last executing test programs: 9.468545381s ago: executing program 0 (id=806): sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec0500", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a00000008000100670000000800", @ANYRES32=0x0, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "030600", "fcffffff", ["50d59404000100", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r3, r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0xc7e, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) r6 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) 6.926987848s ago: executing program 0 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, 0x0, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 5.893544643s ago: executing program 1 (id=813): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100000000000000000002000000", @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035006970"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.510419779s ago: executing program 0 (id=814): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x4, 0x4, 0x544, 0xffffffff, 0x2f8, 0x2f8, 0x0, 0xfeffffff, 0xffffffff, 0x47c, 0x47c, 0x47c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x18c, 0x1cc, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0x0, 0xffffffff], @ipv4=@multicast1, [0xff, 0xffffff00, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xff000000, 0x0, 0xffffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00], 0x4, 0x1, 0x33, 0x4e23, 0x4e27, 0x4e22, 0x4e20, 0x702}, 0x1, 0xb}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7fff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaa0f0180c20000000800450000b0400000000011907800000000000000004e244e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d0000000000"], 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket(0x10, 0x2, 0x0) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) mq_notify(r4, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x9454}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) syz_open_dev$sndctrl(0x0, 0x5, 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="00210bde", 0x4}], 0x1, 0xee, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x81) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, r1, 0x0) 5.41674644s ago: executing program 1 (id=815): r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x202001, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000008c0)='\x00', &(0x7f0000000900)='./file1\x00', 0xffffffffffffffff) r1 = syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$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") fcntl$getownex(r1, 0x10, &(0x7f00000013c0)) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x77ffff7, 0x4012011, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)="f9", 0x1, 0x8000c61) 5.360835421s ago: executing program 2 (id=816): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.818187629s ago: executing program 2 (id=817): sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec0500", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a00000008000100670000000800", @ANYRES32=0x0, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "030600", "fcffffff", ["50d59404000100", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r3, r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0xc7e, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) r6 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5}) 3.466035979s ago: executing program 2 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x4, 0x4, 0x544, 0xffffffff, 0x2f8, 0x2f8, 0x0, 0xfeffffff, 0xffffffff, 0x47c, 0x47c, 0x47c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x18c, 0x1cc, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0x0, 0xffffffff], @ipv4=@multicast1, [0xff, 0xffffff00, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xff000000, 0x0, 0xffffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00], 0x4, 0x1, 0x33, 0x4e23, 0x4e27, 0x4e22, 0x4e20, 0x702}, 0x1, 0xb}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7fff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaa0f0180c20000000800450000b0400000000011907800000000000000004e244e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d000000000000000000cbad1784ff5b664840765393b93ae70b00000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2640f954c07a3178cfe7d49bc05bc71a708490eeeba458e2b7947817a1cf97e7e461dd8b99dac2236212c0046f5c69f0c"], 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e23, 0x10, @mcast1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000000340)=""/19, 0x13, 0x0) socket(0x10, 0x2, 0x0) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r4, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x9454}, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x5, 0x40) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=r5], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, r1, 0x0) 3.3844421s ago: executing program 0 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r4, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.35940825s ago: executing program 1 (id=820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x4, 0x4, 0x544, 0xffffffff, 0x2f8, 0x2f8, 0x0, 0xfeffffff, 0xffffffff, 0x47c, 0x47c, 0x47c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x18c, 0x1cc, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0x0, 0xffffffff], @ipv4=@multicast1, [0xff, 0xffffff00, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xff000000, 0x0, 0xffffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00], 0x4, 0x1, 0x33, 0x4e23, 0x4e27, 0x4e22, 0x4e20, 0x702}, 0x1, 0xb}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7fff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaa0f0180c20000000800450000b0400000000011907800000000000000004e244e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d0000000000"], 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket(0x10, 0x2, 0x0) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) mq_notify(r4, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x9454}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x5, 0x40) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="00210bde", 0x4}], 0x1, 0xee, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x81) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, r1, 0x0) 3.35844779s ago: executing program 3 (id=821): r0 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x800) getpeername$unix(r2, 0x0, &(0x7f0000000340)) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="000000000000000000000000f7ffffff00000000ccac83299874304f6adf8ea6968b5dfad2cbca7b367563386772567b4781771846f7fa8850530f081f9ba0a411446711d96cc390b1b209f23fb9edca216ed5b7bc951f9be4f97a4b85ff2f894f945dab141d51fb6988b0f8e64cf84d462a1c4fd75e6860190b790f4f49624c5da0d36c7d4cb79fdb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x64) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x0) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) bind$bt_hci(r6, 0x0, 0x0) 2.283481636s ago: executing program 3 (id=822): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f00000002c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 1.868975002s ago: executing program 1 (id=823): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100000000000000000002000000", @ANYRES32=r2, @ANYBLOB="000000000000000018003480140035006970"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.857349933s ago: executing program 0 (id=824): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0xfff2}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x2, 0x9, 0x8004, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x2, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x1, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.843129623s ago: executing program 2 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef8d00000000"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.620815216s ago: executing program 3 (id=826): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 650.20919ms ago: executing program 1 (id=827): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 604.691351ms ago: executing program 0 (id=828): r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x202001, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000008c0)='\x00', &(0x7f0000000900)='./file1\x00', 0xffffffffffffffff) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x77ffff7, 0x4012011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)="f9", 0x1, 0x8000c61) 527.879232ms ago: executing program 2 (id=829): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 444.554553ms ago: executing program 3 (id=830): syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x309ca00, 0x0, 0x0, 0x0, 0x0) 272.667096ms ago: executing program 2 (id=831): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x3}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r4, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x2f8, 0x106}}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(r4, &(0x7f0000000700)={{0xcc, 0x8, 0x3, 0xdd, 0x243, 0x5, 0xf7, 0xf76}, "af74f66d9efec92799f5202041db92039b6e622986257680ee56bbc6ab38c389e46b5f", ['\x00', '\x00', '\x00', '\x00']}, 0x443) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000850}, 0x8001) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40001081}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c80)={0x2a4, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc5af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b7f}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90b0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff90c}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x103}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x944}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2a}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x347d}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20004800}, 0x54) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) 229.444866ms ago: executing program 3 (id=832): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 139.323288ms ago: executing program 1 (id=833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x4, 0x4, 0x544, 0xffffffff, 0x2f8, 0x2f8, 0x0, 0xfeffffff, 0xffffffff, 0x47c, 0x47c, 0x47c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], [0xffffff00], 'ip6gre0\x00', 'veth0_to_bond\x00', {}, {}, 0x32, 0x7, 0x5, 0x4}, 0x2f2, 0x18c, 0x1cc, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff000000, 0x0, 0xffffffff], @ipv4=@multicast1, [0xff, 0xffffff00, 0xff, 0xffffffff], @ipv4=@local, [0x0, 0xff000000, 0x0, 0xffffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00], 0x4, 0x1, 0x33, 0x4e23, 0x4e27, 0x4e22, 0x4e20, 0x702}, 0x1, 0xb}}, @common=@ah={{0x30}, {[0x4d5, 0x4d2], 0xc8, 0x4, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2, "7bb9e202c328195132db405277bbb7a6b21cf6ae22238cb8f38000"}}}, {{@uncond, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xa, 0x7fff]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast2, [0xffffffff], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_macvtap\x00', 'vcan0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0xa60], 0x0, 0x2, 0x2}}, @common=@srh1={{0x8c}, {0x4, 0x0, 0x0, 0x0, 0x0, @dev, @remote, @private1, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0xff000000], [0x0, 0xff, 0x0, 0xffffffff], 0x968, 0x2}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5a0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) syz_emit_ethernet(0xbe, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaa0f0180c20000000800450000b0400000000011907800000000000000004e244e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d000000000000000000cbad1784ff5b664840765393b93ae70b00000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2640f954c07a3178cfe7d49bc05bc71a708490eeeba458e2b7947817a1cf97e7e461dd8b99dac2236212c0046f5c69f0c"], 0x0) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e23, 0x10, @mcast1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000000340)=""/19, 0x13, 0x0) socket(0x10, 0x2, 0x0) r4 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r4, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x9454}, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x5, 0x40) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES64=r5], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x300000f, 0x12, r1, 0x0) 0s ago: executing program 3 (id=834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128"], 0xfdef) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0xc, 0x7ffffffb}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 79.726216][ T5768] cgroup: Unknown subsys name 'net' [ 