last executing test programs: 23m3.327361065s ago: executing program 1 (id=188): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 23m1.396995801s ago: executing program 1 (id=193): userfaultfd(0x1) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019300)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40), 0x0, 0x8014) 22m53.379316738s ago: executing program 1 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 22m51.707848117s ago: executing program 1 (id=208): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258", 0x8}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000480)=""/242, 0xf2}], 0x4}, 0x123) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c0000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000326bd7000fbdbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x4) ptrace$cont(0x18, r2, 0x5, 0x1) r5 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), r6) close(r6) socket(0xa, 0x3, 0x3a) timer_create(0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000a73000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) 22m49.727289253s ago: executing program 1 (id=213): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, 0x0, 0x4000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, &(0x7f0000000300)=ANY=[]) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) 22m47.068442025s ago: executing program 1 (id=215): socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r2, 0x0, 0x20024090) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 22m29.931062986s ago: executing program 32 (id=215): socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r2, 0x0, 0x20024090) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x20000010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 15m18.736911495s ago: executing program 4 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15m16.453170759s ago: executing program 3 (id=1288): socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x1, 0x6, 0x0, 0x9, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d4, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3500, 0x4, 0x0, 0x0, 0x0, 0x800, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) r4 = mq_open(0x0, 0x40, 0x1a2, 0x0) mq_notify(r4, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x4010) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0x5) ioctl$EVIOCGLED(0xffffffffffffffff, 0x40284504, 0x0) 15m16.342050431s ago: executing program 4 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r2 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x417c, 0x2, 0x8001000, 0x2b8}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0xa}, {0x9b600000, 0x80000000, 0x3, 0x0, 0x9}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) 15m15.478137941s ago: executing program 4 (id=1291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 15m15.268853136s ago: executing program 3 (id=1292): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x78, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) keyctl$negate(0xd, 0x0, 0x7, r0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r8 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r8, 0x110, 0x6, 0x0, 0x0) keyctl$link(0x8, r0, r0) pwritev(r7, &(0x7f0000000280)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) 15m14.109205143s ago: executing program 3 (id=1294): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800010002000000fb25ffff0000efff000000000c0002000c83208b0100000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) gettid() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) acct(&(0x7f0000000180)='./file0\x00') socket(0x10, 0x3, 0x0) 15m14.022640705s ago: executing program 4 (id=1295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) timer_create(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 15m12.887226372s ago: executing program 4 (id=1298): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7f2cb81569"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9d5cc56b2"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4060000}, 0x1) r4 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000180)=0x7a553352, 0x4) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 15m7.545029327s ago: executing program 3 (id=1302): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = socket$inet6(0xa, 0x0, 0x10000081) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000180)=0x7a553352, 0x4) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 15m4.659412994s ago: executing program 4 (id=1306): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$mixer(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r3, r4, 0x0, 0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xc000, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80500c, 0x0) 15m2.163369843s ago: executing program 3 (id=1311): fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 14m59.415926427s ago: executing program 3 (id=1316): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x60040090) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cd43bc444a506cd4fb40ada91ac7660b3"}) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 14m48.195206919s ago: executing program 33 (id=1306): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$mixer(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d06, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r3, r4, 0x0, 0xff) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0xc000, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80500c, 0x0) 14m43.348223233s ago: executing program 34 (id=1316): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$802154_dgram(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x60040090) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebd9cd43bc444a506cd4fb40ada91ac7660b3"}) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 11m36.86036949s ago: executing program 0 (id=1619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef28", 0x5b}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e", 0x1d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55", 0x3f}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f", 0x7f}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$vcsa(&(0x7f0000000280), 0x3ff, 0x689c1e0c043b1181) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m35.54306001s ago: executing program 0 (id=1622): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7f2cb81569"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a9d5cc56b2"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4060000}, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000180)=0x7a553352, 0x4) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 11m23.919418862s ago: executing program 0 (id=1630): syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) gettid() r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000d17c"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000001480)={0x80, "c21fead35dacaffab15599d9c7d075f15b9bab055e859ab2bfa6e8d1ffe1ec7c", 0x1}) socket$nl_route(0x10, 0x3, 0x0) 11m19.7217925s ago: executing program 0 (id=1638): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4d0d8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(0x0, &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x13b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 11m14.004599774s ago: executing program 0 (id=1645): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4d0d8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x13b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 11m12.134752388s ago: executing program 0 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 10m53.978469092s ago: executing program 35 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40), 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 15.141124601s ago: executing program 5 (id=2392): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) close(0x3) ftruncate(0xffffffffffffffff, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x8fd, 0x12) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 13.307157803s ago: executing program 5 (id=2395): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7}) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000004d32b000000e000000200000000000000000000000000100000000000000d00000000000000edc730070000000003000000000000000600000000000000030000000000000084000000000000000200000000000000070000000000000006000000000000000400000000000000030000000000000001000000ffffffff040000002dbd7000003500000a0004012100000000000000aa0001007467723132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010030000a9"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x39, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x9af, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x20}}}, &(0x7f0000000440)) fcntl$getownex(r2, 0x10, &(0x7f0000000480)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r6, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x6}}, 0x6, 0x2, 0x400, 0x2005, 0x2da, 0x94, 0xfe}, 0x9c) 10.39126432s ago: executing program 5 (id=2400): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = inotify_init1(0x80000) r5 = fanotify_init(0x1a, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) fanotify_mark(r5, 0x229, 0x4800001a, r6, 0x0) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r2, 0x0, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) recvmmsg$unix(r8, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 10.370387731s ago: executing program 7 (id=2401): socket$netlink(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x0, 0x3b604f5b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) 10.355578611s ago: executing program 2 (id=2402): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = inotify_init1(0x80000) r5 = fanotify_init(0x1a, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) fanotify_mark(r5, 0x229, 0x4800001a, r6, 0x0) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r2, 0x0, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r7) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) recvmmsg$unix(r8, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 7.443075768s ago: executing program 7 (id=2403): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x671ec167a4b72160}, 0x488d) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0xfc, 0xc44, &(0x7f0000001080)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.509174619s ago: executing program 6 (id=2412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a0002000535", 0x1e}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rseq(0x0, 0x0, 0x0, 0x0) 3.44928501s ago: executing program 2 (id=2413): socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) 2.750880266s ago: executing program 2 (id=2414): r0 = gettid() tkill(r0, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x2000, 0x0) preadv(r1, 0x0, 0x0, 0x1, 0x10001) r2 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) epoll_create(0xb398) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0xb, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) stat(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="240000000104050000000000000000000500000106000640000700000517010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000340)) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10c400, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 2.684613908s ago: executing program 6 (id=2415): r0 = gettid() tkill(r0, 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0xb, 0x1, 0x0, 0x8}}, {0x4}}]}]}, 0x68}}, 0x8000) stat(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="240000000104050000000000000000000500000106000640000700000517010002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x84) fstat(0xffffffffffffffff, &(0x7f0000000340)) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10c400, &(0x7f0000000540)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 2.62071239s ago: executing program 7 (id=2416): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) close(0x3) ftruncate(0xffffffffffffffff, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x8fd, 0x12) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 2.479699233s ago: executing program 5 (id=2417): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7}) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000004d32b000000e000000200000000000000000000000000100000000000000d00000000000000edc730070000000003000000000000000600000000000000030000000000000084000000000000000200000000000000070000000000000006000000000000000400000000000000030000000000000001000000ffffffff040000002dbd7000003500000a0004012100000000000000aa0001007467723132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010030000a9"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80) fstat(r2, &(0x7f00000002c0)) r6 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x39, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x9af, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x20}}}, &(0x7f0000000440)) fcntl$getownex(r2, 0x10, &(0x7f0000000480)={0x0, 0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f00000004c0)={r6, 0xffff, 0x0, 0x0, r7}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x6}}, 0x6, 0x2, 0x400, 0x2005, 0x2da, 0x94, 0xfe}, 0x9c) 1.625618592s ago: executing program 2 (id=2418): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r2, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000", @ANYRES16=r4, @ANYBLOB="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"], 0x254}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008800) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7}) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac010000100000012dbd7000ffdbdf25fe800000000000000000000000000021fe8000000000000000000000000000aa4e2300004e21", @ANYRES32, @ANYBLOB="ac1e0001000000000000000000000000000004d32b000000e000000200000000000000000000000000100000000000000d00000000000000edc730070000000003000000000000000600000000000000030000000000000084000000000000000200000000000000070000000000000006000000000000000400000000000000030000000000000001000000ffffffff040000002dbd7000003500000a0004012100000000000000aa0001007467723132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010030000a9"], 0x1ac}, 0x1, 0x0, 0x0, 0x4814}, 0x80) fstat(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x39, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x3, 0x9af, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x20}}}, &(0x7f0000000440)) fcntl$getownex(r2, 0x10, &(0x7f0000000480)={0x0, 0x0}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r2, 0xc0207511, &(0x7f00000004c0)={r7, 0xffff, 0x0, 0x0, r8}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, r6, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x5, @private0, 0x6}}, 0x6, 0x2, 0x400, 0x2005, 0x2da, 0x94, 0xfe}, 0x9c) 638.252215ms ago: executing program 7 (id=2419): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4d0d8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x13b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x4c004) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 279.066453ms ago: executing program 7 (id=2420): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = inotify_init1(0x80000) r5 = fanotify_init(0x1a, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) fanotify_mark(r5, 0x229, 0x4800001a, r6, 0x0) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r2, 0x0, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 6 (id=2421): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x671ec167a4b72160}, 0x488d) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vim2m(0x0, 0x200000001003, 0x2) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0xfc, 0xc44, &(0x7f0000001080)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp1250 1 [ 900.829949][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 900.840881][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 900.851012][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 900.860461][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 900.867831][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 902.489831][ T4414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.135924][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 903.256912][ T4414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.390140][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 906.759112][ T4414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.064504][T11574] chnl_net:caif_netlink_parms(): no params data found [ 907.644409][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 909.898807][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 911.046857][T11574] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.107920][T11574] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.164748][T11574] device bridge_slave_0 entered promiscuous mode [ 913.657605][T11574] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.738718][T11574] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.747375][T11574] device bridge_slave_1 entered promiscuous mode [ 914.339970][ T4414] tipc: Left network mode [ 914.408693][T11574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.727203][T11574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.801842][T11574] team0: Port device team_slave_0 added [ 921.675152][T11574] team0: Port device team_slave_1 added [ 922.871995][T11574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.879162][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 923.143278][T11574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.714354][T11574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 924.721384][T11574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.352113][T11574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.639879][T11574] device hsr_slave_0 entered promiscuous mode [ 928.667283][T11574] device hsr_slave_1 entered promiscuous mode [ 928.789069][T11574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.829814][T11574] Cannot create hsr debugfs directory [ 929.171608][T11790] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 931.403943][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.410379][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.497878][T11866] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 941.507627][T11574] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 941.696022][ T4414] device hsr_slave_0 left promiscuous mode [ 941.749116][ T4414] device hsr_slave_1 left promiscuous mode [ 941.789893][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.946514][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.976238][ T4414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.834675][ T4414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.894109][ T4414] device bridge_slave_1 left promiscuous mode [ 942.980479][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.885093][ T4414] device bridge_slave_0 left promiscuous mode [ 943.909439][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.354357][ T4414] device veth1_macvtap left promiscuous mode [ 946.370510][ T4414] device veth0_macvtap left promiscuous mode [ 946.376847][ T4414] device veth1_vlan left promiscuous mode [ 946.385236][ T4414] device veth0_vlan left promiscuous mode [ 948.111392][ T4414] team0 (unregistering): Port device team_slave_1 removed [ 948.154037][ T4414] team0 (unregistering): Port device team_slave_0 removed [ 948.194320][ T4414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.240396][ T4414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.557341][ T4414] bond0 (unregistering): Released all slaves [ 948.673925][T11574] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 948.686558][T11574] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 948.705247][T11574] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 949.083847][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.240550][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1730'. [ 949.300362][T11574] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.470707][T11574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 949.481648][T11574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.537089][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 950.013386][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 950.022172][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 950.052892][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 950.126225][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.133415][ T9234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.144320][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 950.155464][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 950.179001][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.186306][ T9234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.330836][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 950.367247][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 953.476702][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 954.305634][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 954.431941][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 954.509059][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 954.532865][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 954.572598][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 954.613775][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 954.622736][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 954.639862][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 954.655673][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 954.666772][ T9234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 962.871825][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 962.893848][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 967.101205][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.115013][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.123066][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.133803][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.141970][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 967.149506][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 969.463062][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 971.717273][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 973.396663][T12035] chnl_net:caif_netlink_parms(): no params data found [ 973.994584][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 976.225752][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 977.105958][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.121289][T12035] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.136824][T12035] device bridge_slave_0 entered promiscuous mode [ 977.209174][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.219873][T12035] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.254066][T12035] device bridge_slave_1 entered promiscuous mode [ 979.392386][T12035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.499627][T12035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.540447][T12035] team0: Port device team_slave_0 added [ 982.656287][T12035] team0: Port device team_slave_1 added [ 982.888885][T12035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.988547][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.685493][T12035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.874091][T12035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.940791][T12035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.035190][T12035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.402860][T12035] device hsr_slave_0 entered promiscuous mode [ 988.422262][T12035] device hsr_slave_1 entered promiscuous mode [ 988.440131][T12035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 988.447735][T12035] Cannot create hsr debugfs directory [ 988.524435][T12186] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 990.770249][ T9234] device hsr_slave_0 left promiscuous mode [ 990.807713][ T9234] device hsr_slave_1 left promiscuous mode [ 990.815888][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.455055][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.466788][ T9234] device bridge_slave_1 left promiscuous mode [ 992.473354][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.563172][ T9234] device bridge_slave_0 left promiscuous mode [ 992.576251][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.639682][ T9234] team0 (unregistering): Port device team_slave_1 removed [ 996.969426][ T9234] team0 (unregistering): Port device team_slave_0 removed [ 997.734576][ T9234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.832618][ T9234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.991215][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.999942][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.760723][ T9234] bond0 (unregistering): Released all slaves [ 1001.702239][T12276] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1004.653340][T12289] ceph: No mds server is up or the cluster is laggy [ 1004.661582][ T127] libceph: connect (1)[c::]:6789 error -101 [ 1004.710198][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 1005.122344][ T127] libceph: connect (1)[c::]:6789 error -101 [ 1005.656019][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 1006.223296][ T127] libceph: connect (1)[c::]:6789 error -101 [ 1006.805773][ T127] libceph: mon0 (1)[c::]:6789 connect error [ 