last executing test programs: 33.212284855s ago: executing program 2 (id=77): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r1}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r6) 32.866648411s ago: executing program 2 (id=81): semtimedop(0x0, 0x0, 0x0, 0x0) unshare(0x2c040000) keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='i\xacl*c\x822') socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 31.946170899s ago: executing program 2 (id=95): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000240)=0x18) 31.822788393s ago: executing program 2 (id=98): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x3ff}, 0x8) 31.816598319s ago: executing program 2 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000014674eb1ddd85d3a000008000300", @ANYRES32=r3, @ANYBLOB="11000700ba0921532cd4bc5caa7738cff300000004006e800a000a00d12e9d2b7a070000"], 0x40}}, 0x0) 31.694706438s ago: executing program 2 (id=102): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) 27.613329803s ago: executing program 4 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x1, {0x3, 0x7, 0x3ff, 0x1b}}}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, {0x4}}]}, 0x40}}, 0x0) 27.523395848s ago: executing program 4 (id=179): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) 27.404903s ago: executing program 4 (id=184): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000) 27.319165591s ago: executing program 4 (id=187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf256c00000008000300", @ANYRES32=r3, @ANYBLOB], 0x34}}, 0x20000000) 27.190396319s ago: executing program 4 (id=189): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x8) 27.119443477s ago: executing program 4 (id=191): r0 = socket(0x1e, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 20.995858485s ago: executing program 0 (id=291): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000340), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080), 0x2) 20.952229735s ago: executing program 0 (id=292): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 20.862647968s ago: executing program 0 (id=293): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x4, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 20.802590475s ago: executing program 0 (id=294): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) write$char_usb(r0, &(0x7f0000004840)="643e72e43f8d0f221d", 0x9) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 19.206178186s ago: executing program 1 (id=308): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)="b1", 0x1}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 18.647146341s ago: executing program 1 (id=309): r0 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x4094, 0x3d0f, 0x10, 0x0, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x4, 0x1000, 0x4004c}, 0x2c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x10000) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 18.530379102s ago: executing program 1 (id=310): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40), 0x8000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r2, 0x2f, 0x4, 0x0, @void, @value=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@fallback=r4, r4, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 18.252362045s ago: executing program 1 (id=313): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0xb, r2}) 18.146286875s ago: executing program 1 (id=316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[], 0x9) sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.062154199s ago: executing program 1 (id=318): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x4008) 17.35072168s ago: executing program 0 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000004c0)='./file0\x00', 0x80000000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 17.350286209s ago: executing program 0 (id=326): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="415601", @ANYRES16=r1], 0x4) 17.042111674s ago: executing program 3 (id=327): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x42000000) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 16.965144467s ago: executing program 3 (id=328): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 16.886712371s ago: executing program 3 (id=329): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x1, 0x803}}}, 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) 16.048622899s ago: executing program 32 (id=102): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) 16.036290916s ago: executing program 3 (id=331): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 15.925332993s ago: executing program 3 (id=332): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 15.794779998s ago: executing program 3 (id=333): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 11.698195116s ago: executing program 33 (id=191): r0 = socket(0x1e, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 2.058775818s ago: executing program 34 (id=326): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="415601", @ANYRES16=r1], 0x4) 2.037132389s ago: executing program 35 (id=318): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x4008) 0s ago: executing program 36 (id=333): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 37.058787][ T6481] cgroup: Unknown subsys name 'net' [ 37.281844][ T6481] cgroup: Unknown subsys name 'cpuset' [ 37.285656][ T6481] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.614261][ T6481] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 40.420989][ T6497] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.427943][ T6504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.429353][ T6504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 40.429723][ T6504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 40.430335][ T6504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.431514][ T6504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 40.431793][ T6504] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 40.432177][ T6504] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.432675][ T6504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.432979][ T6504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 40.433526][ T6506] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.441033][ T6505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.441371][ T6504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.441996][ T6504] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 40.442262][ T6504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 40.443133][ T6504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.443823][ T6505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.443864][ T6504] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 40.444763][ T6504] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.445134][ T6504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.446469][ T6495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.446745][ T6495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.446992][ T6495] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.484910][ T6495] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 