79.869134][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.604762][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.303070][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.341679][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.350199][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.358545][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.370795][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.372164][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.379055][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.400741][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.408306][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.416824][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.425122][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.433120][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.440463][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.448685][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.456306][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.456707][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.471657][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.479193][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.487321][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.495762][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.510317][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.522975][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.531173][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.543752][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.980651][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 84.068952][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 84.114100][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 84.197508][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 84.293671][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.301529][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.309157][ T5780] bridge_slave_0: entered allmulticast mode [ 84.317387][ T5780] bridge_slave_0: entered promiscuous mode [ 84.349220][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.356517][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.364090][ T5782] bridge_slave_0: entered allmulticast mode [ 84.371607][ T5782] bridge_slave_0: entered promiscuous mode [ 84.379722][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.387282][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.394694][ T5780] bridge_slave_1: entered allmulticast mode [ 84.402676][ T5780] bridge_slave_1: entered promiscuous mode [ 84.428033][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.435377][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.442873][ T5782] bridge_slave_1: entered allmulticast mode [ 84.450470][ T5782] bridge_slave_1: entered promiscuous mode [ 84.538400][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.557356][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.593295][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.605415][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.638727][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.657487][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.665376][ T5779] bridge_slave_0: entered allmulticast mode [ 84.677928][ T5779] bridge_slave_0: entered promiscuous mode [ 84.686447][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.696510][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.703887][ T5781] bridge_slave_0: entered allmulticast mode [ 84.714047][ T5781] bridge_slave_0: entered promiscuous mode [ 84.745738][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.755851][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.763381][ T5779] bridge_slave_1: entered allmulticast mode [ 84.770999][ T5779] bridge_slave_1: entered promiscuous mode [ 84.788231][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.798153][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.805662][ T5781] bridge_slave_1: entered allmulticast mode [ 84.813583][ T5781] bridge_slave_1: entered promiscuous mode [ 84.845227][ T5780] team0: Port device team_slave_0 added [ 84.865773][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.891734][ T5782] team0: Port device team_slave_0 added [ 84.899445][ T5780] team0: Port device team_slave_1 added [ 84.908347][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.932066][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.945143][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.956891][ T5782] team0: Port device team_slave_1 added [ 85.004993][ T5779] team0: Port device team_slave_0 added [ 85.046168][ T5779] team0: Port device team_slave_1 added [ 85.067822][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.074929][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.101196][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.115005][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.122261][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.148626][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.160880][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.167960][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.197368][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.223439][ T5781] team0: Port device team_slave_0 added [ 85.248280][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.255450][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.281731][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.301997][ T5781] team0: Port device team_slave_1 added [ 85.320718][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.327725][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.354471][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.368446][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.375562][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.401832][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.427921][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.435137][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.461270][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.503515][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.510880][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.537337][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.548417][ T5091] Bluetooth: hci1: command tx timeout [ 85.590085][ T5780] hsr_slave_0: entered promiscuous mode [ 85.596681][ T5780] hsr_slave_1: entered promiscuous mode [ 85.620482][ T5091] Bluetooth: hci2: command tx timeout [ 85.620516][ T5794] Bluetooth: hci0: command tx timeout [ 85.620743][ T51] Bluetooth: hci3: command tx timeout [ 85.681619][ T5779] hsr_slave_0: entered promiscuous mode [ 85.688886][ T5779] hsr_slave_1: entered promiscuous mode [ 85.695792][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.704855][ T5779] Cannot create hsr debugfs directory [ 85.718000][ T5782] hsr_slave_0: entered promiscuous mode [ 85.725038][ T5782] hsr_slave_1: entered promiscuous mode [ 85.731563][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.739177][ T5782] Cannot create hsr debugfs directory [ 85.765972][ T5781] hsr_slave_0: entered promiscuous mode [ 85.773954][ T5781] hsr_slave_1: entered promiscuous mode [ 85.780390][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.788009][ T5781] Cannot create hsr debugfs directory [ 86.250811][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.265042][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.276932][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.290543][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.358582][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.375898][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.387668][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.398166][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.499029][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.516483][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.527709][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.538682][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.659230][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.672887][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.696599][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.709290][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.723436][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.777111][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.820193][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.827626][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.866977][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.898368][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.905564][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.951136][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.971506][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.057302][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.083053][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.090409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.144212][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.151498][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.174230][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.181467][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.219723][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.295613][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.302883][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.391160][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.465845][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.473184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.509558][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.516875][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.631085][ T51] Bluetooth: hci1: command tx timeout [ 87.700063][ T51] Bluetooth: hci3: command tx timeout [ 87.705814][ T51] Bluetooth: hci2: command tx timeout [ 87.712489][ T51] Bluetooth: hci0: command tx timeout [ 87.838739][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.019082][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.098935][ T5780] veth0_vlan: entered promiscuous mode [ 88.155792][ T5780] veth1_vlan: entered promiscuous mode [ 88.212757][ T5779] veth0_vlan: entered promiscuous mode [ 88.275061][ T5779] veth1_vlan: entered promiscuous mode [ 88.295532][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.319610][ T5780] veth0_macvtap: entered promiscuous mode [ 88.364222][ T5780] veth1_macvtap: entered promiscuous mode [ 88.399432][ T5779] veth0_macvtap: entered promiscuous mode [ 88.412994][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.432495][ T5779] veth1_macvtap: entered promiscuous mode [ 88.500914][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.517210][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.528555][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.541835][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.559192][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.587981][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.597943][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.607084][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.616217][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.636484][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.647605][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.659384][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.671666][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.681508][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.690778][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.699517][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.710843][ T5781] veth0_vlan: entered promiscuous mode [ 88.747520][ T5781] veth1_vlan: entered promiscuous mode [ 88.792966][ T5782] veth0_vlan: entered promiscuous mode [ 88.869670][ T5782] veth1_vlan: entered promiscuous mode [ 88.928489][ T5781] veth0_macvtap: entered promiscuous mode [ 88.964291][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.965331][ T5781] veth1_macvtap: entered promiscuous mode [ 88.981368][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.030827][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.038727][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.098144][ T5782] veth0_macvtap: entered promiscuous mode [ 89.117058][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.129594][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.168579][ T5782] veth1_macvtap: entered promiscuous mode [ 89.182009][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.193081][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.203067][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.214733][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.227400][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.266620][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.278553][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.290736][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.302439][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.303308][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.313757][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.318828][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.346302][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.363250][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.372537][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.382335][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.412374][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.425202][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.436469][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.447008][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.458448][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.476813][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.495594][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.539392][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.553045][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.564623][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.576903][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.587608][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.599217][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.615957][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.672752][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.700230][ T5091] Bluetooth: hci1: command tx timeout [ 89.710038][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.718828][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.733706][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.781476][ T5091] Bluetooth: hci0: command tx timeout [ 89.786960][ T5091] Bluetooth: hci2: command tx timeout [ 89.792988][ T51] Bluetooth: hci3: command tx timeout [ 89.972877][ T5853] kAFS: No cell specified [ 89.995227][ T5852] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.045018][ T5852] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 90.941041][ T5854] ======================================================= [ 90.941041][ T5854] WARNING: The mand mount option has been deprecated and [ 90.941041][ T5854] and is ignored by this kernel. Remove the mand [ 90.941041][ T5854] option from the mount to silence this warning. [ 90.941041][ T5854] ======================================================= [ 90.980978][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.014145][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.081751][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.110516][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.412065][ T5862] 9pnet_virtio: no channels available for device c::: [ 91.450662][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.458601][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.647163][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.737800][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.779879][ T5091] Bluetooth: hci1: command tx timeout [ 91.860113][ T5091] Bluetooth: hci2: command tx timeout [ 91.866017][ T5091] Bluetooth: hci3: command tx timeout [ 91.876502][ T5091] Bluetooth: hci0: command tx timeout [ 92.584423][ T8] cfg80211: failed to load regulatory.db [ 93.620933][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.609920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 97.790373][ T5886] process 'syz.3.8' launched './file1' with NULL argv: empty string added [ 99.909853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.940325][ T5904] 9pnet_fd: Insufficient options for proto=fd [ 102.311394][ T5905] pim6reg: entered allmulticast mode [ 102.408717][ T5905] pim6reg: left allmulticast mode [ 105.233573][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.764731][ T5944] netlink: 348 bytes leftover after parsing attributes in process `syz.2.20'. [ 109.340631][ T9] IPVS: starting estimator thread 0... [ 109.427236][ T5949] kAFS: No cell specified [ 109.432231][ T5946] IPVS: using max 16 ests per chain, 38400 per kthread [ 111.140924][ T5959] netlink: 348 bytes leftover after parsing attributes in process `syz.3.24'. [ 111.563800][ T5967] pim6reg: entered allmulticast mode [ 111.643185][ T5967] pim6reg: left allmulticast mode [ 113.340261][ T5980] syz.1.27 (5980) used greatest stack depth: 17544 bytes left [ 114.484877][ T5996] pim6reg: entered allmulticast mode [ 114.547842][ T5823] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.642781][ T5996] pim6reg: left allmulticast mode [ 114.860774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 114.899837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 115.330505][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 115.350630][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.398292][ T5823] usb 3-1: config 0 has no interfaces? [ 115.453964][ T5823] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 115.542732][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.764395][ T5823] usb 3-1: config 0 descriptor?? [ 116.608770][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 116.667990][ T5987] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 117.420781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 118.421098][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 118.607033][ T5823] usb 3-1: USB disconnect, device number 2 [ 118.809923][ T5857] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.003199][ T6019] 9pnet_fd: Insufficient options for proto=fd [ 121.314583][ T6029] 9pnet_virtio: no channels available for device c::: [ 121.439988][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 121.479078][ T6033] kAFS: No cell specified [ 122.373865][ T5857] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 122.381870][ T5857] usb 2-1: can't read configurations, error -71 [ 123.226797][ T6046] 9pnet_virtio: no channels available for device c::: [ 123.381151][ T5794] Bluetooth: hci4: command 0x1003 tx timeout [ 123.387646][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.290872][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.395670][ T6061] pim6reg: entered allmulticast mode [ 128.413860][ T6061] pim6reg: left allmulticast mode [ 128.944113][ T5857] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.061236][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.229207][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 129.724027][ T5857] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.734326][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 129.760823][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.053062][ T27] usb 4-1: config 0 has no interfaces? [ 130.470437][ T5857] usb 2-1: config 0 has no interfaces? [ 130.476182][ T5857] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 130.653591][ T27] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 130.662829][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.670917][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.682648][ T5857] usb 2-1: config 0 descriptor?? [ 130.691524][ T27] usb 4-1: config 0 descriptor?? [ 131.030738][ T6085] 9pnet_fd: Insufficient options for proto=fd [ 131.712110][ T27] usb 4-1: USB disconnect, device number 2 [ 131.753994][ T5857] usb 2-1: USB disconnect, device number 4 [ 131.887861][ T6089] siw: device registration error -23 [ 133.158903][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.172769][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.983491][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 135.367638][ T6116] pim6reg: entered allmulticast mode [ 135.445420][ T6116] pim6reg: left allmulticast mode [ 136.675131][ T6129] kAFS: No cell specified [ 137.143490][ T6133] 9pnet_virtio: no channels available for device c::: [ 137.309912][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.450366][ T6134] lo speed is unknown, defaulting to 1000 [ 137.456582][ T6134] lo speed is unknown, defaulting to 1000 [ 137.464915][ T6134] lo speed is unknown, defaulting to 1000 [ 137.529471][ T6134] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.607160][ T6134] lo speed is unknown, defaulting to 1000 [ 137.623332][ T6134] lo speed is unknown, defaulting to 1000 [ 137.637497][ T6134] lo speed is unknown, defaulting to 1000 [ 137.650483][ T6134] lo speed is unknown, defaulting to 1000 [ 137.724628][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 138.137447][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.147849][ T8] usb 1-1: config 0 has no interfaces? [ 138.153634][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 138.164599][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.504871][ T8] usb 1-1: config 0 descriptor?? [ 139.220366][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 139.889231][ T27] usb 1-1: USB disconnect, device number 2 [ 140.124799][ T6153] 9pnet_virtio: no channels available for device c::: [ 141.020328][ T6161] 9pnet_virtio: no channels available for device c::: [ 142.579992][ T5794] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 143.020141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.140037][ T5794] Bluetooth: hci5: command 0x1003 tx timeout [ 143.650958][ T5091] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 144.300586][ T5822] IPVS: starting estimator thread 0... [ 144.310177][ T6182] netlink: 356 bytes leftover after parsing attributes in process `syz.1.73'. [ 144.339925][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.580093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 145.989846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.441665][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 146.877561][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.888699][ T9] usb 4-1: config 0 has no interfaces? [ 146.894460][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 146.903659][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.935595][ T9] usb 4-1: config 0 descriptor?? [ 147.010811][ T6185] pim6reg: entered allmulticast mode [ 147.022729][ T6184] IPVS: using max 16 ests per chain, 38400 per kthread [ 147.091550][ T6185] pim6reg: left allmulticast mode [ 147.532602][ T9] usb 4-1: can't set config #0, error -71 [ 147.639011][ T9] usb 4-1: USB disconnect, device number 3 [ 147.949914][ T5822] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 148.072097][ T6197] pim6reg: entered allmulticast mode [ 148.078070][ T6198] pim6reg: left allmulticast mode [ 148.360345][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 148.680124][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.693177][ T5822] usb 2-1: config 0 has no interfaces? [ 148.698732][ T5822] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 148.709049][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.727808][ T5822] usb 2-1: config 0 descriptor?? [ 149.139485][ T5822] usb 2-1: USB disconnect, device number 5 [ 149.318415][ T6213] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.354129][ T6214] kAFS: No cell specified [ 150.414812][ T6223] 9pnet_virtio: no channels available for device c::: [ 152.339975][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 152.500192][ T5794] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 152.806977][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.489989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.904716][ T6236] siw: device registration error -23 [ 156.050819][ T6237] syz.2.87 uses obsolete (PF_INET,SOCK_PACKET) [ 158.380103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 160.478088][ T5161] IPVS: starting estimator thread 0... [ 160.700373][ T6253] IPVS: using max 17 ests per chain, 40800 per kthread [ 163.033287][ T6277] pim6reg: entered allmulticast mode [ 163.085713][ T6277] pim6reg: left allmulticast mode [ 164.420866][ T6291] pim6reg: entered allmulticast mode [ 164.462302][ T6291] pim6reg: left allmulticast mode [ 165.877377][ T6300] fuse: Unknown parameter '0x0000000000000003' [ 166.738416][ T6305] pim6reg: entered allmulticast mode [ 166.744467][ T6306] pim6reg: left allmulticast mode [ 173.596562][ T6346] siw: device registration error -23 [ 173.611703][ T6346] kAFS: No cell specified [ 173.865903][ T6352] 9pnet_virtio: no channels available for device c::: [ 173.874706][ T6350] fuse: Unknown parameter 'use00000000000000000000' [ 173.934182][ T6353] netlink: 356 bytes leftover after parsing attributes in process `syz.0.110'. [ 173.961550][ T5161] IPVS: starting estimator thread 0... [ 174.070101][ T6355] IPVS: using max 16 ests per chain, 38400 per kthread [ 175.513667][ T6373] syzkaller0: entered promiscuous mode [ 175.519373][ T6373] syzkaller0: entered allmulticast mode [ 175.764039][ T6376] 9pnet_virtio: no channels available for device c::: [ 176.340146][ T5794] Bluetooth: hci4: command 0x1003 tx timeout [ 176.352974][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 176.382701][ T6383] 9pnet_fd: Insufficient options for proto=fd [ 177.860094][ T5091] Bluetooth: hci5: command 0x1003 tx timeout [ 178.336053][ T6392] kAFS: No cell specified [ 178.363528][ T5788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 178.496361][ T6395] siw: device registration error -23 [ 183.434210][ T6415] siw: device registration error -23 [ 183.448572][ T6415] kAFS: No cell specified [ 184.483366][ T6417] 9pnet_virtio: no channels available for device c::: [ 186.580336][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 191.076036][ T6467] 9pnet_virtio: no channels available for device c::: [ 191.410033][ T6472] siw: device registration error -23 [ 193.140380][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 194.312694][ T6475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.325720][ T6475] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.401050][ T6475] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 194.415986][ T6475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.464819][ T6475] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 194.524643][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.535359][ T6483] siw: device registration error -23 [ 194.545607][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.356549][ T6475] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.374265][ T6475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.452785][ T6475] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.614345][ T6475] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 195.768448][ T6475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.830687][ T6475] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.018056][ T6475] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 196.438755][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.444952][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.782200][ T34] Bluetooth: hci4: Frame reassembly failed (-84) [ 197.379951][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.816747][ T6507] siw: device registration error -23 [ 197.967166][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.499948][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.506190][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.739951][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 198.739984][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 198.939604][ T6518] siw: device registration error -23 [ 199.682955][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.020206][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.152388][ T6525] siw: device registration error -23 [ 200.166569][ T6525] kAFS: No cell specified [ 200.801987][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.811559][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.054936][ T6527] fuse: Bad value for 'fd' [ 201.426088][ T6534] 9pnet_virtio: no channels available for device c::: [ 203.472184][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.478393][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.830302][ T6553] siw: device registration error -23 [ 205.694324][ T6556] pim6reg: entered allmulticast mode [ 205.743039][ T6556] pim6reg: left allmulticast mode [ 206.790009][ T6555] netlink: 348 bytes leftover after parsing attributes in process `syz.0.169'. [ 209.255820][ T6565] netlink: 356 bytes leftover after parsing attributes in process `syz.3.171'. [ 210.544273][ T6570] netlink: 356 bytes leftover after parsing attributes in process `syz.1.172'. [ 210.663399][ T6575] fuse: Bad value for 'fd' [ 210.988900][ T6583] syz.3.176[6583]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 211.258322][ T6583] loop3: detected capacity change from 0 to 4096 [ 211.334132][ T6583] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 211.845688][ T6583] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 212.179645][ T6592] siw: device registration error -23 [ 213.224106][ T6595] loop1: detected capacity change from 0 to 512 [ 213.261080][ T6595] EXT4-fs: Ignoring removed orlov option [ 213.307014][ T6595] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 213.347997][ T6595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 213.360296][ T6595] System zones: 1-12 [ 213.365512][ T6595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.476257][ T6602] siw: device registration error -23 [ 213.568099][ T6595] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.180: invalid indirect mapped block 2 (level 2) [ 213.940707][ T6603] loop2: detected capacity change from 0 to 512 [ 213.971549][ T6595] EXT4-fs (loop1): Remounting filesystem read-only [ 214.047944][ T6595] EXT4-fs (loop1): 1 truncate cleaned up [ 214.094166][ T6603] EXT4-fs: Ignoring removed orlov option [ 214.262638][ T6595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 214.391353][ T6608] fuse: Bad value for 'fd' [ 214.401092][ T6603] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 214.533026][ T6603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002] [ 214.560337][ T6603] System zones: 1-12 [ 214.600287][ T6603] EXT4-fs (loop2): orphan cleanup on readonly fs [ 214.912191][ T6615] siw: device registration error -23 [ 215.508690][ T6603] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.181: invalid block [ 215.564550][ T6603] EXT4-fs (loop2): Remounting filesystem read-only [ 215.590462][ T6603] EXT4-fs (loop2): 1 truncate cleaned up [ 215.597497][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 215.652347][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 215.805327][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 216.437987][ T6620] loop1: detected capacity change from 0 to 32768 [ 217.972769][ T6635] netlink: 348 bytes leftover after parsing attributes in process `syz.3.192'. [ 221.258703][ T6640] 9pnet_virtio: no channels available for device c::: [ 223.380178][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 223.386856][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 223.885637][ T6654] netlink: 356 bytes leftover after parsing attributes in process `syz.1.197'. [ 229.914817][ T6681] netlink: 348 bytes leftover after parsing attributes in process `syz.2.204'. [ 232.711017][ T6691] binder: 6690:6691 ioctl c0306201 2000000006c0 returned -14 [ 232.780368][ T6689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.787454][ T6689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.811315][ T6689] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.834901][ T6689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.829961][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.836044][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.858513][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 235.105770][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.149117][ T6712] netlink: 356 bytes leftover after parsing attributes in process `syz.1.211'. [ 236.566728][ T6716] loop2: detected capacity change from 0 to 512 [ 236.670952][ T6716] EXT4-fs: Ignoring removed nobh option [ 236.724261][ T6716] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 236.751608][ T6716] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 236.793793][ T6716] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.216: inode has both inline data and extents flags [ 237.011709][ T6716] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.216: couldn't read orphan inode 13 (err -117) [ 237.298955][ T6716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.777118][ T6724] loop1: detected capacity change from 0 to 4096 [ 238.066987][ T6724] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 238.341885][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.386202][ T6724] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 239.254197][ T6743] loop1: detected capacity change from 0 to 512 [ 239.368677][ T6743] EXT4-fs: Ignoring removed nobh option [ 239.533285][ T6739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.602512][ T6739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.660540][ T6739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.731818][ T6739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.794694][ T6743] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 239.802691][ T6743] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 239.813500][ T6743] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #13: comm syz.1.223: inode has both inline data and extents flags [ 239.828267][ T6743] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.223: couldn't read orphan inode 13 (err -117) [ 239.900466][ T6743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.002537][ T6747] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 240.884991][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.710154][ T6754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 241.717319][ T6754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 241.747033][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.773942][ T6754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 241.784926][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.807134][ T6754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 241.905580][ T6760] kAFS: No cell specified [ 242.889395][ T6764] loop0: detected capacity change from 0 to 512 [ 242.896992][ T6764] EXT4-fs: Ignoring removed nobh option [ 242.929530][ T6764] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 242.940471][ T6764] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 242.977799][ T6764] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #13: comm syz.0.231: inode has both inline data and extents flags [ 242.995427][ T6764] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.231: couldn't read orphan inode 13 (err -117) [ 243.121787][ T6764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.166574][ T6771] netlink: 356 bytes leftover after parsing attributes in process `syz.1.228'. [ 243.825387][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 243.825393][ T5794] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.831648][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.020990][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 244.686017][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.905535][ T6787] pim6reg: entered allmulticast mode [ 244.949639][ T6787] pim6reg: left allmulticast mode [ 246.250800][ T6779] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.275440][ T6788] siw: device registration error -23 [ 246.287442][ T6779] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.320931][ T6779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.512319][ T6779] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 246.760706][ T6792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 246.766777][ T6792] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 246.802069][ T6792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 246.808769][ T6792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.096138][ T6809] siw: device registration error -23 [ 247.110288][ T6809] kAFS: No cell specified [ 248.023319][ T6810] netlink: 348 bytes leftover after parsing attributes in process `syz.2.239'. [ 248.830280][ T5794] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.836481][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.854231][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 248.860624][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.432102][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 252.737248][ T6836] siw: device registration error -23 [ 252.751516][ T6836] kAFS: No cell specified [ 253.737340][ T6839] siw: device registration error -23 [ 255.943798][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.950400][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.963378][ T6848] 9pnet_virtio: no channels available for device c::: [ 259.062684][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 259.072355][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 259.687048][ T2981] Bluetooth: hci4: Frame reassembly failed (-84) [ 260.945192][ T6877] loop3: detected capacity change from 0 to 1024 [ 261.000622][ T6873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.010560][ T6873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.103210][ T6873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.119383][ T6873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.355377][ T6882] siw: device registration error -23 [ 261.372038][ T6882] kAFS: No cell specified [ 261.710080][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 262.351998][ T6884] siw: device registration error -23 [ 263.750067][ T6896] fuse: Bad value for 'fd' [ 263.779992][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.786099][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.789940][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 263.793592][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 267.788512][ T6914] netlink: 348 bytes leftover after parsing attributes in process `syz.3.269'. [ 268.334360][ T6905] binder: 6903:6905 ioctl c0306201 2000000006c0 returned -14 [ 268.334505][ T6922] 9pnet_virtio: no channels available for device c::: [ 268.493435][ T6926] fuse: Bad value for 'fd' [ 268.776167][ T6932] siw: device registration error -23 [ 270.842178][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 270.849665][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 273.503667][ T6957] siw: device registration error -23 [ 278.946316][ T6983] 9pnet_virtio: no channels available for device c::: [ 279.068338][ T6986] kAFS: No cell specified [ 280.034119][ T6991] loop2: detected capacity change from 0 to 1024 [ 280.166544][ T6994] loop1: detected capacity change from 0 to 64 [ 280.281148][ T28] audit: type=1800 audit(1782547093.133:2): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 280.322414][ T28] audit: type=1800 audit(1782547093.153:3): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 280.364207][ T28] audit: type=1800 audit(1782547093.153:4): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 280.405200][ T28] audit: type=1800 audit(1782547093.233:5): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.289" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 280.626444][ T6999] loop1: detected capacity change from 0 to 2048 [ 280.657856][ T6999] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 280.671994][ T6999] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 280.686210][ T6999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.925072][ T6996] loop2: detected capacity