1015.217204][T12359] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1015.948429][T12035] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1015.969321][T12035] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1015.979867][T12035] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1016.089160][T12035] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1018.535199][T12035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.698868][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1018.743661][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1018.791908][T12035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.847819][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1018.867515][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1018.880184][T10589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.887470][T10589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.930848][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1019.837260][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1019.873940][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1019.923186][T10589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.930426][T10589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.012913][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1021.153283][T10589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1022.410068][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1022.543176][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1023.664721][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1023.780278][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1024.195548][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1024.313443][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1024.372110][T12035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1027.116432][T12035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1027.236403][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1027.287300][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1027.633331][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1028.217750][T12470] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1040.894803][T12547] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1042.239924][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1042.249246][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1042.257697][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1042.267256][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1042.274861][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1042.291690][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1044.548875][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 1046.801195][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 1047.885994][T12598] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1049.055806][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 1051.309714][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 1053.068295][T12546] chnl_net:caif_netlink_parms(): no params data found [ 1064.577854][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.584191][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.479618][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.762716][T12546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.786450][T12546] device bridge_slave_0 entered promiscuous mode [ 1067.479195][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.497574][T12546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.517031][T12546] device bridge_slave_1 entered promiscuous mode [ 1073.237440][T12546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.369378][ T5586] device hsr_slave_0 left promiscuous mode [ 1073.445272][ T5586] device hsr_slave_1 left promiscuous mode [ 1073.462815][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.521984][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.566227][ T5586] device bridge_slave_1 left promiscuous mode [ 1074.240034][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.630454][ T5586] device bridge_slave_0 left promiscuous mode [ 1074.800035][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.023173][ T5586] team0 (unregistering): Port device team_slave_1 removed [ 1085.195590][ T5586] team0 (unregistering): Port device team_slave_0 removed [ 1085.300475][ T5586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.395430][ T5586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.740486][ T5586] bond0 (unregistering): Released all slaves [ 1087.273494][T12546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.875330][T12546] team0: Port device team_slave_0 added [ 1087.894162][T12546] team0: Port device team_slave_1 added [ 1087.973498][T12546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1088.013425][T12546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1088.039404][ C0] vkms_vblank_simulate: vblank timer overrun [ 1089.014851][T12546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.688816][T12546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.696286][T12546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.749521][T12546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.532880][T12546] device hsr_slave_0 entered promiscuous mode [ 1091.601635][T12546] device hsr_slave_1 entered promiscuous mode [ 1092.294743][T12546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1092.341754][T12546] Cannot create hsr debugfs directory [ 1101.803285][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1101.816147][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1101.824095][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1101.832047][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1101.840558][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1101.847978][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1103.366443][T12937] chnl_net:caif_netlink_parms(): no params data found [ 1104.122156][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 1104.459215][T12982] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1106.365502][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 1108.619653][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 1108.726485][T12937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.740991][T12937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.782899][T12937] device bridge_slave_0 entered promiscuous mode [ 1108.834090][T12937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.154703][T12937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.163306][T12937] device bridge_slave_1 entered promiscuous mode [ 1110.884781][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 1111.831708][T12937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.029376][T12937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.291569][T12937] team0: Port device team_slave_0 added [ 1114.357352][T13057] tipc: Started in network mode [ 1114.362268][T13057] tipc: Node identity 4, cluster identity 4711 [ 1114.368694][T13057] tipc: Node number set to 4 [ 1114.386746][T12937] team0: Port device team_slave_1 added [ 1116.475614][T12937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.497948][T12937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.523884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1117.636306][T12937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.590368][ T4492] device hsr_slave_0 left promiscuous mode [ 1119.643424][ T4492] device hsr_slave_1 left promiscuous mode [ 1119.692139][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1119.756687][ T4492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1119.824983][ T4492] device bridge_slave_1 left promiscuous mode [ 1119.890669][ T4492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.973499][ T4492] device bridge_slave_0 left promiscuous mode [ 1120.028092][ T4492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.288040][ T4492] team0 (unregistering): Port device team_slave_1 removed [ 1126.688166][ T4492] team0 (unregistering): Port device team_slave_0 removed [ 1126.784271][ T4492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.891413][ T4492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1127.269335][ T4492] bond0 (unregistering): Released all slaves [ 1127.602382][T12937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.622868][T12937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.818404][T12937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.166327][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.172788][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1132.697407][T12937] device hsr_slave_0 entered promiscuous mode [ 1133.039477][T12937] device hsr_slave_1 entered promiscuous mode [ 1133.842521][T12937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1133.865558][T12937] Cannot create hsr debugfs directory [ 1139.834767][T12937] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1139.911474][T12937] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1141.540848][T12937] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1142.154369][T12937] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1148.742267][T12937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.852555][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1148.882908][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1149.904099][T12937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.967955][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1149.992882][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1150.045393][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.052594][ T4485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1152.347445][T12937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1152.394588][T12937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1152.435578][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1153.312960][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1153.881336][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1153.914786][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.921976][ T4485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.982087][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1155.042832][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1155.085456][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1155.159778][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1155.208191][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1155.235920][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1156.915061][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1158.676690][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.713410][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1158.733819][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.803561][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1158.821762][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1177.191694][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1177.203436][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1177.212144][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1177.220000][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1177.230127][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1177.237617][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1179.467513][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 1181.709485][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 1183.966033][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 1186.218159][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 1194.511599][T13342] chnl_net:caif_netlink_parms(): no params data found [ 1194.730921][T13342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.754531][T13342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.753829][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1197.760290][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1198.029659][T13342] device bridge_slave_0 entered promiscuous mode [ 1198.515056][T13342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.537125][T13342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.629217][T13342] device bridge_slave_1 entered promiscuous mode [ 1200.870031][ T4325] device hsr_slave_0 left promiscuous mode [ 1200.889082][ T4325] device hsr_slave_1 left promiscuous mode [ 1201.032737][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1201.159815][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.880526][ T4325] device bridge_slave_1 left promiscuous mode [ 1205.898517][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.959601][ T4325] device bridge_slave_0 left promiscuous mode [ 1205.986798][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.145780][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 1209.281196][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 1209.327281][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.373907][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.569753][ T4325] bond0 (unregistering): Released all slaves [ 1209.675632][T13342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.737234][T13342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.902058][T13342] team0: Port device team_slave_0 added [ 1213.270467][T13342] team0: Port device team_slave_1 added [ 1213.457499][T13342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.464718][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.490777][T13342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.502873][T13342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.510051][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.536165][T13342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.586784][T13342] device hsr_slave_0 entered promiscuous mode [ 1213.617361][T13342] device hsr_slave_1 entered promiscuous mode [ 1213.643762][T13342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1213.702861][T13342] Cannot create hsr debugfs directory [ 1217.180125][T13479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 1223.214945][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1956'. [ 1236.456240][T13529] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1241.120801][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1241.133391][ T9858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1241.148450][ T9858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1241.165454][ T9858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1241.180236][ T9858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1241.194494][ T9858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1243.442871][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 1245.717374][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 1246.218164][T13568] loop6: detected capacity change from 0 to 2048 [ 1246.247757][T13568] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1246.265248][T13568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1247.949989][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 1250.204087][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 1251.920986][T13541] chnl_net:caif_netlink_parms(): no params data found [ 1257.619501][ T4504] device hsr_slave_0 left promiscuous mode [ 1257.675642][ T4504] device hsr_slave_1 left promiscuous mode [ 1257.691765][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.769377][ T4504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.969562][ T4504] device bridge_slave_1 left promiscuous mode [ 1258.070938][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.774659][ T4504] device bridge_slave_0 left promiscuous mode [ 1261.803820][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.858862][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'. [ 1262.035566][ T4504] team0 (unregistering): Port device team_slave_1 removed [ 1262.067454][ T4504] team0 (unregistering): Port device team_slave_0 removed [ 1262.095819][ T4504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1262.130348][ T4504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1262.221380][ T4504] bond0 (unregistering): Released all slaves [ 1262.334047][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.341525][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.365311][T13541] device bridge_slave_0 entered promiscuous mode [ 1262.428282][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.494273][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.503153][T13541] device bridge_slave_1 entered promiscuous mode [ 1262.720062][T13636] loop2: detected capacity change from 0 to 2048 [ 1263.496784][T13636] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1263.521319][T13636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1264.175366][T13637] loop6: detected capacity change from 0 to 2048 [ 1264.193311][T13637] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1264.210360][T13637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1264.339994][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1264.346574][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1264.762502][T13541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1265.094091][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1988'. [ 1265.254250][T13541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.814824][T13656] loop7: detected capacity change from 0 to 2048 [ 1269.650017][T13541] team0: Port device team_slave_0 added [ 1269.725838][T13656] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1269.771783][T13541] team0: Port device team_slave_1 added [ 1270.420449][T13656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1270.493469][T13541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.538253][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.758037][T13670] loop2: detected capacity change from 0 to 2048 [ 1270.778417][T13670] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1270.794139][T13670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1272.052996][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1997'. [ 1272.181546][T13541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.433678][T13541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.440679][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.525832][T13678] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1273.081954][T13541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.952947][T13541] device hsr_slave_0 entered promiscuous mode [ 1274.344692][T13541] device hsr_slave_1 entered promiscuous mode [ 1274.460978][T13541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1276.174908][T13541] Cannot create hsr debugfs directory [ 1276.751026][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2003'. [ 1279.590910][T13711] loop6: detected capacity change from 0 to 2048 [ 1280.881916][T13711] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1280.901704][T13711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1281.910346][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2009'. [ 1282.294418][T13721] loop2: detected capacity change from 0 to 2048 [ 1282.316996][T13721] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1282.340286][T13721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1285.409836][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2008'. [ 1285.809008][T13730] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1286.122055][T13541] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1286.572430][T13541] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1286.735807][T13735] loop7: detected capacity change from 0 to 2048 [ 1286.755907][T13735] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1286.772696][T13735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1287.540205][T13541] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1287.586369][T13541] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1288.114562][T11585] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1289.316351][T11585] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1289.360885][T11585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.666684][T11585] usb 3-1: Product: syz [ 1289.840445][T11585] usb 3-1: Manufacturer: syz [ 1289.909895][T11585] usb 3-1: SerialNumber: syz [ 1290.089329][T13744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2016'. [ 1290.115986][T13541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.239709][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1290.251645][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1290.262199][T13541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.316255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1290.357676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1290.369766][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.377001][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.444758][ T7] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1290.700073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1290.891154][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2019'. [ 1290.978971][ T7] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1290.999417][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.003616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1291.012128][ T7] usb 7-1: Product: syz [ 1291.019846][ T7] usb 7-1: Manufacturer: syz [ 1291.024587][ T7] usb 7-1: SerialNumber: syz [ 1291.036465][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.043638][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.093267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1291.114195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1291.171235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1291.189251][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1291.245651][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1291.272543][ T7] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1291.281693][ T7] usb 7-1: unit 3 not found! [ 1291.292904][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1291.306451][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1291.327738][ T7] usb 7-1: USB disconnect, device number 2 [ 1291.335447][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1291.416443][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1291.568617][T13765] loop7: detected capacity change from 0 to 2048 [ 1292.949128][T11585] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1293.652799][T11585] usb 3-1: unit 3 not found! [ 1293.683459][T11585] usb 3-1: USB disconnect, device number 11 [ 1293.700847][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.709746][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.721828][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.737505][T13541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.815035][T13765] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1293.828551][T13765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1293.859910][T13518] udevd[13518]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1294.155398][T13773] tmpfs: Unknown parameter 'quota' [ 1295.160129][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1295.304971][T13784] loop7: detected capacity change from 0 to 2048 [ 1295.320042][T13784] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1295.337458][T13784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1297.874930][T13792] loop5: detected capacity change from 0 to 2048 [ 1297.896848][T13792] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1297.915506][T13792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1300.559931][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2029'. [ 1301.024293][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 1301.497685][ T4281] Bluetooth: hci4: link tx timeout [ 1301.503803][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1301.514372][ T4281] Bluetooth: hci4: link tx timeout [ 1301.519529][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1301.551782][ T4281] Bluetooth: hci4: link tx timeout [ 1301.558832][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1301.589737][ T4281] Bluetooth: hci4: link tx timeout [ 1301.594922][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1301.886660][ T4281] Bluetooth: hci4: link tx timeout [ 1301.891956][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1301.899633][ T4281] Bluetooth: hci4: link tx timeout [ 1301.904943][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1301.913552][ T4281] Bluetooth: hci4: link tx timeout [ 1301.918706][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1301.926496][ T4281] Bluetooth: hci4: link tx timeout [ 1301.931636][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1301.940125][ T4281] Bluetooth: hci4: link tx timeout [ 1301.945480][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1301.953189][ T4281] Bluetooth: hci4: link tx timeout [ 1301.960630][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1301.972618][ T4281] Bluetooth: hci4: link tx timeout [ 1301.977895][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1301.985532][ T4281] Bluetooth: hci4: link tx timeout [ 1302.016607][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1302.044057][ T4281] Bluetooth: hci4: link tx timeout [ 1302.051890][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1302.059870][ T4281] Bluetooth: hci4: link tx timeout [ 1302.065304][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1302.586898][ T9858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1302.597717][ T9858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1302.605744][ T9858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1302.613513][ T9858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1302.621920][ T9858] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1302.629247][ T9858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1303.225974][T13837] tmpfs: Unknown parameter 'quota' [ 1304.098743][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2036'. [ 1304.826710][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 1304.922709][T13845] loop5: detected capacity change from 0 to 2048 [ 1304.939528][T13845] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1304.955132][T13845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1305.992410][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 1306.811552][T13861] tmpfs: Unknown parameter 'quota' [ 1307.091569][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 1307.854175][T13867] loop5: detected capacity change from 0 to 2048 [ 1307.869716][T13867] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1307.883992][T13867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1308.380608][T13820] chnl_net:caif_netlink_parms(): no params data found [ 1308.585766][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2043'. [ 1309.311929][T13892] loop6: detected capacity change from 0 to 2048 [ 1309.333845][T13892] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1309.344309][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 1309.361126][T13892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1310.239632][T13889] loop7: detected capacity change from 0 to 2048 [ 1310.249211][T13889] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1310.261684][T13889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1310.711492][T13905] loop5: detected capacity change from 0 to 2048 [ 1310.748105][T13905] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1310.767049][T13905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1311.589749][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 1311.911041][T13820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.092385][T13820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.105998][T13820] device