40.487272][ T6503] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 40.819640][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 40.885288][ T6498] chnl_net:caif_netlink_parms(): no params data found [ 40.927643][ T6493] chnl_net:caif_netlink_parms(): no params data found [ 40.946139][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 41.061467][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.061620][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.061766][ T6492] bridge_slave_0: entered allmulticast mode [ 41.062673][ T6492] bridge_slave_0: entered promiscuous mode [ 41.065458][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.065521][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.065648][ T6492] bridge_slave_1: entered allmulticast mode [ 41.066448][ T6492] bridge_slave_1: entered promiscuous mode [ 41.109210][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.109295][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.109448][ T6498] bridge_slave_0: entered allmulticast mode [ 41.110581][ T6498] bridge_slave_0: entered promiscuous mode [ 41.113030][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.113082][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.113217][ T6498] bridge_slave_1: entered allmulticast mode [ 41.114084][ T6498] bridge_slave_1: entered promiscuous mode [ 41.174452][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.190852][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.192895][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.194872][ T6493] bridge_slave_0: entered allmulticast mode [ 41.197317][ T6493] bridge_slave_0: entered promiscuous mode [ 41.201770][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.204466][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.217174][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.217628][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.217706][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.217821][ T6493] bridge_slave_1: entered allmulticast mode [ 41.218719][ T6493] bridge_slave_1: entered promiscuous mode [ 41.227333][ T6499] chnl_net:caif_netlink_parms(): no params data found [ 41.250532][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.252397][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.253896][ T6491] bridge_slave_0: entered allmulticast mode [ 41.254742][ T6491] bridge_slave_0: entered promiscuous mode [ 41.291699][ T6498] team0: Port device team_slave_0 added [ 41.292089][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.292175][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.292277][ T6491] bridge_slave_1: entered allmulticast mode [ 41.293139][ T6491] bridge_slave_1: entered promiscuous mode [ 41.303063][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.305182][ T6492] team0: Port device team_slave_0 added [ 41.316459][ T6498] team0: Port device team_slave_1 added [ 41.334186][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.342993][ T6492] team0: Port device team_slave_1 added [ 41.376147][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.378679][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.397905][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.397981][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.398039][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.416258][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.416316][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.416356][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.417977][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.418008][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.418045][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.448327][ T6493] team0: Port device team_slave_0 added [ 41.450609][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.451302][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.451349][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.481333][ T6491] team0: Port device team_slave_0 added [ 41.482975][ T6491] team0: Port device team_slave_1 added [ 41.491357][ T6493] team0: Port device team_slave_1 added [ 41.513619][ T6498] hsr_slave_0: entered promiscuous mode [ 41.514239][ T6498] hsr_slave_1: entered promiscuous mode [ 41.542859][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.543461][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.543516][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.544700][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.544728][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.544764][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.566260][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.568213][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.568395][ T6499] bridge_slave_0: entered allmulticast mode [ 41.569441][ T6499] bridge_slave_0: entered promiscuous mode [ 41.570935][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.570983][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.571099][ T6499] bridge_slave_1: entered allmulticast mode [ 41.571950][ T6499] bridge_slave_1: entered promiscuous mode [ 41.583329][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.583384][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.583429][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.584686][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.584722][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.584761][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.608184][ T6492] hsr_slave_0: entered promiscuous mode [ 41.608706][ T6492] hsr_slave_1: entered promiscuous mode [ 41.609493][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.609605][ T6492] Cannot create hsr debugfs directory [ 41.642131][ T6493] hsr_slave_0: entered promiscuous mode [ 41.644343][ T6493] hsr_slave_1: entered promiscuous mode [ 41.646391][ T6493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.648582][ T6493] Cannot create hsr debugfs directory [ 41.682248][ T6499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.701768][ T6491] hsr_slave_0: entered promiscuous mode [ 41.702352][ T6491] hsr_slave_1: entered promiscuous mode [ 41.702695][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.702733][ T6491] Cannot create hsr debugfs directory [ 41.707722][ T6499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.756457][ T6499] team0: Port device team_slave_0 added [ 41.806117][ T6499] team0: Port device team_slave_1 added [ 41.881690][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.881751][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.881799][ T6499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.913162][ T6499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.913211][ T6499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.913261][ T6499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.957716][ T6499] hsr_slave_0: entered promiscuous mode [ 41.959641][ T6499] hsr_slave_1: entered promiscuous mode [ 41.960305][ T6499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.960335][ T6499] Cannot create hsr debugfs directory [ 42.037970][ T6498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 42.046718][ T6498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 42.064222][ T6498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 42.078199][ T6498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 42.106137][ T6492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.115558][ T6492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.134614][ T6492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.147890][ T6492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.207805][ T6491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 42.212271][ T6491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.216064][ T6491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.220967][ T6491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.253103][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.286161][ T6493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 42.291890][ T6493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 42.297427][ T6493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 42.307762][ T6493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 42.315419][ T6498] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.332389][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.332542][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.376753][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.376835][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.384919][ T6499] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 42.391453][ T6499] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 42.404591][ T6499] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 42.408606][ T6499] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 42.416655][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.436994][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.450595][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.457669][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.457969][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.461051][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.461100][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.467900][ T6498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.467985][ T6498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.475103][ T55] Bluetooth: hci3: command tx timeout [ 42.477915][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.488714][ T55] Bluetooth: hci1: command tx timeout [ 42.506296][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.506378][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.528224][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.546745][ T6493] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.549351][ T6497] Bluetooth: hci4: command tx timeout [ 42.549595][ T6497] Bluetooth: hci0: command tx timeout [ 42.549769][ T55] Bluetooth: hci2: command tx timeout [ 42.567594][ T6492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.567661][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.585352][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.585445][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.603125][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.603219][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.625815][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.625897][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.698465][ T6499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.703084][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.735005][ T6499] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.773649][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.773745][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.774829][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.774874][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.788306][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.807653][ T6492] veth0_vlan: entered promiscuous mode [ 42.814832][ T6492] veth1_vlan: entered promiscuous mode [ 42.827606][ T6492] veth0_macvtap: entered promiscuous mode [ 42.831858][ T6492] veth1_macvtap: entered promiscuous mode [ 42.852258][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.873766][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.878414][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.887103][ T6492] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888370][ T6492] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888405][ T6492] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.888434][ T6492] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.913835][ T6498] veth0_vlan: entered promiscuous mode [ 42.945779][ T6491] veth0_vlan: entered promiscuous mode [ 42.955464][ T6498] veth1_vlan: entered promiscuous mode [ 42.964422][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.984547][ T6493] veth0_vlan: entered promiscuous mode [ 42.990058][ T6493] veth1_vlan: entered promiscuous mode [ 43.014837][ T6498] veth0_macvtap: entered promiscuous mode [ 43.035055][ T6498] veth1_macvtap: entered promiscuous mode [ 43.047737][ T6491] veth1_vlan: entered promiscuous mode [ 43.063410][ T6491] veth0_macvtap: entered promiscuous mode [ 43.068468][ T6491] veth1_macvtap: entered promiscuous mode [ 43.117336][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.120243][ T6493] veth0_macvtap: entered promiscuous mode [ 43.143709][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.145702][ T6493] veth1_macvtap: entered promiscuous mode [ 43.153885][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.154159][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.166540][ T6491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.166616][ T6491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.166647][ T6491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.166676][ T6491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.176312][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.178112][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.186960][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.208759][ T6493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.208831][ T6493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.209651][ T6493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.209682][ T6493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.220813][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.223798][ T6498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.225431][ T6498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.225472][ T6498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.225512][ T6498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.225541][ T6498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.247472][ T697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.247535][ T697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.334420][ T697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.334502][ T697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.347904][ T6492] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 