change from 0 to 32768 [ 281.032806][ T7003] loop3: detected capacity change from 0 to 64 [ 281.064252][ T5788] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 281.064297][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 281.132391][ T7004] siw: device registration error -23 [ 281.154898][ T7004] kAFS: No cell specified [ 281.525339][ T28] audit: type=1800 audit(1782547094.373:6): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.293" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 281.679165][ T28] audit: type=1800 audit(1782547094.373:7): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.293" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 281.971437][ T28] audit: type=1800 audit(1782547094.563:8): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.293" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 282.066773][ T28] audit: type=1800 audit(1782547094.693:9): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.293" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 283.330980][ T7017] siw: device registration error -23 [ 284.586999][ T7020] siw: device registration error -23 [ 287.162160][ T7037] 9pnet_virtio: no channels available for device c::: [ 287.196649][ T7038] kAFS: No cell specified [ 288.129320][ T7025] loop3: detected capacity change from 0 to 32768 [ 288.166086][ T7027] loop0: detected capacity change from 0 to 32768 [ 288.236877][ T7025] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.240764][ T7027] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.433784][ T7027] XFS (loop0): Ending clean mount [ 288.628381][ T7025] XFS (loop3): Ending clean mount [ 289.299076][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 289.370811][ T5782] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 292.268071][ T7075] siw: device registration error -23 [ 292.285375][ T7075] kAFS: No cell specified [ 292.722341][ T7085] siw: device registration error -23 [ 293.559178][ T7084] loop0: detected capacity change from 0 to 2048 [ 293.603319][ T7084] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 293.617280][ T7084] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 293.631862][ T7084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.545209][ T7103] netlink: 356 bytes leftover after parsing attributes in process `syz.2.318'. [ 298.578466][ T7113] siw: device registration error -23 [ 305.056235][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 305.380491][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 305.596883][ T8] usb 2-1: config 0 has no interfaces? [ 305.678521][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 305.790934][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.852476][ T8] usb 2-1: config 0 descriptor?? [ 307.048008][ T7145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 307.064354][ T7145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 307.079096][ T7145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.107558][ T7145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.128491][ T7151] siw: device registration error -23 [ 307.145234][ T23] usb 2-1: USB disconnect, device number 6 [ 307.160118][ T7151] kAFS: No cell specified [ 308.460028][ T7159] netlink: 328 bytes leftover after parsing attributes in process `syz.2.332'. [ 309.060114][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 309.172252][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.178572][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.188502][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.566692][ T7175] loop2: detected capacity change from 0 to 128 [ 312.600804][ T7175] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 312.626299][ T7175] hpfs: filesystem error: improperly stopped [ 312.632703][ T7175] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 312.640865][ T7175] hpfs: You really don't want any checks? You are crazy... [ 312.650483][ T7175] hpfs: Code page index out of array [ 312.657803][ T7175] hpfs: code page support is disabled [ 312.711320][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 312.762293][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 312.836461][ T7175] hpfs: filesystem error: unable to find root dir [ 313.648121][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 313.665336][ T7181] loop0: detected capacity change from 0 to 2048 [ 313.784930][ T7181] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 314.059004][ T7181] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 314.427374][ T7181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.725282][ T7200] 9pnet_virtio: no channels available for device c::: [ 317.386623][ T7210] siw: device registration error -23 [ 317.403993][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.411902][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.512990][ T7213] kAFS: No cell specified [ 318.502077][ T7211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.548626][ T7211] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.588770][ T7211] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.596227][ T7211] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.674333][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.594831][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.660775][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.666884][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.707979][ T7215] loop1: detected capacity change from 0 to 32768 [ 320.881317][ T7228] siw: device registration error -23 [ 321.381276][ T7215] JBD2: Ignoring recovery information on journal [ 321.769980][ T7219] loop2: detected capacity change from 0 to 32768 [ 321.817859][ T7215] JBD2: journal reset failed [ 321.835626][ T7215] (syz.1.347,7215,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 321.854715][ T7219] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 321.866781][ T7215] (syz.1.347,7215,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 321.886972][ T7219] JBD2: Ignoring recovery information on journal [ 321.991661][ T7219] JBD2: journal reset failed [ 322.009805][ T7219] (syz.2.349,7219,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 322.019120][ T7219] (syz.2.349,7219,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 322.033684][ T7137] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.488015][ T7235] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.494325][ T7235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 323.500656][ T7235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.506727][ T7235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.476855][ T7246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.484780][ T7246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.492212][ T7246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.498897][ T7246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.658461][ T7231] loop3: detected capacity change from 0 to 32768 [ 325.780328][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.143252][ T7263] 9pnet_virtio: no channels available for device c::: [ 327.069093][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.139191][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.145844][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 328.030156][ T5823] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 328.994534][ T7277] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.000722][ T7277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.006770][ T7277] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.012887][ T7277] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.129858][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 329.137137][ T5823] usb 4-1: config 0 has no interfaces? [ 329.220144][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 330.024135][ T5823] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 330.049800][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.102404][ T5823] usb 4-1: config 0 descriptor?? [ 330.147899][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 330.345286][ T7291] loop0: detected capacity change from 0 to 1024 [ 330.357489][ T5161] usb 4-1: USB disconnect, device number 4 [ 331.072728][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.072734][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.072779][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.975448][ T7295] siw: device registration error -23 [ 333.286699][ T7299] fuse: Bad value for 'group_id' [ 333.809210][ T7307] siw: device registration error -23 [ 335.703537][ T7312] 9pnet_virtio: no channels available for device c::: [ 335.740796][ T7315] loop2: detected capacity change from 0 to 64 [ 336.997184][ T28] audit: type=1800 audit(1782547149.845:10): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.377" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 337.054251][ T28] audit: type=1800 audit(1782547149.875:11): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.377" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 337.255329][ T28] audit: type=1800 audit(1782547149.875:12): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.377" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 337.410479][ T28] audit: type=1800 audit(1782547149.995:13): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.377" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 337.789870][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 337.914308][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 338.419974][ T5161] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 338.599856][ T5161] usb 1-1: Using ep0 maxpacket: 16 [ 338.612839][ T5161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.623077][ T5161] usb 1-1: config 0 has no interfaces? [ 338.628609][ T5161] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 338.649908][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.667550][ T5161] usb 1-1: config 0 descriptor?? [ 338.909280][ T7336] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 339.059950][ T5794] Bluetooth: hci5: command 0x1003 tx timeout [ 339.067745][ T5788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 340.261165][ T5794] Bluetooth: hci4: command 0x1003 tx timeout [ 340.269430][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 340.893371][ T5792] Bluetooth: hci6: command 0x1003 tx timeout [ 340.901603][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 341.846900][ T5161] usb 1-1: USB disconnect, device number 3 [ 342.100375][ T5788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.493571][ T7361] siw: device registration error -23 [ 343.163361][ T7353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 343.169567][ T7353] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 343.175821][ T7353] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 343.182020][ T7353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.509573][ T7363] loop1: detected capacity change from 0 to 2048 [ 343.585738][ T7363] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 343.635731][ T7363] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 343.785357][ T7369] siw: device registration error -23 [ 344.420229][ T5788] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.594599][ T7363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.219991][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 345.220013][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 345.220100][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 345.389142][ T7373] loop0: detected capacity change from 0 to 2048 [ 345.416998][ T7373] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 345.428266][ T7373] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 345.467194][ T7373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 348.170780][ T7379] Illegal XDP return value 36 on prog (id 9) dev N/A, expect packet loss! [ 348.225020][ T3477] Bluetooth: hci4: Frame reassembly failed (-84) [ 348.239856][ T3477] Bluetooth: hci4: Frame reassembly failed (-84) [ 350.260100][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 350.266876][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 354.100023][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 354.107404][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 354.358745][ T7399] loop0: detected capacity change from 0 to 32768 [ 359.168166][ T7435] siw: device registration error -23 [ 364.820782][ T7460] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 364.827437][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 364.835305][ T7460] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.841574][ T7460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.847687][ T7460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.882811][ T7476] loop1: detected capacity change from 0 to 64 [ 367.043883][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.058114][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.066598][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.407643][ T7483] siw: device registration error -23 [ 370.076245][ T7507] siw: device registration error -23 [ 372.072213][ T7521] pim6reg: entered allmulticast mode [ 372.401224][ T7518] siw: device registration error -23 [ 374.490977][ T7552] 9pnet_virtio: no channels available