bridge_slave_0 entered promiscuous mode [ 1312.400196][T13820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.410948][T13820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.498446][T13820] device bridge_slave_1 entered promiscuous mode [ 1313.743083][T13939] tmpfs: Unknown parameter 'quota' [ 1313.806546][T13820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.668535][T13820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.807415][T13943] loop6: detected capacity change from 0 to 2048 [ 1316.100486][T13943] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1316.117284][T13943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.557855][T13940] tmpfs: Unknown parameter 'quota' [ 1317.800417][T13960] tmpfs: Unknown parameter 'quota' [ 1319.055092][T13820] team0: Port device team_slave_0 added [ 1319.186231][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2062'. [ 1319.241070][T13820] team0: Port device team_slave_1 added [ 1320.074973][T13820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.134236][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.386769][T13820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.537731][ T4415] device hsr_slave_0 left promiscuous mode [ 1321.552275][ T4415] device hsr_slave_1 left promiscuous mode [ 1321.561372][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.603872][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.914504][T13996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2070'. [ 1321.953756][T13995] loop5: detected capacity change from 0 to 2048 [ 1322.034884][T13995] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1322.038137][ T4415] device bridge_slave_1 left promiscuous mode [ 1322.487990][T13995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1322.562208][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.573892][ T4415] device bridge_slave_0 left promiscuous mode [ 1322.580456][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.779885][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2071'. [ 1324.446755][T14008] loop2: detected capacity change from 0 to 2048 [ 1324.480474][T14008] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1324.496465][T14008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1324.965711][T14009] tmpfs: Unknown parameter 'quota' [ 1325.776698][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2075'. [ 1327.535985][T14040] loop2: detected capacity change from 0 to 2048 [ 1327.552315][T14040] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1327.570096][T14040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1328.708016][T14059] loop5: detected capacity change from 0 to 2048 [ 1328.723391][T14059] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1328.740384][T14059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1329.636211][ T4415] team0 (unregistering): Port device team_slave_1 removed [ 1329.887745][T14064] loop6: detected capacity change from 0 to 2048 [ 1329.908846][T14064] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1329.924677][T14064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1330.927518][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.933906][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1331.034607][ T4415] team0 (unregistering): Port device team_slave_0 removed [ 1332.014365][ T4415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1332.196528][T14076] loop7: detected capacity change from 0 to 2048 [ 1332.211501][T14076] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1332.229211][T14076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1333.215945][T14081] tmpfs: Unknown parameter 'quota' [ 1333.884092][ T4415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.686696][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2093'. [ 1335.773483][T14096] tmpfs: Unknown parameter 'quota' [ 1339.082288][ T4415] bond0 (unregistering): Released all slaves [ 1339.364959][T14119] loop2: detected capacity change from 0 to 2048 [ 1339.380311][T14119] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1339.396552][T14119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1339.577672][T13820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.606066][T13820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.898831][T13820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.002146][T14079] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2088'. [ 1340.030222][T14102] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2096'. [ 1340.481024][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 1340.896609][T13820] device hsr_slave_0 entered promiscuous mode [ 1340.924683][T13820] device hsr_slave_1 entered promiscuous mode [ 1341.055145][T14128] loop6: detected capacity change from 0 to 2048 [ 1341.073554][T14128] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1341.089166][T14128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1341.950598][T13820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1341.959920][T13820] Cannot create hsr debugfs directory [ 1343.581831][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 1344.037519][ T129] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1344.413540][T14133] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2104'. [ 1344.604846][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2105'. [ 1344.707708][ T129] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1344.717665][ T129] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.726310][ T129] usb 7-1: Product: syz [ 1344.731502][ T129] usb 7-1: Manufacturer: syz [ 1344.736235][ T129] usb 7-1: SerialNumber: syz [ 1345.375275][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2109'. [ 1346.062784][T14154] tmpfs: Unknown parameter 'quota' [ 1346.814086][ T129] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1347.039572][ T129] usb 7-1: unit 3 not found! [ 1347.061509][ T129] usb 7-1: USB disconnect, device number 3 [ 1347.280994][T14161] tmpfs: Unknown parameter 'quota' [ 1349.215477][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.818826][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2116'. [ 1352.571046][T14185] tmpfs: Unknown parameter 'quota' [ 1353.815149][T14195] loop6: detected capacity change from 0 to 2048 [ 1353.830963][T14195] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1353.847607][T14195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1354.731084][T13820] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1354.815423][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2121'. [ 1354.828124][T13820] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1354.887146][T13820] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1354.928237][T13820] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1356.132131][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2124'. [ 1357.282283][T14219] loop7: detected capacity change from 0 to 2048 [ 1358.601583][T14219] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1358.618724][T14219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1359.533592][T13820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.609278][T14224] loop2: detected capacity change from 0 to 2048 [ 1359.624726][T14224] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1359.641770][T14224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1360.517852][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1361.541245][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1361.586254][T14228] loop5: detected capacity change from 0 to 2048 [ 1361.596287][T14228] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1361.608169][T14228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1361.631903][T13820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1361.661440][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1361.772892][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1361.835680][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.842860][T11309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.148135][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 1362.460179][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1362.978488][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1363.089163][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1363.223622][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.230819][T11309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.284412][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1366.875924][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2134'. [ 1366.886913][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2137'. [ 1366.912148][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1366.949679][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1366.987757][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1366.997701][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1367.014370][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1367.023003][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1367.046659][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1367.115097][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1367.929791][T14286] loop2: detected capacity change from 0 to 2048 [ 1368.226088][T14286] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1368.244415][T14286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1370.302207][T14294] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2138'. [ 1371.440000][T14314] loop5: detected capacity change from 0 to 2048 [ 1371.462304][T14314] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1371.485171][T14314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1372.168025][ T9858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1372.180586][ T9858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1372.189390][ T9858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1372.197726][ T9858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1372.205414][ T9858] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1372.212693][ T9858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1373.512639][T14330] loop7: detected capacity change from 0 to 2048 [ 1373.521565][T14330] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1373.536860][T14330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1374.448307][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 1374.634897][T14343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2152'. [ 1375.752381][T14348] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2153'. [ 1376.155293][T14354] tmpfs: Unknown parameter 'quota' [ 1376.702373][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 1377.678560][T14364] loop5: detected capacity change from 0 to 2048 [ 1377.695472][T14364] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1377.712645][T14364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1378.805946][T14318] chnl_net:caif_netlink_parms(): no params data found [ 1378.956928][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 1379.411764][T14377] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1381.197184][T14318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.213096][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.222530][ T4281] Bluetooth: hci3: command 0x0419 tx timeout [ 1381.236643][T14318] device bridge_slave_0 entered promiscuous mode [ 1381.299721][T14318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.306999][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.366431][T14318] device bridge_slave_1 entered promiscuous mode [ 1382.092725][T14400] tmpfs: Unknown parameter 'quota' [ 1383.010842][T14318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1383.027983][T14318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.181194][T14399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2165'. [ 1383.223883][T14318] team0: Port device team_slave_0 added [ 1383.375607][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 1383.762831][ T9234] device hsr_slave_0 left promiscuous mode [ 1383.830956][ T9234] device hsr_slave_1 left promiscuous mode [ 1384.165311][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.182028][ T9234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.371751][ T9234] device bridge_slave_1 left promiscuous mode [ 1384.391064][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.412873][ T9234] device bridge_slave_0 left promiscuous mode [ 1384.441620][T14421] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1384.489067][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.361367][ T9234] team0 (unregistering): Port device team_slave_1 removed [ 1387.415850][ T9234] team0 (unregistering): Port device team_slave_0 removed [ 1387.485698][ T9234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1387.573503][T14437] loop6: detected capacity change from 0 to 2048 [ 1387.594838][T14437] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1387.612085][T14437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1388.084432][ T9234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.720432][ T9234] bond0 (unregistering): Released all slaves [ 1389.862749][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2177'. [ 1390.062278][T14318] team0: Port device team_slave_1 added [ 1390.285643][T14420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 1390.459439][T14318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.541065][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.611044][T14318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.627226][T14318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.636842][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.690524][T14318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.952508][T14467] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1393.811302][T14474] loop5: detected capacity change from 0 to 2048 [ 1393.827338][T14474] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1393.843320][T14474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1395.262457][T14318] device hsr_slave_0 entered promiscuous mode [ 1395.313583][T14318] device hsr_slave_1 entered promiscuous mode [ 1395.486369][T14318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.513566][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.519889][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.077417][T14318] Cannot create hsr debugfs directory [ 1398.151643][T14482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1398.894208][T14495] loop6: detected capacity change from 0 to 2048 [ 1399.942985][T14495] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1399.959366][T14495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1400.769961][T14503] loop7: detected capacity change from 0 to 2048 [ 1400.786626][T14503] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1400.802925][T14503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1401.850239][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2194'. [ 1403.964244][T14510] loop2: detected capacity change from 0 to 2048 [ 1405.452890][T14510] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1406.348931][T14510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1406.442331][T14318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1407.380669][T14318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1408.293912][T14318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1408.306707][T14318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1409.791779][T14543] loop5: detected capacity change from 0 to 2048 [ 1409.806958][T14543] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1409.824765][T14543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1409.972554][T14318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.487843][T14318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.517064][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1412.268735][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1412.324304][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1412.333304][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1412.342104][T10601] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.349296][T10601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.357693][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1412.367489][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1412.376524][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.383697][T10601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.392303][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1412.401230][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1412.415981][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1412.436333][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1412.447920][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1412.462618][T14547] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2203'. [ 1412.483095][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1412.540627][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1412.719091][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1413.313030][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1414.085019][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1414.292415][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2204'. [ 1415.339670][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1415.405802][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1415.429274][T14318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1417.551399][T14607] loop5: detected capacity change from 0 to 2048 [ 1417.574029][T14607] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1417.592431][T14607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1418.473982][T14608] loop6: detected capacity change from 0 to 2048 [ 1418.501857][T14608] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1418.514042][T14608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1422.286207][T14318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.293538][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1423.077899][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1423.319595][T14630] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2220'. [ 1425.478271][T14633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 1426.452993][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 1426.553544][T14647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2223'. [ 1427.824758][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2227'. [ 1428.516937][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2229'. [ 1430.853761][T14663] syz.5.2228 (14663) used greatest stack depth: 16896 bytes left [ 1431.126019][T14687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1435.095586][T14695] loop7: detected capacity change from 0 to 4096 [ 1435.109302][T14695] ntfs3: Unknown parameter 'windows_names' [ 1436.205067][ T4281] Bluetooth: hci3: link tx timeout [ 1436.212259][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.222582][ T4281] Bluetooth: hci3: link tx timeout [ 1436.227904][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.236878][ T4281] Bluetooth: hci3: link tx timeout [ 1436.242584][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.251838][ T4281] Bluetooth: hci3: link tx timeout [ 1436.257604][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.267179][ T4281] Bluetooth: hci3: link tx timeout [ 1436.272361][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.287012][ T4281] Bluetooth: hci3: link tx timeout [ 1436.292317][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.300807][ T4281] Bluetooth: hci3: link tx timeout [ 1436.306816][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.316034][ T4281] Bluetooth: hci3: link tx timeout [ 1436.322069][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.330877][ T4281] Bluetooth: hci3: link tx timeout [ 1436.336874][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.345824][ T4281] Bluetooth: hci3: link tx timeout [ 1436.351497][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.360391][ T4281] Bluetooth: hci3: link tx timeout [ 1436.366505][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.376382][ T4281] Bluetooth: hci3: link tx timeout [ 1436.381788][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.390797][ T4281] Bluetooth: hci3: link tx timeout [ 1436.398904][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.412439][ T4281] Bluetooth: hci3: link tx timeout [ 1436.418521][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.427340][ T4281] Bluetooth: hci3: link tx timeout [ 1436.437798][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.446281][ T4281] Bluetooth: hci3: link tx timeout [ 1436.451714][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.459808][ T4281] Bluetooth: hci3: link tx timeout [ 1436.465690][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.476608][ T4281] Bluetooth: hci3: link tx timeout [ 1436.482159][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.490674][ T4281] Bluetooth: hci3: link tx timeout [ 1436.497002][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.508417][ T4281] Bluetooth: hci3: link tx timeout [ 1436.514010][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1436.995319][ T9858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1437.006626][ T9858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1437.017500][ T9858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1437.028782][ T9858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1437.036504][ T9858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1437.043879][ T9858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1439.301428][ T9858] Bluetooth: hci4: command 0x0409 tx timeout [ 1440.213109][T14723] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2242'. [ 1440.576393][T14736] loop7: detected capacity change from 0 to 2048 [ 1440.592811][T14736] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1440.608233][T14736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1441.555508][ T9858] Bluetooth: hci4: command 0x041b tx timeout [ 1443.545407][T14771] loop5: detected capacity change from 0 to 2048 [ 1443.820654][ T9858] Bluetooth: hci4: command 0x040f tx timeout [ 1445.475725][T14771] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1445.497639][T14771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1445.786998][T14766] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1445.798071][T14766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1445.901555][T14766] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1446.075391][ T9858] Bluetooth: hci4: command 0x0419 tx timeout [ 1446.385648][T14709] chnl_net:caif_netlink_parms(): no params data found [ 1448.193193][T14774] wlan0: Trigger new scan to find an IBSS to join [ 1448.265396][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2255'. [ 1448.657364][T14785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2254'. [ 1449.477004][T14796] tmpfs: Unknown parameter 'quota' [ 1450.578321][T14797] tmpfs: Unknown parameter 'quota' [ 1450.823979][T14709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.842163][T14709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.865618][T14709] device bridge_slave_0 entered promiscuous mode [ 1450.969562][T14709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.980260][T14709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.249586][T14709] device bridge_slave_1 entered promiscuous mode [ 1453.065069][T14819] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2263'. [ 1453.788113][T14827] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1453.914000][T14709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.364314][T14709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.717069][T14838] loop6: detected capacity change from 0 to 4096 [ 1454.728430][T14838] ntfs3: Unknown parameter 'windows_names' [ 1455.545653][T10085] wlan0: Trigger new scan to find an IBSS to join [ 1455.578544][T14709] team0: Port device team_slave_0 added [ 1455.592456][T14709] team0: Port device team_slave_1 added [ 1457.004254][ T4456] wlan0: Creating new IBSS network, BSSID 3e:48:ed:33:b0:a6 [ 1457.448531][T14709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.469887][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.584247][T14709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.546043][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2267'. [ 1458.556924][T14709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.582953][T14709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1458.608929][ C0] vkms_vblank_simulate: vblank timer overrun [ 1458.657532][ T4276] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1458.716070][T14709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.806484][ T11] device hsr_slave_0 left promiscuous mode [ 1458.868019][ T11] device hsr_slave_1 left promiscuous mode [ 1458.897204][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.911365][ T4276] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1458.933194][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.954744][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.971903][ T4276] usb 6-1: Product: syz [ 1458.987268][ T4276] usb 6-1: Manufacturer: syz [ 1458.993726][ T4276] usb 6-1: SerialNumber: syz [ 1459.336628][ T11] device bridge_slave_1 left promiscuous mode [ 1460.752995][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.443716][ T11] device bridge_slave_0 left promiscuous mode [ 1461.450021][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.416204][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1464.270282][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1464.299192][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1465.554855][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1465.584558][ T4276] usb 6-1: can't set config #1, error -71 [ 1465.608866][ T4276] usb 6-1: USB disconnect, device number 18 [ 1465.680331][ T129] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1465.728291][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1465.767201][T14912] loop2: detected capacity change from 0 to 2048 [ 1465.782919][T14912] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1465.804305][T14912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1467.906702][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.095377][T14926] loop6: detected capacity change from 0 to 2048 [ 1468.111041][T14926] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1468.126035][T14926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1469.381648][T14933] loop6: detected capacity change from 0 to 2048 [ 1469.400154][T14933] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1469.420876][T14933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1470.433347][ T11] bond0 (unregistering): Released all slaves [ 1470.578435][T14881] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2274'. [ 1470.966114][T14709] device hsr_slave_0 entered promiscuous mode [ 1471.044115][T14709] device hsr_slave_1 entered promiscuous mode [ 1471.081150][T14709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1471.134293][T14709] Cannot create hsr debugfs directory [ 1471.437375][T14961] loop7: detected capacity change from 0 to 2048 [ 1471.566045][T14961] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1471.586421][T14961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1472.428699][T14966] tmpfs: Unknown parameter 'quota' [ 1473.675893][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2293'. [ 1475.195992][ T5586] wlan0: Trigger new scan to find an IBSS to join [ 1476.949689][T14709] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1477.018371][T14709] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1477.942153][ T4426] wlan0: Trigger new scan to find an IBSS to join [ 1477.964480][T14709] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1479.531329][ T4456] wlan0: Trigger new scan to find an IBSS to join [ 1479.765888][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2301'. [ 1479.809812][T14709] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1480.054781][T14709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.073191][T14709] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.921191][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1480.975352][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1481.017168][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1481.052351][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1481.093225][ T4414] wlan0: Creating new IBSS network, BSSID 56:59:d4:80:10:10 [ 1481.136059][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.143310][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.192351][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1481.398873][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1481.497574][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.504848][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.627596][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1482.144309][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1482.168062][T14709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1482.270873][T14709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1482.793633][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1482.806229][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1482.817191][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1482.826406][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1482.872533][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1482.886682][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1482.918587][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1483.001557][T15043] loop2: detected capacity change from 0 to 2048 [ 1483.106441][T15043] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1483.125423][T15043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1483.203776][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1483.351237][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1483.456354][T15037] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2306'. [ 1483.866316][ T11] wlan0: Trigger new scan to find an IBSS to join [ 1483.924620][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1483.964976][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1484.302400][T15057] loop5: detected capacity change from 0 to 2048 [ 1484.318310][T15057] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1484.339433][T15057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1484.867338][ T11] wlan0: Creating new IBSS network, BSSID ae:50:9e:0c:e4:99 [ 1486.536431][T15073] loop2: detected capacity change from 0 to 2048 [ 1486.552521][T15073] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1486.574422][T15073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1487.529525][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1487.538424][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1487.555729][T14709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.845102][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2316'. [ 1488.992538][ T4369] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1490.052338][ T4369] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1490.204284][ T4369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.212531][ T4369] usb 3-1: Product: syz [ 1490.238758][ T4369] usb 3-1: Manufacturer: syz [ 1490.243583][ T4369] usb 3-1: SerialNumber: syz [ 1490.287972][T15104] loop6: detected capacity change from 0 to 2048 [ 1490.312689][T15104] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1490.709982][T15104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1491.812015][ T4369] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1491.925716][ T4369] usb 3-1: unit 3 not found! [ 1492.034311][ T4369] usb 3-1: USB disconnect, device number 12 [ 1492.433203][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1492.441606][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.462503][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1492.617104][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1492.874357][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1493.187199][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1493.200086][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1493.231212][T14709] device veth0_vlan entered promiscuous mode [ 1494.665062][T14709] device veth1_vlan entered promiscuous mode [ 1494.737744][ T4281] Bluetooth: hci4: link tx timeout [ 1494.743665][ T4281] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1494.753424][ T4281] Bluetooth: hci4: link tx timeout [ 1494.759164][ T4281] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1494.893611][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1494.911752][T11309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1494.962242][T14709] device veth0_macvtap entered promiscuous mode [ 1495.011608][T14709] device veth1_macvtap entered promiscuous mode [ 1495.095756][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.115013][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.143389][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.154401][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.164532][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.175489][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.196897][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.755183][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.084737][T14709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1496.168859][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1496.198841][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1496.221873][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1496.230783][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1496.259953][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1496.353089][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1496.364489][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1497.772160][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 1497.787278][ T4415] wlan0: Trigger new scan to find an IBSS to join [ 1497.799022][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1497.938144][T15155] loop6: detected capacity change from 0 to 2048 [ 1497.953273][T15155] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1497.970063][T15155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1498.033810][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.149231][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.264430][T14709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1498.347339][T14709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1498.460935][T14709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.540828][T14331] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1498.794156][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1498.862684][T15159] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1499.533908][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1499.552588][T14709] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.572363][T14709] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.594041][T14709] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.607549][T14709] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.051870][ T9858] Bluetooth: hci4: command 0x0406 tx timeout [ 1500.858263][T15178] loop2: detected capacity change from 0 to 2048 [ 1500.880662][T15178] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1500.897702][T15178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1501.750825][T10601] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.247442][ T4504] wlan0: Trigger new scan to find an IBSS to join [ 1503.470351][T15196] loop5: detected capacity change from 0 to 2048 [ 1503.483902][T15196] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1503.495912][T15196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1503.574555][T10601] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.630896][T15197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2340'. [ 1504.156608][T10601] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.419837][T10601] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.982637][T15215] loop2: detected capacity change from 0 to 2048 [ 1504.997967][T15215] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1505.015186][T15215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1505.085272][ T4504] wlan0: Creating new IBSS network, BSSID 22:23:79:1b:d6:48 [ 1505.702090][ T9858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1505.712600][ T9858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1505.721879][ T9858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1505.729672][ T9858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1505.737205][ T9858] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1505.745127][ T9858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1506.752055][T15224] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1507.418178][T15225] loop7: detected capacity change from 0 to 2048 [ 1507.813755][T15225] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1507.835748][T15225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1508.402831][ T9858] Bluetooth: hci3: command 0x0409 tx timeout [ 1508.811607][T15238] loop2: detected capacity change from 0 to 2048 [ 1508.827938][T15238] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1508.843423][T15238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.160440][T15214] chnl_net:caif_netlink_parms(): no params data found [ 1510.356631][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2354'. [ 1510.668317][ T9858] Bluetooth: hci3: command 0x041b tx timeout [ 1511.012715][ T4504] wlan0: Trigger new scan to find an IBSS to join [ 1511.210023][T15270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 1512.567300][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2361'. [ 1512.911530][ T9858] Bluetooth: hci3: command 0x040f tx timeout [ 1512.982263][T15214] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.989748][T15214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.998471][T15214] device bridge_slave_0 entered promiscuous mode [ 1513.027049][T15214] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.337511][T15214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.405779][T15290] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1514.513234][T15214] device bridge_slave_1 entered promiscuous mode [ 1514.536236][T10601] device hsr_slave_0 left promiscuous mode [ 1514.543897][T10601] device hsr_slave_1 left promiscuous mode [ 1514.548467][ T4321] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1514.861413][ T4321] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1514.871778][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.880012][ T4321] usb 6-1: Product: syz [ 1514.884837][ T4321] usb 6-1: Manufacturer: syz [ 1514.889535][ T4321] usb 6-1: SerialNumber: syz [ 1514.940152][T10601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1514.960592][T10601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.119180][T10601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.166224][ T9858] Bluetooth: hci3: command 0x0419 tx timeout [ 1515.215178][T10601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.252257][T14774] wlan0: Trigger new scan to find an IBSS to join [ 1515.258894][ T4325] wlan0: Trigger new scan to find an IBSS to join [ 1515.280251][T10601] device bridge_slave_1 left promiscuous mode [ 1515.334048][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.443009][T15301] loop6: detected capacity change from 0 to 2048 [ 1515.461619][T15301] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1515.482722][T15301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1515.584661][T10601] device bridge_slave_0 left promiscuous mode [ 1515.722213][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.212035][T10601] device veth1_macvtap left promiscuous mode [ 1516.243401][T10601] device veth0_macvtap left promiscuous mode [ 1516.250107][T10601] device veth1_vlan left promiscuous mode [ 1516.256779][T10601] device veth0_vlan left promiscuous mode [ 1516.390515][ T4303] wlan0: Creating new IBSS network, BSSID 6a:2f:d0:e5:16:92 [ 1517.131363][T15312] loop7: detected capacity change from 0 to 2048 [ 1517.190337][T15312] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1517.227541][T15312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1517.410500][ T4325] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1518.561991][T14774] wlan0: Trigger new scan to find an IBSS to join [ 1520.099149][ T4321] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1520.128069][ T4321] usb 6-1: unit 3 not found! [ 1520.169687][ T4321] usb 6-1: USB disconnect, device number 19 [ 1520.570833][T10601] team0 (unregistering): Port device team_slave_1 removed [ 1521.059249][T10601] team0 (unregistering): Port device team_slave_0 removed [ 1521.227113][T10601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.295797][T10601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.439943][T13780] udevd[13780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1521.629200][T15341] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1521.848738][ T4504] wlan0: Trigger new scan to find an IBSS to join [ 1522.164680][T10601] bond0 (unregistering): Released all slaves [ 1522.357519][T15326] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1522.372785][T15336] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2370'. [ 1522.440350][T15326] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1522.950349][T15326] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1522.960329][T15214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.076033][T15214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.197545][T15214] team0: Port device team_slave_0 added [ 1524.222140][T15214] team0: Port device team_slave_1 added [ 1525.355778][T15214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.492946][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.631410][T15363] loop2: detected capacity change from 0 to 4096 [ 1525.641091][T15363] ntfs3: Unknown parameter 'windows_names' [ 1525.906655][T15214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.116044][T15214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.203652][T15214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.980798][T15214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.281396][T15379] tmpfs: Unknown parameter 'quota' [ 1528.581409][T10085] wlan0: Trigger new scan to find an IBSS to join [ 1528.607822][T15374] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 1528.802947][T15214] device hsr_slave_0 entered promiscuous mode [ 1528.854195][T15214] device hsr_slave_1 entered promiscuous mode [ 1528.871794][T15214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1528.918000][T15214] Cannot create hsr debugfs directory [ 1530.250894][T10085] wlan0: Creating new IBSS network, BSSID 76:7f:7f:b7:28:a9 [ 1530.679364][T15409] loop6: detected capacity change from 0 to 2048 [ 1530.690311][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1530.700909][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1530.741897][T15409] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1530.764446][T15409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1531.933424][T15417] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2388'. [ 1532.679525][ T4504] wlan0: Trigger new scan to find an IBSS to join [ 1535.367216][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2391'. [ 1536.392391][T15214] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1536.527235][T15214] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1536.578201][T15214] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1537.102343][T15214] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1538.055065][ T9] wlan0: Trigger new scan to find an IBSS to join [ 1538.838068][T15214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1538.977608][T15453] loop2: detected capacity change from 0 to 2048 [ 1539.122015][T10589] wlan0: Trigger new scan to find an IBSS to join [ 1539.138997][T15453] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1539.154862][T15453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1539.893963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1539.989035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1540.022486][T15214] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.074259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1540.115931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1542.767410][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.774651][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.988397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1543.001975][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2400'. [ 1543.027956][T15463] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2402'. [ 1543.039342][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1543.074365][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1543.186663][T15478] loop7: detected capacity change from 0 to 2048 [ 1543.324093][T15478] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1543.339974][T15478] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1543.433122][ T4492] wlan0: Trigger new scan to find an IBSS to join [ 1543.433191][ T4415] wlan0: Creating new IBSS network, BSSID be:8e:39:60:f2:a1 [ 1544.006701][T10085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.014010][T10085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.065933][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2404'. [ 1544.516223][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1544.526204][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1544.570990][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1544.638565][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1544.698961][T10085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1544.826343][T15483] loop6: detected capacity change from 0 to 2048 [ 1544.841312][T15483] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1544.856465][T15483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1545.759890][T15214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1545.770688][T15214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1545.847524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1545.891378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1545.977407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1545.986028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1546.370077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1546.379389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1546.389443][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2408'. [ 1546.410455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1548.421247][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'. [ 1548.622994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1548.642141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1548.669891][T15214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.892887][ T4347] wlan0: Trigger new scan to find an IBSS to join [ 1549.706738][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 1550.115876][ T32] wlan0: Creating new IBSS network, BSSID c6:32:f0:c4:b8:ca [ 1550.531178][ T4415] ------------[ cut here ]------------ [ 1550.536951][ T4415] WARNING: CPU: 0 PID: 4415 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1550.547054][ T4415] Modules linked in: [ 1550.551126][ T4415] CPU: 0 PID: 4415 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1550.558820][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1550.568951][ T4415] Workqueue: cfg80211 cfg80211_event_work [ 1550.574821][ T4415] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1550.581033][ T4415] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f [ 1550.600996][ T4415] RSP: 0018:ffffc900047cfac0 EFLAGS: 00010293 [ 1550.607244][ T4415] RAX: ffffffff89979bd9 RBX: 1ffff920008f9f5c RCX: ffff8880274ada00 [ 1550.615273][ T4415] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1550.623311][ T4415] RBP: ffffc900047cfb70 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 1550.631328][ T4415] R10: dffffc0000000000 R11: fffffbfff2162056 R12: ffff888075f6b5b8 [ 1550.639390][ T4415] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88805704cc90 [ 1550.647403][ T4415] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1550.656366][ T4415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1550.662982][ T4415] CR2: 00007f68adfaf440 CR3: 0000000067cee000 CR4: 00000000003506f0 [ 1550.670990][ T4415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1550.678969][ T4415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1550.686971][ T4415] Call Trace: [ 1550.690317][ T4415] [ 1550.693324][ T4415] ? trace_rdev_return_void+0x240/0x240 [ 1550.698923][ T4415] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1550.704877][ T4415] ? lockdep_hardirqs_on+0x94/0x140 [ 1550.710134][ T4415] cfg80211_process_wdev_events+0x359/0x4d0 [ 1550.716092][ T4415] ? process_one_work+0x7b4/0x1160 [ 1550.721295][ T4415] cfg80211_process_rdev_events+0x9d/0x110 [ 1550.727173][ T4415] cfg80211_event_work+0x2b/0x40 [ 1550.732127][ T4415] process_one_work+0x8ab/0x1160 [ 1550.737141][ T4415] ? worker_detach_from_pool+0x240/0x240 [ 1550.742831][ T4415] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1550.747914][ T4415] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1550.753479][ T4415] ? wq_worker_running+0x97/0x190 [ 1550.758639][ T4415] worker_thread+0xaf5/0x12a0 [ 1550.763368][ T4415] kthread+0x29d/0x330 [ 1550.767534][ T4415] ? worker_clr_flags+0x1a0/0x1a0 [ 1550.772597][ T4415] ? kthread_blkcg+0xd0/0xd0 [ 1550.777201][ T4415] ret_from_fork+0x1f/0x30 [ 1550.781685][ T4415] [ 1550.784721][ T4415] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1550.792010][ T4415] CPU: 0 PID: 4415 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1550.799648][ T4415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1550.809714][ T4415] Workqueue: cfg80211 cfg80211_event_work [ 1550.815456][ T4415] Call Trace: [ 1550.818743][ T4415] [ 1550.821692][ T4415] dump_stack_lvl+0x188/0x24e [ 1550.826412][ T4415] ? memcpy+0x3c/0x60 [ 1550.830461][ T4415] ? show_regs_print_info+0x12/0x12 [ 1550.835686][ T4415] ? load_image+0x410/0x410 [ 1550.840246][ T4415] panic+0x2d3/0x710 [ 1550.844159][ T4415] ? bpf_jit_dump+0xd0/0xd0 [ 1550.848701][ T4415] ? ret_from_fork+0x1f/0x30 [ 1550.853327][ T4415] __warn+0x2f8/0x4f0 [ 1550.857333][ T4415] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1550.862930][ T4415] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1550.868497][ T4415] report_bug+0x2ba/0x4f0 [ 1550.872949][ T4415] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1550.878566][ T4415] handle_bug+0x3a/0x70 [ 1550.882752][ T4415] exc_invalid_op+0x16/0x40 [ 1550.887270][ T4415] asm_exc_invalid_op+0x16/0x20 [ 1550.892137][ T4415] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1550.898321][ T4415] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f [ 1550.917963][ T4415] RSP: 0018:ffffc900047cfac0 EFLAGS: 00010293 [ 1550.924048][ T4415] RAX: ffffffff89979bd9 RBX: 1ffff920008f9f5c RCX: ffff8880274ada00 [ 1550.932040][ T4415] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1550.940023][ T4415] RBP: ffffc900047cfb70 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 1550.948003][ T4415] R10: dffffc0000000000 R11: fffffbfff2162056 R12: ffff888075f6b5b8 [ 1550.955982][ T4415] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88805704cc90 [ 1550.963969][ T4415] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1550.969550][ T4415] ? trace_rdev_return_void+0x240/0x240 [ 1550.975121][ T4415] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1550.981027][ T4415] ? lockdep_hardirqs_on+0x94/0x140 [ 1550.986239][ T4415] cfg80211_process_wdev_events+0x359/0x4d0 [ 1550.992171][ T4415] ? process_one_work+0x7b4/0x1160 [ 1550.997295][ T4415] cfg80211_process_rdev_events+0x9d/0x110 [ 1551.003127][ T4415] cfg80211_event_work+0x2b/0x40 [ 1551.008092][ T4415] process_one_work+0x8ab/0x1160 [ 1551.013082][ T4415] ? worker_detach_from_pool+0x240/0x240 [ 1551.018733][ T4415] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1551.023789][ T4415] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1551.029350][ T4415] ? wq_worker_running+0x97/0x190 [ 1551.034402][ T4415] worker_thread+0xaf5/0x12a0 [ 1551.039115][ T4415] kthread+0x29d/0x330 [ 1551.043191][ T4415] ? worker_clr_flags+0x1a0/0x1a0 [ 1551.048223][ T4415] ? kthread_blkcg+0xd0/0xd0 [ 1551.052820][ T4415] ret_from_fork+0x1f/0x30 [ 1551.057259][ T4415] [ 1551.060885][ T4415] Kernel Offset: disabled [ 1551.065339][ T4415] Rebooting in 86400 seconds..