43.385961][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.386022][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.450470][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.450537][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.474001][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.474061][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.481106][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.483249][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.569620][ T697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.569687][ T697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.578825][ T6499] veth0_vlan: entered promiscuous mode [ 43.614455][ T6499] veth1_vlan: entered promiscuous mode [ 43.714977][ T6499] veth0_macvtap: entered promiscuous mode [ 43.716949][ T6499] veth1_macvtap: entered promiscuous mode [ 43.901789][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.918155][ T6577] loop0: detected capacity change from 0 to 32768 [ 43.927038][ T6499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.932578][ T6499] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.964357][ T6499] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.964439][ T6499] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.964478][ T6499] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.573546][ T6587] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4'. [ 44.599283][ T55] Bluetooth: hci1: command tx timeout [ 44.601997][ T6495] Bluetooth: hci3: command tx timeout [ 44.636705][ T6495] Bluetooth: hci2: command tx timeout [ 44.638432][ T55] Bluetooth: hci0: command tx timeout [ 44.642192][ T6497] Bluetooth: hci4: command tx timeout [ 44.652982][ T6577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (6577) [ 44.694736][ T6577] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.694891][ T6577] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 44.694932][ T6577] BTRFS info (device loop0): using free-space-tree [ 44.782047][ T6590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.811429][ T6590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.889968][ T6590] loop1: detected capacity change from 0 to 16 [ 44.897425][ T6579] loop2: detected capacity change from 0 to 32768 [ 44.907992][ T6579] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (6579) [ 44.912935][ T6590] erofs (device loop1): mounted with root inode @ nid 36. [ 45.043311][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.043374][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.100674][ T6579] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 45.100775][ T6579] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 45.100840][ T6579] BTRFS info (device loop2 state S): using free-space-tree [ 45.125693][ T782] BTRFS warning (device loop2 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xd97102127db6f4d327c6f626ce9ade02196e59a33327b7ad3d189109c080729d level 0, ignored [ 45.134880][ T6579] BTRFS warning (device loop2 state S): devid 1 uuid a3373a75-1192-444c-9807-48156503709a is missing [ 45.145009][ T273] BTRFS warning (device loop2 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xfcf03e3b0b760edc680c540494bbac365df44223a091eabbf5846f39f75fca31 level 0, ignored [ 45.178700][ T6579] BTRFS critical (device loop2 state S): unable to find chunk map for logical 0 length 4096 [ 45.185371][ T6579] BTRFS critical (device loop2 state S): unable to find chunk map for logical 0 length 4096 [ 45.271064][ T6627] kernel write not supported for file 3/task/4/loginuid (pid: 6627 comm: syz.0.1) [ 45.438406][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 45.443562][ T206] BTRFS warning (device loop2 state CS): checksum verify failed on logical 5255168 mirror 1 wanted 0xf428b381bfb5d9bd986136cd2afb605edce0b8c34bf5038cf04cbd7e5492325b found 0x4d00a00f8602069f43c115fbc10958a93f44045e336dcdb91ed02a3d54d71a75 level 1, ignored [ 45.455715][ T6629] UDF-fs: Scanning with blocksize 512 failed [ 45.456280][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 45.456320][ T6629] UDF-fs: Scanning with blocksize 1024 failed [ 45.457001][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 45.457061][ T6629] UDF-fs: Scanning with blocksize 2048 failed [ 45.457266][ T6629] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 45.457299][ T6629] UDF-fs: Scanning with blocksize 4096 failed [ 45.471970][ T240] BTRFS warning (device loop2 state CS): checksum verify failed on logical 5267456 mirror 1 wanted 0xce6a0dc39dad9e7cbba6cc000b67b0cf7f3e351c922d08ed6fd033c276f2526b found 0xe12365058848a3b99bc25b115ca4828ff37ea8c78ca2de34b8a29e78dba39f35 level 0, ignored [ 45.488822][ T206] BTRFS error (device loop2 state CS): tree first key mismatch detected, bytenr=5308416 parent_transid=7 key expected=(256,1,1) has=(256,1,0) [ 45.494287][ T6579] BTRFS: error (device loop2 state CS) in btrfs_fill_super:985: errno=-5 IO failure [ 45.561408][ T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.569840][ T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.663738][ T6492] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 46.641528][ T55] Bluetooth: hci1: command tx timeout [ 46.643681][ T6495] Bluetooth: hci3: command tx timeout [ 46.711789][ T6495] Bluetooth: hci2: command tx timeout [ 46.711864][ T6495] Bluetooth: hci0: command tx timeout [ 46.711915][ T6495] Bluetooth: hci4: command tx timeout [ 46.755891][ T6646] loop4: detected capacity change from 0 to 128 [ 46.756567][ T6646] adfs: Bad value for 'uid' [ 46.756624][ T6646] adfs: Bad value for 'uid' [ 46.912072][ T6645] loop4: detected capacity change from 0 to 128 [ 46.912531][ T6645] udf: Unknown parameter '000000000000000000050xffffffffffffffff' [ 46.917315][ T6645] xt_hashlimit: size too large, truncated to 1048576 [ 47.179440][ T6667] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.236565][ T6663] syz.0.19 uses obsolete (PF_INET,SOCK_PACKET) [ 47.362064][ T6677] ip6t_REJECT: ECHOREPLY is not supported [ 47.493777][ T6684] binder: 6682:6684 tried to acquire reference to desc 0, got 1 instead [ 47.500922][ T6684] binder: 6682:6684 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.504509][ T6684] binder: 6684 RLIMIT_NICE not set [ 47.507006][ T6684] binder: 6684 RLIMIT_NICE not set [ 47.511062][ T6572] binder: release 6682:6684 transaction 5 out, still active [ 47.511167][ T6572] binder: undelivered TRANSACTION_COMPLETE [ 47.537304][ T6572] binder: release 6682:6684 transaction 5 in, still active [ 47.537382][ T6572] binder: send failed reply for transaction 5, target dead [ 47.637767][ T6691] input: syz1 as /devices/virtual/input/input2 [ 47.940183][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 47.954084][ T6702] 9pnet_virtio: no channels available for device syz [ 47.977557][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.977889][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.439409][ T6722] binder: 6719:6722 tried to acquire reference to desc 0, got 1 instead [ 48.440067][ T6722] binder: 6719:6722 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 48.440135][ T6722] binder: 6722 RLIMIT_NICE not set [ 48.440167][ T6722] binder: 6722 RLIMIT_NICE not