for device c::: [ 375.085987][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 375.092709][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 375.596456][ T7565] siw: device registration error -23 [ 376.578781][ T7567] loop1: detected capacity change from 0 to 64 [ 376.585424][ T5792] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 376.592161][ T5091] Bluetooth: hci5: command 0x1003 tx timeout [ 376.822068][ T7572] siw: device registration error -23 [ 377.851841][ T28] audit: type=1800 audit(1782547190.699:14): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.445" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 377.889570][ T28] audit: type=1800 audit(1782547190.729:15): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.445" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 378.151604][ T28] audit: type=1800 audit(1782547190.729:16): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.445" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 378.429408][ T28] audit: type=1800 audit(1782547190.899:17): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.445" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 378.801668][ T28] audit: type=1800 audit(1782547191.619:18): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.445" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 378.839735][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.860991][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.018620][ T7569] loop0: detected capacity change from 0 to 32768 [ 380.103486][ T7603] loop1: detected capacity change from 0 to 64 [ 380.213549][ T7605] loop2: detected capacity change from 0 to 64 [ 380.452877][ T3517] Bluetooth: hci4: Frame reassembly failed (-84) [ 380.647089][ T28] audit: type=1800 audit(1782547193.489:19): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.453" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 380.714313][ T28] audit: type=1800 audit(1782547193.559:20): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.453" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 380.764676][ T28] audit: type=1800 audit(1782547193.559:21): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.453" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 380.828106][ T28] audit: type=1800 audit(1782547193.659:22): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.456" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 380.878756][ T28] audit: type=1800 audit(1782547193.679:23): pid=7605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.456" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 381.094473][ T7622] pim6reg: entered allmulticast mode [ 381.148339][ T7622] pim6reg: left allmulticast mode [ 382.072689][ T7629] loop1: detected capacity change from 0 to 64 [ 382.499936][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 383.216873][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 383.216972][ T28] audit: type=1800 audit(1782547196.059:28): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.458" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 383.245514][ T28] audit: type=1800 audit(1782547196.079:29): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.458" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 383.268003][ T28] audit: type=1800 audit(1782547196.079:30): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.458" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 383.288093][ T28] audit: type=1800 audit(1782547196.139:31): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.458" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 384.620458][ T7657] siw: device registration error -23 [ 387.796784][ T2967] Bluetooth: hci4: Frame reassembly failed (-84) [ 389.300017][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 389.434006][ T7673] loop0: detected capacity change from 0 to 2048 [ 389.600841][ T7673] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 389.658027][ T7673] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 389.767009][ T7677] siw: device registration error -23 [ 389.894709][ T7673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.885395][ T7691] fuse: Unknown parameter 'group_i00000000000000000000' [ 392.042556][ T7692] siw: device registration error -23 [ 393.065037][ T7703] loop3: detected capacity change from 0 to 64 [ 393.458153][ T2967] Bluetooth: hci4: Frame reassembly failed (-84) [ 393.485776][ T28] audit: type=1800 audit(1782547206.329:32): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 393.509470][ T28] audit: type=1800 audit(1782547206.359:33): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 393.537971][ T28] audit: type=1800 audit(1782547206.359:34): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 393.567160][ T28] audit: type=1800 audit(1782547206.409:35): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.482" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 393.886233][ T7706] loop2: detected capacity change from 0 to 32768 [ 394.013341][ T7717] netlink: 356 bytes leftover after parsing attributes in process `syz.3.486'. [ 395.460097][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 395.460951][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 395.945511][ T7721] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.972164][ T7721] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 396.027271][ T7721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 396.771694][ T7721] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.932311][ T7731] pim6reg: left allmulticast mode [ 397.297833][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 398.030405][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 398.110099][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 398.177052][ T7740] loop0: detected capacity change from 0 to 2048 [ 398.336913][ T7740] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 398.364647][ T7740] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 398.379733][ T7740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.397921][ T7748] Zero length message leads to an empty skb [ 398.733711][ T7754] loop0: detected capacity change from 0 to 64 [ 398.830173][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 398.920035][ T7742] loop3: detected capacity change from 0 to 32768 [ 399.004529][ T28] audit: type=1800 audit(1782547211.849:36): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.497" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 399.039812][ T28] audit: type=1800 audit(1782547211.879:37): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.497" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 399.081991][ T28] audit: type=1800 audit(1782547211.879:38): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.497" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 399.432867][ T3477] Bluetooth: hci4: Frame reassembly failed (-84) [ 399.649342][ T7765] pim6reg: entered allmulticast mode [ 399.697949][ T7765] pim6reg: left allmulticast mode [ 401.459865][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 401.459898][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 402.618999][ T7784] loop0: detected capacity change from 0 to 2048 [ 404.018785][ T7784] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 404.030211][ T7784] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 404.044613][ T7784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.425774][ T7804] pim6reg: entered allmulticast mode [ 404.477167][ T7804] pim6reg: left allmulticast mode [ 408.292810][ T7833] pim6reg: entered allmulticast mode [ 408.336038][ T7833] pim6reg: left allmulticast mode [ 409.019984][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 409.027469][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 409.072020][ T7816] loop1: detected capacity change from 0 to 32768 [ 409.330823][ T7839] loop3: detected capacity change from 0 to 64 [ 409.758047][ T7843] loop2: detected capacity change from 0 to 512 [ 409.802296][ T7843] EXT4-fs: Ignoring removed nobh option [ 409.857073][ T7843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 409.932296][ T7847] netlink: 356 bytes leftover after parsing attributes in process `syz.0.520'. [ 410.056751][ T7843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 410.661932][ T7843] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 410.843252][ T7843] EXT4-fs (loop2): 1 truncate cleaned up [ 410.868842][ T28] audit: type=1800 audit(1782547223.718:39): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 410.874079][ T7843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.952233][ T7852] loop0: detected capacity change from 0 to 64 [ 410.960533][ T28] audit: type=1800 audit(1782547223.768:40): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 411.047477][ T28] audit: type=1800 audit(1782547223.768:41): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 411.100028][ T28] audit: type=1800 audit(1782547223.878:42): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 411.170935][ T28] audit: type=1800 audit(1782547223.998:43): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.521" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 411.245657][ T28] audit: type=1800 audit(1782547224.068:44): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.518" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 411.268333][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.492060][ T28] audit: type=1800 audit(1782547224.348:45): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.522" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 411.541556][ T28] audit: type=1800 audit(1782547224.348:46): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.522" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 411.683822][ T28] audit: type=1800 audit(1782547224.388:47): pid=7852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.522" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 411.852696][ T28] audit: type=1800 audit(1782547224.488:48): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.522" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 413.205488][ T7867] loop2: detected capacity change from 0 to 64 [ 413.544234][ T7875] siw: device registration error -23 [ 415.219977][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 415.227066][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 416.860091][ T7887] siw: device registration error -23 [ 416.877638][ T7887] kAFS: No cell specified [ 418.305713][ T7888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.468011][ T7888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.571971][ T7888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.608035][ T7888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 418.625477][ T7899] fuse: Unknown parameter 'group_id00000000000000000000' [ 419.610306][ T7907] loop0: detected capacity change from 0 to 128 [ 420.242702][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 420.484715][ T7912] loop3: detected capacity change from 0 to 128 [ 420.526605][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 420.580286][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 420.660192][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 420.857013][ T7907] syzkaller0: entered promiscuous mode [ 420.956844][ T7907] syzkaller0: entered allmulticast mode [ 421.169306][ T7912] syzkaller0: entered promiscuous mode [ 421.186473][ T7912] syzkaller0: entered allmulticast mode [ 421.696468][ T7920] loop1: detected capacity change from 0 to 64 [ 421.703112][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 421.719976][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 421.957158][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 421.957174][ T28] audit: type=1800 audit(1782547234.805:53): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 422.004507][ T28] audit: type=1800 audit(1782547234.805:54): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 422.029284][ T28] audit: type=1800 audit(1782547234.805:55): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 422.068363][ T28] audit: type=1800 audit(1782547234.915:56): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 422.108230][ T28] audit: type=1800 audit(1782547234.955:57): pid=7923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.543" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 422.671961][ T7925] loop1: detected capacity change from 0 to 64 [ 422.899041][ T28] audit: type=1800 audit(1782547235.745:58): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.545" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 422.935085][ T28] audit: type=1800 audit(1782547235.775:59): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.545" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 422.983659][ T28] audit: type=1800 audit(1782547235.785:60): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.545" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 424.106063][ T7936] fuse: Bad value for 'user_id' [ 425.864707][ T7946] kAFS: No cell specified [ 427.979859][ T7953] siw: device registration error -23 [ 430.274941][ T7949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 430.320431][ T7949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 430.342568][ T7949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 