluetooth: hci0: command 0x1003 tx timeout [ 513.754603][ T4482] Bluetooth: hci0: sending frame failed (-49) [ 513.904244][T10926] loop1: detected capacity change from 0 to 1024 [ 513.989394][T10926] EXT4-fs (loop1): Test dummy encryption mode enabled [ 513.996225][T10926] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 514.007286][T10926] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 514.039865][ T30] audit: type=1107 audit(1720966645.622:897): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 514.132502][T10929] loop1: detected capacity change from 0 to 1024 [ 514.219288][T10929] EXT4-fs (loop1): Test dummy encryption mode enabled [ 514.226082][T10929] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 514.237193][T10929] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 514.340947][T10932] loop4: detected capacity change from 0 to 2048 [ 514.640572][T10936] loop0: detected capacity change from 0 to 40427 [ 514.693018][T10936] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 514.727401][T10936] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 514.740659][T10936] F2FS-fs (loop0): invalid crc value [ 514.766763][T10936] F2FS-fs (loop0): Found nat_bits in checkpoint [ 514.828934][T10936] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 514.835863][T10936] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 515.108421][ T45] Bluetooth: hci1: Frame reassembly failed (-84) [ 515.116113][ T45] Bluetooth: hci1: Frame reassembly failed (-84) [ 515.664785][ T30] audit: type=1400 audit(1720966647.242:898): avc: denied { write } for pid=10954 comm="syz.4.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 515.958821][T10843] Bluetooth: hci0: command 0x1001 tx timeout [ 515.964689][ T471] Bluetooth: hci0: sending frame failed (-49) [ 515.971772][T10962] loop4: detected capacity change from 0 to 1024 [ 516.020685][T10962] EXT4-fs (loop4): Test dummy encryption mode enabled [ 516.036153][T10962] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 516.057314][T10962] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 516.226809][T10968] loop4: detected capacity change from 0 to 256 [ 516.826306][T10973] loop1: detected capacity change from 0 to 512 [ 516.869311][T10973] EXT4-fs (loop1): Ignoring removed nobh option [ 516.879622][T10973] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue. Quota mode: none. [ 517.108808][T10843] Bluetooth: hci1: command 0x1003 tx timeout [ 517.114687][ T471] Bluetooth: hci1: sending frame failed (-49) [ 517.168645][ T311] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 517.408672][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 517.528719][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 517.540027][ T311] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 517.548931][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.557396][ T311] usb 2-1: config 0 descriptor?? [ 517.727996][T10982] loop2: detected capacity change from 0 to 512 [ 517.802099][T10982] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2369: bad orphan inode 4 [ 517.812087][T10982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 517.824849][T10982] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.2369: Logical block already allocated [ 517.890157][T10985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2369: bg 0: block 3: invalid block bitmap [ 517.988985][ T42] Bluetooth: hci0: command 0x1009 tx timeout [ 518.019009][T10973] UDC core: couldn't find an available UDC or it's busy: -16 [ 518.026312][T10973] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 518.040549][ T311] hid (null): report_id 0 is invalid [ 518.045764][ T311] hid (null): unknown global tag 0xc [ 518.052375][ T311] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 518.059715][ T311] hid-generic 0003:0158:0100.000F: unexpected long global item [ 518.067203][ T311] hid-generic: probe of 0003:0158:0100.000F failed with error -22 [ 518.254392][ T293] usb 2-1: USB disconnect, device number 27 [ 518.856051][T10996] loop1: detected capacity change from 0 to 2048 [ 519.198635][ T20] Bluetooth: hci1: command 0x1001 tx timeout [ 519.204729][ T471] Bluetooth: hci1: sending frame failed (-49) [ 520.039833][T11007] loop4: detected capacity change from 0 to 1024 [ 520.109240][T11007] EXT4-fs (loop4): Test dummy encryption mode enabled [ 520.116897][T11007] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 520.130791][T11007] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 520.132046][T11009] loop1: detected capacity change from 0 to 1024 [ 520.166347][ T30] audit: type=1107 audit(1720966651.752:899): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 520.229363][T11009] EXT4-fs (loop1): Test dummy encryption mode enabled [ 520.236127][T11009] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 520.247744][T11009] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 520.721936][T11022] loop1: detected capacity change from 0 to 2048 [ 520.760054][T11022] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 521.268651][ T293] Bluetooth: hci1: command 0x1009 tx timeout [ 521.458637][ T20] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 521.587238][T11036] loop2: detected capacity change from 0 to 1024 [ 521.632186][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.639215][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.653473][T11037] device bridge_slave_0 entered promiscuous mode [ 521.660699][T11036] EXT4-fs (loop2): Test dummy encryption mode enabled [ 521.667337][T11036] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 521.677413][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.684766][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.692362][T11037] device bridge_slave_1 entered promiscuous mode [ 521.701003][T11036] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 521.726646][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 521.730792][ T30] audit: type=1107 audit(1720966653.312:900): pid=11035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 521.820541][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.827520][T11037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.834638][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.841395][T11037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.911951][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.920007][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.982467][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 521.991218][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.010332][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.018287][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.025170][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.032317][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.040773][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.047604][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.048720][ T20] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 522.055575][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.064462][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.071948][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.079314][ T20] usb 5-1: Product: syz [ 522.094321][ T20] usb 5-1: Manufacturer: syz [ 522.098378][T10843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.098971][ T20] usb 5-1: SerialNumber: syz [ 522.111200][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.114782][ T20] usb 5-1: config 0 descriptor?? [ 522.119598][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.130804][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.139492][T11037] device veth0_vlan entered promiscuous mode [ 522.150293][T10843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.159867][T11037] device veth1_macvtap entered promiscuous mode [ 522.170777][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 522.180929][T10843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.510631][T11054] loop1: detected capacity change from 0 to 512 [ 522.543750][T11054] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2386: bad orphan inode 4 [ 522.553900][T11054] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.566729][T11054] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2386: Logical block already allocated [ 522.680028][T11059] loop2: detected capacity change from 0 to 1024 [ 522.719419][T11059] EXT4-fs (loop2): Test dummy encryption mode enabled [ 522.726262][T11059] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 522.737186][T11059] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 522.768765][ T30] audit: type=1107 audit(1720966654.342:901): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 522.828710][ T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: c6:12:bd:d3:18:d0 [ 522.852638][ T20] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 522.904320][ T4994] device bridge_slave_1 left promiscuous mode [ 522.911091][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.919075][ T4994] device bridge_slave_0 left promiscuous mode [ 522.925076][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.933069][ T4994] device veth1_macvtap left promiscuous mode [ 522.938989][ T4994] device veth0_vlan left promiscuous mode [ 523.207409][T11081] loop3: detected capacity change from 0 to 256 [ 523.219825][T11031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11031 comm=syz.4.2381 [ 523.252210][ T7501] usb 5-1: USB disconnect, device number 26 [ 523.293281][ T137] net eth1: rx_urb submit failed: -19 [ 524.293641][T11103] loop2: detected capacity change from 0 to 2048 [ 524.813049][T11107] loop1: detected capacity change from 0 to 40427 [ 524.846838][T11114] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.853809][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.862743][T11114] device bridge_slave_0 entered promiscuous mode [ 524.870166][T11107] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 524.877708][T11107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 524.891044][T11114] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.897896][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.910655][T11114] device bridge_slave_1 entered promiscuous mode [ 524.921287][T11107] F2FS-fs (loop1): invalid crc value [ 524.923010][T11113] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.933661][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.941899][T11107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 524.949300][T11113] device bridge_slave_0 entered promiscuous mode [ 524.994674][T11113] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.008922][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.016214][T11113] device bridge_slave_1 entered promiscuous mode [ 525.036684][T11107] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 525.054772][T11107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 525.166755][T11114] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.173660][T11114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.180735][T11114] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.187504][T11114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.240309][T11113] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.247168][T11113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.254326][T11113] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.261186][T11113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.273078][ T627] Bluetooth: hci0: Frame reassembly failed (-84) [ 525.280183][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.287861][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.295947][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.304689][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.316128][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.379032][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.387199][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.395388][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.402253][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.409533][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.417612][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.426782][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.433647][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.545831][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.558368][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.598203][ T4994] device bridge_slave_1 left promiscuous mode [ 525.605235][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.615871][ T4994] device bridge_slave_0 left promiscuous mode [ 525.623516][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.635267][ T4994] device veth1_macvtap left promiscuous mode [ 525.641596][ T4994] device veth0_vlan left promiscuous mode [ 525.985078][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.994009][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.021369][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 526.031141][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.091244][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.099636][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.107923][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.114793][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.136905][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.157777][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.176177][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.183077][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.207185][T11137] loop3: detected capacity change from 0 to 2048 [ 526.213553][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.228789][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.236572][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.258968][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.288525][T11114] device veth0_vlan entered promiscuous mode [ 526.295284][T11113] device veth0_vlan entered promiscuous mode [ 526.305822][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.314047][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.322634][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.336346][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.344728][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.353348][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.361360][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.423348][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.431646][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.439220][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.446527][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.453928][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.466910][T11114] device veth1_macvtap entered promiscuous mode [ 526.479659][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.488806][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.720196][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.727803][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.735943][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.745626][T11113] device veth1_macvtap entered promiscuous mode [ 526.772079][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.780014][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.790930][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.799864][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.808782][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.817243][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.825602][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.833755][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 526.841974][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.883014][T11145] loop4: detected capacity change from 0 to 1024 [ 526.939766][T11145] EXT4-fs (loop4): Test dummy encryption mode enabled [ 526.946473][T11145] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 526.958068][T11145] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 526.994303][ T30] audit: type=1107 audit(1720966658.572:902): pid=11144 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 527.113113][T11153] loop4: detected capacity change from 0 to 2048 [ 527.148271][T11157] loop2: detected capacity change from 0 to 256 [ 527.553377][ T7501] Bluetooth: hci0: command 0x1003 tx timeout [ 527.559294][ T4482] Bluetooth: hci0: sending frame failed (-49) [ 527.721920][ T4994] device bridge_slave_1 left promiscuous mode [ 527.738494][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.764320][ T4994] device bridge_slave_0 left promiscuous mode [ 527.779515][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.801909][ T4994] device veth1_macvtap left promiscuous mode [ 527.816574][ T4994] device veth0_vlan left promiscuous mode [ 528.265161][T11171] loop2: detected capacity change from 0 to 1024 [ 528.292237][T11173] loop3: detected capacity change from 0 to 2048 [ 528.339432][T11171] EXT4-fs (loop2): Test dummy encryption mode enabled [ 528.346137][T11171] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 528.360002][T11171] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 529.397611][T11193] loop3: detected capacity change from 0 to 256 [ 529.462481][T11196] loop2: detected capacity change from 0 to 2048 [ 529.608973][ T311] Bluetooth: hci0: command 0x1001 tx timeout [ 529.617145][ T4482] Bluetooth: hci0: sending frame failed (-49) [ 529.760658][T11199] loop0: detected capacity change from 0 to 2048 [ 529.830272][T11199] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 530.632147][T11209] loop3: detected capacity change from 0 to 2048 [ 531.502592][T11227] loop3: detected capacity change from 0 to 2048 [ 531.583607][T11229] loop4: detected capacity change from 0 to 256 [ 531.701151][ T311] Bluetooth: hci0: command 0x1009 tx timeout [ 532.670593][T11241] loop4: detected capacity change from 0 to 2048 [ 532.688129][T11246] loop0: detected capacity change from 0 to 1024 [ 532.729603][T11246] EXT4-fs (loop0): Test dummy encryption mode enabled [ 532.736277][T11246] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 532.752944][T11246] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 532.913957][T11253] IPv6: NLM_F_REPLACE set, but no existing node found! [ 533.053820][T11252] loop0: detected capacity change from 0 to 256 [ 533.444221][T11260] loop3: detected capacity change from 0 to 2048 [ 533.859173][T11266] loop2: detected capacity change from 0 to 2048 [ 534.357672][T11278] loop3: detected capacity change from 0 to 1024 [ 534.389498][T11276] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.396553][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.404125][T11276] device bridge_slave_0 entered promiscuous mode [ 534.411317][T11276] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.433797][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.441268][T11276] device bridge_slave_1 entered promiscuous mode [ 534.497782][T11286] loop3: detected capacity change from 0 to 2048 [ 534.517440][T11276] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.524310][T11276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.531430][T11276] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.538186][T11276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.838872][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.846480][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.881409][T11290] loop0: detected capacity change from 0 to 1024 [ 534.889548][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.898807][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.906806][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.925317][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.933679][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.940564][ T7501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.948133][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.956398][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.964548][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.971405][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.979310][T11290] EXT4-fs (loop0): Test dummy encryption mode enabled [ 534.989104][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.992917][T11290] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 535.051169][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.059960][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.069020][T11290] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 535.094922][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.110455][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.131371][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.154710][T11276] device veth0_vlan entered promiscuous mode [ 535.185775][T11276] device veth1_macvtap entered promiscuous mode [ 535.239268][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 535.247066][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.316900][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.331382][T11300] loop4: detected capacity change from 0 to 2048 [ 535.346625][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.371855][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.404274][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.404523][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.404902][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.405118][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.405302][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 535.405484][ T7501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 535.470728][T11305] loop3: detected capacity change from 0 to 1024 [ 535.518116][ T30] audit: type=1107 audit(1720966667.092:903): pid=11303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 535.743284][T11309] IPv6: NLM_F_REPLACE set, but no existing node found! [ 536.097994][ T4994] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 536.098019][ T4994] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 537.096744][T11314] IPv6: NLM_F_REPLACE set, but no existing node found! [ 537.189809][T11321] loop1: detected capacity change from 0 to 2048 [ 537.637506][T11331] loop0: detected capacity change from 0 to 2048 [ 538.599602][T11345] loop3: detected capacity change from 0 to 1024 [ 538.617246][T11347] loop0: detected capacity change from 0 to 2048 [ 538.717278][T11351] loop2: detected capacity change from 0 to 2048 [ 538.724206][ T4994] device bridge_slave_1 left promiscuous mode [ 538.734296][ T4994] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.749305][ T4994] device bridge_slave_0 left promiscuous mode [ 538.765511][ T4994] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.796411][ T4994] device veth1_macvtap left promiscuous mode [ 538.824631][T11353] loop3: detected capacity change from 0 to 256 [ 538.835858][T11351] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 538.846944][ T4994] device veth0_vlan left promiscuous mode [ 540.384340][T11375] IPv6: NLM_F_REPLACE set, but no existing node found! [ 540.416985][T11380] loop1: detected capacity change from 0 to 1024 [ 540.424074][T11380] EXT4-fs (loop1): Test dummy encryption mode enabled [ 540.437258][T11380] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 540.448709][T11380] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 540.611694][T11387] loop1: detected capacity change from 0 to 256 [ 540.632873][T11389] loop3: detected capacity change from 0 to 2048 [ 540.755385][T11392] loop0: detected capacity change from 0 to 2048 [ 540.778661][ T322] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 540.962223][T11392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 541.068632][ T322] usb 3-1: Using ep0 maxpacket: 32 [ 541.083944][T11398] loop4: detected capacity change from 0 to 1024 [ 541.169902][T11398] EXT4-fs (loop4): Test dummy encryption mode enabled [ 541.186790][T11398] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 541.212292][T11398] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 541.388704][ T322] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 541.401677][ T322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.423013][ T322] usb 3-1: Product: syz [ 541.460558][ T322] usb 3-1: Manufacturer: syz [ 541.465460][ T322] usb 3-1: SerialNumber: syz [ 541.476846][ T322] usb 3-1: config 0 descriptor?? [ 542.044732][T11405] loop4: detected capacity change from 0 to 40427 [ 542.098363][T11412] loop3: detected capacity change from 0 to 1024 [ 542.148185][T11405] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 542.155954][T11405] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 542.165485][T11405] F2FS-fs (loop4): invalid crc value [ 542.172422][T11405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 542.188687][ T322] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2e:dd:02:af:0a:91 [ 542.200445][ T322] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 542.203706][T11405] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 542.213151][T11405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 542.578408][T11381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11381 comm=syz.2.2455 [ 542.615591][T11342] usb 3-1: USB disconnect, device number 28 [ 542.687531][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 542.696490][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 543.479263][T11466] loop0: detected capacity change from 0 to 2048 [ 543.550998][T11466] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 543.640969][T11473] IPv6: NLM_F_REPLACE set, but no existing node found! [ 544.170032][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 545.450459][T11499] loop2: detected capacity change from 0 to 2048 [ 545.589647][T11499] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 545.765302][T11509] loop3: detected capacity change from 0 to 1024 [ 546.187133][T11501] loop0: detected capacity change from 0 to 40427 [ 546.196815][T11517] loop3: detected capacity change from 0 to 256 [ 546.208213][T11501] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 546.216039][T11501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 546.239365][T11501] F2FS-fs (loop0): invalid crc value [ 546.272639][T11501] F2FS-fs (loop0): Found nat_bits in checkpoint [ 546.374755][T11501] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 546.381849][T11501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 546.718674][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 546.813048][T11532] loop1: detected capacity change from 0 to 2048 [ 546.918232][T11536] IPv6: NLM_F_REPLACE set, but no existing node found! [ 547.045561][T11532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 547.268804][ T778] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 547.558641][ T778] usb 3-1: Using ep0 maxpacket: 32 [ 548.065556][T11549] IPv6: NLM_F_REPLACE set, but no existing node found! [ 548.219166][ T778] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 548.238337][ T778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.261827][ T778] usb 3-1: Product: syz [ 548.268840][ T778] usb 3-1: Manufacturer: syz [ 548.273333][ T778] usb 3-1: SerialNumber: syz [ 548.279273][ T778] usb 3-1: config 0 descriptor?? [ 548.944537][T11566] loop1: detected capacity change from 0 to 2048 [ 548.962354][T11340] Bluetooth: hci0: command 0x1003 tx timeout [ 548.968247][ T4482] Bluetooth: hci0: sending frame failed (-49) [ 548.998684][ T778] (unnamed net_device) (uninitialized): Assigned a random MAC address: 56:95:f1:fd:9a:df [ 549.010137][ T778] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 549.209831][T11529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11529 comm=syz.2.2484 [ 549.235067][ T293] usb 3-1: USB disconnect, device number 29 [ 549.753074][T11602] loop4: detected capacity change from 0 to 2048 [ 549.789783][T11602] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 549.928427][T11609] loop1: detected capacity change from 0 to 1024 [ 549.962399][T11609] EXT4-fs (loop1): Test dummy encryption mode enabled [ 549.969303][T11609] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 549.985887][T11609] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 550.037070][ T30] audit: type=1107 audit(1720966681.612:904): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 550.161227][T11616] loop3: detected capacity change from 0 to 2048 [ 550.369398][T11622] IPv6: NLM_F_REPLACE set, but no existing node found! [ 551.167319][T11340] Bluetooth: hci0: command 0x1001 tx timeout [ 551.179767][ T4482] Bluetooth: hci0: sending frame failed (-49) [ 551.195907][T11625] loop1: detected capacity change from 0 to 2048 [ 551.300201][T11625] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 552.517181][T11650] IPv6: NLM_F_REPLACE set, but no existing node found! [ 552.800129][T11654] loop3: detected capacity change from 0 to 2048 [ 553.188627][ T311] Bluetooth: hci0: command 0x1009 tx timeout [ 553.191780][T11662] loop2: detected capacity change from 0 to 1024 [ 553.210248][T11662] EXT4-fs (loop2): Test dummy encryption mode enabled [ 553.216872][T11662] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 553.228187][T11662] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 553.255821][ T30] audit: type=1107 audit(1720966684.842:905): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 553.258636][ T6] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 553.518613][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 553.798705][ T6] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 553.813300][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.836616][ T6] usb 5-1: Product: syz [ 553.899745][T11677] IPv6: NLM_F_REPLACE set, but no existing node found! [ 553.971405][ T6] usb 5-1: Manufacturer: syz [ 553.975909][ T6] usb 5-1: SerialNumber: syz [ 554.113685][ T6] usb 5-1: config 0 descriptor?? [ 554.255028][T11680] loop2: detected capacity change from 0 to 1024 [ 554.289646][T11680] EXT4-fs (loop2): Test dummy encryption mode enabled [ 554.296812][T11680] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 554.312527][T11680] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 554.342246][ T30] audit: type=1107 audit(1720966685.922:906): pid=11679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 554.418145][T11684] loop2: detected capacity change from 0 to 256 [ 554.585415][T11686] loop1: detected capacity change from 0 to 1024 [ 554.623690][T11686] EXT4-fs (loop1): Test dummy encryption mode enabled [ 554.646543][T11686] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 554.783578][T11686] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue. Quota mode: writeback. [ 554.809179][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: 36:11:28:23:df:e7 [ 554.811032][ T6] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 554.922926][T11700] loop3: detected capacity change from 0 to 2048 [ 555.081736][T11656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11656 comm=syz.4.2509 [ 555.124888][ T293] usb 5-1: USB disconnect, device number 27 [ 555.138652][ T137] net eth1: rx_urb submit failed: -19 [ 555.742622][T11732] loop4: detected capacity change from 0 to 2048 [ 555.827455][T11732] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 555.933883][T11742] loop3: detected capacity change from 0 to 2048 [ 555.984485][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.991502][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.003237][T11733] device bridge_slave_0 entered promiscuous mode [ 556.014420][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.028145][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.039471][T11733] device bridge_slave_1 entered promiscuous mode [ 556.203752][ T30] audit: type=1400 audit(1720966687.782:907): avc: denied { ioctl } for pid=11747 comm="syz.1.2524" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 556.290009][T11751] netlink: 'syz.1.2525': attribute type 1 has an invalid length. [ 556.297567][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 556.383138][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.390023][T11733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.397152][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.404077][T11733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.497889][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.508828][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.515976][T11754] device bridge_slave_0 entered promiscuous mode [ 556.567646][T11754] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.574533][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.581809][T11754] device bridge_slave_1 entered promiscuous mode [ 556.628600][ T30] audit: type=1400 audit(1720966688.202:908): avc: denied { read } for pid=11762 comm="syz.4.2528" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 556.660379][ T6] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 556.694618][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.701933][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.709834][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.717070][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.741777][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.749946][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.756824][T11342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.779122][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.790852][T11765] syz.4.2528[11765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.790928][T11765] syz.4.2528[11765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.798908][T11342] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.820363][T11342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.827619][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 556.835641][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 556.878303][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 556.901105][ T4994] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 556.910174][ T4994] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 556.923320][T11733] device veth0_vlan entered promiscuous mode [ 556.941852][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 556.950055][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 556.979586][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 556.986878][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.003039][T11733] device veth1_macvtap entered promiscuous mode [ 557.009183][ T30] audit: type=1400 audit(1720966688.582:909): avc: denied { read } for pid=11771 comm="syz.4.2531" path="socket:[56274]" dev="sockfs" ino=56274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 557.020324][ T6] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 557.042546][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.050930][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.058971][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 557.059842][ T30] audit: type=1400 audit(1720966688.642:910): avc: denied { read } for pid=11771 comm="syz.4.2531" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 557.066494][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 557.089114][ T30] audit: type=1400 audit(1720966688.642:911): avc: denied { open } for pid=11771 comm="syz.4.2531" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 557.097139][T11342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 557.155872][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 557.164690][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 557.330770][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 557.338526][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 557.347108][ T45] device bridge_slave_1 left promiscuous mode [ 557.353707][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.358748][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.369623][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.369788][ T45] device bridge_slave_0 left promiscuous mode [ 557.377354][ T6] usb 3-1: Product: syz [ 557.377369][ T6] usb 3-1: Manufacturer: syz [ 557.377380][ T6] usb 3-1: SerialNumber: syz [ 557.388647][T11342] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 557.392043][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.411524][ T45] device veth1_macvtap left promiscuous mode [ 557.417371][ T45] device veth0_vlan left promiscuous mode [ 557.518683][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 557.526860][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 557.534957][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.541831][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.549184][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 557.557363][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 557.565530][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.572375][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.579644][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.587489][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.595530][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.603857][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.615796][ T20] usb 3-1: USB disconnect, device number 30 [ 557.625708][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 557.633053][T11342] usb 4-1: Using ep0 maxpacket: 32 [ 557.638238][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.646417][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.657469][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.665436][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.674317][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 557.682019][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 557.689481][T11754] device veth0_vlan entered promiscuous mode [ 557.706693][ T30] audit: type=1400 audit(1720966689.282:912): avc: denied { read } for pid=11778 comm="syz.0.2532" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 557.709822][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 557.738882][ T30] audit: type=1400 audit(1720966689.282:913): avc: denied { open } for pid=11778 comm="syz.0.2532" path="/dev/ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 557.738963][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 557.773777][T11754] device veth1_macvtap entered promiscuous mode [ 557.774608][ T30] audit: type=1400 audit(1720966689.352:914): avc: denied { execute } for pid=11778 comm="syz.0.2532" path="/1/cpuacct.usage_sys" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 557.787566][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 557.803261][T11342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 557.811505][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 557.821531][T11342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 557.829939][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 557.842326][ T30] audit: type=1400 audit(1720966689.352:915): avc: denied { ioctl } for pid=11778 comm="syz.0.2532" path="/dev/ppp" dev="devtmpfs" ino=134 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 557.872858][T11342] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 557.881906][T11342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.893151][T11342] usb 4-1: config 0 descriptor?? [ 557.898859][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 557.907451][ T778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 557.908809][T11770] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 557.929872][T11342] hub 4-1:0.0: USB hub found [ 557.998791][ T30] audit: type=1400 audit(1720966689.572:916): avc: denied { create } for pid=11784 comm="syz.1.2526" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 558.105756][T11787] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2534'. [ 558.135480][T11789] loop0: detected capacity change from 0 to 16 [ 558.144666][T11789] erofs: (device loop0): mounted with root inode @ nid 36. [ 558.248672][T11342] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 558.401138][ T45] device bridge_slave_1 left promiscuous mode [ 558.407167][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.419211][ T45] device bridge_slave_0 left promiscuous mode [ 558.425251][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.433277][ T45] device veth1_macvtap left promiscuous mode [ 558.439215][ T45] device veth0_vlan left promiscuous mode [ 558.520357][T11342] hid-generic 0003:046D:C314.0010: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 558.846670][ T6] usb 4-1: USB disconnect, device number 23 [ 558.901814][T11833] loop4: detected capacity change from 0 to 256 [ 558.916448][T11837] loop1: detected capacity change from 0 to 256 [ 558.936078][T11833] FAT-fs (loop4): Directory bread(block 64) failed [ 558.942712][T11833] FAT-fs (loop4): Directory bread(block 65) failed [ 558.951057][T11833] FAT-fs (loop4): Directory bread(block 66) failed [ 558.957465][T11833] FAT-fs (loop4): Directory bread(block 67) failed [ 558.964189][T11833] FAT-fs (loop4): Directory bread(block 68) failed [ 558.970742][T11833] FAT-fs (loop4): Directory bread(block 69) failed [ 558.977123][T11833] FAT-fs (loop4): Directory bread(block 70) failed [ 558.983535][T11833] FAT-fs (loop4): Directory bread(block 71) failed [ 558.990184][T11833] FAT-fs (loop4): Directory bread(block 72) failed [ 558.996530][T11833] FAT-fs (loop4): Directory bread(block 73) failed [ 559.033830][T11843] loop0: detected capacity change from 0 to 128 [ 559.041809][ T4994] attempt to access beyond end of device [ 559.041809][ T4994] loop4: rw=1, want=1228, limit=256 [ 559.690876][T11910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2587'. [ 559.888640][ T322] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 560.026103][T11926] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 560.037654][T11926] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 560.045893][T11926] CPU: 1 PID: 11926 Comm: syz.1.2591 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 560.055701][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 560.065598][T11926] RIP: 0010:do_renameat2+0x6fd/0x1480 [ 560.070889][T11926] Code: f2 e8 67 f0 fe ff 48 89 c3 48 3d 01 f0 ff ff 72 12 e8 17 de b1 ff 41 89 de 48 8b 5c 24 18 e9 6f 05 00 00 49 89 de 49 c1 ee 03 <43> 0f b6 04 26 84 c0 0f 85 8a 07 00 00 48 89 5c 24 40 8b 1b be 00 [ 560.090330][T11926] RSP: 0018:ffffc90000967c00 EFLAGS: 00010202 [ 560.096231][T11926] RAX: 0000000000000010 RBX: 0000000000000010 RCX: 0000000000040000 [ 560.104042][T11926] RDX: ffffc90005216000 RSI: 00000000000001f7 RDI: 00000000000001f8 [ 560.111852][T11926] RBP: ffffc90000967ee0 R08: ffffffff81c09428 R09: ffffed1021efc80c [ 560.119750][T11926] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 560.127562][T11926] R13: ffffc90000967de8 R14: 0000000000000002 R15: ffff88810f7e4030 [ 560.135372][T11926] FS: 00007f152ba7e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 560.144141][T11926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.150563][T11926] CR2: 0000000000000000 CR3: 000000011353f000 CR4: 00000000003506a0 [ 560.158378][T11926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.166186][T11926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.173998][T11926] Call Trace: [ 560.177123][T11926] [ 560.179910][T11926] ? __die_body+0x62/0xb0 [ 560.184076][T11926] ? die_addr+0x9f/0xd0 [ 560.188058][T11926] ? exc_general_protection+0x311/0x4b0 [ 560.193443][T11926] ? __kasan_check_write+0x14/0x20 [ 560.198386][T11926] ? asm_exc_general_protection+0x27/0x30 [ 560.203945][T11926] ? fast_dput+0x78/0x2a0 [ 560.208110][T11926] ? do_renameat2+0x6fd/0x1480 [ 560.212744][T11926] ? fsnotify_move+0x460/0x460 [ 560.217318][T11926] ? __check_object_size+0x2ec/0x3d0 [ 560.222517][T11926] ? strncpy_from_user+0x18e/0x2d0 [ 560.227463][T11926] ? getname_flags+0x1fd/0x520 [ 560.232067][T11926] __x64_sys_renameat2+0xdd/0xf0 [ 560.237017][T11926] do_syscall_64+0x3d/0xb0 [ 560.241262][T11926] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 560.246999][T11926] RIP: 0033:0x7f152c7fcbd9 [ 560.251245][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.270686][T11926] RSP: 002b:00007f152ba7e048 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 560.278933][T11926] RAX: ffffffffffffffda RBX: 00007f152c98af60 RCX: 00007f152c7fcbd9 [ 560.286748][T11926] RDX: 0000000000000004 RSI: 0000000020000500 RDI: 0000000000000004 [ 560.294554][T11926] RBP: 00007f152c86be60 R08: 0000000000000000 R09: 0000000000000000 [ 560.302367][T11926] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 560.310176][T11926] R13: 000000000000000b R14: 00007f152c98af60 R15: 00007ffe2450ebe8 [ 560.317996][T11926] [ 560.320853][T11926] Modules linked in: [ 560.328605][T11926] ---[ end trace 05000569cc88b4b6 ]--- [ 560.333900][T11926] RIP: 0010:do_renameat2+0x6fd/0x1480 [ 560.339354][T11926] Code: f2 e8 67 f0 fe ff 48 89 c3 48 3d 01 f0 ff ff 72 12 e8 17 de b1 ff 41 89 de 48 8b 5c 24 18 e9 6f 05 00 00 49 89 de 49 c1 ee 03 <43> 0f b6 04 26 84 c0 0f 85 8a 07 00 00 48 89 5c 24 40 8b 1b be 00 [ 560.359413][T11926] RSP: 0018:ffffc90000967c00 EFLAGS: 00010202 [ 560.365406][T11926] RAX: 0000000000000010 RBX: 0000000000000010 RCX: 0000000000040000 [ 560.373667][T11926] RDX: ffffc90005216000 RSI: 00000000000001f7 RDI: 00000000000001f8 [ 560.378654][ T322] usb 5-1: Using ep0 maxpacket: 8 [ 560.388283][T11926] RBP: ffffc90000967ee0 R08: ffffffff81c09428 R09: ffffed1021efc80c [ 560.396584][T11926] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 560.404490][T11926] R13: ffffc90000967de8 R14: 0000000000000002 R15: ffff88810f7e4030 [ 560.412683][T11926] FS: 00007f152ba7e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 560.421753][T11926] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 560.428205][T11926] CR2: 00007ff30f57da6c CR3: 000000011353f000 CR4: 00000000003506b0 [ 560.436452][T11926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 560.447628][T11926] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 560.455757][T11926] Kernel panic - not syncing: Fatal exception [ 560.461899][T11926] Kernel Offset: disabled [ 560.466028][T11926] Rebooting in 86400 seconds..