set [ 48.443252][ T26] binder: release 6719:6722 transaction 10 out, still active [ 48.443306][ T26] binder: undelivered TRANSACTION_COMPLETE [ 48.485919][ T9] binder: release 6719:6722 transaction 10 in, still active [ 48.485994][ T9] binder: send failed reply for transaction 10, target dead [ 48.712613][ T55] Bluetooth: hci3: command tx timeout [ 48.712692][ T55] Bluetooth: hci1: command tx timeout [ 48.789934][ T6495] Bluetooth: hci4: command tx timeout [ 48.790009][ T6495] Bluetooth: hci0: command tx timeout [ 48.790062][ T6495] Bluetooth: hci2: command tx timeout [ 48.866472][ T6745] netlink: 480 bytes leftover after parsing attributes in process `syz.0.54'. [ 48.869995][ T6745] netlink: 128 bytes leftover after parsing attributes in process `syz.0.54'. [ 48.930431][ T6748] ======================================================= [ 48.930431][ T6748] WARNING: The mand mount option has been deprecated and [ 48.930431][ T6748] and is ignored by this kernel. Remove the mand [ 48.930431][ T6748] option from the mount to silence this warning. [ 48.930431][ T6748] ======================================================= [ 48.930586][ T6748] 9pnet_virtio: no channels available for device syz [ 49.134041][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 49.455305][ T6774] can0: slcan on ttyS3. [ 49.508973][ T6779] binder: 6778:6779 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 49.640636][ T55] Bluetooth: hci0: unexpected cc 0x0c1a length: 7 > 1 [ 49.902174][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 50.018543][ T6802] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 50.150671][ T6774] can0 (unregistered): slcan off ttyS3. [ 50.390439][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 50.390521][ T6821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 50.621833][ T6677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.25'. [ 51.203559][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.90'. [ 51.206948][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.90'. [ 51.464374][ T6879] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.765154][ T6901] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 51.765239][ T6901] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.774914][ T6901] vhci_hcd vhci_hcd.0: Device attached [ 51.792545][ T6905] input: syz0 as /devices/virtual/input/input3 [ 51.983721][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.986110][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.019557][ T6543] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 52.264677][ T6937] use of bytesused == 0 is deprecated and will be removed in the future, [ 52.267354][ T6937] use the actual size instead. [ 52.544102][ T6902] vhci_hcd: connection reset by peer [ 52.551887][ T782] vhci_hcd: stop threads [ 52.552435][ T782] vhci_hcd: release socket [ 52.557183][ T782] vhci_hcd: disconnect device [ 52.666387][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 52.666456][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 52.666620][ T6967] netlink: 'syz.0.121': attribute type 19 has an invalid length. [ 52.820147][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.823444][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.998110][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.000844][ T26] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 54.000954][ T26] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 54.388973][ T6545] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 54.544263][ T6545] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 54.545460][ T6545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.546599][ T6545] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 54.546655][ T6545] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 54.546682][ T6545] usb 1-1: Manufacturer: syz [ 54.565964][ T6545] usb 1-1: config 0 descriptor?? [ 54.577531][ T6545] Registered IR keymap rc-hauppauge [ 54.629428][ T6545] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 54.648444][ T6545] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 54.651447][ T6545] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input4 [ 54.801308][ T6545] usb 1-1: USB disconnect, device number 2 [ 54.813172][ T7098] xt_hashlimit: size too large, truncated to 1048576 [ 55.296813][ T7129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.297119][ T7129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.320258][ T7131] xt_hashlimit: size too large, truncated to 1048576 [ 55.359663][ C0] Unknown status report in ack skb [ 55.483264][ T55] Bluetooth: hci1: unexpected event for opcode 0x2019 [ 55.529470][ T7145] xt_hashlimit: size too large, truncated to 1048576 [ 55.646757][ T7153] netlink: 84 bytes leftover after parsing attributes in process `syz.4.172'. [ 55.653184][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.172'. [ 55.781725][ T7164] binder: 7163:7164 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 55.783855][ T7164] binder: 7163:7164 ioctl c0306201 20000700 returned -22 [ 55.927907][ T7176] 9pnet_virtio: no channels available for device syz [ 56.097503][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.187'. [ 56.229356][ T26] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 56.231177][ T26] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 56.597470][ T7205] syzkaller1: entered promiscuous mode [ 56.599196][ T7205] syzkaller1: entered allmulticast mode [ 57.109696][ T6543] vhci_hcd: vhci_device speed not set [ 57.235464][ T7228] 9pnet_virtio: no channels available for device syz [ 57.291801][ T7243] binder: 7242:7243 tried to acquire reference to desc 0, got 1 instead [ 57.295233][ T7243] binder: 7242:7243 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 57.298714][ T7243] binder: 7243 RLIMIT_NICE not set [ 57.301953][ T7243] binder: 7243 RLIMIT_NICE not set [ 57.303979][ T7243] binder: 7242:7243 got reply transaction with bad transaction stack, transaction 17 has target 7242:7243 [ 57.307055][ T7243] binder: 7242:7243 transaction reply to 0:0 failed 18/29201/-71, code 0 size 0-0 line 3066 [ 57.310591][ T6549] binder: release 7242:7243 transaction 17 out, still active [ 57.310665][ T6549] binder: undelivered TRANSACTION_COMPLETE [ 57.310701][ T6549] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.323563][ T6549] binder: release 7242:7243 transaction 17 in, still active [ 57.325681][ T6549] binder: send failed reply for transaction 17, target dead [ 57.497072][ T7258] netlink: 'syz.0.216': attribute type 13 has an invalid length. [ 57.579352][ T7258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.637527][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 57.790337][ T7268] block nbd0: shutting down sockets [ 57.921316][ T7274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.223'. [ 58.011034][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.011338][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.056350][ T7282] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 58.058745][ T7282] binder: 7281:7282 ioctl 4018620d 20000040 returned -1 [ 58.257226][ T7288] 9pnet_virtio: no channels available for device syz [ 58.396216][ T7290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.231'. [ 58.463230][ T7294] Bluetooth: MGMT ver 1.23 [ 58.557787][ T7301] 9pnet_virtio: no channels available for device syz [ 58.629132][ T26] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 58.629166][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 58.629424][ T26] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 59.238826][ T7317] @: renamed from vlan0 (while UP) [ 59.395683][ T7331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.398734][ T7331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.007846][ T6572] hid-generic 0005:046D:0009.0001: unknown main item tag 0x0 [ 60.029855][ T6572] hid-generic 0005:046D:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 60.326659][ T7358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.326853][ T7358] IPv6: NLM_F_CREATE should be set when creating new route [ 60.326881][ T7358] IPv6: NLM_F_CREATE should be set when creating new route [ 60.617349][ T7377] xt_hashlimit: size too large, truncated to 1048576 [ 60.789668][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 60.791670][ T26] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 60.793277][ T26] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 62.175406][ T7432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.800931][ T6267] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 62.955648][ T6267] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 62.955721][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.955750][ T6267] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.955777][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.955805][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.961832][ T6267] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 62.961876][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.961905][ T6267] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.961934][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.961963][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.966621][ T6267] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 62.966660][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 62.966688][ T6267] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.966715][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 62.966743][ T6267] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 62.975819][ T6267] usb 1-1: string descriptor 0 read error: -22 [ 62.975919][ T6267] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 62.975946][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.002156][ T6267] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 63.925055][ T7474] netlink: 64 bytes leftover after parsing attributes in process `syz.3.305'. [ 64.159545][ T7481] random: crng reseeded on system resumption [ 64.711184][ T2394] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.755145][ T6267] IPVS: starting estimator thread 0... [ 64.758191][ T7483] tipc: Started in network mode [ 64.758272][ T7483] tipc: Node identity ac1414aa, cluster identity 4711 [ 64.758740][ T7483] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 64.758815][ T7483] tipc: Enabled bearer , priority 10 [ 64.849166][ T7484] IPVS: using max 33 ests per chain, 79200 per kthread [ 64.860350][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 64.889760][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.029064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.169009][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.308953][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.448944][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.588993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.621586][ T7514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.622558][ T7514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.728954][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 65.870129][ T6267] tipc: Node number set to 2886997162 [ 65.919966][ T6549] usb 1-1: USB disconnect, device number 3 [ 66.008964][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 66.278998][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 69.834661][ T1805] cfg80211: failed to load regulatory.db [ 69.908974][ C0] net_ratelimit: 3 callbacks suppressed [ 69.909061][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 70.948976][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 71.988975][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 73.039979][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 74.068974][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 75.109015][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 76.148966][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 77.188973][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 78.228957][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 79.268976][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 80.318958][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 81.348976][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 82.389062][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 83.428963][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 84.468964][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 85.518972][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 86.548950][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 87.588999][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 88.638971][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 89.669011][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 90.719010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 91.749014][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 92.788964][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.828996][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 94.869016][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 95.908981][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 96.948994][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 97.989213][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 99.029011][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 100.069021][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 101.109029][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 102.149017][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 103.189022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 104.229022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 105.269019][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 106.309661][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.349070][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.399006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 109.428993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 110.469009][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.509024][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.549030][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 113.589027][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 114.629293][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 115.669122][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 116.708997][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 117.748982][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 118.798975][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.838993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 120.868977][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 121.909105][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 122.949020][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 123.988927][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 125.029121][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 126.068993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 126.150736][ T2394] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.108967][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 128.148976][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 129.188992][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 130.228955][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.278978][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 132.319033][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 133.348965][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 134.388992][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 135.429001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 136.468994][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 137.509003][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 138.549012][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 139.589083][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 140.628985][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 141.668994][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 142.708973][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 143.748960][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 144.788986][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 145.829061][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 146.869014][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 147.909028][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 148.948956][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 149.988993][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 151.028998][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 152.069005][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 153.109016][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 154.149016][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 155.189015][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 156.229063][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 157.268999][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 158.309030][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 159.348994][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 160.399013][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 161.429007][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 162.469061][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 163.509001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.558995][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.589001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 166.629009][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.678975][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.718988][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 169.749001][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.789022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.829024][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 172.869011][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.909020][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.959033][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 175.999013][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.029014][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.069008][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.109009][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.149006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.199089][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.229006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 183.269006][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.309039][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 185.349028][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.389003][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.429033][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.591616][ T2394] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.469024][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 189.509041][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.559010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.589019][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.628996][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.668999][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.708961][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 195.748995][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 196.789012][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 197.829041][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 198.869021][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 199.909024][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 200.949008][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 201.029155][ T32] INFO: task syz-executor:6499 blocked for more than 143 seconds. [ 201.029232][ T32] Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 [ 201.029253][ T32] Blocked by coredump. [ 201.029269][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 201.029287][ T32] task:syz-executor state:D stack:0 pid:6499 tgid:6499 ppid:1 task_flags:0x40014c flags:0x00000018 [ 201.029324][ T32] Call trace: [ 201.029341][ T32] __switch_to+0x414/0x834 (T) [ 201.029372][ T32] __schedule+0x13b0/0x28d4 [ 201.029396][ T32] schedule+0xb4/0x230 [ 201.029420][ T32] schedule_preempt_disabled+0x18/0x2c [ 201.029445][ T32] __mutex_lock_common+0xbd0/0x2190 [ 201.029470][ T32] mutex_lock_nested+0x2c/0x38 [ 201.029495][ T32] rfkill_unregister+0xb8/0x208 [ 201.029533][ T32] hci_unregister_dev+0x308/0x4a8 [ 201.029561][ T32] vhci_release+0x7c/0xd0 [ 201.029588][ T32] __fput+0x340/0x75c [ 201.029613][ T32] ____fput+0x20/0x58 [ 201.029636][ T32] task_work_run+0x1dc/0x260 [ 201.029662][ T32] do_exit+0x4e8/0x1998 [ 201.029694][ T32] do_group_exit+0x194/0x22c [ 201.029720][ T32] pid_child_should_wake+0x0/0x1dc [ 201.029745][ T32] invoke_syscall+0x98/0x2b8 [ 201.029768][ T32] el0_svc_common+0x130/0x23c [ 201.029791][ T32] do_el0_svc+0x48/0x58 [ 201.029813][ T32] el0_svc+0x58/0x17c [ 201.029839][ T32] el0t_64_sync_handler+0x78/0x108 [ 201.029865][ T32] el0t_64_sync+0x198/0x19c [ 201.029901][ T32] INFO: task kworker/1:4:6544 blocked for more than 143 seconds. [ 201.029921][ T32] Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 [ 201.029940][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 201.029957][ T32] task:kworker/1:4 state:D stack:0 pid:6544 tgid:6544 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 201.029992][ T32] Workqueue: events rfkill_global_led_trigger_worker [ 201.030024][ T32] Call trace: [ 201.030040][ T32] __switch_to+0x414/0x834 (T) [ 201.030064][ T32] __schedule+0x13b0/0x28d4 [ 201.030088][ T32] schedule+0xb4/0x230 [ 201.030112][ T32] schedule_preempt_disabled+0x18/0x2c [ 201.030136][ T32] __mutex_lock_common+0xbd0/0x2190 [ 201.030161][ T32] mutex_lock_nested+0x2c/0x38 [ 201.030186][ T32] rfkill_global_led_trigger_worker+0x30/0xe4 [ 201.030211][ T32] process_one_work+0x7e8/0x156c [ 201.030234][ T32] worker_thread+0x958/0xed8 [ 201.030257][ T32] kthread+0x5fc/0x75c [ 201.030295][ T32] ret_from_fork+0x10/0x20 [ 201.030328][ T32] INFO: task syz.2.102:6891 blocked for more than 143 seconds. [ 201.030351][ T32] Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 [ 201.030372][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 201.030396][ T32] task:syz.2.102 state:D stack:0 pid:6891 tgid:6891 ppid:6491 task_flags:0x400040 flags:0x00000011 [ 201.030431][ T32] Call trace: [ 201.030447][ T32] __switch_to+0x414/0x834 (T) [ 201.030475][ T32] __schedule+0x13b0/0x28d4 [ 201.030503][ T32] schedule+0xb4/0x230 [ 201.030535][ T32] schedule_preempt_disabled+0x18/0x2c [ 201.030560][ T32] __mutex_lock_common+0xbd0/0x2190 [ 201.030589][ T32] mutex_lock_nested+0x2c/0x38 [ 201.030617][ T32] rfkill_unregister+0xb8/0x208 [ 201.030645][ T32] nfc_unregister_device+0x94/0x288 [ 201.030674][ T32] nci_unregister_device+0x1dc/0x21c [ 201.030711][ T32] virtual_ncidev_close+0x5c/0xa0 [ 201.030736][ T32] __fput+0x340/0x75c [ 201.030762][ T32] ____fput+0x20/0x58 [ 201.030785][ T32] task_work_run+0x1dc/0x260 [ 201.030814][ T32] do_notify_resume+0x16c/0x1ec [ 201.030840][ T32] el0_svc+0xb4/0x17c [ 201.030868][ T32] el0t_64_sync_handler+0x78/0x108 [ 201.030899][ T32] el0t_64_sync+0x198/0x19c [ 201.030934][ T32] [ 201.030934][ T32] Showing all locks held in the system: [ 201.030956][ T32] 3 locks held by kworker/u8:1/14: [ 201.030979][ T32] 4 locks held by kworker/1:1/26: [ 201.031000][ T32] #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 201.031076][ T32] #1: ffff800097747bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 201.031148][ T32] #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x58/0x158 [ 201.031224][ T32] #3: ffff0000dc688100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x4c/0x2a8 [ 201.031304][ T32] 1 lock held by khungtaskd/32: [ 201.031325][ T32] #0: ffff80008f508920 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 201.031403][ T32] 2 locks held by pr/ttyAMA0/46: [ 201.031441][ T32] 2 locks held by getty/6259: [ 201.031463][ T32] #0: ffff0000cd72e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 201.031549][ T32] #1: ffff80009b5eb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa0 [ 201.031626][ T32] 1 lock held by syz-executor/6493: [ 201.031645][ T32] #0: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 [ 201.031725][ T32] 1 lock held by syz-executor/6499: [ 201.031746][ T32] #0: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 [ 201.031821][ T32] 3 locks held by kworker/1:4/6544: [ 201.031840][ T32] #0: ffff0000c0028d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x658/0x156c [ 201.031916][ T32] #1: ffff8000a3717bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6ec/0x156c [ 201.031992][ T32] #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x30/0xe4 [ 201.032072][ T32] 2 locks held by syz.2.102/6891: [ 201.032091][ T32] #0: ffff0000dc688100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x68/0x288 [ 201.032168][ T32] #1: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xb8/0x208 [ 201.032244][ T32] 3 locks held by syz.1.318/7502: [ 201.032265][ T32] #0: ffff8000924f25b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 [ 201.032341][ T32] #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xf4/0x624 [ 201.032416][ T32] #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac [ 201.032491][ T32] 3 locks held by syz.0.326/7518: [ 201.032520][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.032595][ T32] #1: ffff0000f267e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xac/0x304 [ 201.032673][ T32] #2: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac [ 201.032751][ T32] 2 locks held by syz.0.326/7522: [ 201.032769][ T32] #0: ffff8000924f25b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x28/0x50 [ 201.032837][ T32] #1: ffff8000924f23c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0xf4/0x624 [ 201.032907][ T32] 1 lock held by syz-executor/7535: [ 201.032925][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.032996][ T32] 2 locks held by syz.3.333/7539: [ 201.033014][ T32] #0: ffff0000c25230a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 201.033084][ T32] #1: ffff80009276a6e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x44/0x7ac [ 201.033154][ T32] 1 lock held by syz-executor/7542: [ 201.033172][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033242][ T32] 1 lock held by syz-executor/7552: [ 201.033261][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033331][ T32] 1 lock held by syz-executor/7553: [ 201.033352][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033422][ T32] 1 lock held by syz-executor/7556: [ 201.033441][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033524][ T32] 1 lock held by syz-executor/7563: [ 201.033543][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033613][ T32] 1 lock held by syz-executor/7565: [ 201.033632][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033706][ T32] 1 lock held by syz-executor/7570: [ 201.033725][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033797][ T32] 1 lock held by syz-executor/7571: [ 201.033815][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033885][ T32] 1 lock held by syz-executor/7575: [ 201.033904][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.033977][ T32] 1 lock held by syz-executor/7577: [ 201.033995][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.034071][ T32] 1 lock held by syz-executor/7579: [ 201.034090][ T32] #0: ffff800090e6dfe8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x68/0x328 [ 201.034160][ T32] [ 201.034176][ T32] ============================================= [ 201.034176][ T32] [ 201.034194][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 201.247626][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT [ 201.250544][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.253280][ T32] Call trace: [ 201.254143][ T32] show_stack+0x2c/0x3c (C) [ 201.255264][ T32] __dump_stack+0x30/0x40 [ 201.256428][ T32] dump_stack_lvl+0x30/0x12c [ 201.257632][ T32] dump_stack+0x1c/0x28 [ 201.258778][ T32] panic+0x2bc/0x7ac [ 201.259836][ T32] hung_task_panic+0x0/0x2c [ 201.261072][ T32] kthread+0x5fc/0x75c [ 201.262193][ T32] ret_from_fork+0x10/0x20 [ 201.263360][ T32] SMP: stopping secondary CPUs [ 201.264666][ T32] Kernel Offset: disabled [ 201.265832][ T32] CPU features: 0x0800,000040e0,01000250,82017203 [ 201.267492][ T32] Memory Limit: none [ 201.699736][ T32] Rebooting in 86400 seconds..