430.351485][ T7949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 431.335801][ T7956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.342916][ T7956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 431.349960][ T7956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.356811][ T7956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 432.154978][ T7965] netlink: 356 bytes leftover after parsing attributes in process `syz.1.555'. [ 432.576264][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 432.741924][ T7970] fuse: Bad value for 'user_id' [ 433.679951][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 433.686275][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 433.692450][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 436.419906][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 436.426484][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 436.628829][ T7985] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.787676][ T7985] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.858344][ T7985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.931350][ T7985] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.354416][ T7993] siw: device registration error -23 [ 438.180113][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.810329][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.823979][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.831326][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 440.265259][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.283085][ T8011] netlink: 356 bytes leftover after parsing attributes in process `syz.0.570'. [ 440.351210][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.876142][ T8024] siw: device registration error -23 [ 443.351928][ T8029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 443.358168][ T8029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.379547][ T8029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.431069][ T8036] siw: device registration error -23 [ 443.486767][ T8029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.915108][ T8040] fuse: Bad value for 'fd' [ 444.053602][ T8045] siw: device registration error -23 [ 444.068523][ T8045] kAFS: No cell specified [ 444.965007][ T8042] loop0: detected capacity change from 0 to 4096 [ 445.192106][ T8042] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 445.258283][ T8042] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 445.458687][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 445.531347][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 445.537764][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 445.554085][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 445.777771][ T2967] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 445.790797][ T5781] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 445.797397][ T5781] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 445.821707][ T5781] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 445.829793][ T2967] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 446.022495][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 446.061116][ T8059] siw: device registration error -23 [ 446.076950][ T8059] kAFS: No cell specified [ 447.095292][ T8063] netlink: 356 bytes leftover after parsing attributes in process `syz.0.585'. [ 448.480012][ T2981] Bluetooth: hci4: Frame reassembly failed (-84) [ 449.789907][ T8071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.807693][ T8071] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 449.836692][ T8071] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 449.846336][ T8071] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 449.970167][ T8074] fuse: Bad value for 'fd' [ 450.080231][ T8078] netlink: 356 bytes leftover after parsing attributes in process `syz.2.589'. [ 451.473935][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 451.489343][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 451.859801][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 451.860107][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 451.866249][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 451.873251][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.725401][ T8088] siw: device registration error -23 [ 455.051235][ T8094] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.120009][ T8094] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.235577][ T8094] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.246368][ T8094] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.045296][ T8115] fuse: Bad value for 'fd' [ 456.052791][ T8110] siw: device registration error -23 [ 456.313141][ T2967] Bluetooth: hci4: Frame reassembly failed (-84) [ 456.670113][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.954191][ T8121] syzkaller0: entered promiscuous mode [ 456.970047][ T8121] syzkaller0: entered allmulticast mode [ 457.149100][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.309750][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 457.330941][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 458.013212][ T8130] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 458.021284][ T8130] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.027988][ T8130] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 458.034920][ T8130] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.340065][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 458.348501][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 459.092075][ T8138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.196960][ T8138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.239815][ T8138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.251154][ T8138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.622683][ T8150] fuse: Bad value for 'fd' [ 460.122346][ T8157] siw: device registration error -23 [ 460.183174][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 460.190857][ T5091] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 460.354851][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 461.229792][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.309920][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 461.316323][ T5091] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.474523][ T8164] fuse: Bad value for 'fd' [ 461.701169][ T8173] loop0: detected capacity change from 0 to 64 [ 461.845896][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 461.970077][ T8166] 9pnet: Could not find request transport: fd0x0000000000000000 [ 462.035849][ T28] audit: type=1800 audit(1782547274.885:61): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 462.117072][ T28] audit: type=1800 audit(1782547274.885:62): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 462.155181][ T28] audit: type=1800 audit(1782547274.885:63): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 462.210265][ T28] audit: type=1800 audit(1782547274.955:64): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 462.234422][ T28] audit: type=1800 audit(1782547274.995:65): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 462.259237][ T8179] 9pnet_virtio: no channels available for device c::: [ 462.656745][ T8187] fuse: Bad value for 'fd' [ 463.153263][ T8181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 463.160475][ T8181] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 463.166727][ T8181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.173943][ T8181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.859881][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 463.873087][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 464.341498][ T5091] Bluetooth: hci5: command 0x1003 tx timeout [ 464.348533][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 464.419905][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 464.922507][ T8207] fuse: Bad value for 'fd' [ 465.220256][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 465.226472][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 465.226542][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 466.030179][ T8212] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 466.038166][ T8212] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 466.045137][ T8212] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 466.051993][ T8212] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 466.261604][ T8217] loop3: detected capacity change from 0 to 64 [ 466.450139][ T8205] loop0: detected capacity change from 0 to 32768 [ 466.475987][ T8221] fuse: Bad value for 'fd' [ 466.553570][ T28] audit: type=1800 audit(1782547279.407:66): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.628" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 466.599778][ T28] audit: type=1800 audit(1782547279.407:67): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.628" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 466.653128][ T28] audit: type=1800 audit(1782547279.407:68): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.628" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 466.705283][ T28] audit: type=1800 audit(1782547279.487:69): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.628" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 466.757422][ T28] audit: type=1800 audit(1782547279.487:70): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.628" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 467.168666][ T8215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 467.184154][ T8215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 467.199268][ T8215] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 467.213684][ T8215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 467.238120][ T55] Bluetooth: hci4: Frame reassembly failed (-84) [ 468.175271][ T8239] fuse: Bad value for 'fd' [ 468.400494][ T8248] loop2: detected capacity change from 0 to 64 [ 468.419912][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 469.219905][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 469.226081][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 469.290594][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 469.322154][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 469.720865][ T8254] fuse: Invalid rootmode [ 470.032788][ T8266] siw: device registration error -23 [ 473.318812][ T2957] Bluetooth: hci4: Frame reassembly failed (-84) [ 473.472239][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 474.023310][ T8289] loop3: detected capacity change from 0 to 512 [ 474.045799][ T8292] fuse: Invalid rootmode [ 474.198449][ T8289] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 474.378841][ T8289] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.652: corrupted in-inode xattr: e_value size too large [ 474.893996][ T8289] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.652: couldn't read orphan inode 15 (err -117) [ 474.912497][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.011028][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.266869][ T8309] siw: device registration error -23 [ 476.148306][ T8315] loop0: detected capacity change from 0 to 64 [ 476.191504][ T8310] siw: device registration error -23 [ 476.535883][ T28] audit: type=1800 audit(1782547289.380:71): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.657" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 476.589787][ T28] audit: type=1800 audit(1782547289.400:72): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.657" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 476.636415][ T28] audit: type=1800 audit(1782547289.400:73): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.657" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 476.673538][ T28] audit: type=1800 audit(1782547289.410:74): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.657" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 476.758588][ T8324] fuse: Invalid rootmode [ 477.016863][ T143] Bluetooth: hci4: Frame reassembly failed (-84) [ 477.085625][ T8299] loop1: detected capacity change from 0 to 32768 [ 477.434915][ T8330] 9pnet_virtio: no channels available for device c::: [ 478.054439][ T8339] netlink: 356 bytes leftover after parsing attributes in process `syz.1.663'. [ 478.939269][ T8332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.947820][ T8332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.955142][ T8332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.963340][ T8332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 479.069056][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 479.459833][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 479.619757][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.979809][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 480.985878][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 481.002721][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 483.751767][ T8360] fuse: Bad value for 'rootmode' [ 483.772077][ T8361] loop0: detected capacity change from 0 to 64 [ 484.009982][ T28] audit: type=1800 audit(1782547296.850:75): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.669" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 484.143574][ T28] audit: type=1800 audit(1782547296.850:76): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.669" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 484.325226][ T28] audit: type=1800 audit(1782547296.850:77): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.669" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 484.557326][ T28] audit: type=1800 audit(1782547296.850:78): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.669" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 485.287198][ T8369] loop0: detected capacity change from 0 to 64 [ 487.160651][ T8382] 9pnet_virtio: no channels available for device c::: [ 489.229877][ T5091] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 489.594819][ T8397] fuse: Bad value for 'rootmode' [ 492.296668][ T8407] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.684'. [ 496.738317][ T8429] siw: device registration error -23 [ 499.330552][ T8440] 9pnet_virtio: no channels available for device c::: [ 499.380489][ T5091] Bluetooth: hci4: sending frame failed (-49) [ 499.392588][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 500.695564][ T8435] loop1: detected capacity change from 0 to 32768 [ 501.704952][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.711579][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.868886][ T8459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.900597][ T8459] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.936227][ T8459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.950045][ T8459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.163749][ T8461] siw: device registration error -23 [ 503.088134][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 503.351335][ T8508] 9pnet_virtio: no channels available for device c::: [ 503.943288][ T5091] Bluetooth: hci3: command 0x0c1a tx timeout [ 503.949396][ T5091] Bluetooth: hci0: command 0x0c1a tx timeout [ 504.101852][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout [ 505.710191][ T5792] Bluetooth: hci4: command 0x1003 tx timeout [ 505.973017][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 506.366722][ T8645] loop1: detected capacity change from 0 to 64 [ 507.931076][ T8702] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.708'. [ 511.177035][ T8723] loop0: detected capacity change from 0 to 64 [ 512.236153][ T8726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 512.976907][ T8726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.139263][ T8726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.746819][ T8726] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.815787][ T28] audit: type=1800 audit(1782547326.660:79): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.712" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 513.883696][ T28] audit: type=1800 audit(1782547326.730:80): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.712" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 513.943074][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.049829][ T28] audit: type=1800 audit(1782547326.760:81): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.712" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 514.110232][ T28] audit: type=1800 audit(1782547326.780:82): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.712" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 514.246574][ T8735] 9pnet: Could not find request transport: fd0x0000000000000005 [ 515.049900][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 515.415386][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 515.779933][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 524.347763][ T8843] siw: device registration error -23 [ 524.658575][ T8882] 9pnet_virtio: no channels available for device c::: [ 525.188941][ T8888] loop2: detected capacity change from 0 to 64 [ 526.301878][ T28] audit: type=1800 audit(1782547339.150:83): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.726" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 526.342308][ T28] audit: type=1800 audit(1782547339.190:84): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.726" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 526.375237][ T28] audit: type=1800 audit(1782547339.210:85): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.726" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 526.417590][ T28] audit: type=1800 audit(1782547339.220:86): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.726" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 526.979883][ T5091] Bluetooth: hci4: command 0x1003 tx timeout [ 526.987258][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 528.341326][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 528.417749][ T8908] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 528.425781][ T5792] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 528.623704][ T8911] siw: device registration error -23 [ 528.992239][ T8913] 9pnet_virtio: no channels available for device c::: [ 529.203493][ T8919] siw: device registration error -23 [ 530.047943][ T8922] loop2: detected capacity change from 0 to 64 [ 530.374841][ T28] audit: type=1800 audit(1782547343.220:87): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.738" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 530.405150][ T28] audit: type=1800 audit(1782547343.250:88): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.738" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 530.431605][ T28] audit: type=1800 audit(1782547343.250:89): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.738" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 530.457562][ T28] audit: type=1800 audit(1782547343.300:90): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.738" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 530.562217][ T8917] loop1: detected capacity change from 0 to 32768 [ 531.812890][ T8936] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 532.030693][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 532.038765][ T5792] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 533.884044][ T8944] sched: RT throttling activated [ 535.628937][ T9014] siw: device registration error -23 [ 536.575595][ T9016] siw: device registration error -23 [ 537.595032][ T9020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 537.642210][ T9020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 537.780136][ T9020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 537.786242][ T9020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 538.830142][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 539.044401][ T9034] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 539.146424][ T9037] siw: device registration error -23 [ 539.860073][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 539.860115][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout [ 540.120394][ T9048] netlink: 356 bytes leftover after parsing attributes in process `syz.2.762'. [ 542.795315][ T9061] loop2: detected capacity change from 0 to 64 [ 542.954223][ T9058] syzkaller0: entered promiscuous mode [ 542.971638][ T9058] syzkaller0: entered allmulticast mode [ 543.991359][ T9072] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 545.237427][ T9077] loop2: detected capacity change from 0 to 32768 [ 546.078960][ T9088] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 546.317343][ T9091] loop2: detected capacity change from 0 to 64 [ 547.751192][ T9107] siw: device registration error -23 [ 550.392620][ T9117] loop1: detected capacity change from 0 to 32768 [ 550.988954][ T9123] 9pnet_virtio: no channels available for device ./bus [ 551.914571][ T9125] loop3: detected capacity change from 0 to 64 [ 552.162491][ T9127] loop3: detected capacity change from 0 to 64 [ 553.295978][ T9142] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 553.787406][ T9144] netlink: 356 bytes leftover after parsing attributes in process `syz.2.791'. [ 553.898378][ T9150] fuse: Bad value for 'fd' [ 554.665763][ T9160] loop0: detected capacity change from 0 to 64 [ 556.056375][ T9169] fuse: Bad value for 'rootmode' [ 556.266271][ T9176] netlink: 328 bytes leftover after parsing attributes in process `syz.0.802'. [ 557.289275][ T9185] loop2: detected capacity change from 0 to 64 [ 557.406911][ T9186] netlink: 356 bytes leftover after parsing attributes in process `syz.0.806'. [ 560.617292][ T9193] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 560.839537][ T9196] siw: device registration error -23 [ 561.395825][ T9209] loop1: detected capacity change from 0 to 64 [ 561.458152][ T28] audit: type=1800 audit(1782547374.290:91): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.815" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 561.571632][ T28] audit: type=1800 audit(1782547374.340:92): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.815" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 561.672036][ T28] audit: type=1800 audit(1782547374.520:93): pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.815" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 562.196574][ T9217] netlink: 356 bytes leftover after parsing attributes in process `syz.2.817'. [ 563.151920][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.158315][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.257354][ T9231] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 564.417031][ T9234] siw: device registration error -23 [ 565.137693][ T9250] siw: device registration error -23 [ 566.199514][ T9260] loop0: detected capacity change from 0 to 64 [ 566.254131][ T28] audit: type=1800 audit(1782547379.090:94): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.828" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 566.324798][ T28] audit: type=1800 audit(1782547379.110:95): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.828" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 566.432816][ T28] audit: type=1800 audit(1782547379.280:96): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.828" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 566.554790][ T9268] fuse: Unknown parameter 'user_i00000000000000000000' [ 566.724036][ T9276] [ 566.726502][ T9276] ============================= [ 566.731621][ T9276] WARNING: suspicious RCU usage [ 566.736564][ T9276] syzkaller #0 Not tainted [ 566.741145][ T9276] ----------------------------- [ 566.746134][ T9276] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 566.755871][ T9276] [ 566.755871][ T9276] other info that might help us debug this: [ 566.755871][ T9276] [ 566.766602][ T9276] [ 566.766602][ T9276] rcu_scheduler_active = 2, debug_locks = 1 [ 566.774815][ T9276] 1 lock held by syz.3.834/9276: [ 566.779854][ T9276] #0: ffffffff8e3bfe48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 566.788953][ T9276] [ 566.788953][ T9276] stack backtrace: [ 566.795034][ T9276] CPU: 0 PID: 9276 Comm: syz.3.834 Not tainted syzkaller #0 [ 566.802373][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.812554][ T9276] Call Trace: [ 566.815963][ T9276] [ 566.819028][ T9276] dump_stack_lvl+0x18c/0x250 [ 566.823871][ T9276] ? load_image+0x420/0x420 [ 566.828513][ T9276] ? show_regs_print_info+0x20/0x20 [ 566.833784][ T9276] ? load_image+0x420/0x420 [ 566.838341][ T9276] ? print_tainted+0x14c/0x170 [ 566.843235][ T9276] lockdep_rcu_suspicious+0x1e1/0x300 [ 566.848744][ T9276] ieee80211_check_concurrent_iface+0x46b/0x950 [ 566.855186][ T9276] ieee80211_open+0xc1/0x200 [ 566.859888][ T9276] __dev_open+0x2cb/0x430 [ 566.864362][ T9276] ? dev_open+0x190/0x190 [ 566.868736][ T9276] __dev_change_flags+0x1e8/0x6a0 [ 566.873799][ T9276] ? dev_load+0x21/0x1f0 [ 566.878083][ T9276] ? __lock_acquire+0x7d80/0x7d80 [ 566.883148][ T9276] ? dev_get_flags+0x1c0/0x1c0 [ 566.887970][ T9276] ? full_name_hash+0x92/0xe0 [ 566.892737][ T9276] dev_change_flags+0x7c/0x1a0 [ 566.897557][ T9276] dev_ioctl+0x7b4/0x1140 [ 566.902004][ T9276] sock_do_ioctl+0x239/0x310 [ 566.906747][ T9276] ? sock_show_fdinfo+0xb0/0xb0 [ 566.911657][ T9276] sock_ioctl+0x5be/0x7e0 [ 566.916027][ T9276] ? sock_poll+0x3e0/0x3e0 [ 566.920489][ T9276] ? bpf_lsm_file_ioctl+0x9/0x10 [ 566.925494][ T9276] ? security_file_ioctl+0x80/0xa0 [ 566.930671][ T9276] ? sock_poll+0x3e0/0x3e0 [ 566.935125][ T9276] __se_sys_ioctl+0xfd/0x170 [ 566.939819][ T9276] do_syscall_64+0x55/0xb0 [ 566.944273][ T9276] ? clear_bhb_loop+0x40/0x90 [ 566.949154][ T9276] ? clear_bhb_loop+0x40/0x90 [ 566.953954][ T9276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.959967][ T9276] RIP: 0033:0x7efc7359ce59 [ 566.964470][ T9276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.984324][ T9276] RSP: 002b:00007efc744e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.992852][ T9276] RAX: ffffffffffffffda RBX: 00007efc73815fa0 RCX: 00007efc7359ce59 [ 567.000866][ T9276] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 567.008870][ T9276] RBP: 00007efc73632e6f R08: 0000000000000000 R09: 0000000000000000 [ 567.016879][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.024904][ T9276] R13: 00007efc73816038 R14: 00007efc73815fa0 R15: 00007ffe45a5b848 [ 567.033133][ T9276] [ 567.047145][ T9276] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 567.054772][ T9276] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode