last executing test programs: 4m0.049403716s ago: executing program 4 (id=6545): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4m0.048755156s ago: executing program 1 (id=6546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 3m59.90625316s ago: executing program 2 (id=6557): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x1}, 0x90) 3m59.872207984s ago: executing program 2 (id=6558): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000300)=""/94, 0x5e, 0x227) 3m59.847380446s ago: executing program 1 (id=6561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b7020000feffff7fbfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000002000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002040), 0xfffffedf, 0x10, &(0x7f0000002080), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002140)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m59.847082786s ago: executing program 3 (id=6562): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='wchan\x00') pread64(r0, 0x0, 0x0, 0x40000000009) 3m59.829090438s ago: executing program 2 (id=6564): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000018000104000000000000000002180000fe03000100000000080005"], 0x2c}}, 0x0) 3m59.81270822s ago: executing program 3 (id=6565): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0xffffffffffff8001, 0x4) 3m59.806136091s ago: executing program 4 (id=6566): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02d80d23f543af6ff1c21cb901de869d6b"}) 3m59.801479821s ago: executing program 2 (id=6567): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x101082, 0x0) write$FUSE_STATX(r0, &(0x7f0000000280)={0x130, 0x0, 0x0, {0x5, 0x7fff, 0x0, '\x00', {0x2, 0x3, 0x9, 0x9, 0x0, 0xee01, 0x4000, '\x00', 0x8, 0x1, 0x0, 0x8000, {0x8, 0x7}, {0xfffffffffffffe00, 0x1}, {0xffffffff80000000, 0x6}, {0x5, 0x73}, 0x3, 0xffffffff, 0x7ff, 0x4}}}, 0x130) 3m59.784902662s ago: executing program 4 (id=6569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd3b, 0x25dfdbfc, {0xa, 0x10, 0x0, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x40000) 3m59.776823814s ago: executing program 3 (id=6570): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)={0x28, 0x1c, 0x503, 0x40000, 0x0, "", [@nested={0x18, 0x4, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x28}], 0x1}, 0x0) 3m59.752846416s ago: executing program 0 (id=6571): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$selinux_access(r0, &(0x7f00000016c0)={'system_u:object_r:policy_config_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x2}, 0x49) 3m59.752624216s ago: executing program 2 (id=6572): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 3m59.747845397s ago: executing program 4 (id=6573): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) 3m59.726991328s ago: executing program 3 (id=6574): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f00000004c0)="452e2e7c8bd8018d531b712fc2", 0xd}], 0x1) 3m59.726695059s ago: executing program 4 (id=6575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newsa={0x154, 0x10, 0x1, 0x70bd2c, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x3, 0x0, 0x0, 0x0, 0x64}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {0x6, 0x0, 0x80, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x6, 0x2}, 0x0, 0xfffffff9, 0xa, 0x4, 0x0, 0x4b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd26, 0x0, 0x70bd27, 0xeaa}}]}, 0x154}}, 0x0) 3m59.707909651s ago: executing program 0 (id=6576): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300"}) 3m59.707847341s ago: executing program 2 (id=6577): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 3m59.682738873s ago: executing program 4 (id=6578): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}}) 3m59.668111515s ago: executing program 3 (id=6579): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') readv(r0, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) 3m36.899675918s ago: executing program 32 (id=6576): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syz_tun\x00', @random="e80300"}) 3m36.882127589s ago: executing program 33 (id=6561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xc, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b7020000feffff7fbfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000002000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002040), 0xfffffedf, 0x10, &(0x7f0000002080), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002140)="f0b9547ee7affa9daabd309a75d3", 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m36.852912662s ago: executing program 34 (id=6577): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 3m36.806265657s ago: executing program 35 (id=6579): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') readv(r0, &(0x7f0000001440)=[{0x0}, {0x0, 0x61}], 0x2) 3m36.805978727s ago: executing program 36 (id=6578): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x12, 0x7ff, 0x6}}) 3m9.262181385s ago: executing program 8 (id=6936): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_stats}) 3m9.235157028s ago: executing program 8 (id=6940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5}]}, 0x24}}, 0x20040880) 3m9.204296021s ago: executing program 8 (id=6943): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0xe0800, 0x0) read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 3m9.171099564s ago: executing program 8 (id=6949): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x2, 0x1, 0x403}, 0x20) 3m9.1204595s ago: executing program 8 (id=6956): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x2000898, &(0x7f0000000200)=ANY=[], 0xfb, 0x150c, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1ff) 3m9.026815479s ago: executing program 8 (id=6964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e86c0d85ff9782764532db", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m8.973333755s ago: executing program 5 (id=6969): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e500000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d"], 0x0, 0x5a}, 0x28) 3m8.966835875s ago: executing program 9 (id=6970): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 3m8.933281579s ago: executing program 5 (id=6973): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x29, 0x4, 0x4, 0x0, 0x0, [@mcast1, @mcast1]}, 0x28) 3m8.929764008s ago: executing program 9 (id=6974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x34}}, 0x0) 3m8.907642841s ago: executing program 6 (id=6976): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 3m8.892457312s ago: executing program 9 (id=6977): prlimit64(0x0, 0x7, &(0x7f0000000bc0)={0x0, 0x100}, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000000)=@base={0x5, 0x1, 0x6c02, 0x41}, 0x48) 3m8.880388853s ago: executing program 5 (id=6978): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010028bd7000fedbdf251d"], 0x24}, 0x1, 0x0, 0x0, 0x44895}, 0x0) 3m8.880148473s ago: executing program 7 (id=6979): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0x2b0, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x3}, {0x800000000000, 0x3, 0x1ffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x2b}, 0x2, @in=@remote, 0x0, 0x0, 0x3, 0xff, 0x2, 0x2, 0x40}, {{@in=@remote, 0x4d5, 0x24}, 0x2, @in=@empty, 0x7, 0x2, 0x3, 0x9, 0xfffffff9, 0x0, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x33}, 0x2, @in=@private=0xa010102, 0x3501, 0x2, 0x0, 0xa6, 0x0, 0x80000000, 0x7d8}, {{@in=@remote, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0x64010100, 0x3502, 0x2, 0x3, 0x7, 0x4, 0x5, 0x3c3e}]}, @migrate={0xe8, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, @in=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1, 0x0, 0x6, 0x2, 0x2}, {@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, @in6=@remote, 0x2b, 0x1, 0x0, 0x3500, 0x2, 0xa}, {@in=@broadcast, @in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xff, 0x1, 0x0, 0x3505, 0xa, 0x2}]}, @sec_ctx={0xc, 0x8, {0xff6b, 0x8, 0x1, 0xa}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3m8.869827485s ago: executing program 6 (id=6980): capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000440)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) fsmount(0xffffffffffffffff, 0x0, 0x0) 3m8.857386256s ago: executing program 5 (id=6981): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x143a42, 0xc0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)='d', 0x1}], 0x1e, 0xbdee, 0x1000) 3m8.845242827s ago: executing program 7 (id=6982): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 3m8.835566158s ago: executing program 6 (id=6983): r0 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) 3m8.835253088s ago: executing program 9 (id=6984): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sync() 3m8.82023612s ago: executing program 5 (id=6985): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @loopback={0x0, 0x1ff0000aa}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="480000000000000029000000360000002e0500000000000004010700010001070000000000000004017fc9f9fb000000000000000000000000000000c20400000005000000000000280000000000000029000000020000000002020100000000ff02000000000000000000000000000130"], 0xa0}, 0x0) 3m8.82013357s ago: executing program 7 (id=6986): r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000240)=@ethtool_ringparam={0x6cf0842e, 0x25, 0x4000007, 0x10000, 0x3, 0x415, 0x18, 0xffff62d8, 0x2}}) 3m8.806433031s ago: executing program 6 (id=6987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000240)) 3m8.787820883s ago: executing program 9 (id=6988): r0 = gettid() rt_sigqueueinfo(r0, 0x23, &(0x7f0000000240)={0x28, 0x10, 0x3}) 3m8.782404254s ago: executing program 7 (id=6989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000040001000003be8c5ee17688a8003c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xee) 3m8.781485154s ago: executing program 6 (id=6990): r0 = socket$pptp(0x18, 0x1, 0x2) getpeername(r0, 0x0, &(0x7f0000000280)) 3m8.776307815s ago: executing program 5 (id=6991): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x8, 0x1a}, 0x2) 3m8.761149936s ago: executing program 7 (id=6992): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCCONS(r0, 0x541d) 3m8.757803226s ago: executing program 6 (id=6993): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000300)) 3m8.735067468s ago: executing program 9 (id=6994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1000, 0x1, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000000000006b0afcff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m8.734779638s ago: executing program 7 (id=6995): r0 = syz_io_uring_setup(0x749f, &(0x7f0000000200)={0x0, 0xfffffffd, 0x1, 0x3, 0x234}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340), 0x0) 1m32.704723534s ago: executing program 37 (id=6991): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x8, 0x1a}, 0x2) 1m9.30640085s ago: executing program 38 (id=6993): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000300)) 2.754572061s ago: executing program 39 (id=6995): r0 = syz_io_uring_setup(0x749f, &(0x7f0000000200)={0x0, 0xfffffffd, 0x1, 0x3, 0x234}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000340), 0x0) 2.725180474s ago: executing program 40 (id=6964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e02742e86c0d85ff9782764532db", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.688022837s ago: executing program 41 (id=6994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x1000, 0x1, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000000000006b0afcff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000fcffffff8500000001000000150007000000000007000000cc0f0000bf01000000000000b702000004000000b703000000000000b704000000000000b705000000000000850000001c000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 172.832723ms ago: executing program 1 (id=6997): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000063c0)=ANY=[@ANYBLOB="64000000140001002abd70004700000064010100000000000000000000000000e00000010000000000000000000000004e2100044e230003", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="b86b6e000000000008005f00020000000a0010"], 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x4048010) 163.324004ms ago: executing program 0 (id=6996): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r0, &(0x7f00000001c0)=""/208, 0xd0, 0xa3) 100.07531ms ago: executing program 1 (id=7001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010001000000ff9f96b2dbdf2500", @ANYRES32=0x0, @ANYBLOB="068b03000000000014000300766c616e3100000000000000000000000a0001"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 95.964461ms ago: executing program 0 (id=7002): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x41, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000004c0)={0x40001000, 0x8002, 0x1000, 0xf7ffffff, 0x5, "73893a000062f0fd00000000000000710de6eb", 0x10000002, 0xda97}) 65.362764ms ago: executing program 1 (id=7003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000000002010402000000000000000a000007300001802c000180140003000000000000000000000000000000000114000400fc0100000000000000000000000000013c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a140004000000000000000000000000013c0002802c00018014000300fe80000000000000000000000000003e14000400fe8000000000000000000000000000aa0c000280050001"], 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 46.749636ms ago: executing program 0 (id=7004): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getuid() 31.914067ms ago: executing program 3 (id=6999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f00000017c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f0000001880)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0xfffff1de, 0x2000000, 0x0, 0xfffffffffffffefc, &(0x7f00000018c0), &(0x7f0000001900)}, 0x28) 6.42636ms ago: executing program 0 (id=7005): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5d45}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8800) 0s ago: executing program 1 (id=7006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x240400c4}, 0x4040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) kernel console output (not intermixed with test programs): [ T6] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 221.436861][ T6] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 221.440376][ T1834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.446402][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.462568][ T1834] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 221.480020][ T6] usb 1-1: Product: syz [ 221.484233][ T6] usb 1-1: Manufacturer: syz [ 221.489050][ T6] usb 1-1: SerialNumber: syz [ 221.490199][ T1834] usb 2-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 221.506523][ T1834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.514700][ T1834] usb 2-1: Product: syz [ 221.518968][ T1834] usb 2-1: Manufacturer: syz [ 221.523643][ T1834] usb 2-1: SerialNumber: syz [ 221.532474][ T866] udevd[866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.579888][ T1421] udevd[1421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.625680][T10340] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.4917: Invalid block bitmap block 0 in block_group 0 [ 221.639632][T10340] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.4917: Failed to acquire dquot type 0 [ 221.652005][T10340] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.4917: Freeing blocks not in datazone - block = 0, count = 4096 [ 221.667277][T10340] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.4917: Invalid inode bitmap blk 0 in block_group 0 [ 221.680154][T10340] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 221.688837][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:0: Failed to release dquot type 0 [ 221.689402][T10340] EXT4-fs (loop4): 1 orphan inode deleted [ 221.707456][T10340] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 221.716804][ T6] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 221.731411][ T1834] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 221.746275][ T1834] usb 2-1: USB disconnect, device number 98 [ 221.754411][ T6] usb 1-1: USB disconnect, device number 95 [ 221.768113][ T727] EXT4-fs (loop4): unmounting filesystem. [ 221.788962][T10343] FAT-fs (loop4): bogus number of reserved sectors [ 221.796527][T10343] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 221.815729][T10343] FAT-fs (loop4): Can't find a valid FAT filesystem [ 221.980214][ T866] udevd[866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 222.089566][ T866] udevd[866]: incorrect ext4 checksum on /dev/loop3 [ 222.098566][T10402] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4605: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 222.125517][T10402] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 222.138372][T10406] exFAT-fs (loop4): bogus sector size bits : 0 [ 222.144809][T10406] exFAT-fs (loop4): failed to read boot sector [ 222.151220][T10406] exFAT-fs (loop4): failed to recognize exfat type [ 222.269207][T10421] EXT4-fs (loop4): orphan cleanup on readonly fs [ 222.292168][T10421] ------------[ cut here ]------------ [ 222.297816][T10421] WARNING: CPU: 0 PID: 10421 at fs/ext4/xattr.c:1865 ext4_xattr_block_set+0x2749/0x2f90 [ 222.307756][T10421] Modules linked in: [ 222.311690][T10421] CPU: 0 PID: 10421 Comm: syz.4.4957 Tainted: G W syzkaller #0 [ 222.320785][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 222.331023][T10421] RIP: 0010:ext4_xattr_block_set+0x2749/0x2f90 [ 222.337380][T10421] Code: ff 48 8b 5c 24 08 48 8d 7b 28 be 08 00 00 00 e8 6d 92 ba ff f0 80 63 28 fd eb 1b e8 f1 f4 74 ff e9 8f f2 ff ff e8 e7 f4 74 ff <0f> 0b e9 8a da ff ff e8 db f4 74 ff 48 b8 00 00 00 00 00 fc ff df [ 222.357186][T10421] RSP: 0018:ffffc90001727120 EFLAGS: 00010287 [ 222.363416][T10421] RAX: ffffffff81fc7d39 RBX: ffffc90001727430 RCX: 0000000000080000 [ 222.371549][T10421] RDX: ffffc90004ea4000 RSI: 0000000000005198 RDI: 0000000000005199 [ 222.379560][T10421] RBP: ffffc900017272f8 R08: ffffc9000172725f R09: 1ffff920002e4e4b [ 222.387750][T10421] R10: dffffc0000000000 R11: fffff520002e4e4c R12: 0000000000000000 [ 222.395892][T10421] R13: 1ffff920002e4e87 R14: ffffc90001727438 R15: 1ffff920002e4e86 [ 222.404011][T10421] FS: 00007fb3643bf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 222.413082][T10421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 222.419836][T10421] CR2: 00007f1ed259cff8 CR3: 0000000155a9e000 CR4: 00000000003506b0 [ 222.428034][T10421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 222.428120][T10439] erofs: (device loop3): mounted with root inode @ nid 36. [ 222.436119][T10421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 222.451454][T10421] Call Trace: [ 222.454790][T10421] [ 222.457745][T10421] ? __getblk_gfp+0x3b/0x7c0 [ 222.462389][T10421] ? ext4_xattr_check_entries+0x342/0x3c0 [ 222.468192][T10421] ? ext4_xattr_block_find+0x330/0x330 [ 222.473709][T10421] ? ext4_xattr_block_find+0x2a5/0x330 [ 222.479224][T10421] ext4_expand_extra_isize_ea+0x121a/0x1dd0 [ 222.485207][T10421] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 222.490896][T10421] __ext4_mark_inode_dirty+0x398/0x5d0 [ 222.496454][T10421] ext4_evict_inode+0xbec/0x1450 [ 222.501472][T10421] ? __cfi_ext4_evict_inode+0x10/0x10 [ 222.506893][T10421] ? __ext4_iget+0x2dae/0x3e70 [ 222.511747][T10421] ? __cfi_ext4_evict_inode+0x10/0x10 [ 222.517167][T10421] evict+0x4c4/0x8c0 [ 222.521139][T10421] ? memset+0x35/0x40 [ 222.525157][T10421] ? proc_nr_inodes+0x2f0/0x2f0 [ 222.530084][T10421] ? _raw_spin_lock+0x94/0xf0 [ 222.534794][T10421] ? __cfi__raw_spin_lock+0x10/0x10 [ 222.540099][T10421] ? __kasan_check_write+0x14/0x20 [ 222.545250][T10421] iput+0x633/0x690 [ 222.549122][T10421] ext4_process_orphan+0x298/0x300 [ 222.554275][T10421] ext4_orphan_cleanup+0xb5d/0x1270 [ 222.559547][T10421] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 222.565249][T10421] ? errseq_check_and_advance+0x66/0x130 [ 222.570952][T10421] ext4_fill_super+0x6a53/0x73e0 [ 222.575951][T10421] ? __cfi_ext4_fill_super+0x10/0x10 [ 222.581282][T10421] ? set_blocksize+0x1cc/0x470 [ 222.586142][T10421] ? sb_set_blocksize+0xaa/0xf0 [ 222.591028][T10421] get_tree_bdev+0x450/0x6a0 [ 222.595702][T10421] ? __cfi_ext4_fill_super+0x10/0x10 [ 222.601033][T10421] ext4_get_tree+0x1c/0x20 [ 222.605516][T10421] vfs_get_tree+0x9a/0x270 [ 222.609994][T10421] do_new_mount+0x251/0xb40 [ 222.614559][T10421] ? security_capable+0x99/0xc0 [ 222.619450][T10421] path_mount+0x640/0xfd0 [ 222.623844][T10421] __se_sys_mount+0x320/0x390 [ 222.628554][T10421] ? __x64_sys_mount+0xd0/0xd0 [ 222.633387][T10421] ? do_user_addr_fault+0x9a5/0x1030 [ 222.638715][T10421] __x64_sys_mount+0xbf/0xd0 [ 222.643384][T10421] x64_sys_call+0x65d/0x9a0 [ 222.647924][T10421] do_syscall_64+0x4c/0xa0 [ 222.652500][T10421] ? clear_bhb_loop+0x30/0x80 [ 222.657239][T10421] ? clear_bhb_loop+0x30/0x80 [ 222.662013][T10421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.667939][T10421] RIP: 0033:0x7fb3635aa18a [ 222.672413][T10421] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.692074][T10421] RSP: 002b:00007fb3643bee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.700649][T10421] RAX: ffffffffffffffda RBX: 00007fb3643beee0 RCX: 00007fb3635aa18a [ 222.708725][T10421] RDX: 0000200000001ec0 RSI: 0000200000001f00 RDI: 00007fb3643beea0 [ 222.716771][T10421] RBP: 0000200000001ec0 R08: 00007fb3643beee0 R09: 000000000080078b [ 222.724775][T10421] R10: 000000000080078b R11: 0000000000000246 R12: 0000200000001f00 [ 222.732850][T10421] R13: 00007fb3643beea0 R14: 0000000000000491 R15: 0000200000001f40 [ 222.741000][T10421] [ 222.744076][T10421] ---[ end trace 0000000000000000 ]--- [ 222.750299][T10421] EXT4-fs (loop4): 1 orphan inode deleted [ 222.756346][T10421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 222.795411][T10430] loop1: p4 < > [ 222.800511][ T727] EXT4-fs (loop4): unmounting filesystem. [ 222.827567][T10451] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 222.855559][T10451] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 222.865508][T10451] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 222.876469][ T866] udevd[866]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 222.893136][T10451] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 222.902695][T10451] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 222.910518][T10451] EXT4-fs (loop0): failed to initialize system zone (-117) [ 222.918201][T10451] EXT4-fs (loop0): mount failed [ 223.022716][ T1834] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 223.116230][ T6] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 223.153533][T10482] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 223.173393][T10482] F2FS-fs (loop4): invalid crc value [ 223.181658][T10482] F2FS-fs (loop4): invalid crc value [ 223.188202][T10482] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 223.200878][ T1834] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.211126][ T1834] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x1 is Bulk; changing to Interrupt [ 223.218410][ T1090] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 223.221351][ T1834] usb 3-1: config 1 interface 0 altsetting 10 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.238594][ T1834] usb 3-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.251588][ T1834] usb 3-1: config 1 interface 0 has no altsetting 0 [ 223.266971][ T1834] usb 3-1: string descriptor 0 read error: -22 [ 223.283329][ T1834] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 223.292468][ T1834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.304252][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 223.321664][ T6] usb 2-1: not running at top speed; connect to a high speed hub [ 223.340341][ T6] usb 2-1: config 6 has an invalid interface number: 239 but max is 0 [ 223.348576][ T6] usb 2-1: config 6 has no interface number 0 [ 223.359102][ T6] usb 2-1: config 6 interface 239 has no altsetting 0 [ 223.373625][ T6] usb 2-1: New USB device found, idVendor=4841, idProduct=9cdd, bcdDevice=b2.44 [ 223.392702][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.412101][ T6] usb 2-1: Product: syz [ 223.416524][ T6] usb 2-1: Manufacturer: syz [ 223.422350][ T1090] usb 4-1: unable to get BOS descriptor or descriptor too short [ 223.440932][ T6] usb 2-1: SerialNumber: syz [ 223.446520][ T1090] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.467656][ T1090] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 223.486339][ T1090] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.494725][ T1090] usb 4-1: Product: syz [ 223.499107][ T1090] usb 4-1: Manufacturer: syz [ 223.503783][ T1090] usb 4-1: SerialNumber: syz [ 223.519105][ T1834] usb 3-1: USB disconnect, device number 104 [ 223.649762][ T6] usb-storage 2-1:6.239: USB Mass Storage device detected [ 223.706206][ T1090] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 223.714479][T10487] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(512) [ 223.726621][ T6] usb 2-1: USB disconnect, device number 99 [ 223.737979][ T1090] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 223.747925][T10487] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 223.761864][ T1090] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 223.769117][T10487] F2FS-fs (loop0): invalid crc value [ 223.789941][ T1090] usb 4-1: USB disconnect, device number 103 [ 223.806254][T10487] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.844628][T10487] F2FS-fs (loop0): Start checkpoint disabled! [ 223.851227][T10487] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 223.859028][T10487] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 223.866167][T10487] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 223.983312][ T1421] udevd[1421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 224.050619][T10498] set_capacity_and_notify: 14 callbacks suppressed [ 224.050640][T10498] loop2: detected capacity change from 0 to 16 [ 224.094163][T10498] erofs: (device loop2): mounted with root inode @ nid 36. [ 224.107257][T10500] loop0: detected capacity change from 0 to 16 [ 224.119709][T10500] erofs: (device loop0): mounted with root inode @ nid 36. [ 224.152425][T10502] loop2: detected capacity change from 0 to 16 [ 224.178265][T10502] erofs: (device loop2): mounted with root inode @ nid 36. [ 224.207038][T10508] loop1: detected capacity change from 0 to 16 [ 224.224092][T10508] erofs: (device loop1): mounted with root inode @ nid 36. [ 224.237835][T10512] loop2: detected capacity change from 0 to 512 [ 224.293884][T10521] loop0: detected capacity change from 0 to 512 [ 224.310211][T10524] loop2: detected capacity change from 0 to 512 [ 224.347226][T10521] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5002: bg 0: block 127: padding at end of block bitmap is not set [ 224.392210][T10521] EXT4-fs (loop0): Remounting filesystem read-only [ 224.401543][T10521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.5002: iget: bad extra_isize 58 (inode size 256) [ 224.432048][T10529] loop2: detected capacity change from 0 to 512 [ 224.449070][T10521] EXT4-fs (loop0): Remounting filesystem read-only [ 224.455670][T10521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.5002: error while reading EA inode 11 err=-117 [ 224.511449][T10521] EXT4-fs (loop0): Remounting filesystem read-only [ 224.532506][ T1090] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 224.551594][T10521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.5002: iget: bad extra_isize 58 (inode size 256) [ 224.570025][T10532] loop2: detected capacity change from 0 to 1024 [ 224.586971][T10521] EXT4-fs (loop0): Remounting filesystem read-only [ 224.624799][T10521] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.5002: error while reading EA inode 11 err=-117 [ 224.653512][T10521] EXT4-fs (loop0): Remounting filesystem read-only [ 224.672015][T10521] EXT4-fs (loop0): 1 orphan inode deleted [ 224.702108][T10523] loop3: detected capacity change from 0 to 40427 [ 224.720298][T10523] F2FS-fs (loop3): Image doesn't support compression [ 224.729427][T10523] F2FS-fs (loop3): invalid crc value [ 224.729697][ T1090] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.739960][T10523] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.771436][ T1090] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.799401][ T1090] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.808499][ T1090] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 224.819567][ T1090] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 224.832786][ T1090] usb 2-1: config 1 interface 1 has no altsetting 1 [ 224.847928][T10523] F2FS-fs (loop3): Start checkpoint disabled! [ 224.877507][ T1090] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 224.886730][T10523] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 224.898183][T10542] EXT4-fs mount: 12 callbacks suppressed [ 224.898200][T10542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.904518][ T1090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.930541][ T725] EXT4-fs (loop0): unmounting filesystem. [ 224.941770][T10523] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 224.950946][ T1090] usb 2-1: Product: syz [ 224.959148][ T1090] usb 2-1: Manufacturer: syz [ 224.968197][ T1090] usb 2-1: SerialNumber: syz [ 224.974155][T10544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 225.020056][T10489] F2FS-fs (loop4): Found nat_bits in checkpoint [ 225.046436][ T726] EXT4-fs (loop2): unmounting filesystem. [ 225.077454][T10553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 225.100149][T10489] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 225.174278][ T1090] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 225.185594][ T725] EXT4-fs (loop0): unmounting filesystem. [ 225.213425][ T1090] usb 2-1: USB disconnect, device number 100 [ 225.418191][ T866] udevd[866]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 225.491803][ T40] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 225.689110][ T40] usb 1-1: unable to get BOS descriptor or descriptor too short [ 225.699022][ T40] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.719092][ T40] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 225.747953][ T40] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.791764][ T40] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 225.792380][T10567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.801235][ T40] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 225.817865][ T40] usb 1-1: Product: syz [ 225.822149][ T40] usb 1-1: Manufacturer: syz [ 225.838185][ T40] uvcvideo 1-1:1.0: Found Unit with invalid ID 0 [ 225.844605][ T40] usb 1-1: Found UVC 0.00 device syz (8086:0ad2) [ 225.855325][T10567] ext4 filesystem being mounted at /943/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.864798][ T40] usb 1-1: No streaming interface found for terminal 2. [ 225.940465][ T724] EXT4-fs (loop1): unmounting filesystem. [ 225.968284][T10557] F2FS-fs (loop3): Found nat_bits in checkpoint [ 226.045850][ T40] usb 1-1: USB disconnect, device number 96 [ 226.052642][T10576] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 226.082256][T10557] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.114936][ T724] EXT4-fs (loop1): unmounting filesystem. [ 226.184021][T10559] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.274556][T10559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.395646][ T59] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 226.457047][T10588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.478661][T10588] ext4 filesystem being mounted at /856/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.527071][ T728] EXT4-fs (loop3): unmounting filesystem. [ 226.583281][ T59] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 226.602768][ T59] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.622017][ T59] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.653034][ T59] usb 2-1: config 1 has no interface number 0 [ 226.659806][ T59] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 226.675493][ T59] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 226.699790][ T59] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.718768][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.728029][T10565] F2FS-fs (loop4): Found nat_bits in checkpoint [ 226.753887][ T59] usb 2-1: Product: syz [ 226.758113][ T59] usb 2-1: Manufacturer: syz [ 226.778242][ T59] usb 2-1: SerialNumber: syz [ 226.805753][T10565] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 226.944658][ T1834] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 226.979569][ T59] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 226.995194][ T59] usb 2-1: USB disconnect, device number 101 [ 227.125702][ T1834] usb 1-1: config 10 has an invalid interface number: 8 but max is 0 [ 227.140782][ T1834] usb 1-1: config 10 has no interface number 0 [ 227.156889][ T1834] usb 1-1: config 10 interface 8 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 227.177917][ T1834] usb 1-1: config 10 interface 8 has no altsetting 0 [ 227.194335][ T1834] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=fe.e6 [ 227.213613][ T1834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.231767][ T1834] usb 1-1: Product: syz [ 227.236178][ T1834] usb 1-1: Manufacturer: syz [ 227.240801][ T1834] usb 1-1: SerialNumber: syz [ 227.462701][ T874] udevd[874]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.482119][ T1834] usb 1-1: USB disconnect, device number 97 [ 227.486344][T10603] loop4: p1 p2 p3 < p5 p6 p7 > [ 227.512463][T10603] loop4: p2 size 16775168 extends beyond EOD, truncated [ 227.543337][T10603] loop4: p5 start 4294970168 is beyond EOD, truncated [ 227.735238][ T874] udevd[874]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 227.746729][ T2181] udevd[2181]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 227.760404][ T869] udevd[869]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 227.772123][ T1421] udevd[1421]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 227.782677][ T866] udevd[866]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 227.812153][T10613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.839627][ T59] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 227.858182][ T727] EXT4-fs (loop4): unmounting filesystem. [ 228.027078][ T59] usb 2-1: unable to get BOS descriptor or descriptor too short [ 228.045000][ T59] usb 2-1: not running at top speed; connect to a high speed hub [ 228.063598][ T59] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.081780][ T59] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 228.102277][ T59] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 228.119001][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.128230][ T6] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 228.137134][ T59] usb 2-1: Product: syz [ 228.141335][ T59] usb 2-1: Manufacturer: syz [ 228.145953][ T59] usb 2-1: SerialNumber: syz [ 228.309853][ T6] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xCE, skipping [ 228.340611][ T6] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 228.361276][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.361612][ T59] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 228.369322][ T6] usb 5-1: Product: syz [ 228.369341][ T6] usb 5-1: Manufacturer: syz [ 228.415471][ T59] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 228.426033][ T6] usb 5-1: SerialNumber: syz [ 228.455101][ T59] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 228.491006][ T875] udevd[875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 228.507401][ T59] usb 2-1: USB disconnect, device number 102 [ 228.517346][T10599] F2FS-fs (loop2): Found nat_bits in checkpoint [ 228.628093][ T6] usb 5-1: MIDIStreaming interface descriptor not found [ 228.647569][ T6] usb 5-1: USB disconnect, device number 94 [ 228.661650][T10599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 228.874343][ T874] udevd[874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 229.134618][ T1801] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 229.253991][T10631] set_capacity_and_notify: 21 callbacks suppressed [ 229.254010][T10631] loop2: detected capacity change from 0 to 128 [ 229.320604][ T1801] usb 2-1: Using ep0 maxpacket: 16 [ 229.326940][ T1801] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 132, changing to 7 [ 229.358491][ T1801] usb 2-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 229.376770][ T1834] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 229.376873][ T1801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.402478][ T1801] usb 2-1: Product: syz [ 229.420957][ T1801] usb 2-1: Manufacturer: syz [ 229.425745][ T1801] usb 2-1: SerialNumber: syz [ 229.554720][ T1834] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.572373][ T1834] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 229.612193][ T1834] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 229.630962][ T1834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.636524][ T1801] usb 2-1: Can't get UAC3 power state for id 10 [ 229.646765][ T1834] usb 5-1: Product: syz [ 229.655808][ T1834] usb 5-1: Manufacturer: syz [ 229.657402][ T1801] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 229.665415][ T1834] usb 5-1: SerialNumber: syz [ 229.684217][ T1834] usb-storage 5-1:1.0: USB Mass Storage device detected [ 229.698872][ T1801] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 229.703125][ T1834] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 229.725207][ T1801] usb 2-1: USB disconnect, device number 103 [ 229.760063][ T1834] scsi host1: usb-storage 5-1:1.0 [ 229.883707][ T1090] usb 5-1: USB disconnect, device number 95 [ 230.085940][T10619] loop0: detected capacity change from 0 to 262144 [ 230.154118][T10642] loop1: detected capacity change from 0 to 1024 [ 230.188546][T10642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 230.203336][T10621] loop3: detected capacity change from 0 to 262144 [ 230.284140][T10651] loop0: detected capacity change from 0 to 512 [ 230.292393][ T724] EXT4-fs (loop1): unmounting filesystem. [ 230.348479][T10651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 230.402982][ T725] EXT4-fs (loop0): unmounting filesystem. [ 230.474415][T10647] loop3: detected capacity change from 0 to 40427 [ 230.478202][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 230.478254][ T28] audit: type=1400 audit(1700524334.882:328): avc: denied { write } for pid=10665 comm="syz.1.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 230.513825][T10647] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 230.531580][ T59] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 230.539490][T10647] F2FS-fs (loop3): invalid crc value [ 230.570103][T10647] F2FS-fs (loop3): invalid crc value [ 230.570115][T10672] netlink: 'syz.1.5054': attribute type 49 has an invalid length. [ 230.572957][T10671] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 230.575462][T10647] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 230.645212][ T28] audit: type=1400 audit(1700524335.065:329): avc: denied { ioctl } for pid=10678 comm="syz.4.5058" path="socket:[44749]" dev="sockfs" ino=44749 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.708693][ T28] audit: type=1400 audit(1700524335.097:330): avc: denied { getopt } for pid=10681 comm="syz.1.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.715152][ T59] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 230.812543][ T59] usb 3-1: config 0 has no interface number 0 [ 230.818711][ T59] usb 3-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 0 [ 230.836739][T10696] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 230.849090][T10694] Driver unsupported XDP return value 0 on prog (id 477) dev N/A, expect packet loss! [ 230.867608][ T59] usb 3-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 12336, setting to 8 [ 230.886216][ T59] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 230.922172][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.950444][ T59] usb 3-1: config 0 descriptor?? [ 230.981226][T10706] futex_wake_op: syz.0.5072 tries to shift op by 144; fix this program [ 231.003163][T10706] futex_wake_op: syz.0.5072 tries to shift op by 144; fix this program [ 231.025324][ T6] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 231.061110][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5076'. [ 231.104126][T10719] netlink: 'syz.3.5079': attribute type 16 has an invalid length. [ 231.120942][T10719] netlink: 'syz.3.5079': attribute type 17 has an invalid length. [ 231.154574][ T59] usb 3-1: string descriptor 0 read error: -71 [ 231.167466][ T59] ftdi_sio 3-1:0.60: FTDI USB Serial Device converter detected [ 231.188984][ T59] usb 3-1: Detected SIO [ 231.202772][ T59] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 231.229025][ T59] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 231.250422][ T59] usb 3-1: USB disconnect, device number 105 [ 231.252159][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.276530][ T59] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 231.287586][ T28] audit: type=1326 audit(1700524335.763:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10735 comm="syz.3.5087" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f089a8f19 code=0x0 [ 231.297730][ T59] ftdi_sio 3-1:0.60: device disconnected [ 231.319759][ T6] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 231.368151][ T6] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 231.398333][ T6] usb 5-1: Product: syz [ 231.398358][ T6] usb 5-1: Manufacturer: syz [ 231.449959][ T28] audit: type=1400 audit(1700524335.924:332): avc: denied { block_suspend } for pid=10748 comm="syz.0.5093" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.539265][T10769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.601783][ T1801] usb 5-1: USB disconnect, device number 96 [ 231.628603][T10789] xt_bpf: check failed: parse error [ 231.702023][ T28] audit: type=1326 audit(1700524336.203:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.2.5124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed17a8f19 code=0x7ffc0000 [ 231.727560][T10812] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5125'. [ 231.737612][T10812] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5125'. [ 231.770516][ T28] audit: type=1326 audit(1700524336.224:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.2.5124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed17a8f19 code=0x7ffc0000 [ 231.811309][ T28] audit: type=1326 audit(1700524336.224:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.2.5124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed17a8f19 code=0x7ffc0000 [ 231.838904][T10823] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5131'. [ 231.848205][T10828] loop1: detected capacity change from 0 to 256 [ 231.859268][ T28] audit: type=1326 audit(1700524336.224:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.2.5124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f1ed17a8f19 code=0x7ffc0000 [ 231.878396][T10828] exfat: Deprecated parameter 'utf8' [ 231.893738][T10828] exfat: Deprecated parameter 'namecase' [ 231.899466][T10828] exfat: Deprecated parameter 'namecase' [ 231.905460][T10828] exfat: Deprecated parameter 'utf8' [ 231.911714][ T28] audit: type=1326 audit(1700524336.224:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10807 comm="syz.2.5124" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed17a8f19 code=0x7ffc0000 [ 231.934168][T10828] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 231.955393][T10833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5135'. [ 231.973287][T10833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5135'. [ 232.018023][T10844] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5140'. [ 232.060342][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5146'. [ 232.108272][T10865] loop0: detected capacity change from 0 to 256 [ 232.124373][T10865] exfat: Deprecated parameter 'utf8' [ 232.138228][T10865] exfat: Deprecated parameter 'utf8' [ 232.150160][T10865] exfat: Deprecated parameter 'utf8' [ 232.174429][T10865] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 232.275226][T10900] netlink: 'syz.0.5168': attribute type 1 has an invalid length. [ 232.283567][T10898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5167'. [ 232.367462][T10922] kernel profiling enabled (shift: 9) [ 232.430590][T10942] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 232.460229][T10936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5189'. [ 232.572285][T10974] netlink: 'syz.1.5205': attribute type 3 has an invalid length. [ 232.596272][T10981] xt_l2tp: v2 doesn't support IP mode [ 232.705930][T11008] netlink: 'syz.1.5219': attribute type 2 has an invalid length. [ 232.758499][ T1801] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 232.824287][T11038] netlink: 'syz.1.5235': attribute type 16 has an invalid length. [ 232.840750][T11038] netlink: 'syz.1.5235': attribute type 17 has an invalid length. [ 232.864452][T11038] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.882518][T11044] loop2: detected capacity change from 0 to 4096 [ 232.889737][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.920135][T11044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 232.964801][ T726] EXT4-fs (loop2): unmounting filesystem. [ 232.970826][ T1801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.001693][ T1801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.033066][ T1801] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 233.047911][ T1801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.059062][ T1801] usb 1-1: Product: syz [ 233.063275][ T1801] usb 1-1: Manufacturer: syz [ 233.069369][ T1801] usb 1-1: SerialNumber: syz [ 233.085444][ T1801] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 233.191705][T11106] tipc: Can't bind to reserved service type 1 [ 233.235253][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.247132][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.263414][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.281450][T10954] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 233.296661][ T1801] usb 1-1: USB disconnect, device number 98 [ 233.401274][ T24] usb 5-1: new low-speed USB device number 97 using dummy_hcd [ 233.448122][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.573825][T11200] loop1: detected capacity change from 0 to 256 [ 233.580990][ T24] usb 5-1: config 0 has an invalid interface number: 60 but max is 0 [ 233.596319][ T24] usb 5-1: config 0 has no interface number 0 [ 233.607786][ T24] usb 5-1: config 0 interface 60 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 0 [ 233.638104][ T24] usb 5-1: config 0 interface 60 altsetting 0 endpoint 0xB has invalid maxpacket 12336, setting to 8 [ 233.649311][ T24] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01bb, bcdDevice= 0.11 [ 233.664311][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.676892][ T24] usb 5-1: config 0 descriptor?? [ 233.708317][ T1834] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.874843][ T24] usb 5-1: string descriptor 0 read error: -71 [ 233.885066][ T24] ftdi_sio 5-1:0.60: FTDI USB Serial Device converter detected [ 233.894951][ T1090] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 233.903418][ T24] usb 5-1: Detected SIO [ 233.908046][ T24] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 9 [ 233.916270][ T24] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 233.937396][ T24] usb 5-1: USB disconnect, device number 97 [ 233.946203][T11274] x_tables: unsorted underflow at hook 4 [ 233.952497][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.980374][ T24] ftdi_sio 5-1:0.60: device disconnected [ 234.011555][T11287] loop0: detected capacity change from 0 to 512 [ 234.035252][T11287] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 234.093747][ T1090] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 234.112606][ T1090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.128557][ T1090] usb 2-1: Product: syz [ 234.135346][ T1090] usb 2-1: Manufacturer: syz [ 234.140536][ T1090] usb 2-1: SerialNumber: syz [ 234.194787][T11317] usb usb1: usbfs: process 11317 (syz.0.5367) did not claim interface 0 before use [ 234.236328][T11325] netlink: 'syz.2.5371': attribute type 4 has an invalid length. [ 234.360068][ T1090] usb 2-1: USB disconnect, device number 104 [ 237.025448][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 238.327930][T11385] device bridge1 entered promiscuous mode [ 238.418113][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 238.418132][ T28] audit: type=1400 audit(1700524343.405:400): avc: denied { ioctl } for pid=11402 comm="syz.2.5410" path="/dev/input/event1" dev="devtmpfs" ino=261 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 238.510548][T11418] ÿ: renamed from bond_slave_0 [ 238.524920][T11414] __nla_validate_parse: 9 callbacks suppressed [ 238.524939][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5416'. [ 238.566794][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5419'. [ 238.676158][ T28] audit: type=1400 audit(1700524343.674:401): avc: denied { write } for pid=11439 comm="syz.3.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.719859][T11446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5431'. [ 238.735661][ T28] audit: type=1400 audit(1700524343.749:402): avc: denied { ioctl } for pid=11448 comm="syz.3.5433" path="socket:[47093]" dev="sockfs" ino=47093 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.800073][T11458] loop2: detected capacity change from 0 to 256 [ 238.813004][ T28] audit: type=1400 audit(1700524343.813:403): avc: denied { getopt } for pid=11459 comm="syz.3.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.854035][T11471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5442'. [ 238.858247][ T28] audit: type=1400 audit(1700524343.867:404): avc: denied { audit_control } for pid=11468 comm="syz.4.5443" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 238.933971][T11484] netlink: 'syz.1.5449': attribute type 3 has an invalid length. [ 238.942896][T11487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.973140][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5452'. [ 239.003154][T11488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5452'. [ 239.040106][ T28] audit: type=1400 audit(1700524344.081:405): avc: denied { module_request } for pid=11503 comm="syz.4.5462" kmod="crypto-cryptd(__generic-gcm-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 239.083708][ T28] audit: type=1400 audit(1700524344.103:406): avc: granted { setsecparam } for pid=11510 comm="syz.0.5463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 239.328379][T11569] netlink: 'syz.1.5492': attribute type 29 has an invalid length. [ 239.345247][T11569] netlink: 'syz.1.5492': attribute type 29 has an invalid length. [ 239.362291][T11573] netlink: 'syz.2.5494': attribute type 28 has an invalid length. [ 239.415299][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5500'. [ 239.415329][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5500'. [ 239.415374][ T28] audit: type=1400 audit(1700524344.479:407): avc: denied { getopt } for pid=11582 comm="syz.0.5501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.523730][T11608] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5512'. [ 239.599832][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5521'. [ 239.646057][ T28] audit: type=1400 audit(1700524344.725:408): avc: denied { getopt } for pid=11636 comm="syz.1.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.693496][T11645] loop3: detected capacity change from 0 to 256 [ 239.735324][ T28] audit: type=1400 audit(1700524344.822:409): avc: denied { unmount } for pid=728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 239.772404][T11657] overlayfs: unrecognized mount option "\" or missing value [ 239.797880][T11661] x_tables: duplicate underflow at hook 4 [ 239.818363][T11666] x_tables: unsorted entry at hook 2 [ 239.941853][T11699] bridge0: port 3(gretap0) entered blocking state [ 239.953869][T11699] bridge0: port 3(gretap0) entered disabled state [ 239.961708][T11699] device gretap0 entered promiscuous mode [ 239.969019][T11699] bridge0: port 3(gretap0) entered blocking state [ 239.975546][T11699] bridge0: port 3(gretap0) entered forwarding state [ 239.984467][T11707] loop2: detected capacity change from 0 to 16 [ 240.018316][T11707] erofs: (device loop2): mounted with root inode @ nid 36. [ 240.041546][T11717] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 240.144470][T11743] netlink: 'syz.4.5578': attribute type 1 has an invalid length. [ 240.177153][T11748] device veth2 entered promiscuous mode [ 240.199532][T11746] tc_dump_action: action bad kind [ 240.320624][T11775] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 240.476350][T11808] device syz_tun entered promiscuous mode [ 240.488591][T11808] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 240.563773][T11820] loop4: detected capacity change from 0 to 256 [ 240.665007][T11761] loop3: detected capacity change from 0 to 40427 [ 240.694223][T11761] F2FS-fs (loop3): invalid crc value [ 240.725174][T11761] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.784524][T11865] loop4: detected capacity change from 0 to 256 [ 240.871553][T11761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 240.967066][T11761] syz.3.5589: attempt to access beyond end of device [ 240.967066][T11761] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 241.023725][T11911] loop2: detected capacity change from 0 to 256 [ 241.066062][T11911] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 241.088995][T11922] ip6t_rpfilter: unknown options [ 241.111106][T11924] printk: syz.0.5665 (11924): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 241.294992][T11947] loop2: detected capacity change from 0 to 256 [ 241.421602][T11967] sch_fq: defrate 65536 ignored. [ 241.478991][T11981] netlink: 'syz.0.5691': attribute type 6 has an invalid length. [ 241.492970][T11983] loop3: detected capacity change from 0 to 128 [ 241.523906][T11983] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 241.557111][T11983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 241.572676][T11983] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.5693: checksumming directory block 0 [ 241.616836][T12012] SELinux: Context ›Y7»ôj is not valid (left unmapped). [ 241.654547][ T728] EXT4-fs (loop3): unmounting filesystem. [ 241.790919][T12055] netlink: 'syz.4.5727': attribute type 3 has an invalid length. [ 241.802106][T12057] binder: 12053:12057 ioctl 40046205 0 returned -22 [ 241.922904][T12091] loop1: detected capacity change from 0 to 256 [ 241.942761][T12093] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 241.948520][T12091] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 241.976659][T12091] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 241.987536][T12093] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 242.142438][T12135] netlink: 'syz.2.5768': attribute type 9 has an invalid length. [ 242.228166][T12152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.257209][T12152] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.266087][T12152] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 242.460721][T12191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.495565][T12191] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 242.524268][T12191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 242.533041][T12191] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 242.542658][T12191] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 242.551994][T12191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 242.564769][T12191] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.5797: dx entry: limit 65535 != root limit 120 [ 242.577032][T12191] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5797: Corrupt directory, running e2fsck is recommended [ 242.599490][ T728] EXT4-fs (loop3): unmounting filesystem. [ 242.743652][T12259] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 242.789100][T12266] binder: 12265:12266 ioctl c0306201 200000000a40 returned -22 [ 242.920318][T12301] device veth3 entered promiscuous mode [ 243.041055][T12337] x_tables: ip_tables: hashlimit.1 match: invalid size 56 (kernel) != (user) 616 [ 243.079970][T12345] syz.1.5873 (12345): /proc/12344/oom_adj is deprecated, please use /proc/12344/oom_score_adj instead. [ 243.132834][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 243.132852][ T28] audit: type=1400 audit(1700524348.472:555): avc: denied { execmem } for pid=12356 comm="syz.4.5879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 243.162760][ T28] audit: type=1400 audit(1700524348.472:556): avc: denied { mmap_zero } for pid=12356 comm="syz.4.5879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 243.200517][ T28] audit: type=1326 audit(1700524348.525:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.5883" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb73fa8f19 code=0x7ffc0000 [ 243.228298][ T28] audit: type=1326 audit(1700524348.525:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.5883" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb73fa8f19 code=0x7ffc0000 [ 243.228335][ T28] audit: type=1326 audit(1700524348.525:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.5883" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb73fa8f19 code=0x7ffc0000 [ 243.228366][ T28] audit: type=1326 audit(1700524348.525:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.5883" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fdb73fa8f19 code=0x7ffc0000 [ 243.228394][ T28] audit: type=1326 audit(1700524348.525:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.5883" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb73fa8f19 code=0x7ffc0000 [ 243.228423][ T28] audit: type=1326 audit(1700524348.525:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.5883" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdb73fa8f19 code=0x7ffc0000 [ 243.228451][ T28] audit: type=1326 audit(1700524348.525:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12362 comm="syz.1.5883" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb73fa8f19 code=0x7ffc0000 [ 243.276853][T12375] xt_hashlimit: max too large, truncated to 1048576 [ 243.279539][ T28] audit: type=1400 audit(1700524348.600:564): avc: denied { setcurrent } for pid=12372 comm="syz.1.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 243.433243][T12386] xt_hashlimit: max too large, truncated to 1048576 [ 243.441407][T12386] xt_hashlimit: invalid interval [ 243.480120][T12398] x_tables: unsorted underflow at hook 2 [ 243.642413][T12439] set_capacity_and_notify: 1 callbacks suppressed [ 243.642432][T12439] loop2: detected capacity change from 0 to 128 [ 243.758356][T12463] __nla_validate_parse: 20 callbacks suppressed [ 243.758377][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5930'. [ 243.784750][T12463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5930'. [ 243.820864][T12475] loop4: detected capacity change from 0 to 256 [ 243.987957][T12504] netlink: 'syz.0.5950': attribute type 5 has an invalid length. [ 244.010945][T12512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 244.032233][T12507] netlink: 'syz.4.5953': attribute type 1 has an invalid length. [ 244.097812][T12520] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 244.128666][T12526] loop2: detected capacity change from 0 to 2048 [ 244.136031][T12526] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.194194][T12526] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 244.206167][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5968'. [ 244.216674][T12543] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5968'. [ 244.232699][T12547] loop4: detected capacity change from 0 to 256 [ 244.239323][T12526] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #15: comm syz.2.5961: inline data xattr refers to an external xattr inode [ 244.254095][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5971'. [ 244.289405][T12547] exfat: Deprecated parameter 'utf8' [ 244.318404][T12547] exfat: Deprecated parameter 'namecase' [ 244.328110][T12564] x_tables: unsorted entry at hook 3 [ 244.332151][T12526] EXT4-fs (loop2): Remounting filesystem read-only [ 244.348823][T12547] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 244.385324][ T726] EXT4-fs (loop2): unmounting filesystem. [ 244.403415][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.445047][T12581] device xfrm0 entered promiscuous mode [ 244.513915][T12596] xt_bpf: check failed: parse error [ 244.814241][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6028'. [ 244.841633][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6028'. [ 244.861884][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6028'. [ 244.883458][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6028'. [ 244.903107][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6028'. [ 244.939342][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.946633][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.947974][T12637] loop1: detected capacity change from 0 to 40427 [ 244.969431][T12637] F2FS-fs (loop1): invalid crc value [ 245.008372][T12637] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.106014][T12637] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 245.155248][T12637] syz.1.6015: attempt to access beyond end of device [ 245.155248][T12637] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.196530][T12708] xt_limit: Overflow, try lower: 2147483649/3300 [ 245.791564][T12855] loop4: detected capacity change from 0 to 512 [ 245.836959][T12855] EXT4-fs (loop4): orphan cleanup on readonly fs [ 245.845348][T12855] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 245.863382][T12855] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 245.900995][T12855] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.6116: attempt to clear invalid blocks 2 len 1 [ 245.928368][T12855] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6116: invalid indirect mapped block 1819239214 (level 0) [ 245.967618][T12855] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.6116: invalid indirect mapped block 1819239214 (level 1) [ 246.012088][T12855] EXT4-fs (loop4): 1 truncate cleaned up [ 246.028983][T12855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.078130][T12855] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 246.105710][T12855] EXT4-fs error (device loop4): __ext4_remount:6637: comm syz.4.6116: Abort forced by user [ 246.134619][T12855] EXT4-fs (loop4): Remounting filesystem read-only [ 246.144874][T12855] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 246.152005][T12913] netlink: 'syz.0.6146': attribute type 10 has an invalid length. [ 246.176670][ T727] EXT4-fs (loop4): unmounting filesystem. [ 246.273235][T12934] x_tables: duplicate entry at hook 3 [ 246.339271][T12953] loop0: detected capacity change from 0 to 512 [ 246.344230][T12941] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.352658][T12941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.360054][T12941] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.363270][T12953] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.367107][T12941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.381009][T12941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.389762][T12941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.397310][ T6] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 246.415791][T12953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.427260][T12953] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 246.428441][T12941] device xfrm0 left promiscuous mode [ 246.448379][T12947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.472127][ T1801] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.480650][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.499120][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 246.509205][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.527691][T12961] tipc: Trying to set illegal importance in message [ 246.527923][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 246.558381][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.574238][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.582457][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 246.589023][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.604574][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.612682][ T6] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 246.623140][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.631312][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 246.641594][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 246.649781][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.663441][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.686915][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.705135][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.713754][ T6] usb 2-1: SerialNumber: syz [ 246.722550][T12911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.740113][ T6] hub 2-1:1.0: bad descriptor, ignoring hub [ 246.746737][ T6] hub: probe of 2-1:1.0 failed with error -5 [ 246.760920][ T6] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 246.871834][T13002] xt_TCPMSS: Only works on TCP SYN packets [ 246.886928][T12971] loop2: detected capacity change from 0 to 40427 [ 246.908326][T12971] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 246.917268][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.928141][T12971] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 246.957779][T12971] F2FS-fs (loop2): Found nat_bits in checkpoint [ 247.030058][T12971] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 247.041943][T12971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.049940][ T6] usb 2-1: USB disconnect, device number 105 [ 247.066532][T13030] loop3: detected capacity change from 0 to 512 [ 247.110317][T13030] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.6202: bad orphan inode 256 [ 247.121427][T13030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.131093][T13030] ext4 filesystem being mounted at /1094/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.161759][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.169374][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.177403][ T728] EXT4-fs (loop3): unmounting filesystem. [ 247.379745][T13088] loop3: detected capacity change from 0 to 1024 [ 247.422532][T13088] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 247.453990][T13088] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 247.495124][T13088] jbd2_journal_init_inode: Cannot locate journal superblock [ 247.513138][T13088] EXT4-fs (loop3): Could not load journal inode [ 247.655602][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.805529][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 247.805547][ T28] audit: type=1400 audit(1700524353.484:627): avc: denied { compute_member } for pid=13172 comm="syz.2.6271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 247.894480][ T28] audit: type=1400 audit(1700524353.581:628): avc: denied { bind } for pid=13190 comm="syz.2.6281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.958496][ T28] audit: type=1326 audit(1700524353.635:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.6284" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3519fa8f19 code=0x7ffc0000 [ 247.987485][T13196] FAT-fs (loop3): Directory bread(block 64) failed [ 248.003986][T13196] FAT-fs (loop3): Directory bread(block 65) failed [ 248.021777][T13196] FAT-fs (loop3): Directory bread(block 66) failed [ 248.041144][T13196] FAT-fs (loop3): Directory bread(block 67) failed [ 248.048094][ T28] audit: type=1326 audit(1700524353.635:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.6284" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3519fa8f19 code=0x7ffc0000 [ 248.078261][T13196] FAT-fs (loop3): Directory bread(block 68) failed [ 248.092352][T13196] FAT-fs (loop3): Directory bread(block 69) failed [ 248.103858][T13196] FAT-fs (loop3): Directory bread(block 70) failed [ 248.117835][T13196] FAT-fs (loop3): Directory bread(block 71) failed [ 248.124627][ T28] audit: type=1326 audit(1700524353.635:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.6284" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3519fa8f19 code=0x7ffc0000 [ 248.150333][T13196] FAT-fs (loop3): Directory bread(block 72) failed [ 248.156910][T13196] FAT-fs (loop3): Directory bread(block 73) failed [ 248.173593][ T28] audit: type=1326 audit(1700524353.635:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.6284" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f3519fa8f19 code=0x7ffc0000 [ 248.236013][ T28] audit: type=1326 audit(1700524353.635:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.6284" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3519fa8f19 code=0x7ffc0000 [ 248.274139][T13221] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 248.291787][ T28] audit: type=1326 audit(1700524353.635:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.6284" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3519fa8f19 code=0x7ffc0000 [ 248.332673][ T28] audit: type=1326 audit(1700524353.635:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13195 comm="syz.0.6284" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3519fa8f19 code=0x7ffc0000 [ 248.411418][T13237] netlink: 'syz.4.6301': attribute type 30 has an invalid length. [ 248.418742][ T28] audit: type=1400 audit(1700524353.645:636): avc: denied { write } for pid=13200 comm="syz.1.6286" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.448638][T13241] __nla_validate_parse: 27 callbacks suppressed [ 248.448660][T13241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6304'. [ 248.506287][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6310'. [ 248.707109][T13289] device-mapper: ioctl: Unable to rename non-existent device, syza1 to uuid LVM-syza3 [ 248.762516][T13297] netlink: 'syz.0.6332': attribute type 1 has an invalid length. [ 248.768904][T13299] x_tables: duplicate underflow at hook 3 [ 248.824487][T13308] device ipip0 entered promiscuous mode [ 249.002090][T13347] xt_l2tp: missing protocol rule (udp|l2tpip) [ 249.244070][T13409] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 249.342018][T13431] set_capacity_and_notify: 3 callbacks suppressed [ 249.342038][T13431] loop4: detected capacity change from 0 to 256 [ 249.564941][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6415'. [ 249.600437][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6415'. [ 249.630305][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6415'. [ 249.667325][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6415'. [ 249.678445][T13489] sch_tbf: peakrate 235 is lower than or equals to rate 12507234563984919751 ! [ 249.886001][T13465] loop3: detected capacity change from 0 to 40427 [ 249.914989][T13465] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 249.937705][T13465] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 249.987940][T13465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 250.095209][T13465] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 250.105512][T13465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 250.113277][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6451'. [ 250.149971][T13543] device veth1 entered promiscuous mode [ 250.172093][T13543] netlink: 'syz.2.6451': attribute type 8 has an invalid length. [ 250.190021][T13543] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 250.310828][T13559] device xfrm0 entered promiscuous mode [ 250.349577][T13563] IPv6: sit2: Disabled Multicast RS [ 250.369204][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6456'. [ 250.450657][ T6] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 250.599909][ T19] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.618378][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 250.624693][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.647299][ T6] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.669397][T13643] loop3: detected capacity change from 0 to 128 [ 250.674028][ T6] usb 5-1: config 1 interface 0 has no altsetting 0 [ 250.692778][T13647] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6503'. [ 250.701506][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.729891][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.730779][T13643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 250.738030][ T6] usb 5-1: Product: syz [ 250.738051][ T6] usb 5-1: Manufacturer: syz [ 250.738068][ T6] usb 5-1: SerialNumber: syz [ 250.779873][T13643] ext4 filesystem being mounted at /1141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.796770][T13663] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6509'. [ 250.811334][T13643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.6501: bg 0: bad block bitmap checksum [ 250.873718][ T728] EXT4-fs (loop3): unmounting filesystem. [ 250.906977][ T1090] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.928379][T13685] xt_socket: unknown flags 0xc [ 250.953710][ T6] cdc_ether 5-1:1.0: skipping garbage [ 250.959146][ T6] cdc_ether 5-1:1.0: skipping garbage [ 250.973721][ T6] cdc_ether 5-1:1.0: skipping garbage [ 250.979169][ T6] usb 5-1: bad CDC descriptors [ 251.002270][ T6] usb 5-1: USB disconnect, device number 98 [ 251.114973][T13716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.122522][T13716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.171532][T13716] device ipip0 left promiscuous mode [ 251.186873][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 251.190053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 251.214768][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.224488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.249556][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 251.269807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.288371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.304146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.312616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.320992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.329603][T13705] loop1: detected capacity change from 0 to 40427 [ 251.338632][T13705] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 251.346686][T13705] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 251.357468][T13705] F2FS-fs (loop1): Found nat_bits in checkpoint [ 251.392364][T13705] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 251.399500][T13705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.588416][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.721229][T13787] netlink: 'syz.3.6570': attribute type 15 has an invalid length. [ 251.764415][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.785274][ T59] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.586250][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.910998][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.490078][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.533912][ T1834] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.929244][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 274.929262][ T28] audit: type=1400 audit(1700524388.589:722): avc: denied { mounton } for pid=13811 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 274.963438][ T28] audit: type=1400 audit(1700524388.610:723): avc: denied { create } for pid=13813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 275.058172][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.065252][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.072799][T13811] device bridge_slave_0 entered promiscuous mode [ 275.097117][T13811] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.104371][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.111887][T13811] device bridge_slave_1 entered promiscuous mode [ 275.211024][T13812] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.218227][T13812] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.225856][T13812] device bridge_slave_0 entered promiscuous mode [ 275.235569][T13812] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.242640][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.250168][T13812] device bridge_slave_1 entered promiscuous mode [ 275.273561][T13815] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.280753][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.288160][T13815] device bridge_slave_0 entered promiscuous mode [ 275.295343][T13815] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.302604][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.310138][T13815] device bridge_slave_1 entered promiscuous mode [ 275.321662][T13813] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.328849][T13813] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.336414][T13813] device bridge_slave_0 entered promiscuous mode [ 275.362532][T13813] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.369667][T13813] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.377274][T13813] device bridge_slave_1 entered promiscuous mode [ 275.396811][T13814] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.404157][T13814] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.411677][T13814] device bridge_slave_0 entered promiscuous mode [ 275.438997][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.446071][T13814] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.453576][T13814] device bridge_slave_1 entered promiscuous mode [ 275.578782][ T28] audit: type=1400 audit(1700524389.275:724): avc: denied { read } for pid=13811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.630452][T13812] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.637550][T13812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.644858][T13812] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.651879][T13812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.674930][ T8] device bridge_slave_1 left promiscuous mode [ 275.681093][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.689278][ T8] device veth1_macvtap left promiscuous mode [ 275.695415][ T8] device veth0_vlan left promiscuous mode [ 275.946326][T13811] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.953433][T13811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.960713][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.967792][T13811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.978546][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.985996][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.993603][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.001339][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.071890][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.079643][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.090600][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.098731][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.130925][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.138605][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.146042][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.154975][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.164944][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.172008][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.179651][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.188173][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.196565][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.203615][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.211217][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.218849][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.226336][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.234413][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.242923][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.251262][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.258294][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.265768][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.274386][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.282705][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.289781][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.297323][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.304765][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.312356][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.320729][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.328968][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.336008][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.343426][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.351692][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.388054][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.396580][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.405046][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.412151][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.419863][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.428230][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.436401][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.444477][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.452636][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.461103][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.469552][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.476651][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.484493][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.492856][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.500981][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.508051][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.515440][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.523996][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.532290][ T963] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.539333][ T963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.546695][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.555304][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.563584][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.570632][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.578135][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.586197][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.594187][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.601981][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.622459][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.630544][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.639020][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.662921][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.671316][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.679110][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.686639][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.695070][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.703536][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.713351][T13812] device veth0_vlan entered promiscuous mode [ 276.721301][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.729441][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.738755][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.746774][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.764108][T13811] device veth0_vlan entered promiscuous mode [ 276.771335][T13812] device veth1_macvtap entered promiscuous mode [ 276.783269][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.791923][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.800812][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.841173][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.849744][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.858985][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.867480][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.876234][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.884738][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.894961][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.902704][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.914646][T13811] device veth1_macvtap entered promiscuous mode [ 276.922071][T13815] device veth0_vlan entered promiscuous mode [ 276.944884][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.955979][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.966502][T13814] device veth0_vlan entered promiscuous mode [ 276.985397][T13813] device veth0_vlan entered promiscuous mode [ 276.993734][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.002033][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.010545][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.019702][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.028542][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.037219][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.045962][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.054167][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.062506][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.070215][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.077690][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.085420][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.096822][T13814] device veth1_macvtap entered promiscuous mode [ 277.098602][ T28] audit: type=1400 audit(1700524390.906:725): avc: denied { mounton } for pid=13812 comm="syz-executor" path="/root/syzkaller.HYRPFk/syz-tmp" dev="sda1" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 277.128061][ T28] audit: type=1400 audit(1700524390.906:726): avc: denied { mount } for pid=13812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 277.150695][ T28] audit: type=1400 audit(1700524390.906:727): avc: denied { mount } for pid=13812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 277.180160][ T28] audit: type=1400 audit(1700524390.906:728): avc: denied { mounton } for pid=13812 comm="syz-executor" path="/root/syzkaller.HYRPFk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 277.207132][ T28] audit: type=1400 audit(1700524390.906:729): avc: denied { mounton } for pid=13812 comm="syz-executor" path="/root/syzkaller.HYRPFk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=56664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 277.238423][ T28] audit: type=1400 audit(1700524390.917:730): avc: denied { mount } for pid=13812 comm="syz-executor" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.261536][ T28] audit: type=1400 audit(1700524390.917:731): avc: denied { unmount } for pid=13812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.289755][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.298052][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.306402][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.318014][T13815] device veth1_macvtap entered promiscuous mode [ 277.330707][T13813] device veth1_macvtap entered promiscuous mode [ 277.340985][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.350984][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.359432][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.367167][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.375736][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.384090][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.417486][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.430442][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.441199][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.450195][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.458919][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.467623][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.476263][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.484790][ T963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.507754][T13840] loop6: detected capacity change from 0 to 256 [ 277.523406][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.539995][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.550673][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.560035][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 277.589123][T13845] loop9: detected capacity change from 0 to 1024 [ 277.598714][T13847] xt_hashlimit: max too large, truncated to 1048576 [ 277.611317][T13845] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 277.626626][T13845] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 277.644992][T13845] jbd2_journal_init_inode: Cannot locate journal superblock [ 277.653569][T13845] EXT4-fs (loop9): Could not load journal inode [ 277.668155][ T8] bridge0: port 3(gretap0) entered disabled state [ 277.685611][ T8] device gretap0 left promiscuous mode [ 277.700024][ T8] bridge0: port 3(gretap0) entered disabled state [ 277.809899][T13870] loop6: detected capacity change from 0 to 128 [ 277.929316][ T8] device bridge_slave_1 left promiscuous mode [ 277.935508][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.974115][ T8] device bridge_slave_0 left promiscuous mode [ 277.987776][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.017306][ T8] device bridge_slave_1 left promiscuous mode [ 278.037094][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.054218][ T8] device bridge_slave_0 left promiscuous mode [ 278.067292][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.087643][ T8] device bridge_slave_1 left promiscuous mode [ 278.093827][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.102262][ T8] device bridge_slave_0 left promiscuous mode [ 278.109180][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.117849][ T8] device bridge_slave_1 left promiscuous mode [ 278.124635][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.132604][ T8] device bridge_slave_0 left promiscuous mode [ 278.138893][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.148713][ T8] device veth1_macvtap left promiscuous mode [ 278.155160][ T8] device veth0_vlan left promiscuous mode [ 278.161590][ T8] device veth1_macvtap left promiscuous mode [ 278.167736][ T8] device veth0_vlan left promiscuous mode [ 278.174198][ T8] device veth1_macvtap left promiscuous mode [ 278.180718][ T8] device veth0_vlan left promiscuous mode [ 278.186965][ T8] device veth1_macvtap left promiscuous mode [ 278.193617][ T8] device veth0_vlan left promiscuous mode [ 278.204316][T13937] Invalid ELF header magic: != ELF [ 278.668960][T13955] __nla_validate_parse: 3 callbacks suppressed [ 278.668979][T13955] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6640'. [ 278.672650][T13949] device bridge1 entered promiscuous mode [ 278.748707][T13968] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6645'. [ 278.811927][T13975] netlink: 'syz.8.6648': attribute type 3 has an invalid length. [ 290.363992][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6695'. [ 290.399371][T14075] loop7: detected capacity change from 0 to 512 [ 290.435806][T14075] EXT4-fs (loop7): 1 truncate cleaned up [ 290.441569][T14075] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 290.497440][T14089] futex_wake_op: syz.5.6703 tries to shift op by -1; fix this program [ 290.517178][T13814] EXT4-fs (loop7): unmounting filesystem. [ 290.551496][T14096] xt_hashlimit: max too large, truncated to 1048576 [ 290.639901][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6718'. [ 290.748107][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 290.748137][ T28] audit: type=1326 audit(1700524405.562:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15619a8f19 code=0x7ffc0000 [ 290.799926][T14152] overlayfs: conflicting options: nfs_export=on,index=off [ 290.803969][ T28] audit: type=1326 audit(1700524405.562:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15619a8f19 code=0x7ffc0000 [ 290.878691][ T28] audit: type=1326 audit(1700524405.562:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15619a8f19 code=0x7ffc0000 [ 290.919198][ T28] audit: type=1326 audit(1700524405.562:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f15619a8f19 code=0x7ffc0000 [ 290.982269][ T28] audit: type=1326 audit(1700524405.605:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15619a8f19 code=0x7ffc0000 [ 291.051104][ T28] audit: type=1326 audit(1700524405.605:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15619a8f19 code=0x7ffc0000 [ 291.085028][ T28] audit: type=1326 audit(1700524405.605:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f156196974e code=0x7ffc0000 [ 291.115926][T14190] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.134969][ T28] audit: type=1326 audit(1700524405.616:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f156196974e code=0x7ffc0000 [ 291.180788][ T28] audit: type=1326 audit(1700524405.616:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f156196974e code=0x7ffc0000 [ 291.218892][ T28] audit: type=1326 audit(1700524405.616:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14145 comm="syz.7.6731" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f156196974e code=0x7ffc0000 [ 291.247212][T14205] netlink: 'syz.6.6759': attribute type 5 has an invalid length. [ 291.332304][T14226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6770'. [ 291.332336][T14227] netlink: 'syz.8.6769': attribute type 16 has an invalid length. [ 291.368722][T14227] netlink: 'syz.8.6769': attribute type 17 has an invalid length. [ 291.412260][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.419562][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.499483][T14197] loop5: detected capacity change from 0 to 40427 [ 291.510677][T14197] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 291.519006][T14197] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 291.530529][T14251] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=14251 comm=syz.7.6782 [ 291.536804][T14197] F2FS-fs (loop5): invalid crc value [ 291.584422][T14197] F2FS-fs (loop5): Found nat_bits in checkpoint [ 291.638382][T14197] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 291.645496][T14197] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 291.653357][T14266] loop6: detected capacity change from 0 to 16 [ 291.678589][T14266] erofs: (device loop6): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 291.708567][T14266] erofs: (device loop6): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 291.740109][T14266] erofs: (device loop6): mounted with root inode @ nid 36. [ 291.748881][T14278] netlink: 'syz.8.6792': attribute type 29 has an invalid length. [ 291.757374][T13813] syz-executor: attempt to access beyond end of device [ 291.757374][T13813] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 291.772906][T14266] syz.6.6787: attempt to access beyond end of device [ 291.772906][T14266] loop6: rw=0, sector=46, nr_sectors = 1 limit=16 [ 291.798066][T14266] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 291.825117][T14289] netlink: 'syz.9.6800': attribute type 7 has an invalid length. [ 291.914426][T14301] netlink: 'syz.6.6805': attribute type 1 has an invalid length. [ 291.926626][T14301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.943388][T14305] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6807'. [ 292.196659][T14377] netlink: 'syz.9.6840': attribute type 5 has an invalid length. [ 292.263766][T14391] netlink: 'syz.8.6848': attribute type 11 has an invalid length. [ 292.280711][T14391] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.6848'. [ 292.357703][T14413] netlink: 220 bytes leftover after parsing attributes in process `syz.7.6860'. [ 292.403221][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6867'. [ 292.412228][T14425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6867'. [ 292.463391][T14434] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 301.530248][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.545867][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.558774][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.568422][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 301.568439][ T28] audit: type=1400 audit(2000000011.147:827): avc: denied { create } for pid=14461 comm="syz.7.6885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.568956][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.604008][ T28] audit: type=1400 audit(2000000011.190:828): avc: denied { setopt } for pid=14461 comm="syz.7.6885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.604614][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.638603][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.648096][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.657154][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.666843][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.675834][T14456] netlink: 3 bytes leftover after parsing attributes in process `syz.8.6882'. [ 301.717570][ T28] audit: type=1326 audit(2000000011.308:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 301.760424][T14481] device ipip0 entered promiscuous mode [ 301.762366][ T28] audit: type=1326 audit(2000000011.329:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 301.801043][ T28] audit: type=1326 audit(2000000011.329:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 301.844548][ T28] audit: type=1326 audit(2000000011.329:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 301.883656][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.890995][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.907111][T14495] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 301.918206][ T28] audit: type=1326 audit(2000000011.329:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 302.008523][ T28] audit: type=1326 audit(2000000011.329:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 302.063382][ T28] audit: type=1326 audit(2000000011.329:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 302.127302][ T28] audit: type=1326 audit(2000000011.329:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14473 comm="syz.6.6889" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2400fa8f19 code=0x7ffc0000 [ 302.380237][T14609] loop8: detected capacity change from 0 to 256 [ 302.392888][T14609] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 341.883416][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P14629 } 4199 jiffies s: 9457 root: 0x0/T [ 341.895311][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 395.934730][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 395.941793][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14629 [ 395.949285][ C0] (detected by 0, t=10003 jiffies, g=50665, q=625 ncpus=2) [ 395.956613][ C0] task:syz.8.6964 state:R running task stack:26184 pid:14629 ppid:13815 flags:0x00004000 [ 395.967512][ C0] Call Trace: [ 395.970902][ C0] [ 395.973891][ C0] __schedule+0xcbb/0x1700 [ 395.978370][ C0] ? release_firmware_map_entry+0x190/0x190 [ 395.981350][ C1] sched: RT throttling activated [ 395.989238][ C0] ? __switch_to+0x56f/0x1070 [ 395.993952][ C0] ? preempt_schedule_irq+0xaa/0x120 [ 395.999272][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 396.005022][ C0] ? __kasan_check_read+0x11/0x20 [ 396.010061][ C0] preempt_schedule_irq+0xca/0x120 [ 396.015178][ C0] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 396.021247][ C0] ? irqentry_exit+0x37/0x40 [ 396.025842][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 396.031651][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 396.037847][ C0] ? bpf_sock_ops_get_syn+0x8f1/0x910 [ 396.043327][ C0] ? bpf_ipv4_fib_lookup+0xc7/0xfe0 [ 396.048553][ C0] ? kasan_check_range+0x8f/0x2a0 [ 396.053604][ C0] ? memset+0x23/0x40 [ 396.057618][ C0] ? bpf_ipv4_fib_lookup+0xc7/0xfe0 [ 396.062912][ C0] ? bpf_sock_ops_get_syn+0x910/0x910 [ 396.068313][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 396.074736][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 396.080564][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 396.086735][ C0] ? bpf_skb_fib_lookup+0x15b/0x2c0 [ 396.091957][ C0] ? bpf_prog_7102ad493ca279d8+0x67/0x6c [ 396.097588][ C0] ? bpf_test_run+0x35f/0x940 [ 396.102276][ C0] ? dst_hold+0xc0/0xc0 [ 396.106447][ C0] ? __cfi_eth_type_trans+0x10/0x10 [ 396.111652][ C0] ? convert___skb_to_skb+0x40/0x5b0 [ 396.116940][ C0] ? bpf_prog_test_run_skb+0xd64/0x18a0 [ 396.122529][ C0] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 396.128342][ C0] ? bpf_prog_test_run+0x3b4/0x5c0 [ 396.133456][ C0] ? bpf_prog_query+0x270/0x270 [ 396.138311][ C0] ? selinux_bpf+0xce/0xf0 [ 396.142738][ C0] ? security_bpf+0x93/0xb0 [ 396.147240][ C0] ? __sys_bpf+0x5ee/0x850 [ 396.151656][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 396.157031][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 396.162663][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 396.167266][ C0] ? x64_sys_call+0x488/0x9a0 [ 396.171952][ C0] ? do_syscall_64+0x4c/0xa0 [ 396.176539][ C0] ? clear_bhb_loop+0x30/0x80 [ 396.181223][ C0] ? clear_bhb_loop+0x30/0x80 [ 396.185902][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.191979][ C0] [ 396.195128][ C0] rcu: rcu_preempt kthread starved for 5807 jiffies! g50665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 396.206257][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 396.216255][ C0] rcu: RCU grace-period kthread stack dump: [ 396.222164][ C0] task:rcu_preempt state:R running task stack:28320 pid:14 ppid:2 flags:0x00004000 [ 396.233235][ C0] Call Trace: [ 396.236536][ C0] [ 396.239488][ C0] __schedule+0xcb3/0x1700 [ 396.243930][ C0] ? release_firmware_map_entry+0x190/0x190 [ 396.249848][ C0] ? __mod_timer+0x865/0xc00 [ 396.254464][ C0] ? task_woken_rt+0x130/0x1e0 [ 396.259259][ C0] schedule+0xbd/0x170 [ 396.263344][ C0] schedule_timeout+0x159/0x340 [ 396.268215][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 396.273617][ C0] ? __cfi_process_timeout+0x10/0x10 [ 396.278946][ C0] ? prepare_to_swait_event+0x30f/0x330 [ 396.284516][ C0] rcu_gp_fqs_loop+0x2ed/0x1100 [ 396.289383][ C0] ? __cfi_rcu_implicit_dynticks_qs+0x10/0x10 [ 396.295467][ C0] ? rcu_gp_init+0xf30/0xf30 [ 396.300100][ C0] rcu_gp_kthread+0x99/0x390 [ 396.304704][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 396.309926][ C0] ? set_cpus_allowed_ptr+0x88/0xd0 [ 396.315143][ C0] ? __kasan_check_read+0x11/0x20 [ 396.320191][ C0] ? __kthread_parkme+0x13a/0x180 [ 396.325254][ C0] kthread+0x281/0x320 [ 396.329347][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 396.334597][ C0] ? __cfi_kthread+0x10/0x10 [ 396.339208][ C0] ret_from_fork+0x1f/0x30 [ 396.343668][ C0] [ 396.346710][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 396.353059][ C0] CPU: 0 PID: 15 Comm: rcub/0 Tainted: G W syzkaller #0 [ 396.361408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 396.371483][ C0] RIP: 0010:rt_mutex_slowlock_block+0x349/0x5a0 [ 396.377751][ C0] Code: 89 e7 e8 fa 63 33 fc 90 84 c0 4c 8b 65 c0 0f 85 c5 00 00 00 4c 89 f7 be 08 00 00 00 e8 10 5e b5 fc 48 8b 45 b8 42 80 3c 28 00 <74> 08 4c 89 f7 e8 8d 5b b5 fc 49 f7 06 08 00 00 00 48 8d 7b 18 0f [ 396.397374][ C0] RSP: 0018:ffffc900000f7c00 EFLAGS: 00000246 [ 396.403488][ C0] RAX: 1ffff11020064510 RBX: ffffffff871b47f0 RCX: ffffffff8501b150 [ 396.411525][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888100322880 [ 396.419519][ C0] RBP: ffffc900000f7c90 R08: ffff888100322887 R09: 1ffff11020064510 [ 396.427517][ C0] R10: dffffc0000000000 R11: ffffed1020064511 R12: ffffc900000f7ce0 [ 396.435509][ C0] R13: dffffc0000000000 R14: ffff888100322880 R15: ffff88813c01e540 [ 396.443495][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 396.452479][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.459078][ C0] CR2: 00007ffde6d4eed0 CR3: 0000000132952000 CR4: 00000000003506b0 [ 396.467064][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 396.475046][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 396.483033][ C0] Call Trace: [ 396.486357][ C0] [ 396.489307][ C0] rt_mutex_slowlock+0x18e/0x430 [ 396.494332][ C0] ? rt_mutex_adjust_prio_chain+0x1750/0x1750 [ 396.500429][ C0] rt_mutex_lock+0x10e/0x1c0 [ 396.505037][ C0] ? __cfi_rt_mutex_lock+0x10/0x10 [ 396.510178][ C0] ? __kasan_check_write+0x14/0x20 [ 396.515303][ C0] rcu_boost_kthread+0x237/0x7f0 [ 396.520262][ C0] kthread+0x281/0x320 [ 396.524442][ C0] ? __cfi_rcu_boost_kthread+0x10/0x10 [ 396.529919][ C0] ? __cfi_kthread+0x10/0x10 [ 396.534530][ C0] ret_from_fork+0x1f/0x30 [ 396.538975][ C0] [ 404.915683][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P14629 } 10962 jiffies s: 9457 root: 0x0/T [ 404.927514][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 475.918891][ T16] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P14629 } 18580 jiffies s: 9457 root: 0x0/T [ 475.931167][ T16] rcu: blocking rcu_node structures (internal RCU debug): [ 489.221892][T14695] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.229191][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.236882][T14695] device bridge_slave_0 entered promiscuous mode [ 489.245635][T14694] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.252828][T14694] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.260227][T14694] device bridge_slave_0 entered promiscuous mode [ 489.268437][T14694] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.275720][T14694] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.283181][T14694] device bridge_slave_1 entered promiscuous mode [ 489.301932][T14695] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.309044][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.316410][T14695] device bridge_slave_1 entered promiscuous mode [ 489.359300][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.366510][T14696] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.374357][T14696] device bridge_slave_0 entered promiscuous mode [ 489.381521][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.388746][T14696] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.396231][T14696] device bridge_slave_1 entered promiscuous mode [ 489.487481][T14697] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.494790][T14697] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.502265][T14697] device bridge_slave_0 entered promiscuous mode [ 489.512435][T14697] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.519660][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.527184][T14697] device bridge_slave_1 entered promiscuous mode [ 489.590748][T14698] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.597939][T14698] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.605307][T14698] device bridge_slave_0 entered promiscuous mode [ 489.612577][T14698] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.619707][T14698] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.627375][T14698] device bridge_slave_1 entered promiscuous mode [ 489.685789][T14694] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.692992][T14694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.700406][T14694] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.707458][T14694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.758618][T14695] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.765723][T14695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.773011][T14695] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.780100][T14695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.794173][ T8] device bridge_slave_1 left promiscuous mode [ 489.800334][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.808179][ T8] device bridge_slave_0 left promiscuous mode [ 489.814510][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.822745][ T8] device veth1_macvtap left promiscuous mode [ 489.828783][ T8] device veth0_vlan left promiscuous mode [ 489.965731][T14696] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.972934][T14696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.980255][T14696] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.987304][T14696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.019830][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.028124][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.035690][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.042980][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.050819][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.058208][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.067277][T14698] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.074359][T14698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.095559][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.104195][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.112001][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.139113][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.147780][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.156068][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.163132][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.171339][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.179874][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.188331][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.195444][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.213734][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.221708][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.229098][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.236746][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.262361][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.270996][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.279220][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.286259][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.294489][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.303019][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.311362][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.318445][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.325998][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.333620][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.341195][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.348722][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.356772][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.365331][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.373672][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.380740][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.388210][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.396713][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.404995][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.412036][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.419528][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.427523][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.435615][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.447343][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.455781][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.464083][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.471119][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.478726][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.487137][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.495674][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.502765][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.535004][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.543539][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.551664][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.560704][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.570182][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.578203][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.586363][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.594525][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.602827][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.611328][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.618437][ T729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.626144][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.634568][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.642789][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.649867][ T729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.665726][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.683367][T14698] device veth0_vlan entered promiscuous mode [ 490.694486][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.702904][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.710869][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.719196][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.728073][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.736559][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.748821][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.757179][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.765333][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.773622][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.783820][T14694] device veth0_vlan entered promiscuous mode [ 490.807703][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 490.816029][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.840509][T14694] device veth1_macvtap entered promiscuous mode [ 490.847725][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.857818][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.865400][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.872806][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 490.881368][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.889683][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.898088][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 490.910036][T14697] device veth0_vlan entered promiscuous mode [ 490.920807][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.937986][T14696] device veth0_vlan entered promiscuous mode [ 490.945894][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.953704][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.961394][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 490.972009][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.979551][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.990630][T14698] device veth1_macvtap entered promiscuous mode [ 490.997917][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.006173][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.014547][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.022111][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.030718][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.039306][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.047776][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.072495][T14695] device veth0_vlan entered promiscuous mode [ 491.079272][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.087530][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.096126][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.104733][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.113291][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.121399][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.129606][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.137270][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.147023][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.155250][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.169964][T14697] device veth1_macvtap entered promiscuous mode [ 491.185582][T14696] device veth1_macvtap entered promiscuous mode [ 491.192361][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.200497][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.208463][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.216997][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.225668][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.234134][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.258348][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.266841][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.301929][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.310987][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.319751][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.329233][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.329744][T14716] __nla_validate_parse: 97 callbacks suppressed [ 491.329829][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6997'. [ 491.341495][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.369044][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.383773][T14695] device veth1_macvtap entered promiscuous mode [ 491.407809][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.419468][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7003'. [ 491.437912][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.449054][ T729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 584.684782][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 584.691794][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14727 [ 584.699205][ C0] (detected by 0, t=10003 jiffies, g=51329, q=498 ncpus=2) [ 584.706590][ C0] task:syz.3.6999 state:R running task stack:26184 pid:14727 ppid:14696 flags:0x00004000 [ 584.717418][ C0] Call Trace: [ 584.720738][ C0] [ 584.723692][ C0] ? irqentry_exit+0x37/0x40 [ 584.728650][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 584.734513][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 584.740910][ C0] ? __sanitizer_cov_trace_switch+0x3c/0xe0 [ 584.746966][ C0] ? bpf_skb_set_tstamp+0x12c/0x260 [ 584.752380][ C0] ? bpf_prog_91e744f5e63405b6+0x56/0x5b [ 584.758144][ C0] ? preempt_schedule_irq+0xca/0x120 [ 584.763555][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 584.769386][ C0] ? preempt_schedule_irq+0xca/0x120 [ 584.774712][ C0] ? irqentry_exit+0x37/0x40 [ 584.779345][ C0] ? irqentry_exit+0x37/0x40 [ 584.784158][ C0] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 584.789998][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 584.796191][ C0] ? __kasan_check_read+0x11/0x20 [ 584.801476][ C0] ? bpf_test_timer_continue+0x147/0x4a0 [ 584.807287][ C0] ? bpf_test_run+0x456/0x940 [ 584.812197][ C0] ? dst_hold+0xc0/0xc0 [ 584.816407][ C0] ? __cfi_eth_type_trans+0x10/0x10 [ 584.821951][ C0] ? bpf_prog_test_run_skb+0x7e5/0x18a0 [ 584.827569][ C0] ? convert___skb_to_skb+0x40/0x5b0 [ 584.832904][ C0] ? bpf_prog_test_run_skb+0xd64/0x18a0 [ 584.838765][ C0] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 584.844729][ C0] ? bpf_prog_test_run+0x3b4/0x5c0 [ 584.850015][ C0] ? bpf_prog_query+0x270/0x270 [ 584.854953][ C0] ? selinux_bpf+0xce/0xf0 [ 584.859559][ C0] ? security_bpf+0x93/0xb0 [ 584.864136][ C0] ? __sys_bpf+0x5ee/0x850 [ 584.868594][ C0] ? bpf_link_show_fdinfo+0x330/0x330 [ 584.874029][ C0] ? fpregs_restore_userregs+0x128/0x260 [ 584.879883][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 584.884519][ C0] ? x64_sys_call+0x488/0x9a0 [ 584.889309][ C0] ? do_syscall_64+0x4c/0xa0 [ 584.894011][ C0] ? clear_bhb_loop+0x30/0x80 [ 584.898719][ C0] ? clear_bhb_loop+0x30/0x80 [ 584.903429][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.909544][ C0] [ 682.839377][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 205s! [ 682.848343][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 201s! [ 682.857425][ C0] Showing busy workqueues and worker pools: [ 682.863325][ C0] workqueue events: flags=0x0 [ 682.868026][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 682.868070][ C0] pending: psi_avgs_work, kfree_rcu_monitor [ 682.868262][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 682.868303][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 682.868497][ C0] workqueue events_long: flags=0x0 [ 682.905273][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 682.905334][ C0] pending: br_fdb_cleanup [ 682.905488][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 682.905531][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 682.905657][ C0] workqueue events_unbound: flags=0x2 [ 682.939598][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 [ 682.939643][ C0] in-flight: 729:linkwatch_event linkwatch_event [ 682.939768][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 682.939937][ C0] workqueue events_power_efficient: flags=0x80 [ 682.967691][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 682.967751][ C0] pending: check_lifetime, wg_ratelimiter_gc_entries, neigh_managed_work, neigh_managed_work, neigh_periodic_work, neigh_periodic_work, gc_worker [ 682.968054][ C0] workqueue netns: flags=0xe000a [ 682.995810][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 682.995852][ C0] in-flight: 8:cleanup_net [ 682.995961][ C0] workqueue mm_percpu_wq: flags=0x8 [ 683.013032][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.013080][ C0] pending: vmstat_update [ 683.013117][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.013157][ C0] pending: vmstat_update [ 683.013191][ C0] workqueue writeback: flags=0x4a [ 683.042704][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 683.042756][ C0] pending: wb_workfn [ 683.042910][ C0] workqueue kblockd: flags=0x18 [ 683.059385][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 683.059437][ C0] pending: blk_mq_timeout_work [ 683.059594][ C0] workqueue dm_bufio_cache: flags=0x8 [ 683.077930][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.077985][ C0] pending: work_fn [ 683.078110][ C0] workqueue mld: flags=0x40008 [ 683.094776][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=60 [ 683.094822][ C0] pending: mld_ifc_work [ 683.094935][ C0] inactive: mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work [ 683.096079][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=11 [ 683.096118][ C0] pending: mld_ifc_work [ 683.096147][ C0] inactive: mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work [ 683.096331][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 683.214400][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=153 [ 683.214446][ C0] pending: addrconf_dad_work [ 683.214567][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 683.215554][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 683.216562][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 683.217588][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=84 [ 683.217637][ C0] in-flight: 718:addrconf_dad_work [ 683.217673][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 683.218622][ C0] , addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 683.219244][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 683.651723][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.651770][ C0] pending: wg_packet_encrypt_worker [ 683.651802][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.651839][ C0] pending: wg_packet_encrypt_worker [ 683.651866][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 683.683624][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.683681][ C0] pending: wg_packet_encrypt_worker [ 683.683713][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.683755][ C0] pending: wg_packet_encrypt_worker [ 683.683781][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 683.715487][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.715535][ C0] pending: wg_packet_encrypt_worker [ 683.715564][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.715604][ C0] pending: wg_packet_encrypt_worker [ 683.715628][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 683.747507][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.747555][ C0] pending: wg_packet_encrypt_worker [ 683.747586][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.747624][ C0] pending: wg_packet_encrypt_worker [ 683.747651][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 683.779322][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.779367][ C0] pending: wg_packet_encrypt_worker [ 683.779394][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.779438][ C0] pending: wg_packet_encrypt_worker [ 683.779464][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 683.811179][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.811228][ C0] pending: wg_packet_encrypt_worker [ 683.811257][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.811296][ C0] pending: wg_packet_encrypt_worker [ 683.811320][ C0] workqueue wg-kex-wg0: flags=0x6 [ 683.842755][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 683.842797][ C0] pending: wg_packet_handshake_send_worker [ 683.842920][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 683.861594][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.861640][ C0] pending: wg_packet_encrypt_worker [ 683.861670][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.861709][ C0] pending: wg_packet_encrypt_worker [ 683.861734][ C0] workqueue wg-kex-wg1: flags=0x6 [ 683.893243][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 683.893287][ C0] pending: wg_packet_handshake_send_worker [ 683.893328][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 683.912002][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.912052][ C0] pending: wg_packet_encrypt_worker [ 683.912081][ C0] workqueue wg-kex-wg2: flags=0x6 [ 683.930307][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 683.930347][ C0] pending: wg_packet_handshake_send_worker [ 683.930387][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 683.949052][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.949099][ C0] pending: wg_packet_encrypt_worker [ 683.949131][ C0] workqueue wg-kex-wg0: flags=0x6 [ 683.967384][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 683.967436][ C0] pending: wg_packet_handshake_send_worker [ 683.967475][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 683.986178][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.986224][ C0] pending: wg_packet_encrypt_worker [ 683.986252][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 683.986293][ C0] pending: wg_packet_encrypt_worker [ 683.986321][ C0] workqueue wg-kex-wg1: flags=0x6 [ 684.017836][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 684.017878][ C0] pending: wg_packet_handshake_send_worker [ 684.017917][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 684.036592][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.036639][ C0] pending: wg_packet_encrypt_worker [ 684.036665][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.036705][ C0] pending: wg_packet_encrypt_worker [ 684.036730][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 684.068506][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.068552][ C0] pending: wg_packet_encrypt_worker [ 684.068580][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.068619][ C0] pending: wg_packet_encrypt_worker [ 684.068642][ C0] workqueue wg-kex-wg0: flags=0x6 [ 684.100065][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 684.100105][ C0] pending: wg_packet_handshake_send_worker [ 684.100144][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 684.118906][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.118951][ C0] pending: wg_packet_encrypt_worker [ 684.118979][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.119020][ C0] pending: wg_packet_encrypt_worker [ 684.119045][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 684.150736][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.150785][ C0] pending: wg_packet_encrypt_worker [ 684.150814][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.150853][ C0] pending: wg_packet_encrypt_worker [ 684.150878][ C0] workqueue wg-kex-wg2: flags=0x6 [ 684.182336][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 684.182388][ C0] pending: wg_packet_handshake_send_worker [ 684.182432][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 684.201121][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.201169][ C0] pending: wg_packet_encrypt_worker [ 684.201197][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.201237][ C0] pending: wg_packet_encrypt_worker [ 684.201263][ C0] workqueue wg-kex-wg0: flags=0x6 [ 684.232694][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 684.232753][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 684.232829][ C0] workqueue wg-kex-wg0: flags=0x6 [ 684.254106][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 684.254146][ C0] pending: wg_packet_handshake_send_worker [ 684.254185][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 684.272872][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.272917][ C0] pending: wg_packet_encrypt_worker [ 684.272945][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.272983][ C0] pending: wg_packet_encrypt_worker [ 684.273009][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 684.304687][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.304742][ C0] pending: wg_packet_encrypt_worker [ 684.304770][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.304816][ C0] pending: wg_packet_encrypt_worker [ 684.304840][ C0] workqueue wg-kex-wg2: flags=0x6 [ 684.336242][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 684.336283][ C0] pending: wg_packet_handshake_send_worker [ 684.336323][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 684.354997][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.355043][ C0] pending: wg_packet_encrypt_worker [ 684.355070][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 684.355111][ C0] pending: wg_packet_encrypt_worker [ 684.355135][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=206s workers=6 idle: 1801 1090 14687 6 19 [ 684.355206][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=206s workers=4 idle: 10025 963